Who We Are & What This Policy Covers
The Outpost Therapy is a private therapy practice in Utah. Clinical services are provided by Madison, a Licensed Clinical Social Worker (LCSW). This policy describes how we handle information on our public website and in the secure client portal used by clients of the practice.
Health information created or received in the course of your care is protected health information and is additionally governed by our HIPAA Notice of Privacy Practices. Where that notice and this policy differ regarding health information, the notice controls.
Information We Collect on the Public Website
You can browse the public pages of this site without creating an account or providing any personal information. We do not use analytics services, advertising networks, or tracking technologies on this website.
Like most websites, our web server keeps standard access logs: the IP address of the visiting device, the date and time, and the page requested. We use these logs solely for security monitoring and operating the site.
Cookies
We do not use cookies for tracking or advertising. The public pages of this website set no cookies of their own, with one exception: the embedded scheduler on the booking page sets two cookies of its own, __Secure-next-auth.csrf-token and __Secure-next-auth.callback-url, to keep track of your progress through the booking steps. Both come from our own scheduling server, not from a third-party advertising or analytics service, and neither is used for tracking. The booking page loads nothing from third-party hosts. The client portal sets essential session cookies that keep you signed in while you use it; these are HttpOnly (not readable by scripts), restricted to this site, and used only for authentication.
Scheduling
Our booking page embeds a scheduler that we run ourselves. The software is Cal.diy, the open-source version of the Cal.com scheduling application, and it runs on the same server that hosts this website, at cal.theoutposttherapy.com. Cal.com the company does not operate it and does not receive your booking.
The name, email address, and appointment details you enter go to that server, which is operated for the practice by our hosting provider. Confirmed appointments are also written to the practice’s Google Workspace calendar, under an agreement that covers health information, and each session booking creates its own Google Meet link for the video visit. Those calendar entries are kept minimal: a fixed “Appointment” title, marked private, with no notes from your booking.
The scheduler does not send you a confirmation email, because we have not connected an email service to it yet. We use the booking details to hold your appointment and to prepare for your session.
Email Communications
If you email us at contact@theoutposttherapy.com, we use your message and contact details to respond, typically within 1 to 2 business days. Standard email is not a secure channel, so please don’t include detailed health information in an email. Once you are a client, the portal’s secure messaging is the better way to reach us between sessions.
The Client Portal & Your Health Information
Clients of the practice may be invited to a secure portal for intake forms, session summaries, assessments, and messaging. Information in the portal is encrypted in transit (HTTPS/TLS) and at rest (AES-256-GCM), portal accounts exist only for you and your therapist, and every access to clinical records is recorded in a tamper-resistant audit log.
Your rights regarding health information, including access, copies, amendments, and restrictions, are described in the HIPAA Notice of Privacy Practices.
Data Retention
Clinical records are retained for at least 7 years, as required by professional and legal record-keeping obligations. Audit logs of access to clinical records are retained for compliance purposes.
Your Rights & Choices
- You may request access to, or a copy of, your records, and the practice can provide a complete electronic export.
- You may ask us to correct information that is inaccurate.
- You may contact us at contact@theoutposttherapy.com with any question about how your information is handled.
Rights specific to health information are described in the HIPAA Notice of Privacy Practices.
Children’s Privacy
Our services and this website are intended for adults 18 and older. We do not knowingly collect information from children.
Changes to This Policy
If we change this policy, we will post the updated version on this page with a new effective date.
Contact Us
Questions about this policy? Call (385) 202-4087 or email contact@theoutposttherapy.com.