Privacy Policy
Effective Date: August 28, 2025
1. Introduction
Lokiten Behavioral Health (“we,” “our,” or “us”) is committed to safeguarding the personal information of individuals who visit our website (https://www.lokitenbh.com/) and who engage with us via phone, in-person, email, or text messaging (“Services”).
2. Information We Collect
a. Personal Information You Provide
- Contact details: name, address, phone number, email
- Professional information: employer, job title (if relevant)
- Health Information: mood assessments, therapy notes, session summaries—only if voluntarily disclosed through contact forms, intake, or text-based communication
- Sensitive data: mental health preferences, treatment history
b. Automatically Collected Information
- Browser type, device type, IP address, cookies, usage patterns when visiting our website
- Messaging metadata (timestamp, sender/recipient ID), but not the content of text messages unless explicitly provided
c. Third-Party Sources
- Information from service providers (e.g., analytics, appointment systems) used to support site operations
3. Use of Your Information
We may use your information to:
- Provide and manage medical and behavioral health services
- Respond to inquiries and schedule appointments
- Improve our services and website experience
- Send updates, reminders, or marketing communications (with your consent)
- Comply with legal and regulatory requirements
4. Legal Basis (if subject to GDPR or similar)
- Consent: When you provide personal data voluntarily (e.g., via text or intake form)
- Contract/legal obligation: To fulfill your service needs or comply with applicable laws
5. Text Messaging Communications
a. Scope
If you opt in, we may send appointment reminders, confirmations, or service-related information via text message. Messages may also include short educational or motivational content related to treatment.
b. Opt-In and Opt-Out
- All text communications require explicit opt-in (e.g., through an intake form or via text reply).
- You may withdraw consent at any time by replying “STOP” or by contacting us directly. After opt-out, we will only send you essential communications, such as billing or legal notices, if permitted by law.
c. Privacy and Security
- Message content: We do not retain sensitive health-related information within text messages unless you choose to share it.
- Protection of data: Text messages are stored and processed in compliance with applicable security standards. We implement safeguards—such as encryption and access controls—to protect text communications.
- No mobile or messaging consent information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
d. Limitations and Disclosures
- Standard SMS may be subject to third-party carrier access. Avoid sharing highly sensitive information (e.g., detailed medical history, emergency needs) via text.
- We are not liable for third-party access during transmission via mobile carriers.
6. Disclosure of Your Information
We may share your information with:
- Service providers and partners (e.g. HIPAA-compliant IT, analytics, appointment systems) under agreements that mandate data protection
- Legal and regulatory authorities, when required by law (e.g., subpoenas, court orders, risk to health or safety)
- Emergency situations, such as when there is a threat to your or others’ safety
7. Data Security
- We maintain administrative, technical, and physical safeguards to secure your information
- Staff access is restricted by role, and periodic reviews of security measures are conducted
- Breach notifications will be made in accordance with applicable law
8. Data Retention
- We retain personal and health information for as long as necessary to provide services or as legally required
- Non-essential data is securely disposed of when no longer needed
9. Your Rights (Depending on Applicable Law)
- Access: You may request copies of your personal data, including communications
- Correction: You may request updates or corrections to your information
- Deletion: You may request deletion where permitted by law (excluding required records)
- Restrictions or Objections: You may request limited handling or object to processing
- Portability: You may ask to receive your information in a transferrable format
- To exercise any of these rights, contact us using information in Section 12.
You can’t make this compliant just by adding policy language. The disclosure and the gating both have to be right, and for a behavioral health site the consent piece matters as much as the wording. But here’s the policy language to add, assuming the client approves the tag.
Replace or expand Section 10 (Cookies and Tracking) with something like this:
10. Cookies, Tracking, and Advertising Technologies
We use cookies, pixels, tags, and similar technologies to operate our website, analyze usage, and measure the effectiveness of our advertising.
Some of these technologies are provided by third-party advertising and analytics partners. These partners may collect information such as your IP address, device and browser type, and pages you visit, and may use this information to determine whether you viewed one of our advertisements (including streaming or connected-TV ads) before visiting our website. This is known as advertising attribution and helps us understand the performance of our marketing.
We do not sell your personal information for money. However, the use of these advertising technologies may be considered “targeted advertising” or a “sale” or “sharing” of personal information under certain state privacy laws, including the Colorado Privacy Act.
You have the right to opt out of targeted advertising and the sale or sharing of your personal information. You can do so by [adjusting your cookie preferences here / using our opt-out tool / contacting us using the information in Section 12]. You can also manage cookies through your browser settings and, where available, by enabling Global Privacy Control (GPC) in your browser.
Our advertising attribution partner’s privacy practices are described at http://tag.brandcdn.com/privacy. We are not responsible for the privacy practices of third-party partners.
11. Third-Party Services
Our website may contain links to third-party sites (e.g., partners or examples). We are not responsible for their privacy practices—please review their respective policies.
12. Contact Information
For questions, requests, or concerns about our Privacy Policy or your personal data, please contact
13. Changes to This Privacy Policy
We may revise this policy from time to time. We will post the updated version on our website with a new “Effective Date.” Continued use of our Services after changes constitutes acceptance.
