Privacy Policy
Finish Line Mindset LLC
Effective Date: July 31,2026
Last Updated: August 7, 2026
Finish Line Mindset LLC ("we," "us," "our," or the "Practice") operates [www.finishlinemindset.com] (the "Site") and provides therapy and/or coaching services. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our Site, submit a contact form, or otherwise interact with us online.
This Policy applies to information collected through the Site. It does not replace or substitute for the HIPAA Notice of Privacy Practices that licensed clients receive separately regarding the treatment of their Protected Health Information (PHI) in the clinical/therapeutic relationship. See Section 10 below.
1. Information We Collect
a) Information You Provide Directly
When you use our contact form, schedule a consultation, or email/call us, we may collect:
Full name
Email address
Phone number
Any message content or details you choose to share (which may include sensitive information about your mental health, reasons for seeking services, or scheduling preferences)
Billing/insurance information, if you proceed to become a client
b) Information Collected Automatically
When you browse the Site, we (and third-party tools we use) may automatically collect:
IP address and approximate location
Browser type, device type, and operating system
Pages visited, time on page, referring URL
Date and time of visit
c) Information from Cookies and Similar Technologies
See Section 3 (Cookies) below.
2. How We Use Your Information
We use the information collected to:
Respond to inquiries submitted via the contact form
Schedule consultations or appointments
Communicate about services, billing, and scheduling
Improve our Site's content, functionality, and user experience
Comply with legal, regulatory, licensing, and record-keeping obligations
Detect, prevent, and address technical issues, fraud, or misuse of the Site
We do not sell your personal information. We do not use contact form submissions or clinical information for advertising or marketing to third parties.
3. Cookies and Tracking Technologies
We use cookies and similar technologies (such as web beacons or local storage) for purposes including:
Category Purpose Examples Essential Required for the Site to function Session management, form security Analytics Understand how visitors use the Site Google Analytics or similar Functional Remember preferences Language, form auto-fill.
Your choices: Most browsers let you refuse or delete cookies through browser settings. Disabling essential cookies may affect Site functionality. If you are visiting from the EU/UK or California, additional cookie consent tools and opt-out mechanisms apply — see Sections 6 and 7.
We currently do not respond to "Do Not Track" browser signals, as no uniform standard has been adopted industry-wide.
4. Third-Party Service Providers
We may share information with trusted third-party vendors who perform services on our behalf, such as:
Website hosting providers
Email/communication platforms (e.g., for responding to your inquiry)
Scheduling/calendar software
Payment processors (for billing clients)
Electronic health record (EHR) or practice management software (for clients receiving therapy services)
Analytics providers
These vendors are contractually obligated to protect your information and use it only for the services they provide to us. Vendors handling PHI for licensed clinical services are required to sign a Business Associate Agreement (BAA) as required under HIPAA.
We may also disclose information if required by law, court order, licensing board investigation, or to protect the safety of you or others (see mandatory reporting obligations described in our Terms and Conditions).
5. Data Retention
We retain contact form submissions and website inquiry data for as long as reasonably necessary to respond to your inquiry and for legitimate business, legal, or record-keeping purposes, and then delete or anonymize it. Clinical records for therapy clients are retained according to Florida licensing board requirements for seven (7) years.
6. Your Privacy Rights (GDPR — EU/UK Visitors)
If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) / UK GDPR, including the right to:
Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten"), subject to legal recordkeeping exceptions
Restrict or object to processing
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time where processing is based on consent
Lodge a complaint with your local supervisory authority
Legal basis for processing: We process contact form data based on your consent and our legitimate interest in responding to inquiries. Where you become a client, processing is based on the necessity to provide services and comply with legal obligations.
International transfers: If you contact us from outside the United States, your information will be transferred to and processed in the United States, which may not have data protection laws equivalent to your home country. By submitting information, you consent to this transfer.
To exercise any of these rights, contact us at info@finishlinemindset.com Re: GDPR Privacy.
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
Know what personal information we collect, use, and disclose
Request deletion of your personal information (subject to legal exceptions)
Correct inaccurate personal information
Opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information as defined under CCPA/CPRA)
Non-discrimination for exercising your privacy rights
To exercise these rights, contact us at info@finishlinemindset.com Re: CCPA/CPRA Privacy. We may need to verify your identity before fulfilling your request.
8. Children's Privacy
Our Site and services are not directed to individuals under 18 without parent or guardian involvement. We do not knowingly collect personal information from children under 13 through the Site (in compliance with COPPA). If services are provided to minors, this occurs only through direct clinical intake with parent/guardian consent, not through general Site data collection.
9. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect information submitted through the Site, including encrypted transmission (HTTPS) and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Special Note on Health Information (HIPAA)
If you become a therapy client, your clinical records and Protected Health Information (PHI) are governed by our HIPAA Notice of Privacy Practices, provided separately at intake, and by applicable federal and state law. This website Privacy Policy governs website/contact-form data only and does not itself constitute HIPAA-compliant handling of clinical records. Coaching services (non-clinical) are not covered by HIPAA, but we still handle any personal information you share with care and confidentiality as described in this Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date above reflects the most recent changes. Material changes will be posted on this page.
12. Contact Us
Questions about this Privacy Policy or your data can be directed to:
Finish Line Mindset LLC
561-310-4703