Privacy Policy
Table of Contents
Effective date: September 25, 2026.
Last updated: September 25, 2026.
Who we are
MAD Care is the public name of MAD CARE LLC, an Arizona limited-liability company. The practice provides telehealth counseling to adults and couples who are physically located in the State of Hawaiʻi or the Commonwealth of Virginia at the time of the session.
Legal name MAD CARE LLC (Arizona limited-liability company) Public name MAD Care Clinician Marie Delabarrera, LMHC Hawaiʻi license LMHC License No. 1157 Virginia license Licensed as required by the Virginia Board of Counseling NPI 1740988641 Website https://mendandkindleco.com Platform WordPress, hosted in the United States Privacy Officer Marie Delabarrera, LMHC Email marie@mendandkindleco.com Phone (928) 471-5998 (voice only; this practice does not use text messaging) Hours for routine replies Monday–Friday, 9:00 a.m.–4:00 p.m. Replies within one business day
The company is organized in Arizona and maintains a registered agent in Arizona. The public website is operated from Arizona. WordPress hosting and related vendors may store information on servers in the United States at locations those vendors determine. We do not publish a street address on this Policy. Privacy requests should be sent by email or voicemail using the contacts above.
Scope
- A valid court order, warrant, or lawful subpoena.
- A request from a licensing board, regulator, or other government authority with legal power to ask.
- To prevent or lessen a serious and imminent threat to health or safety, consistent with professional duty-to-protect rules in Hawaiʻi and Virginia.
- To report suspected abuse, neglect, or exploitation when mandated by Hawaiʻi or Virginia law.
- To our professional advisors (attorney, accountant, malpractice carrier) under confidentiality duties.
What this Policy covers
- The public pages of mendandkindleco.com: Home, About, Services, Rates, and Contact.
- The public contact form on mendandkindleco.com.
- Email and telephone communications that begin from the website or the contact details published on it.
- Automatically collected technical data and analytics described below.
- The fact that the site links out to TherapyNotes / TherapyPortal for appointment scheduling.
What this Policy does not cover
- Your clinical record after you become a client. That record is PHI and is described in the Notice of Privacy Practices.
- Information you submit directly to TherapyNotes or TherapyPortal. Those systems are operated by an independent company and are subject to that company’s terms and privacy notices, and — once you are a client — to our Business Associate Agreement with TherapyNotes.
- Websites we link to for general information (for example, 988, a licensing board, or a government page). Those sites have their own policies.
- Payment-card data. mendandkindleco.com does not collect card numbers. If you pay for services, you pay through a processor or through TherapyNotes under that vendor’s terms.
Information we collect
A. Information you choose to give us
The public contact form is built to collect only what we need to answer an inquiry. Typical fields include:
- Name.
- Email address and/or telephone number.
- Preferred way to be reached.
- A short message about scheduling or whether we might be a fit.
You may also send the same kinds of details by email or leave a brief voicemail. Do not put protected health information in the public form, in an ordinary email, or on voicemail. That includes diagnoses, medications, detailed trauma history, treatment notes, insurance member IDs, or anyone else’s health information. Save clinical detail for a private session or for TherapyNotes after a client relationship exists. If you send that kind of content anyway, we will treat it as sensitive, limit who sees it, and move or delete it from the public channel as soon as we reasonably can.
B. Information collected automatically
When you visit mendandkindleco.com, WordPress, our hosting company, and any analytics tool we use may collect:
- Internet Protocol (IP) address and approximate general location derived from it (city or region, not a precise GPS point).
- Browser type and version, device type, operating system, and screen size.
- Date and time of the visit, pages viewed, referring URL, and basic click or navigation data.
MAD Care Website Privacy Policy
- Cookies or similar storage needed to load the site, keep it secure, or remember a short session.
We do not ask the public site to collect Social Security numbers, driver’s-license numbers, bank-account numbers, or precise geolocation.
