Privacy Policy
What we collect through this website, why, and what we do with it.
Last updated September 2026
This policy covers the Mentally Steady website: what we collect when you browse it or send us a form, and what we do with that information.
It is not our Notice of Privacy Practices. Health information connected to your care as a client is governed separately under HIPAA. See our Notice of Privacy Practices for that.
What we collect
Information you send us
Our forms collect only what we need to contact you and route your enquiry.
- Waitlist form: first and last name, email address, phone number, the state you live in, and the program you are interested in.
- Contact form: your name, email address, an optional phone number, the topic of your message, and whatever you write in the message field.
- Job applications: your name, contact details, licence type and state, the résumé file you attach, and anything you tell us about yourself.
We ask you to keep clinical detail out of these forms. They are an intake and enquiry channel, not a clinical record, and they are not monitored around the clock.
Information collected automatically
Like most websites, the platform hosting this site records standard technical information when you visit, which can include your IP address, browser type, device type, the pages you viewed, and the site you arrived from. It may also set cookies needed for pages to function correctly.
We do not use this information to identify you personally, and we do not combine it with your health information. If we add analytics or advertising tools in future, we will update this policy to say so before we start.
How we use it
- To contact you about the enquiry or waitlist request you submitted.
- To match you with a clinician whose training fits what you described.
- To understand which states people are asking about, so we know where to seek licensure next. We use the state field in aggregate for that.
- To review and respond to job applications.
- To keep the site working and secure.
We do not sell your personal information, and we do not share it with advertisers.
Who else handles your information
We use service providers to host this website, deliver form submissions to us, and store our records. They process information on our behalf, under contract, and are not permitted to use it for their own purposes.
Where a provider handles protected health information, we require a Business Associate Agreement before they are given access to it, as HIPAA requires.
We may also disclose information where the law requires it, for example in response to a valid legal order, or where disclosure is necessary to prevent serious harm.
How long we keep it
Clinical records are retained for the period required by the law of the state where care was provided and by the rules of the relevant licensing board. Those periods are longer for records concerning minors.
Enquiries and waitlist entries that do not lead to a clinical relationship are kept only as long as they are useful for the purpose you submitted them, and are then deleted. Job applications are retained for our own recruitment records and then deleted.
Your choices
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and tell us what you would like. We will respond within a reasonable period.
Records we are required to retain for clinical, legal, or licensing reasons are an exception, and we will tell you if that applies to your request. Depending on where you live you may have additional rights under your state's privacy law, and we will honour those where they apply.
You can also ask us to stop contacting you at any time. If you joined the waitlist and no longer want to hear from us, say so and we will remove you.
Children
This website is not directed at children, and we do not knowingly collect information from a child through it. Care for anyone under 18 is arranged by a parent or legal guardian, who provides the information and the consent.
Security
We limit access to personal information to the people who need it to do their work, and we require our service providers to maintain appropriate safeguards for the information they handle on our behalf.
No website or system is completely secure, and we cannot guarantee that information sent over the internet is free from interception. That is part of why we ask you to keep clinical detail out of the web forms.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be described here rather than made quietly.
Contact
Questions about this policy, or about information we hold: [email protected].