Website Privacy Policy

Effective Date: July 30, 2026

Joan M. Franklin, Ph.D. respects the privacy of website visitors, prospective patients, current patients, parents, guardians, and other individuals who communicate with the Practice.

This Website Privacy Policy explains how information may be collected, used, disclosed, retained, and protected through this website.

References to “Dr. Franklin,” “the Practice,” “we,” “us,” or “our” refer to Joan M. Franklin, Ph.D. and the authorized staff supporting the Practice.

1. Scope of This Privacy Policy

This Privacy Policy applies to information collected through the Practice’s public website, including:

  • General contact forms;
  • Appointment request forms;
  • Online patient forms;
  • Downloadable patient forms;
  • Website cookies;
  • Server and security logs; and
  • Communications initiated through the website.

This policy does not replace the Practice’s Notice of Privacy Practices.

Protected health information maintained by the Practice is governed by applicable federal and state privacy laws and the Practice’s current Notice of Privacy Practices. If this Privacy Policy conflicts with the Notice of Privacy Practices concerning protected health information, the Notice of Privacy Practices will control.

2. Information We May Collect

The information collected depends on how you use the website.

A. Information You Provide Directly

You may provide information when you:

  • Submit a general contact form;
  • Request an appointment;
  • Complete a patient form;
  • Contact the Practice by email or telephone;
  • Request information about services;
  • Download or submit administrative documents; or
  • Communicate with the Practice regarding billing, insurance, scheduling, or treatment.

This information may include:

  • Full name;
  • Email address;
  • Telephone number;
  • Mailing address;
  • Date of birth;
  • Appointment preferences;
  • Reason for contacting the Practice;
  • Parent or guardian information;
  • Emergency contact information;
  • Insurance and billing information;
  • Referral information;
  • Communication preferences;
  • Signature and authorization information;
  • Health and mental health information;
  • Treatment-related information; and
  • Information contained in documents or messages you submit.

Please do not submit sensitive health information through the general contact form. Sensitive information should be submitted only through a method specifically approved or provided by the Practice.

B. Information Submitted About Another Person

Parents, guardians, personal representatives, and other authorized individuals may provide information about a child, patient, family member, or person whose care or payment they assist with.

By submitting another individual’s information, you represent that you are authorized to provide it.

The Practice may request documentation confirming your authority.

C. Information Collected Automatically

When you visit the website, certain technical information may be collected automatically, such as:

  • Internet Protocol address;
  • Browser type;
  • Device type;
  • Operating system;
  • General geographic region;
  • Referring website;
  • Pages viewed;
  • Date and time of access;
  • Time spent on pages;
  • Links selected;
  • Error and security logs; and
  • Cookie or similar technology identifiers.

This information may be used to operate, secure, maintain, and improve the website.

3. Cookies and Similar Technologies

The website may use cookies and similar technologies to:

  • Enable essential website functions;
  • Remember basic preferences;
  • support form functionality;
  • Prevent spam and misuse;
  • Maintain website security;
  • Understand general website traffic; and
  • Improve performance and usability.

Some cookies may be placed by service providers supporting website hosting, security, forms, analytics, maps, accessibility, or other embedded website functions.

You may control cookies through your browser settings. Blocking certain cookies may affect website functionality.

The Practice does not knowingly use protected health information for behavioral advertising.

4. How Information May Be Used

The Practice may use information to:

  • Respond to questions and messages;
  • Process appointment requests;
  • Contact prospective and current patients;
  • Determine appropriate administrative next steps;
  • Register patients and maintain records;
  • Coordinate scheduling;
  • Confirm communication preferences;
  • Provide psychological services;
  • Support treatment, payment, and healthcare operations;
  • Process insurance and billing information;
  • Communicate with authorized family members, guardians, payers, or representatives;
  • Maintain office and patient documentation;
  • Comply with professional, legal, licensing, and regulatory obligations;
  • Protect patients, website visitors, staff, and the public;
  • Prevent fraud, spam, misuse, and cybersecurity incidents;
  • Troubleshoot and improve the website; and
  • Enforce website policies and agreements.