C. Analytics
We use basic website analytics so we can see which pages are used and whether the site is working. Depending on the configuration in place at a given time, that tool may be Google Analytics or a privacy-focused alternative such as Plausible.
- Analytics data is used to understand aggregate traffic, not to build an advertising profile about you.
- We do not use analytics for targeted advertising, remarketing, or “lookalike” audiences.
- If Google Analytics is enabled, Google acts as an independent company. Google’s notices are at
https://policies.google.com/privacy. We will configure the property so advertising features and Google Signals are off, to the extent the product allows.
- If a privacy-focused analytics tool is used instead, it is typically configured to avoid advertising cookies
and to limit what is stored about a single visitor. You can block cookies or use a browser that limits tracking. The site should still be readable. Some host features (for example, a form confirmation) may not work if essential cookies are blocked.
D. Information we do not collect on the public site
- Payment-card numbers, CVV codes, or bank-account numbers.
- Social Security numbers or government ID numbers.
- Text messages. This practice does not use SMS.
- Information from children under 18, as described in Section 9.
- Biometric identifiers, precise geolocation, or audio/video from the public pages. Telehealth video happens only inside the clinical platform after you are a client.
- Public blog comments. Commenting is turned off on mendandkindleco.com.
How we use information
We use website and inquiry information to:
- Respond to consultation requests and other messages you send.
- Decide whether we are licensed and clinically appropriate to work with you (including confirming that you would be in Hawaiʻi or Virginia at the time of a session, and that you are an adult).
- Point you to TherapyNotes to request an appointment if we agree to a consultation or intake.
- Operate, secure, and fix mendandkindleco.com.
- Understand, in aggregate, which public pages are used.
- Keep records we are required to keep, and establish, exercise, or defend legal claims.
- Contact you about a change to this Policy or to the site when that contact is reasonably necessary.
We do not use public-site information to train public generative-AI models. We do not sell it. We do not use it for third-party advertising.
Submitting a form or booking a consultation does not, by itself, create a counselor-client relationship. That relationship begins only after intake and signed clinical agreements, as described in the Terms of Use.
Cookies and similar technologies
A cookie is a small file stored on your device. The public site may use:
- Essential cookies — required for WordPress to serve pages, protect the form against spam, or keep a short session. These are not used to advertise.
- Analytics cookies or scripts — used only if an analytics tool is active, as described in Section 3.C.
We do not place advertising, social-media, or remarketing pixels on mendandkindleco.com. We do not run a “share this page” widget that phones home to a social network. Most browsers let you refuse non-essential cookies or delete cookies later. Do-Not-Track signals are discussed in Section 13.
How we share information
We share website and inquiry information only as described here.
A. Service providers that help us run the public site
We use other companies to host mendandkindleco.com, process the contact form, deliver email, provide analytics, and keep the site available. Those companies may see the information needed to do that job. They are not permitted to use it for their own marketing. As of this Policy, the categories are:
- WordPress and the company that hosts the WordPress installation. They store page content, form submissions, and standard server logs.
- The contact-form plugin or built-in form tool on WordPress. If a spam filter (for example, Akismet) reviews a submission, that vendor may see the fields you send.
- Email and voice — the providers that carry marie@mendandkindleco.com and the published phone number.
- Analytics — Google or another analytics provider, if enabled.
A website host that only processes a no-PHI contact form is not, by that fact alone, a HIPAA business associate. If a submission includes health information despite our request that you not send it, we will treat the content as sensitive and move it into a channel covered by a Business Associate Agreement when that is the appropriate next step.
B. TherapyNotes and TherapyPortal
appointments. When you leave mendandkindleco.com and open TherapyNotes or TherapyPortal:
- You are on a different website, operated by TherapyNotes, LLC (or its affiliates), not by MAD CARE LLC.
- That company collects information under its own notices. Read the TherapyPortal privacy policy before you submit anything there: https://www.therapyportal.com/portal/legal/privacypolicy/.
