Privacy Policy

Last updated March 2026

Your privacy matters. As a therapist, protecting the information you share with me is not just a legal obligation; it is a fundamental part of the trust that makes this work possible. This Privacy Policy explains what information is collected through this website, how it is used, and what rights you have. Please read it at whatever pace feels right for you.

This policy applies to erinriggiocounseling.com and any communications you initiate through it. It does not govern the clinical records or treatment information exchanged once a formal therapist-client relationship has been established — those are covered separately by your HIPAA Notice of Privacy Practices, which you will receive at intake.

If your inquiry through this site involves any information related to your health, mental health, or reasons for seeking therapy, that information may also be subject to the Washington My Health My Data Act (MHMDA). A separate Consumer Health Data Privacy Policy is available on the homepage and governs the handling of that category of data.

1. Who Is Responsible for This Website

This website is owned and operated by Erin Riggio, LMHC, a licensed mental health counselor practicing in Washington State (License #MHC.LH.70037208).

Mailing Address:  223 N Yakima Ave, Tacoma, WA

Phone:  253.525.9730

Email:  erin@erinriggiocounseling.com

2. Information This Website May Collect

Information You Provide Directly

When you fill out a contact form, request a consultation, or send an email, you may share:

  • Your name and email address

  • A phone number, if you include one

  • Any personal details you choose to include in your message

Please know that contact forms and email are not fully secure or HIPAA-compliant channels. I encourage you to share only what feels comfortable at this stage — the more sensitive details of your story are best saved for our actual sessions.

Important: If you choose to share information related to your health or reasons for seeking mental health care through this site's contact form, you will be asked to provide your consent before that information is collected or used. Health-related information is collected only to the extent necessary to respond to your specific inquiry or provide a service you have requested, and only with your consent.

Information Collected Automatically

Like most websites, this site (hosted on Squarespace) may automatically collect certain technical data when you visit, including:

  • Your IP address and general geographic location

  • Browser type and device information

  • Pages visited and time spent on the site

  • Referring website (how you found your way here)

This data is collected in aggregate and is used only to understand how the site is being used so it can be improved. It is not used to identify you personally.

3. How Your Information Is Used

Information you share through this website is used only to:

  • Respond to your inquiry or consultation request

  • Schedule and coordinate appointments

  • Communicate with you about services, if you have requested this

  • Improve the usability and content of this website

Your information is never sold, rented, or used for advertising purposes. This website does not run ads, and Erin Riggio Counseling does not partner with advertisers.

4. Cookies and Tracking Technologies

This website is built on Squarespace, which may use cookies (small data files stored on your device) to support basic site functionality and collect anonymous usage data. These cookies do not contain personally identifying information.

You can manage or disable cookies through your browser settings at any time. Disabling cookies may affect some aspects of how the site displays or functions, but will not prevent you from accessing the site's content.

Squarespace acts as a data processor on behalf of this website under a Data Processing Agreement that governs how your data is handled and protected. Squarespace's own privacy practices are also governed by their Privacy Policy, available at squarespace.com.

5. Telehealth and Third-Party Platforms

If we work together via telehealth, sessions are conducted through a HIPAA-compliant platform. That platform's own privacy and security practices govern the handling of data within those sessions. You will be informed of which platform is used prior to your first appointment and given the opportunity to ask questions.

This website itself is not a telehealth platform and does not transmit or store session content.

6. How Your Information Is Protected

I take reasonable precautions to protect the information shared through this website. These include:

  • Using Squarespace's secure, encrypted hosting infrastructure under a formal Data Processing Agreement

  • Limiting access to contact information to Erin Riggio only

  • Retaining website contact data only for as long as necessary to respond to your inquiry, and no longer than 24 months, after which it is deleted

No method of transmission over the internet is completely secure. While every effort is made to protect your information, I cannot guarantee absolute security. For highly sensitive matters, I encourage you to reach out by phone rather than email or web form.

7. Sharing of Information

Your information is not shared with third parties except in the following limited circumstances:

  • Data processors: Squarespace (website hosting) processes limited technical data as part of site operation under a binding Data Processing Agreement that restricts how that data may be used. Squarespace may be contacted at: Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014 | privacy@squarespace.com.

