Privacy Policy

This Privacy Policy describes how Sankofa Harmony Therapy, LLC (“Practice,” “we,” “us,” or “our”) collects, uses, and protects both:

• Non-clinical personal information collected through this website; and
  
• Protected Health Information (PHI) governed by federal and state law.

By using the Sankofa Harmony Therapy, LLC website (https://sankofatherapy.com), you consent to the data practices described in this Privacy Policy.

1. Who We Are & Scope of This Policy

This Statement of Privacy applies to:

• Website: https://sankofatherapy.com
• Entity: Sankofa Harmony Therapy, LLC

It governs data collection and usage for visitors, prospective clients, and clients using this website, including any related online services, forms, or portals that link to this policy.

2. Commitment to Confidentiality & Governing Laws

2.1 HIPAA and CMIA Status

Sankofa Harmony Therapy, LLC is a Covered Entity under the Health Insurance Portability and Accountability Act (HIPAA). We are also subject to:

• The California Confidentiality of Medical Information Act (CMIA)
  
• Georgia state laws governing mental health confidentiality
  

Where state and federal laws conflict, we follow the law that provides the highest level of privacy protection for our clients.

2.2 Notice of Privacy Practices (NPP)

This Privacy Policy addresses how your information is handled via this website.

A separate, detailed document—our Notice of Privacy Practices (NPP)—explains your legal rights and our obligations regarding your Protected Health Information (PHI) once you become a client.

A copy of the NPP is available here:
[Link to separate NPP document or PDF].

Privacy Policy

3. Information We Collect

We may collect both non-clinical website data and clinical data (PHI).

3.1 Non-Clinical Website Data

This information is collected from anyone who visits the website and is not related to clinical treatment.

3.1.1 Personal Information You Provide to Us

To better provide products and services offered on our Site, Sankofa Harmony Therapy, LLC may collect personally identifiable information, such as your:

• First and Last Name
• E-mail Address
• Phone Number
• Survey responses
  

We do not collect personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information when you choose to use specific products or services available on the Site. These may include:

• Registering for an account on our Site
• Entering a sweepstakes or contest sponsored by us or one of our partners
• Signing up for special offers from selected third parties
  
• Sending us an email message
  
• Submitting your credit card or other payment information when ordering or purchasing products and services

We use this information for, but not limited to:

• Communicating with you about services and/or products you have requested
  
• Handling billing and payment
  
• Managing your account or participation in promotions

We also may gather additional personal or non-personal information in the future.

Public Areas Warning:

If you directly disclose personally identifiable information or personally sensitive data through Sankofa Harmony Therapy, LLC’s public message boards, this information may be collected and used by others.

3.1.2 Demographic & Anonymous Information

Sankofa Harmony Therapy, LLC may also collect anonymous demographic information, which is not unique to you, such as:

• Age
• Gender
• Household Income
• Geographic Location

3.1.3 Usage Data & Tracking Technologies

We collect certain usage and device information automatically when you use our Site.

Usage Data may include:

• IP address
  
• Geographic location (city/state)
  
• Browser type
  
• Pages viewed
  
• Time spent on site
  
• Referring website
• Monitor website traffic
• Analyze site performance
• Improve user experience

Tracking User Behavior

We may keep track of the websites and pages our users visit within our services in order to determine what Sankofa Harmony Therapy, LLC services are the most popular. This data is used to deliver customized content and advertising to customers whose behavior indicates interest in certain subject areas.

Automatically Collected Information

Information about your computer hardware and software may also be automatically collected. This can include:

• IP address
• Browser type
• Domain names
• Access times
• Referring website addresses

This information is used for the operation and maintenance of the service and to provide general statistics about website use.

3.1.4 Cookies and Similar Technologies

The Sankofa Harmony Therapy, LLC website may use cookies and similar technologies (such as those placed by third-party services like Google Analytics) to help personalize your online experience and analyze user behavior.

A cookie is a text file placed on your hard disk by a web page server. Cookies:

• Cannot be used to run programs or deliver viruses
• Are uniquely assigned to you
• Can only be read by a web server in the domain that issued the cookie

Primary purposes of cookies include:

• Remembering your preferences and prior settings
• Saving time by recalling your information on subsequent visits
• Simplifying processes such as billing and shipping address entry

Your Choices About Cookies

Most web browsers automatically accept cookies, but you can modify browser settings to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Site.

3.1.5 Links to Other Websites

This website contains links to other sites. We are not responsible for the content or privacy practices of such other sites.

We encourage users to:

• Be aware when they leave our site; and
• Read the privacy statements of any other site that collects personally identifiable information.

