Children's Privacy Policy

Introduction

At In Therapy, we are deeply committed to protecting the privacy and well-being of all individuals who access our mental health services, including children and adolescents. This Children's Privacy Policy outlines how we collect, use, disclose, and safeguard personal information from minors who participate in our therapy programs, either directly or through their parents or legal guardians.

This policy complements our main Privacy Policy and is designed to comply with applicable laws, including the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA) where applicable, and relevant regional data protection regulations.

Information We Collect

We collect only the information necessary to provide safe, effective, and compliant therapeutic care. For minors, this may include:

• Demographic Details: Full name, date of birth, gender identity, and contact information.
• Guardian Information: Names, contact details, and relationship to the minor.
• Clinical Data: Mental health history, session notes, treatment plans, and progress reports (strictly confidential and HIPAA-compliant).
• Technical Data: Secure platform usage logs, session attendance records, and encrypted communication metadata.

COPPA & Regulatory Compliance

In Therapy strictly adheres to the Children's Online Privacy Protection Act (COPPA) and comparable international regulations. We do not knowingly collect personal information from children under the age of 13 without verifiable parental or guardian consent. For minors aged 13–17, parental consent is required for clinical services, billing, and digital platform access.

If we discover that we have collected information from a child under 13 without proper consent, we will promptly delete such data from our servers and notify the parent or guardian.

Parental/Guardian Consent

Before a minor begins therapy with In Therapy, a parent or legal guardian must:

1. Complete and sign our digital or printed Consent for Treatment forms.
2. Review and acknowledge this Children's Privacy Policy and our main Privacy Policy.
3. Provide verifiable identity and authority to act on behalf of the minor.
4. Grant permission for data sharing between therapists, billing departments, and authorized care coordinators.

Consent may be withdrawn at any time, except where legal reporting obligations (e.g., safety risks, mandated reporting) apply.

How We Use Information

Information collected from minors is used exclusively for:

• Providing, managing, and documenting therapeutic services.
• Communicating with authorized guardians regarding appointments, progress, and care coordination.
• Billing, insurance processing, and payment handling.
• Ensuring platform security, compliance, and service improvement.

We never sell, trade, or share children's personal information with third parties for marketing, advertising, or non-clinical purposes. Data is only shared with external parties when required by law, with explicit guardian consent, or to protect the minor's safety.

Data Security & Retention

We implement industry-leading safeguards to protect minors' data, including:

• End-to-end encryption for all digital communications and session recordings.
• HIPAA-compliant cloud infrastructure with strict access controls and multi-factor authentication.
• Regular security audits, staff training, and breach response protocols.
• Physical and digital separation of clinical records from administrative databases.

Records are retained in accordance with state licensing requirements, insurance policies, and legal standards. Upon request, or when no longer legally required, data is securely destroyed or anonymized.

Parental Rights & Choices

Parents and legal guardians have the right to:

• Access, review, and request copies of their child's clinical records.
• Request corrections or updates to inaccurate information.
• Opt out of non-essential communications or data processing.
• Request deletion of personal data (subject to legal/clinical retention requirements).
• Withdraw consent for ongoing therapy or data sharing at any time.

Exercises of these rights should be submitted in writing to our Data Protection Officer. We will respond within 30 days.

Policy Updates

We may update this Children's Privacy Policy periodically to reflect changes in services, technology, or legal requirements. Significant updates will be communicated directly to guardians via email or secure portal notification. Continued use of our services after updates constitutes acceptance of the revised policy.