  • Scheduling tools: If you use an online scheduling tool linked from this site, that platform processes your appointment data under its own privacy policy and, where applicable, a Business Associate Agreement. You will be informed which tool is in use.

  • Legal obligations: If required by law, court order, or to respond to a valid legal process, disclosure may be necessary.

  • Safety: If there is a credible risk of imminent harm to you or another person, I may be required by Washington State law to take certain actions, which may involve disclosure to appropriate parties.

Clinical records created once a formal therapeutic relationship begins are governed by a separate HIPAA Notice of Privacy Practices — not this website privacy policy.

8. Your Rights Under Washington State Law

Washington State residents have the following rights regarding personal information collected through this website:

  • Right to access: You may request a copy of the personal information collected about you, including a list of any third parties or affiliates who have received your information and their contact details.

  • Right to deletion: You may request that your personal information be deleted.

  • Right to withdraw consent: Where collection is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

  • Right to opt out: You have the right to opt out of the sale or sharing of your personal information. Note: this website does not sell or share personal data for commercial purposes.

  • Right to non-discrimination: You will not be penalized or treated differently for exercising any of these rights.

To exercise any of these rights, please contact me at erin@erinriggiocounseling.com. I will respond to verifiable requests within 30 days. If I am unable to fulfill a request, I will explain why in writing.

Appeals Process

If I decline to take action on your request, you have the right to appeal that decision. To submit an appeal, please email erin@erinriggiocounseling.com with the subject line "Privacy Rights Appeal" and a description of your original request and the response you received. I will respond in writing within 45 days of receiving your appeal, as required by Washington State law.

If you are unsatisfied with the outcome of your appeal, you may contact the Washington State Attorney General's Office at 1-800-551-4636 or ag.wa.gov.

9. Children's Privacy

This website and its services are intended for adults aged 18 and older. I do not knowingly collect personal information from individuals under the age of 18. If you are under 18, please do not submit any personal information through this site. If you believe someone under 18 has submitted information through this site, please contact me at erin@erinriggiocounseling.com so it can be promptly deleted.

10. Data Retention

Website contact data (such as information submitted through the contact form) is retained only as long as necessary to respond to your inquiry or fulfill the purpose for which it was collected, and in no case longer than 24 months. After that period, it is securely deleted.

Clinical records are subject to separate retention requirements under HIPAA and Washington's Uniform Health Care Information Act (RCW 70.02), and are governed by your HIPAA Notice of Privacy Practices.

11. Links to Other Websites

This site may occasionally link to external resources — articles, directories, or support organizations — that I believe may be helpful to you. Once you leave this website, this privacy policy no longer applies. I encourage you to review the privacy policies of any external sites you visit.

12. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in law, technology, or my practices. When updates are made, the "Last Updated" date at the top of this page will change.

If any changes are material, I will make reasonable efforts to provide direct notice — for example, by emailing individuals who have previously contacted me through this site, or by posting a prominent notice on the homepage. Continued use of the site following notice of material changes indicates your acknowledgment of the updated policy.

13. A Note on HIPAA

As a licensed mental health counselor, I am bound by the Health Insurance Portability and Accountability Act (HIPAA) with respect to your protected health information (PHI). However, HIPAA applies specifically to clinical information exchanged within a treatment relationship — not to general website visitor data.

Once we begin working together, you will receive a full HIPAA Notice of Privacy Practices that explains in detail how your clinical information is handled, stored, and protected. Washington's Uniform Health Care Information Act (RCW 70.02) applies to clinical health records and is also addressed in that notice.

Questions? I'm Here.

Privacy policies can feel dense, and I want you to actually understand yours. If anything here is unclear or you have questions about how your information is handled, please don't hesitate to reach out. You deserve to feel safe — even before our first session.

📍  223 N Yakima Ave, Tacoma, WA

📞  253.525.9730

✉️   erin@erinriggiocounseling.com

🌐  erinriggiocounseling.com