3.1.6 Children Under Thirteen

Sankofa Harmony Therapy, LLC does not knowingly collect personally identifiable information from children under the age of thirteen.

If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website.

3.2 Clinical Data (Protected Health Information – PHI)

If you use a secure, encrypted client portal or online scheduling system linked from this site, we may collect clinical information, including:

• Name
• Contact information
• Date of birth
• Medical history
• Clinical notes
• Insurance information

This data is collected and stored using HIPAA-compliant Business Associates (BAs) under a signed Business Associate Agreement (BAA) and is subject to the security standards of HIPAA and CMIA.

3.3 Important PHI Warning for Website Forms

DO NOT use the general contact forms on this website to submit clinical, medical, or Protected Health Information (PHI)—such as symptoms, diagnoses, or detailed reasons for seeking therapy.

These general forms:

• Are not encrypted to HIPAA/CMIA standards
• Cannot guarantee the confidentiality of any PHI sent through non-secure channels

4. How We Use Your Information

4.1 Use of Non-Clinical Personal Information

Sankofa Harmony Therapy, LLC collects and uses your personal information to:

• Operate its website(s)
• Deliver the services you have requested
• Communicate with you about services/products you have requested
• Inform you of other products or services available from Sankofa Harmony Therapy, LLC and its affiliates

We also use non-clinical website data to operate and secure our website.

We do not sell or share (as defined by the California Consumer Privacy Act) your non-clinical personal information to third parties for monetary consideration or cross-context behavioral advertising.

4.2 Use and Disclosure of Protected Health Information (PHI)

Our use and disclosure of your PHI is strictly governed by HIPAA, CMIA, and Georgia state law.

4.2.1 Treatment

We may disclose PHI to other healthcare providers for consultation or continuity of care.

• California (CMIA): Disclosures often require specific written patient authorization which must be in at least 14-point type and clearly separated from other language.

4.2.2 Payment

We may disclose PHI to obtain payment for services (e.g., billing your insurance).

• California (CMIA): If you pay out-of-pocket in full, you can request that we not disclose PHI to your health insurer (unless required by law).

4.2.3 Mandatory Legal Exceptions

We may disclose PHI without your authorization as required by law, such as:

• Court orders or subpoenas
• Health oversight activities

Georgia Law (Privilege): Your communications are protected by a strong statutory privilege (O.C.G.A. § 24-5-501). PHI is only released in response to a subpoena or court order if the court determines the information is not legally privileged.

4.2.4 Duty to Protect / Warn

We may disclose PHI if we believe you pose an imminent risk of serious harm to yourself or others (danger to self/others).

• Georgia Law: The duty to warn/protect is a statutory exception to the Georgia privilege.
  Privacy Policy

4.2.5 Abuse & Neglect Reporting

We may disclose PHI to authorities if we suspect abuse or neglect of a:

• Child
• Elderly person
• Dependent adult

Georgia & California Law: Mandatory reporting requirements supersede confidentiality.

5. Sharing Your Information with Third Parties

5.1 Non-Clinical Personal Information

Sankofa Harmony Therapy, LLC does not sell, rent, or lease its customer lists to third parties.

From time to time, we may contact you on behalf of external business partners about offerings that may be of interest to you. In those cases:

• Your unique personally identifiable information (email, name, address, telephone number) is not transferred to the third party.

5.2 Service Providers and Trusted Partners

Sankofa Harmony Therapy, LLC may share data with trusted partners to help:

• Perform statistical analysis
• Send you email or postal mail
• Provide customer support
• Arrange for deliveries

All such third parties are:

• Prohibited from using your personal information except to provide these services to Sankofa Harmony Therapy, LLC
• Required to maintain the confidentiality of your information

We may also store your data on servers provided by third-party hosting vendors with whom we have contracted.

For PHI, any third-party vendors handling PHI are Business Associates, and we require a Business Associate Agreement (BAA) with them.

5.3 Legal Requirements & Protection of Rights

Sankofa Harmony Therapy, LLC may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to:

• Conform to the edicts of the law or comply with legal process served on Sankofa Harmony Therapy, LLC or the site
• Protect and defend the rights or property of Sankofa Harmony Therapy, LLC
• Act under exigent circumstances to protect the personal safety of users of Sankofa Harmony Therapy, LLC, or the public

These legal requirements operate alongside the PHI-specific legal exceptions described in Section 4.2.

6. Your Rights

6.1 Your Rights Regarding PHI (HIPAA + State Enhancements)

You have the following rights concerning your PHI. In some cases, California and Georgia laws provide additional protections or faster timelines.

