Privacy policy.

01 /What this policy covers

This policy describes how information is handled on citymindful.com, the website of City Mindful, the private practice of Lyssett Martínez, Psy.D. PLLC.

It does not govern clinical care. If you become a patient, your health information is protected under HIPAA and under New York and Pennsylvania law, and is covered by the practice’s Notice of Privacy Practices, which you receive and review at intake. That notice, not this page, controls your clinical record.

02 /What you choose to send

Nothing here asks you to identify yourself. You can read every page without giving your name. Information reaches the practice only when you deliberately send it — through the contact form, by email, or by phone. When you do, it is usually some of the following.

• —Your name
• —Your email address, and your phone number if you provide one
• —The subject you select from the inquiry list
• —Whatever you choose to write in your message

03 /How the contact form works

The form on the Contact page does not submit to a server. There is no database behind it, and no third-party form service is involved.

When you press send, the form assembles what you typed into a draft message and opens it in your own email program. Nothing leaves your device until you send that draft yourself. When you do, it travels from your email provider to the practice’s inbox exactly as any other email would.

One practical consequence is worth stating plainly: if you fill in the form and then close the draft without sending it, the practice never receives it, and no copy of it exists anywhere.

04 /What the website collects on its own

Almost nothing, and that is deliberate. The site sets no cookies for any purpose, runs no analytics, and carries no advertising or tracking pixels. Nothing is written to your browser’s local storage — the English/Español toggle holds your choice in memory for the visit only, and forgets it when the page reloads. Typefaces are served from this domain rather than fetched from an outside company, so simply reading a page makes no request to any third party.

The company that hosts the site keeps standard server logs: IP address, browser type, pages requested, and the time of each request. Every web host keeps these, for security, uptime, and diagnosing errors. They are ordinary infrastructure records — not used to build a profile of you, not used to identify you, and never combined with anything you send.

05 /How your information is used

Anything you send is used to respond to you and, if the conversation goes further, to arrange and provide care.

• —To answer your question and, if you would like, to arrange a free consultation
• —To schedule appointments and, if you become a patient, to provide and coordinate your care
• —To meet the legal, ethical, and professional obligations that govern the practice of psychology

06 /What is never done with it

Some of the most important commitments in a privacy policy are the ones about what does not happen.

• —It is never sold, rented, or traded
• —It is never used for advertising, and never shared with advertisers or data brokers
• —You are not profiled, scored, retargeted, or tracked across other websites
• —Writing to the practice does not add you to a mailing list. There is no newsletter and no marketing email — if you write, you get a reply

07 /Email, text, and confidentiality

Email and text are convenient, and they are not secure. A message can be intercepted in transit, forwarded onward, or read by someone else on a shared, borrowed, or lost device.

Please send only what is needed to make first contact. A first message does not need your clinical history, your diagnoses, your medication list, or the details of what brings you in — all of that is far better discussed by phone or in session. Once care begins, secure channels are arranged for anything sensitive.

This inbox is not monitored around the clock, and it is not a route to urgent help. If you are in crisis, or if someone is in danger, call or text 988, the Suicide & Crisis Lifeline, call 911, or go to your nearest emergency room.

08 /Who else may handle your information

The practice is small, and access is limited to Dr. Martínez.

A few service providers make the practice run, and information passes through them in the ordinary course: the company that hosts this website, the provider that carries the practice’s email, and — once care begins — the scheduling, telehealth, and billing systems used with patients. Each is bound by its own obligations, and any provider that handles protected health information does so under a HIPAA business associate agreement.

Beyond that, your information is disclosed only with your written authorization, or in the narrow circumstances where law and professional ethics require it — a valid court order, for example, or a duty to act where there is a serious risk of harm. The Notice of Privacy Practices describes those situations in full.

09 /How long information is kept

Nothing is kept longer than it needs to be.

• —An inquiry that does not become care is kept only as long as it takes to respond, and is then deleted in the ordinary course
• —Clinical records are retained for the periods required by New York and Pennsylvania law and by professional standards, and are governed by the Notice of Privacy Practices rather than by this page
• —Server logs are held on the host’s ordinary rotating schedule and expire on their own

10 /Your choices and your rights

At any time, and without having to give a reason, you may:

• —Ask what information the practice holds about you
• —Ask that anything inaccurate be corrected
• —Ask that an inquiry email be deleted
• —Withdraw your permission to be contacted

If you are a patient, you also hold the rights HIPAA provides — access to your record, amendment, an accounting of disclosures, and the right to request restrictions — and the Notice of Privacy Practices explains how to exercise each one. Depending on where you live, further rights may apply. Write and ask; they will be honored.

11 /Young people

This website is not directed at children under 13, and it does not knowingly collect information from them.

Adolescents are seen in the practice, but the arrangements are made by a parent or guardian. When a young person begins care, what stays between us and what is shared with a parent is discussed openly, with the young person present, before the work begins.

12 /Links to other organizations

The Resources page links to outside organizations — crisis lines, professional bodies, and community groups. They are independent of this practice, each with its own privacy policy and its own practices.

Once you follow a link you are on their site, under their terms. The links are offered because those organizations are useful, not as an endorsement of how they handle data.

13 /Changes to this policy

If this policy changes, the revised version is posted on this page with a new effective date, and the date above always reflects the current version. If a change materially affects patients, it will also be communicated directly rather than left to be discovered here.