Bonsai Counseling & Psychotherapy

Call us now

Privacy Policy

Website Privacy Policy

Effective Date: April 27, 2026

1. Introduction

Bonsai Counseling & Psychotherapy (“we,” “us,” or “our”) is a licensed psychotherapy practice located in Sacramento, California. We are committed to protecting the privacy and security of the personal information of individuals who visit our website at https://bonsaicounseling.com (the “Website”).

This Website Privacy Policy (“Policy”) describes how we collect, use, disclose, and otherwise process personal information obtained through this Website, and explains your rights regarding that information under applicable California law, including the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”).

By accessing or using our Website, you acknowledge that you have read and understood this Policy. If you have questions about this Policy, please contact us using the information provided in Section 11 below.

2. Information We Collect

We may collect the following categories of personal information through the Website:

2.1 Information You Provide Voluntarily

When you submit a contact form, appointment inquiry form, or otherwise communicate with us through the Website, you may voluntarily provide us with the following personal information:

  • Name (first and/or last name)
  • Email address
  • Phone number
  • Any additional information you choose to include in a message or inquiry

2.2 Information Collected Automatically

When you visit the Website, certain information may be collected automatically by our web server and hosting infrastructure, even without the use of third-party analytics tools. This may include:

  • IP address
  • Browser type and version
  • Operating system and device information
  • Pages visited on the Website and the date and time of each visit
  • Referring URL (the website you visited before arriving at our Website)
  • General geographic location (derived from IP address)

2.3 Cookies and Similar Technologies

The Website may use cookies or similar technologies that are essential to its basic functionality (for example, session cookies that allow the Website to operate properly). We do not currently use cookies for advertising, tracking, or marketing purposes. If this changes in the future, we will update this Policy accordingly and provide appropriate notice and choices.

3. How We Use Your Information

We use the personal information we collect through the Website for the following purposes:

  • Responding to inquiries and scheduling requests. We use the contact information you provide to respond to your questions, appointment requests, and other communications submitted through the Website.
  • Communicating with prospective or current clients. We may use your contact information to follow up on inquiries, provide information about our services, or communicate with you regarding your care as permitted by applicable law.
  • Improving website functionality and user experience. We may use automatically collected information to understand how visitors interact with the Website, to maintain its security, and to improve its content and usability.
  • Complying with legal obligations. We may use or disclose personal information as necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising purposes. As those terms are defined under the CCPA, we do not “sell” or “share” your personal information.

We may disclose your personal information in the following limited circumstances:

  • Legal obligations. We may disclose personal information if required to do so by law, regulation, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.
  • With your consent. We may disclose personal information to third parties when you have provided your express consent to such disclosure.
  • Service providers. If, in the future, we engage service providers (such as website hosting companies, email service providers, or analytics tools) that process personal information on our behalf, we will ensure that appropriate contractual protections are in place and will update this Policy to reflect any such changes.

5. Your Rights Under the CCPA

If you are a California resident, you have the following rights under the CCPA with respect to the personal information we collect through this Website:

5.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting the information, and the categories of third parties with whom we have shared the information.

5.2 Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law (for example, where retention is necessary to comply with a legal obligation or to complete a transaction you requested).

5.3 Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of processing.

5.4 Right to Opt-Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information. As stated in Section 4 of this Policy, we do not sell or share your personal information as those terms are defined under the CCPA. If our practices change in the future, we will provide a clear and conspicuous “Do Not Sell or Share My Personal Information” link on our Website and update this Policy accordingly.

5.5 Right to Limit Use of Sensitive Personal Information

Under the CCPA, you have the right to limit the use and disclosure of sensitive personal information to purposes that are necessary to perform the services you request. We do not collect sensitive personal information through this Website beyond what is necessary to fulfill the purposes described in this Policy.

5.6 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising any of your CCPA rights. We will not deny you services, charge you different prices or rates, provide you with a different level or quality of services, or suggest that you may receive a different price, rate, or level of quality of services because you exercised your privacy rights.