The Practice will not use health information for unrelated marketing without authorization when authorization is required by law.

5. Protected Health Information

Information you submit through designated patient forms or other approved communication methods may constitute protected health information.

Protected health information may include information relating to:

  • A person’s physical or mental health;
  • Diagnosis or treatment;
  • Past, present, or future healthcare services;
  • Payment for healthcare;
  • Insurance coverage; and
  • Information identifying the patient.

The Practice uses and discloses protected health information as permitted or required by applicable law and as described in its Notice of Privacy Practices.

This Website Privacy Policy is not intended to provide a complete description of your rights concerning clinical records or protected health information.

You may contact the Practice to request a copy of the current Notice of Privacy Practices.

6. Electronic Communications

Email, text messages, fax transmissions, standard website forms, and other electronic communications may involve privacy and security risks.

Although the Practice uses reasonable safeguards, ordinary electronic communications may be intercepted, misdirected, accessed through a compromised device, or viewed by someone with access to your email or telephone.

For this reason:

  • Do not include detailed medical or mental health information in the general contact form;
  • Verify that your contact information is accurate;
  • Tell the Practice whether messages may be left for you;
  • Inform the Practice about communication restrictions;
  • Use secure communication methods when instructed; and
  • Contact the Practice by telephone when unsure how to submit sensitive information.

7. How Information May Be Disclosed

The Practice may disclose information in the following circumstances.

A. Service Providers

Information may be shared with companies or professionals that support:

  • Website hosting;
  • Information technology;
  • Website security;
  • Spam prevention;
  • Secure online forms;
  • Email and communications;
  • Scheduling;
  • Telehealth;
  • Data storage and backups;
  • Billing and insurance processing;
  • Legal and professional services; and
  • Website maintenance or analytics.

These providers are permitted to use information only as necessary to perform services for the Practice or as otherwise permitted by law.

Where required, the Practice uses appropriate confidentiality, data-protection, and business associate arrangements.

B. Treatment, Payment, and Healthcare Operations

Protected health information may be used or disclosed for treatment, payment, healthcare operations, and other purposes permitted by applicable law and described in the Practice’s Notice of Privacy Practices.

C. Authorized Individuals

Information may be disclosed to a parent, guardian, personal representative, emergency contact, payer, family member, healthcare provider, attorney, insurer, or other person when:

  • You have authorized the disclosure;
  • The disclosure is permitted by law;
  • The individual is involved in your care or payment for care; or
  • The Practice reasonably believes the disclosure is necessary and legally permitted.

D. Legal and Safety Requirements

Information may be used or disclosed when reasonably necessary to:

  • Comply with a law, regulation, subpoena, court order, or legal process;
  • Respond to a government or licensing authority;
  • Report suspected abuse, neglect, exploitation, or other matters as required by law;
  • Address a serious threat to health or safety;
  • Protect the legal rights of the Practice or another person;
  • Investigate fraud, misuse, or a security incident; or
  • Defend the Practice in a legal or professional proceeding.

E. Business or Practice Changes

Information may be transferred as part of a lawful sale, merger, restructuring, succession, or transfer of the Practice, subject to applicable privacy and professional requirements.

F. With Your Permission

Information may be disclosed for another purpose when you provide valid authorization or consent.

8. Sale of Personal Information

The Practice does not sell or rent personal information.

The Practice does not knowingly sell protected health information, information concerning a person’s mental health, or personal information belonging to a child.

The Practice does not use patient information for targeted advertising.

9. Data Retention

Information is retained only for as long as reasonably necessary to:

  • Respond to communications;
  • Process appointment requests;
  • Provide services;
  • Maintain patient and business records;
  • Complete billing and insurance activities;
  • Meet professional record-retention obligations;
  • Comply with legal requirements;
  • Resolve disputes; and
  • Protect the Practice’s legal rights.