Privacy Policy

Right to Access/Copy PHI

• HIPAA: Access within 30 days of request
• California (CMIA):
  • Right to inspect your records within 5 business days
  • Right to receive copies within 15 business days

Right to Request Restrictions

• HIPAA: You may request limits on disclosures for Treatment, Payment, and Healthcare Operations (TPO). We are not required to agree, except for services paid in full out-of-pocket.
• Georgia Law: Any agreement to restrict disclosure is binding.

Right to Amend PHI

• You have the right to request an amendment to your PHI.
• We must respond within 60 days.
• This right is consistent across HIPAA, CMIA, and Georgia law.

Right to Revoke Authorization

• You may revoke any signed authorization for disclosure at any time (with limited exceptions).
• California (CMIA): Revocation must be in writing.

6.2 California Consumer Rights (CCPA/CPRA) – Non-Clinical Data

If you are a California resident, you have the following rights concerning your non-clinical personal information collected on this website:

• Right to Know:
  You may request the categories and specific pieces of personal information we have collected about you.
• Right to Delete:
  You may request deletion of your personal information, subject to legal exceptions.
• Right to Opt-Out:
  As stated, we do not sell or share your personal information. Therefore, a separate opt-out link is not required.

6.3 Email Communications & Opt-Out

From time to time, Sankofa Harmony Therapy, LLC may contact you via email to provide:

• Announcements
• Promotional offers
• Alerts and confirmations
• Surveys
• Other general communication

To improve our Services, we may receive a notification when you:

• Open an email from us; or
• Click on a link in the email

If you would like to stop receiving marketing or promotional communications via email from Sankofa Harmony Therapy, LLC, you may opt out by clicking the UNSUBSCRIBE button in the email.

7. Security, Data Retention, and Breach Notification

7.1 Security of Your Personal Information

Sankofa Harmony Therapy, LLC secures your personal information from unauthorized access, use, or disclosure. We use industry-standard security measures, which may include:

• SSL Protocol
• CSF Firewall
• Intrusion Detection
• Malware Scanning
• AWS Access Policy
• Password protection
• Secure servers

When personal information (such as a credit card number) is transmitted to other websites, it is protected through encryption, such as Secure Sockets Layer (SSL) protocol.

We strive to take appropriate security measures to protect against unauthorized access or alteration of your personal information. However:

• No data transmission over the Internet or any wireless network can be guaranteed to be 100% secure.
• You acknowledge that:
  • There are security and privacy limitations inherent to the Internet which are beyond our control; and
  • The security, integrity, and privacy of any and all information and data exchanged between you and us through this Site cannot be guaranteed.

For PHI, we require third-party vendors handling PHI (Business Associates) to have a Business Associate Agreement (BAA) and comply with HIPAA and CMIA security requirements.

7.2 Data Retention

We retain client records (PHI) for the period required by law, which is often seven years under HIPAA, but may be longer under state law—such as ten years in Georgia (O.C.G.A. § 31-33).

7.3 Breach Notification

In the event of a breach of unsecured PHI, we will follow:

• The federal HIPAA Breach Notification Rule; and
• Applicable Georgia and California data breach notification laws

We will promptly notify:

• All affected individuals; and
• Relevant government agencies, as required.
  Privacy Policy

8. Changes to This Privacy Policy

Sankofa Harmony Therapy, LLC reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by:

• Sending a notice to the primary email address specified in your account
• Placing a prominent notice on our site
• Updating the privacy information on this page

Your continued use of the Site and/or Services available through this Site after such modifications will constitute your:

• Acknowledgment of the modified Privacy Policy; and
• Agreement to abide and be bound by that Policy.

Effective as of June 19, 2026.

9. Contact Information & Complaints

9.1 Privacy Contact

If you have any questions about this Privacy Policy or wish to exercise any of your rights (including PHI access/amendment or CCPA/CPRA rights), please contact:

Privacy Officer/Contact:
Denise Cagle

Mailing Address:
Sankofa Harmony Therapy, LLC
659 Auburn Avenue N.E.
Atlanta, Georgia 30312

Phone:
(678) 271-9392

Email:
contact@sankofatherapy.com

Sankofa Harmony Therapy, LLC welcomes your questions or comments regarding this Statement of Privacy.

9.2 Complaints

You have the right to file a complaint:

• Directly with us;
• With the Secretary of the U.S. Department of Health and Human Services (HHS); or
• With the applicable state licensing board

if you believe your privacy rights have been violated.

If you believe that Sankofa Harmony Therapy, LLC has not adhered to this Statement, please contact Sankofa Harmony Therapy, LLC using the contact details above.

Effective Date: June 19, 2026
Last Updated:  June 19, 2026