- Once you are a client, information in TherapyNotes is PHI. TherapyNotes is our business associate for that work and may use and disclose that PHI only as permitted by HIPAA, our Business Associate Agreement, and the Notice of Privacy Practices.
- We are not responsible for TherapyNotes’ independent pages, cookies, or security choices. We are responsible for how we use the clinical record inside that system.
C. Legal, safety, and professional duties
We may disclose information if we believe in good faith that disclosure is required or permitted by law, including:
D. Business transfer
If MAD CARE LLC is merged, sold, or otherwise transferred, inquiry records may move with the practice to the successor, who will be bound to use them in a manner consistent with this Policy and applicable law. Clinical records would transfer only as HIPAA allows.
E. What we do not do
- We do not sell personal information for money.
- We do not share personal information for cross-context behavioral advertising.
- We do not rent or trade inquiry lists.
- We do not permit service providers to use public-site information to advertise their own products to you. Because we do not sell or share personal information as those words are used in the major U.S. state privacy statutes, we do not publish a “Do Not Sell or Share My Personal Information” link. If that practice changes, we will update this Policy first.
Retention
We keep information only as long as we have a working need for it or a legal reason to keep it.
- Contact-form and inquiry records: kept long enough to respond. If you do not become a client, we delete or de-identify the inquiry within twelve (12) months, unless a legal hold, complaint, or safety concern requires a longer period.
- If you become a client, relevant inquiry information may be copied into the clinical record. From that point the Notice of Privacy Practices and record-retention rules for Hawaiʻi and Virginia control.
- Website logs and analytics: kept for the period the host or analytics tool is configured to keep them, typically in aggregate or short-cycle form.
- Email needed to show that we answered you: kept as long as needed for professional and legal accountability, then deleted in the ordinary course. When we delete information from systems we control, residual copies may remain for a time in encrypted backups until those backups cycle off.
Security
We use administrative, technical, and physical safeguards that are reasonable for a solo telehealth practice of this size. On the public site that includes transport encryption (HTTPS) and limited access to the mailbox that receives form notices. Clinical information lives in TherapyNotes under that vendor’s security program and our Business Associate Agreement. No method of transmission over the Internet, and no method of electronic storage, is completely secure. We cannot guarantee absolute security of the public form or of ordinary email. That is one reason this Policy asks you not to send clinical detail through those channels. If we discover a breach of personal information that Hawaiʻi Revised Statutes chapter 487N, other applicable breach-notification law, or HIPAA requires us to report, we will notify affected people and regulators as those laws require.
Children
MAD Care does not provide counseling to anyone under 18. The public site is not directed at children. We do not knowingly collect personal information from children under 13, and we do not knowingly collect personal information from anyone under 18 through mendandkindleco.com. If you believe a minor submitted information on the contact form, email marie@mendandkindleco.com. We will delete the submission from systems we control as soon as reasonably possible.
Your choices and rights
You may, at any time:
- Ask us what website or inquiry information we hold about you.
- Ask us to correct information that is wrong.
- Ask us to delete an inquiry if you have not become a client, unless we must keep it for law, safety, or a dispute.
- Ask us to stop using your address for non-clinical email. We do not run a marketing newsletter as of this Policy. If that changes, every such email will include a way to opt out.
- Refuse non-essential cookies in your browser.
Send requests to marie@mendandkindleco.com with the subject line “Privacy request.” We may need to verify that we are talking to the right person. We will answer within a reasonable time, and in any event within the period a law that actually applies to us requires. Rights in a clinical record — copies, amendments, restrictions, confidential communications, an accounting of certain disclosures — are described in the Notice of Privacy Practices, not in this Policy.