Clinical records and protected health information may be retained according to healthcare, professional licensing, contractual, and legal requirements that differ from the retention period for general website information.

Information may be securely deleted, destroyed, or deidentified when it is no longer required.

10. Information Security

The Practice uses reasonable administrative, physical, and technical safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.

These safeguards may include:

  • Access controls;
  • Password protections;
  • Secure hosting;
  • Encryption when appropriate;
  • Security monitoring;
  • Restricted staff access;
  • Backups;
  • Software updates; and
  • Confidentiality requirements.

No website, email system, transmission method, or storage system can be guaranteed to be completely secure.

You are responsible for protecting your own devices, email accounts, passwords, and communications.

11. Data Breach Notification

If the Practice discovers a breach or security incident involving information that requires notification under applicable law, the Practice will provide legally required notices to affected individuals, government authorities, or other parties.

12. Privacy Rights and Requests

Depending on the type of information and applicable law, you may have the right to request:

  • Confirmation of whether information about you is maintained;
  • Access to certain personal information;
  • Correction of inaccurate information;
  • Deletion of certain information;
  • Restrictions on certain uses or disclosures;
  • Confidential communications through an alternative method or location;
  • An accounting of certain disclosures;
  • A copy of the Practice’s Notice of Privacy Practices; or
  • Review of a decision denying a privacy request.

Different rules apply to protected health information, psychotherapy notes, business records, and general website data.

Some information may not be deleted or provided when the Practice is legally or professionally required to retain it, when disclosure would affect another person’s rights, or when another legal exception applies.

Texas residents may also have privacy rights under Texas law to the extent that the relevant law applies. Certain HIPAA-covered entities and HIPAA-regulated information may be exempt from portions of Texas consumer privacy law.

Requests may be submitted using the contact information at the end of this policy. The Practice may need to verify your identity and authority before processing a request.

13. Privacy Complaints

You may submit a privacy question or complaint to the Practice without fear of retaliation.

For concerns involving protected health information, contact:

Privacy Officer: Brooke White
Joan M. Franklin, Ph.D.
2249 Ridge Road
Rockwall, Texas 75087
Phone: 469-402-3604
Email: info@joanmfranklinphd.com

Information about additional complaint rights is available in the Practice’s Notice of Privacy Practices.

14. Children’s Privacy

The Practice provides psychological services to children and adolescents, but the public website is not intended for unsupervised use by children under 13.

Children under 13 should not submit personal information directly through the website.

A parent, guardian, or other legally authorized adult should complete appointment requests or patient forms for a child, unless the Practice provides different instructions.

If the Practice learns that personal information was submitted directly by a child without appropriate authorization, it may take reasonable steps to verify consent, restrict use, or delete the information, subject to applicable clinical and legal record-retention requirements.

15. Third-Party Websites and Embedded Services

The website may link to or display content provided by third parties, including maps, downloadable documents, form systems, security tools, telehealth resources, or insurance information.

Third parties may independently collect information according to their own privacy policies.

The Practice is not responsible for the privacy or security practices of websites or services it does not control.

16. Do Not Track Signals

Some browsers provide “Do Not Track” or similar privacy signals. Because there is no single universally accepted method for responding to every such signal, the website may not respond to all browser-based signals.

You may manage cookies and tracking preferences through your browser or device settings.

17. Changes to This Privacy Policy

The Practice may revise this Privacy Policy to reflect changes in website functions, privacy practices, technology, or legal requirements.

The updated policy will be posted on the website with a revised effective date.

Material changes may be communicated through an additional website notice when appropriate.

18. Contact Information

Questions, requests, or complaints concerning this Website Privacy Policy may be directed to:

Joan M. Franklin, Ph.D.
Attention: Privacy Officer
2249 Ridge Road
Rockwall, Texas 75087
Phone: 469-402-3604
Email: info@joanmfranklinphd.com