Privacy Policy

Let Go Wellness LLC ("we", "us") is a therapy practice at 808 Highland Ave, Waterbury, CT 06708. This policy explains how this website and app (the "app") handle personal information. It sits alongside our Notice of Privacy Practices, which every client receives and which explains how we use and disclose your protected health information under HIPAA. If the two ever differ for health information, the Notice of Privacy Practices controls.

• Clients: name, contact details, date of birth, insurance details, appointments, clinical notes, consent forms, invoices and payments.
• Staff: name, work email, role, and sign-in and security records (including two-step login).
• Waitlist requests: the details you choose to send us.
• Technical records: sign-in times, IP address and actions taken in the app, kept as a HIPAA security audit log.

We use information only to provide and schedule care, keep clinical records, bill insurers and clients, send appointment reminders, run telehealth visits, meet legal duties and keep the app secure. We do not sell personal information, use it for advertising, or share it with data brokers.

Under HIPAA you have the right to:

• see and get a copy of your records;
• ask for corrections;
• ask us to limit certain uses;
• choose how we contact you;
• get a list of certain disclosures we've made;
• file a complaint with us, or with the U.S. Department of Health and Human Services, without any retaliation.

To use any of these rights, email us.

We use a small number of service providers to run the app. Each one that handles health information has signed a Business Associate Agreement (BAA) with us, or is exempt under HIPAA:

• Claim.MD: insurance claims and eligibility checks.
• Google Workspace: Google Meet video visits.
• Our hosting, email and text-message providers: run the app and send appointment reminders.
• Stripe: card payments. Card processing is covered by HIPAA's payment exemption.

An administrator of our practice connects the practice's own Google Workspace account to the app. The app uses Google only to create and end Google Meet video meetings for telehealth sessions (Google permission meetings.space.created). It also reads the connected account's email address to show which account is connected.

• The app does not read your email, calendar, contacts or files.
• It does not record meetings.
• It does not transfer Google data to anyone else or use it for advertising or AI training.

The saved connection is encrypted. It can be removed at any time with Disconnect in Settings, or from the Google account's security page.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We protect information with:

• encrypted connections (HTTPS);
• role-based access, two-step login and automatic sign-out;
• an audit log of every access.

We keep health records and audit logs for at least six years, or longer if Connecticut law requires.

We provide services to minors only with a parent or guardian's consent, as allowed by Connecticut law.

If this policy changes, we'll post the new version here with its date.

Questions or requests: waleska@let-go-wellness.com, or by mail to Let Go Wellness LLC, 808 Highland Ave, Waterbury, CT 06708.