State-specific notes
A. Virginia
We offer telehealth to people located in Virginia, so Virginia professional-licensing and mental-health confidentiality rules apply to clinical work. The Virginia Consumer Data Protection Act (“VCDPA”), Va. Code § 59.1-575 et seq., applies only to businesses that meet numeric thresholds (generally, personal data of 100,000 or more Virginia consumers in a year, or 25,000 or more Virginia consumers plus more than half of revenue from the sale of personal data). MAD Care does not meet those thresholds and does not sell personal data. Covered entities subject to HIPAA are also excluded from the VCDPA at the entity level to the extent the statute provides. Even so, if you are in Virginia and you ask us for access, correction, or deletion of website or inquiry information, we will handle the request in good faith as described in Section 10. We do not sell precise geolocation data.
B. Hawaiʻi
We offer telehealth to people located in Hawaiʻi, so Hawaiʻi professional-licensing and mental-health confidentiality rules apply to clinical work. Hawaiʻi has not enacted a comprehensive consumer data-protection act of the VCDPA type as of the effective date of this Policy. Hawaiʻi does have a security-breach notification law (HRS chapter 487N) and prohibits unfair or deceptive practices in trade. We will follow those rules. If Hawaiʻi later enacts a general consumer-privacy statute that applies to this practice, we will update this Policy.
C. Arizona and other states
MAD CARE LLC is an Arizona entity and the website is operated from Arizona. Arizona does not, as of this date, impose a VCDPA-style consumer-privacy statute on a practice of this size. Visitors from other states may have rights under their own laws. Where a law applies to us and is stricter than this Policy on a given point, we follow the stricter rule.
Third-party links
The site may link to 988, licensing boards, TherapyNotes, TherapyPortal, and similar resources. Those destinations are not under our control. Their privacy practices are their own. A link is not an endorsement of every page on that site.
Do Not Track
Some browsers send a “Do Not Track” signal. There is no common legal standard for how a small website must respond. mendandkindleco.com does not change its collection practices solely because a Do Not Track signal is present. You can still limit cookies in your browser, and you can ask us to delete an inquiry under Section 10.
Automated decisions
We do not use website or inquiry information to make automated decisions that produce legal or similarly significant effects about you. Fit decisions (whether we can work together) are made by the clinician, not by a scoring model on the public site.
Changes to this Policy
We may update this Policy. The “Last updated” date at the top will change. The current version will be posted at how we share inquiry data — we will post the revised Policy before the new practice begins and, where we have your email from an open inquiry, we may also send a short notice. Continued use of the site after the updated Policy is posted means you acknowledge the revised Policy.
MAD Care Website Privacy Policy
How to contact us
Questions about this Policy, and requests under Section 10, go to the Privacy Officer: Marie Delabarrera, LMHC · Privacy Officer MAD CARE LLC Email: marie@mendandkindleco.com Telephone: (928) 471-5998 (do not text) Website: https://mendandkindleco.com Routine messages are answered within one business day, Monday through Friday, 9:00 a.m. to 4:00 p.m. We do not provide therapy by email or voicemail. Keep voicemail to your name, a number where we can reach you, and a general reason for the call.
Complaints
Start with Marie Delabarrera at marie@mendandkindleco.com. You will not be retaliated against for a good-faith privacy complaint. You may also contact:
- U.S. Department of Health and Human Services, Office for Civil Rights — https://www.hhs.gov/ocr — 1-800-368-1019, for HIPAA matters involving PHI.
- Hawaiʻi Department of Commerce and Consumer Affairs, Professional and Vocational Licensing, for
Hawaiʻi licensing questions.
- Virginia Board of Counseling, for Virginia licensing questions.
- The attorney general of the state where you live, for consumer-protection questions that fall outside clinical privacy.
If you are in crisis or thinking about suicide, call or text 988. If you are in immediate danger, call 911. This Policy is the website privacy notice of MAD CARE LLC. It does not create rights beyond those already provided by law, and it does not modify the Notice of Privacy Practices or any signed clinical agreement.