5.7 How to Submit a Request

To exercise any of the rights described above, you may submit a verifiable consumer request to us by using one of the following methods:

  • Email: connect@bonsaicounseling.com
  • Phone: (916) 520-3041
  • Mail: Bonsai Counseling & Psychotherapy, 8300 Delta Shores Cir S #235, Ste 120, Sacramento, CA 95832

To protect your privacy and security, we will take reasonable steps to verify your identity before fulfilling your request. Verification may require you to provide sufficient information for us to match the information you provide with information we already maintain about you.

You may also designate an authorized agent to make a request on your behalf. If you use an authorized agent, we may require proof that you have provided the agent with written permission to submit the request, and we may still require you to verify your own identity directly with us.

5.8 Response Timeframe

We will acknowledge receipt of your request within ten (10) business days and will respond to your verifiable consumer request within forty-five (45) calendar days of receipt. If we require more time (up to an additional 45 calendar days), we will inform you of the reason and the extension period in writing.

6. HIPAA and Protected Health Information

As a licensed psychotherapy practice, we are a covered entity under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations. Any Protected Health Information (“PHI”) that we create, receive, maintain, or transmit in connection with the provision of healthcare services is governed by HIPAA and our separate Notice of Privacy Practices—not by this Website Privacy Policy.

PHI that is subject to HIPAA is generally exempt from the requirements of the CCPA. However, personal information that you submit through this Website (such as your name, email address, and phone number entered into a general contact or inquiry form) may not constitute PHI and is therefore subject to this Policy and the CCPA.

For information about how we collect, use, and protect your health information in the course of treatment, please request a copy of our Notice of Privacy Practices by contacting us using the information provided in Section 11 below.

7. Data Retention

We retain personal information collected through the Website for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Policy. In determining retention periods, we consider the following criteria:

  • The nature and sensitivity of the personal information
  • Whether the information is needed to respond to an ongoing inquiry or provide requested services
  • Applicable legal, regulatory, or contractual obligations that require retention (for example, record-keeping requirements under state licensing laws)
  • Whether retention is advisable in light of our legal position (for example, applicable statutes of limitation or anticipated litigation)

When personal information is no longer needed for any of these purposes, we will securely delete or de-identify it in accordance with our data retention practices.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect through the Website from unauthorized access, use, alteration, disclosure, or destruction. These measures include, but are not limited to:

  • Use of encryption technology (such as SSL/TLS) for data transmitted through the Website
  • Limiting access to personal information to authorized personnel who need it to perform their job functions
  • Maintaining secure hosting environments for the Website and related data

Please be aware that no method of electronic transmission or data storage is completely secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately using the information provided in Section 11 below.

9. Children’s Privacy

This Website is not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal information from children under 16 through the Website. If we become aware that we have inadvertently collected personal information from a child under 16, we will take reasonable steps to delete that information promptly. If you believe that a child under 16 has provided us with personal information through the Website, please contact us using the information in Section 11 below so that we can take appropriate action.

10. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Policy, we will:

  • Update the “Effective Date” at the top of this Policy to reflect the date the revised version takes effect
  • Post the updated Policy on this page of the Website
  • Where appropriate, provide additional notice on the Website (such as a banner or announcement) to alert visitors of significant changes

We encourage you to review this Policy periodically to stay informed about how we are protecting your personal information. Your continued use of the Website after the posting of a revised Policy constitutes your acknowledgment of the changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Website Privacy Policy or our privacy practices, please contact us at:

Bonsai Counseling & Psychotherapy

8300 Delta Shores Cir S #235

Ste 120

Sacramento, California 95832

Email: connect@bonsaicounseling.com

Phone: (916) 520-3041

This Website Privacy Policy applies solely to information collected through the Website identified above. It does not apply to information collected offline, through other websites or applications, or through the provision of healthcare services (which is governed by our HIPAA Notice of Privacy Practices).