Privacy Policy

For Lissa Dutton, LMFT

Last modified: April 23, 2026

Thank you for visiting lissadutton.com. Your trust matters, and protecting the privacy and security of your personal information is something I take seriously. The information you share helps me provide a thoughtful, supportive experience as you explore therapy.

This Privacy Policy describes how your personal information is collected and used, as well as the standards and procedures in place when you visit lissadutton.com (the “Site”).

About This Practice

This Site is operated by Lissa Dutton, LMFT, a Licensed Marriage and Family Therapist (LMFT #122200) based in Palo Alto, California. This Privacy Policy applies only to information collected through the Site. Information shared during therapy sessions is protected separately under HIPAA and California state law and is governed by my Notice of Privacy Practices, which is provided to all clients.

Collection of Personal Information

In order to better provide you with the services offered through this Site, I may collect personally identifiable information that you voluntarily share, such as your first and last name, email address, or phone number.

I do not collect any personal information about you unless you choose to provide it. You may be asked to provide certain information when you:

  • Submit a contact form or inquiry

  • Schedule a consultation or appointment

  • Sign up to receive emails or other communications

  • Reach out by email or phone

Information you provide is used to communicate with you about the services you have requested. Additional personal or non-personal information may be gathered in the future.

When you visit the Site, certain information is automatically collected about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, I also collect information about the individual web pages you view, what websites or search terms referred you to the Site, and how you interact with the Site.

Cookies

This Site may use “cookies” to help personalize your online experience. A cookie is a small text file placed on your device by a web page server. Cookies cannot run programs or deliver viruses to your computer. They are uniquely assigned to you and can only be read by a web server in the domain that issued them.

One of the primary purposes of cookies is to provide a convenience feature and save you time. For example, when you return to the Site, cookies help recall information you previously provided so you can use the Site's features more easily.

You can accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience all features of the Site.

How Your Personal Information Is Used

Information collected through the Site is used to:

  • Respond to inquiries and consultation requests

  • Provide information about therapy services

  • Communicate with you about appointments, services, or updates you have requested

  • Improve and optimize the Site

  • Comply with legal and regulatory obligations

Device information is used to improve and optimize the Site, for example, by generating analytics about how visitors browse and interact with the Site, and to assess the effectiveness of marketing efforts.

Sharing Your Information

I will never sell, rent, or lease your personal information to third parties. I may share data with trusted service providers - for example, to help with analytics, email communication, customer support, or scheduling. These providers are only permitted to use your information to provide services on my behalf, and they are required to maintain the confidentiality of your information.

This Site uses Google Analytics to better understand how visitors use the Site. You can read more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

I may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to:

  • Conform to the law or comply with legal process served on this practice or the Site

  • Protect and defend the rights or property of this practice

  • Act under exigent circumstances to protect the personal safety of users of the Site or the public

Targeted Advertising

[Include this section only if you run paid ads or use ad-tracking pixels. Otherwise, delete it.]

Personal information may be used to provide you with targeted advertisements or marketing communications I believe may be of interest to you. You can opt out of targeted advertising through the following:

Links to Other Sites

This Site may contain links to other websites. Please be aware that I am not responsible for the content or privacy practices of those sites. I encourage you to be aware when you leave the Site and to read the privacy statements of any other site that collects personally identifiable information.

Security of Your Personal Information

I take reasonable steps to protect your personal information from unauthorized access, use, or disclosure. When personal information is transmitted to other websites, it is protected through encryption such as the Secure Sockets Layer (SSL) protocol.

While I make every effort to safeguard your information, no data transmission over the Internet or any wireless network can be 100% secure. By using this Site, you acknowledge that there are inherent privacy and security limitations to the Internet that are beyond my control.

Communicating with Established Clients

If you are an established client, please communicate directly through your secure client portal (Simple Practice) rather than through the Site's contact form or email. Web forms and email are not fully secure and should not be used to share confidential clinical information.

Data Retention

Information you submit through the Site is retained for as long as needed to respond to your inquiry, provide the services you have requested, or comply with legal obligations. You may request deletion of your information at any time using the contact details below. Upon receipt of a verifiable request, I will:

  • Delete your personal information from my records

  • Direct any service providers to delete your personal information from their records

California Resident Privacy Rights

If you are a California resident, you have the right to:

  • Know what personal information is collected about you

  • Request access to the personal information held about you

  • Request that your personal information be corrected, updated, or deleted

  • Opt out of the sale of personal information (this practice does not sell personal information)

  • Be free from discrimination for exercising any of your privacy rights

To exercise these rights, please contact me using the information at the end of this policy.

European Resident Privacy Rights

If you are a European resident, you have the right to access personal information held about you and to ask that your personal information be corrected, updated, or deleted. To exercise this right, please contact me using the information below. Please also note that your information will be transferred outside of Europe, including to the United States.

