Privacy Notice
This Privacy Notice Discloses the Privacy Practices for: https://www.toddjamesmckillop.com/
This privacy notice applies solely to information collected by this website and our intake management system. It will notify you of the following:
• What personally identifiable information is collected from you through the website and intake process, how it is used and with whom it may be shared
• What choices are available to you regarding the use of your data
• The security procedures in place to protect the misuse of your information
• How you can correct any inaccuracies in the information
Information Collection, Use and Sharing
What We Collect:
We are the sole owners of the information collected on this site and through our intake process. We only have access to/collect information that you voluntarily provide us via:
• Email or direct contact through our website
• Our online intake forms and scheduling system
• Phone conversations during our intake process, Insurance verification and billing processes (when applicable)
How We Use Your Information
To respond to your inquiries regarding therapy services and appointment scheduling
To provide clinical services including therapy sessions, treatment planning, and case management
To process insurance claims and handle billing (when applicable)
To comply with legal requirements for mental health record-keeping and reporting
To communicate about appointments, including confirmations, reminders, and scheduling changes
Information Sharing
We will never sell or rent your information to anyone.
We will not share your information with any third party outside of our organization, except:
• As necessary to fulfill your request (e.g., coordinating with your physician or other healthcare
providers with your written consent)
• When required by law (such as mandatory reporting requirements for licensed mental health
professionals)
With our technology partners who provide secure services essential to our practice operations
(such as our intake management system, electronic health records, and secure communication
platforms)
Third-Party Service Providers:
We partner with trusted service providers to deliver specific services including:
Sessions Health - Electronic health records management
These parties are bound by strict confidentiality agreements and are not allowed to use personally identifiable information except for the purpose of providing these specific services to our practice.
HIPAA Compliance
As a mental health practice, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA). This privacy policy works in conjunction with our HIPAA Notice of Privacy Practices, which provides additional details about how we protect your health information.
Your health information is protected by both HIPAA regulations and this privacy policy.
Website and Communication
This website may contain links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.
Surveys and Feedback
From time-to-time we may request information via surveys or feedback forms. Participation is completely voluntary. Information requested may include contact information and demographic information. This information will be used for purposes of improving our services and client satisfaction.
Email Communications
Unless you ask us not to, we may contact you via email to:
• Send appointment confirmations and reminders
• Share updates to practice policies
• Provide information about new services
Notify You of Changes to the Privacy Policy
You will always have the option of opting out of non-essential communications each time a message is sent to you.
Your Access and Control Over Information
You may opt out of any future non-essential contacts from us at any time. You can do the following at any time by contacting us via the email address or phone number provided:
• See what data we have about you, if any
• Change/correct any data we have about you
• Request deletion of your data (subject to legal record-keeping requirements for mental health practices)
• Express any concern you have about our use of your data
• Opt out of non-essential communications
Important Note: As a licensed mental health practice, we are required by law to maintain certain clinical records for a specified period. We cannot delete essential health information during this required retention period.
Security Measures
We take extensive precautions to protect your information both online and offline.
Online Security
• Encryption: All sensitive information submitted via our website and intake forms is encrypted and transmitted securely
• Secure Connections: Look for the lock icon in your browser's address bar and "https" at the
beginning of web addresses when submitting information
• Secure Servers: Our intake management system and all data storage utilize enterprise-grade
security measures
Offline Security
• Limited Access: Only employees who need the information to perform specific job functions are granted access to personally identifiable information
• Secure Storage: All computers and servers storing personally identifiable information are kept in secure environments
• Staff Training: All team members receive regular training on privacy and security protocols
Business Associate Agreements
All third-party service providers who handle your information have signed Business Associate Agreements ensuring they meet HIPAA security and privacy standards.
This website is hosted by Squarespace.
Squarespace collects personal information when you visit this website, including:
Information about your browser, network and device, Web pages you visited prior to coming to this website, Web pages you view while on this website, Your IP address.
Squarespace needs the data to run this website, and to protect and improve its platform and services. You can read more about how Squarespace uses your data (site usage information of end users) for its own purposes in their Privacy Policy.
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
Website Visitor Information and Tracking Technologies
When you visit this website, certain information is collected automatically, even if you do not submit a form or become a client. This may include your IP address (used to derive approximate geographic location), browser type and version, device information, the pages you visit, time spent on pages, referring URL (how you found the site), and cookie data. This information is collected through the tracking technologies described below and is used to understand how visitors find and use the website and to measure the effectiveness of our advertising.
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"), to collect information about how visitors interact with the site. Google Analytics uses cookies to distinguish unique visitors and track browsing sessions. These cookies expire according to Google's data retention policy. To learn more about how Google uses data from sites that use its services, visit: google.com/policies/privacy/partners/.
We use Google Tag Manager ("GTM"), a tag management service provided by Google, to manage and deploy tracking scripts on the website, including Google Analytics and advertising-related tags. GTM itself does not collect personal information, but it enables other tools described in this section to function.
We use Google Analytics to track specific visitor actions on the website, including when a visitor submits a contact form, clicks a phone number to call, or clicks an email address to send a message. These actions are recorded as "conversion events." We do not collect the contents of any information you enter into a form through these conversion events — only the fact that the action occurred, along with the page and time of the action.
This website may use Google Ads to run search advertising campaigns. Conversion event data collected through Google Analytics (such as form submissions, phone call clicks, and email clicks described above) is shared with Google Ads to measure and optimize the performance of these advertising campaigns. This means that when you take one of these actions on the website, that event data is transmitted to Google and used to evaluate and improve our advertising.
You can manage or delete cookies through your browser settings. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.
Contact Information
Practice Name: Todd James McKillop, LCSW
Address: 874 Gravenstein Highway South, Suite 9, Sebastopol, CA 95472
Phone: 707-200-8125
Email: tj@toddjamesmckillop.com
Website: https://www.toddjamesmckillop.com/
Privacy Concerns
If you feel that we are not abiding by this privacy policy, please contact us immediately:
• Phone: 707-200-8125
• Email: tj@toddjamesmckillop
Policy Updates
This privacy policy may be updated from time to time. We will notify you of any material changes via email or by posting a notice on our website. The date of the most recent update will be displayed at the bottom of this policy.
Last Updated: February, 21, 2026
Effective Date: February, 21, 2026