Privacy Policy

This policy describes how Blue Sky Mental Health Clinic, LLC handles information through blueskymentalhealthclinic.com. The clinic provides mental health services in Maryland and Washington, DC. This policy covers the public website, general inquiry form, and Care Assistant. Third-party websites have their own privacy policies.

Health information used in clinical care is also subject to applicable privacy and confidentiality laws. Our Notice of Privacy Practices explains protected health information, patient rights, and the clinic’s legal responsibilities. This website policy does not replace that notice or authorize disclosure of medical records.

• General inquiries: your name, email address, optional phone number, subject, and message when you submit the contact form. The form is for office questions, not medical records, emergencies, or appointment scheduling.
• Care Assistant: the question you type and limited conversation context are sent to the website’s server to return clinic information. Messages remain in the page’s temporary memory while it is open. The assistant’s application code does not save a persistent transcript, send questions to a generative AI provider, or deliberately log raw messages. Hosting infrastructure may still process network and security information. The assistant is not a clinical messaging service, diagnosis tool, or medical record.
• Technical information: hosting services and third-party resources may receive your IP address, browser/device information, requested page, referring page, request time, and security or error information when you visit. Analytics or advertising tags may also receive cookie identifiers and browsing interactions.
• Scheduling: appointment links take you to Tebra. Information you submit there is collected through that service, not through the website’s general inquiry form. Review the scheduling service’s privacy notices before providing information.

Information submitted through the general inquiry form is used to deliver your message to the clinic and allow staff to respond. Care Assistant questions are processed to provide general clinic information and navigation. Technical information supports website delivery, troubleshooting, fraud prevention, security, and, where tags are configured, measurement of website or advertising performance.

Please do not enter Social Security numbers, payment-card details, insurance identification numbers, diagnoses, medication lists, or medical records into the general form or Care Assistant. To discuss treatment or request records, contact the office for the appropriate channel. For an emergency, call 911; for mental health crisis support, call or text 988.

The website uses the following services. Information they receive depends on the service and your interaction:

• Replit — website and API hosting: processes website requests, temporary application inputs, and hosting/network information needed to operate the site. Replit privacy policy.
• Resend — inquiry email delivery: receives the contact details, subject, and message you submit so it can deliver the inquiry to the clinic’s email inbox. Your inquiry may remain in email systems even though the website application does not create an inquiry database record. Resend privacy policy.
• Tebra — external scheduling: receives information you provide on its scheduling pages and technical information when you visit them. Tebra privacy policy.
• Google Tag Manager, Google Analytics, and Google Ads — measurement and advertising: the published tag container includes Google Analytics and Google Ads tags. These services may receive page visits, device/network information, cookie or advertising identifiers, and interactions such as phone-link clicks or scheduling-link clicks. The website’s Care Assistant code sends only content-free, general interaction events to the tag data layer; it does not send typed questions, answers, or health-related chat intent events to that data layer. The inquiry form’s application code does not place your message or contact details in that data layer. Settings in the external tag container determine which tags run and what they collect.
• Google Fonts — typography: receives technical network information when the browser requests the site’s fonts. Google privacy policy.

Links to other websites are provided for convenience. Those websites operate under their own privacy policies. A website disclosure is not a certification that a service is appropriate for protected health information; sensitive clinical information must be handled through clinic-authorized channels.

Google Tag Manager and tags it loads may use cookies or similar technologies for analytics or advertising. Third-party resources can receive technical information even if you do not submit a form. The Care Assistant itself does not use local storage or cookies to save a conversation.

You can block or delete cookies through your browser and use browser privacy or content-blocking settings. Blocking cookies alone does not necessarily stop all network requests or all tracking. These settings may affect third-party scheduling or other website features. You can also manage Google advertising preferences at Google My Ad Center. The website does not currently offer a separate on-site cookie-preference panel.

The website is served over HTTPS, which encrypts traffic between your browser and the website in transit. No website, email system, or internet transmission can be guaranteed completely secure. HTTPS alone does not make a contact form, chat, or email service a secure clinical communication channel.

The Care Assistant does not create a persistent conversation record in the application. Contact-form messages are sent by email and may be retained in the clinic’s inbox and delivery-provider systems. Hosting logs and service-provider records may have their own retention periods. Clinical records are subject to separate legal retention requirements. Contact the clinic about a specific record or deletion request; this policy does not promise an unverified deletion deadline or a right to delete records the clinic must legally retain.

You may choose not to submit a form or use the Care Assistant and may call the clinic instead. For access, correction, or deletion questions about website information, contact the clinic and describe your request without including sensitive health details. The response depends on the information held, applicable law, identity verification, and any required retention. Clinical record rights are described separately in the Notice of Privacy Practices.

Submitting an inquiry is not consent to publish your information, sell your health information, or disclose clinical records for unrelated purposes. This policy does not replace any authorization required by law.

The public inquiry form and Care Assistant are not intended to collect personal information from children under 13. A parent or guardian should contact the clinic about services for a child without submitting sensitive details through these website tools. If you believe a child under 13 has provided personal information through them, contact the clinic so the submission can be addressed.

Privacy and consent rules for a minor’s clinical care are separate and depend on applicable law, the service, and who is legally authorized to act for the minor. Being a parent or guardian does not automatically entitle a person to every confidential clinical record.

Updates to this website policy will be posted on this page with a revised effective date. Any additional notice or consent required by applicable law must also be provided. Changes to this policy do not override the protections applicable to clinical records.