Children Under Thirteen

This Site is not directed to children under the age of thirteen, and I do not knowingly collect personally identifiable information from children under the age of thirteen. If you are under thirteen, please ask a parent or guardian for permission before using this website.

Opting Out of Marketing Communications

You can opt out of receiving marketing emails by clicking the unsubscribe link in any marketing email or by contacting me directly using the information below.

Non-Discrimination

I am committed to providing a welcoming, respectful environment for all clients. I do not discriminate on the basis of race, ethnicity, gender identity, sex, sexual orientation, ability status, country of origin, religion, or any other identifying status. People of all backgrounds and identities are welcome in this practice.

Notice of Privacy Practices (HIPAA)

Clinical information shared during therapy is protected under HIPAA and California state law. A separate Notice of Privacy Practices, which describes how protected health information is used and disclosed, is provided to all clients before or at the start of therapy. This Privacy Policy applies only to information collected through the Site.

Medicare Policy

I have opted out of Medicare under §§1128, 1156, or 1892 of the Social Security Act. If you are eligible for Medicare and choose to work with me, you will be required to sign an Opt Out Private Contract. Signing this contract indicates an understanding that you (or your legal guardian or representative) will be solely responsible for all costs of treatment. Seeking services from a provider who has not opted out of Medicare may result in fewer out-of-pocket costs.

Your Rights and Protections Against Surprise Medical Bills

(OMB Control Number: 0938-1401)

When you receive emergency care or are treated by an out-of-network provider at an in-network hospital or ambulatory surgical center, you are protected from surprise billing or balance billing.

What is “balance billing” (sometimes called “surprise billing”)?

When you see a doctor or other health care provider, you may owe certain out-of-pocket costs, such as a copayment, coinsurance, and/or a deductible. You may have additional costs or be responsible for the entire bill if you see a provider or visit a health care facility that isn't in your health plan's network.

“Out-of-network” describes providers and facilities that haven't signed a contract with your health plan. Out-of-network providers may be permitted to bill you for the difference between what your plan agreed to pay and the full amount charged for a service. This is called “balance billing.” This amount is likely more than in-network costs for the same service and might not count toward your annual out-of-pocket limit.

“Surprise billing” is an unexpected balance bill. This can happen when you can't control who is involved in your care, like when you have an emergency or when you schedule a visit at an in-network facility but are unexpectedly treated by an out-of-network provider.

You are protected from balance billing for:

Emergency services. 

If you have an emergency medical condition and receive emergency services from an out-of-network provider or facility, the most the provider or facility may bill you is your plan's in-network cost-sharing amount (such as copayments and coinsurance). You can't be balance billed for these emergency services. This includes services you may receive after you're in stable condition, unless you give written consent and waive your protections against balance billing for those post-stabilization services.

Certain services at an in-network hospital or ambulatory surgical center. 

When you receive services from an in-network hospital or ambulatory surgical center, certain providers there may be out-of-network. In these cases, the most those providers may bill you is your plan's in-network cost-sharing amount. This applies to emergency medicine, anesthesia, pathology, radiology, laboratory, neonatology, assistant surgeon, hospitalist, and intensivist services. These providers can't balance bill you and may not ask you to waive your protections.

If you receive other services at these in-network facilities, out-of-network providers can't balance bill you unless you give written consent and waive your protections.

You're never required to give up your protection from balance billing. You also aren't required to receive care out-of-network. You can choose a provider or facility in your plan's network.

When balance billing isn't allowed, you also have the following protections:

  • You are only responsible for paying your share of the cost (such as the copayments, coinsurance, and deductibles you would pay if the provider or facility were in-network). Your health plan will pay out-of-network providers and facilities directly.

Your health plan generally must:

  • Cover emergency services without requiring you to obtain prior authorization

  • Cover emergency services provided by out-of-network providers

  • Base what you owe the provider or facility (cost-sharing) on what it would pay an in-network provider or facility, and show that amount in your explanation of benefits

  • Count any amount you pay for emergency services or out-of-network services toward your in-network deductible and out-of-pocket limit

If you believe you've been wrongly billed, you may contact the California Department of Insurance.

See the Model Disclosure Notice Regarding Patient Protections Against Surprise Billing for more information about your rights under federal law.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in practices or for other operational, legal, or regulatory reasons. Updates will be posted on this page with a revised “Last Updated” date.

Contact

If you have questions about this Privacy Policy or would like to exercise your privacy rights, please contact:

Lissa Dutton, LMFT

Licensed Marriage and Family Therapist, LMFT #122200

260 Sheridan Avenue, Suite 206

Palo Alto, CA 94301

Email: lissaduttonmft@gmail.com

Phone: 650-746-4230