Privacy Policy

Important: This Privacy Policy applies to the Green-Oakes Psychological Services & Consulting website. It does not replace the Notice of Privacy Practices (NPP) you receive at intake, which governs how Protected Health Information (PHI) is handled under HIPAA inside the clinical relationship.

1. Who I Am

Green-Oakes Psychological Services & Consulting is a solo psychology practice operated by Gabrielle Green-Oakes, Psy.D., licensed in Virginia (License #: 0810009229; NPI: 1073175030) and authorized to deliver telehealth across participating PSYPACT states. The practice mailing address is Alexandria, Virginia (mailing address available upon request).

2. Information This Website Collects

This website is an informational site. It does not have a contact form, account system, newsletter, or any other feature that collects information you type in. Nothing you enter is stored by or transmitted through this website.

• Reaching the practice: The Contact page provides the practice email address as a clickable link. Using it opens your own email program, and your message goes directly to the practice mailbox — it does not pass through this website or its hosting providers.
• Automatically collected: Standard server data such as browser type, device type, referring page, and pages visited, recorded by the hosting provider for security and performance.
• Cookies: Only strictly necessary cookies. No analytics or advertising cookies are in use. See the Cookie Policy for details.

Please do not include sensitive clinical details, diagnoses, or other Protected Health Information in ordinary email. Email is not a secure clinical channel; the secure client portal is provided after intake for clinical communication.

3. How I Use Your Information

• To respond when you contact the practice by email or phone and to schedule consultations.
• To provide information about services you have asked about.
• To maintain the security and performance of the website.
• To comply with legal, regulatory, and professional obligations.

I do not sell your information. I do not use your information for third-party advertising.

4. PHI and HIPAA

Protected Health Information collected during the clinical relationship (intake forms, session notes, billing records) is handled under HIPAA through my secure electronic health record system, SimplePractice, under a Business Associate Agreement. Telehealth sessions are conducted on a secure telehealth platform, which is also covered by a Business Associate Agreement. The full Notice of Privacy Practices is provided at intake and is available on this site.

5. How Information Is Shared

I share information only as needed to operate the practice or as required by law:

• Service providers who help run this site or the practice (hosting, email, and the electronic health record system), under appropriate confidentiality and, where applicable, BAA terms. Because this website collects no visitor-submitted information, no message contents ever reach these providers through the site.
• When required by law, court order, or to prevent imminent harm, consistent with my legal and ethical obligations as a psychologist.
• With your written authorization for any other purpose.

6. Data Retention

This website does not store any visitor-submitted information. Standard hosting server logs (browser type, pages visited, timestamps) are retained only as long as the hosting provider keeps them for security and performance purposes. Clinical records, if you become a client, are retained per Virginia record retention requirements and professional standards, as described in the Notice of Privacy Practices.

7. Your Choices and Rights

• This website stores no visitor-submitted information, so there is no website-held data to review, correct, or delete. Questions about emails you have sent the practice can be directed to the practice email below.
• You may opt out of any non-essential communications at any time.
• Rights regarding clinical records are described in the Notice of Privacy Practices provided at intake.

8. Security

I use reasonable administrative, technical, and physical safeguards to protect information collected through this site. No internet transmission is ever fully secure, so please use clinical channels (the EHR portal or telehealth platform) for anything sensitive.

9. Children's Privacy

This website is not directed to children under 13. Adolescent clients are seen only with the involvement and consent of a parent or legal guardian through the formal intake process, not through the website.

10. Third-Party Links

This site may link to outside resources for educational purposes. I am not responsible for the privacy practices of those websites and encourage you to review their policies.

11. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be highlighted on this page.

12. Contact

Questions about this policy or how your information is handled can be directed to connect@greenoakespsc.com or by mail to Alexandria, Virginia (mailing address available upon request).