Privacy Policy Last revised 9/26/2026

This policy explains how waterlilycounseling.com ("the Site," "we," "us") collects, uses, and protects information gathered through your visit to and use of this website. It applies to the website only.

This policy does not cover how we handle protected health information in the course of clinical care. If you are a current or prospective client, our handling of your clinical and billing records is governed separately by our HIPAA Notice of Privacy Practices, which is provided to clients directly.

We collect information in two ways:

Information you provide directly.

• If you use our contact form, we collect what you enter — typically your name, email address, phone number, and the contents of your message.

Information collected automatically. 

• Like most websites, we use analytics tools (such as Google Analytics) that automatically collect information about your visit, including your IP address, browser type, device type, pages viewed, referring website, and approximate location, usually through cookies or similar technologies.

• To respond to messages sent through our contact or intake form
• To understand how visitors use the Site, so we can improve its content and design
• To maintain the security and proper functioning of the Site
• To meet legal or regulatory obligations

We do not use information submitted through the contact form for marketing or advertising purposes, and we do not sell your personal information.

We use Google Analytics to understand aggregate traffic patterns on the Site. Google Analytics uses cookies to collect standard internet log information and visitor behavior information in an anonymous or pseudonymous form. You can prevent this by disabling cookies in your browser settings or by using Google's Analytics opt-out browser add on. Disabling cookies may affect how parts of the Site function.

We do not sell or rent your personal information. We may share information with:

•   Service providers who help us operate the Site (for example, our web hosting provider and Google Analytics), who are only permitted to use the information to provide services to us
•   Government authorities or others, where required by law or to protect our legal rights or the safety of others

We retain contact form submissions for as long as reasonably necessary to respond to your inquiry and for our business record-keeping, unless you ask us to delete it sooner. Analytics data is retained according to Google Analytics' standard retention settings.

You may ask us to access, correct, or delete personal information you have submitted through the Site by contacting us using the information below. Because Virginia's Consumer Data Protection Act applies to certain businesses meeting specific processing thresholds, and this Site may not independently meet those thresholds, we're providing these choices as a courtesy regardless of whether the law formally applies to us:

•  The right to know what personal information we have collected about you
•  The right to request correction of inaccurate personal information
•  The right to request deletion of personal information you've provided
•  The right to opt out of the use of analytics cookies, as described above

This Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site's contact or intake form.

We use reasonable administrative and technical safeguards to protect information submitted through the Site. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We may update this policy from time to time to reflect changes in our practices or for legal or operational reasons. The "effective date" at the top of this page reflects the most recent revision.

If you have questions about this policy or wish to exercise any of the choices described above, contact us at sabiha@waterlilycounseling.com

 This page addresses website data practices only and is provided as general information, not legal advice. We'd recommend having an attorney review this policy before publishing it, particularly to confirm applicability of state-specific requirements.