Home · Legal · Privacy Policy
Privacy Policy
How Pasadena Clinical Group collects, uses, and protects information — including your rights under California's CCPA and CPRA.
Effective date: 2026-05-02 · Last updated: 2026-05-02 · Version: 3.0
1. About this Privacy Policy and how it relates to other notices
Pasadena Clinical Group, a California professional corporation ("PCG," "we," "us," or "our"), values the privacy of visitors to anger-therapy-now.com and every page, subdomain, scheduler, contact form, intake form, blog, and embedded property operated by PCG (collectively, the "Site"). This Privacy Policy describes the categories of personal information we collect about Site visitors and prospective clients, how we use, disclose, retain, and protect that information, and the rights and choices you have under United States federal law and the laws of California, including the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA," Cal. Civ. Code §1798.100 et seq.), the "Shine the Light" law (Cal. Civ. Code §1798.83), the California Online Privacy Protection Act ("CalOPPA," Cal. Bus. & Prof. Code §22575 et seq.), the Children's Online Privacy Protection Act ("COPPA," 15 U.S.C. §6501 et seq.), and the Federal Trade Commission Act §5.
This Privacy Policy applies only to information collected through, or in connection with, the Site (including marketing and prospective-client interactions). It does not govern Protected Health Information ("PHI") that PCG collects, uses, or discloses in the course of providing clinical services. PHI is governed by the federal Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (45 C.F.R. Parts 160 and 164, collectively "HIPAA"), the federal Health Information Technology for Economic and Clinical Health Act ("HITECH"), the regulations governing Confidentiality of Substance Use Disorder Patient Records (42 C.F.R. Part 2), the California Confidentiality of Medical Information Act (Cal. Civ. Code §56 et seq., "CMIA"), the Lanterman-Petris-Short Act (Cal. Welf. & Inst. Code §5328), the California Patient Access to Health Records Act (Cal. Health & Safety Code §123100 et seq.), and the California Information Practices Act (Cal. Civ. Code §1798 et seq.). For PHI, please consult our Notice of Privacy Practices, which controls in case of any conflict for clinical-care information.
If a visitor is also or becomes a clinical patient, PCG complies with both this Privacy Policy and the Notice of Privacy Practices, applying the more protective standard whenever they conflict.
2. Information-only purpose; not medical advice; no clinician-patient relationship
The Site is provided for general informational, educational, and marketing purposes only. The Site is not a substitute for, and may not be used to perform, professional consultation, evaluation, diagnosis, screening, treatment, or any other clinical service. Self-diagnosis using information on the Site is dangerous and is expressly disclaimed. Mere use of the Site does not create a clinician-patient relationship between you and PCG or any PCG personnel. See the Terms & Conditions for the complete information-only and crisis disclaimers, which control.
3. Categories of personal information we collect
The categories below describe personal information PCG has collected from Site visitors and prospective clients in the preceding twelve months and may continue to collect. The CCPA/CPRA category labels are used in parentheses where applicable.
- Identifiers — full name; postal/billing address; email address; telephone number(s); date of birth; emergency-contact information; IP address; device identifiers; cookie identifiers; account identifiers (Cal. Civ. Code §1798.140(v)(1)(A)).
- Customer records information — insurance carrier, member ID, group number, policy holder name and date of birth, employer (when relevant), payment-card last four digits and tokenized references, billing history (Cal. Civ. Code §1798.80(e)).
- Protected classification characteristics — age, gender, marital/relationship status, primary language, veteran status, when voluntarily provided and clinically or operationally relevant.
- Commercial information — services inquired about, scheduled, attended, cancelled, or paid for; transaction histories; communication preferences.
- Internet or other electronic network activity information — browsing actions on the Site, pages viewed, time on page, referrer, search terms used to find us, links clicked, scroll behavior, form-field interactions, technical data such as user-agent string, screen size, language, and operating system.
- Geolocation — approximate (city/region) geolocation derived from IP address; precise geolocation only when explicitly provided (e.g., for travel-related questions).
- Audio, electronic, visual, or similar information — voicemail recordings on our office line; chat or video metadata for telehealth scheduling (clinical content of telehealth sessions is PHI and governed by the NPP).
- Professional or employment-related information — collected from employment applicants only; see Section 17.
- Education information — collected from employment applicants only; see Section 17.
- Sensitive personal information (CPRA) — limited to: (i) precise geolocation when expressly provided; (ii) information about racial or ethnic origin, religion or philosophical beliefs, or union membership only when voluntarily provided; (iii) the contents of mail, email, and text messages directed to us in the course of routine inquiry; (iv) account credentials when used to access PCG accounts; (v) information concerning health, mental or physical health diagnosis, sex life, or sexual orientation only to the extent voluntarily disclosed before establishment of a clinical relationship. We use sensitive personal information only for the purposes permitted by Cal. Civ. Code §1798.121(a) and described in Section 5.
- Inferences drawn from any of the above to characterize service preferences and likely interest in services.
4. Sources of personal information
- Directly from you — when you fill out a form, send an email, send a fax, leave a voicemail, request an appointment, complete intake paperwork, apply for a position, or otherwise correspond with us.
- Automatically from your device — through server logs and limited cookies and similar technologies. See our Cookie Policy for details and choices.
- From third parties — including (with your authorization) referring providers, attorneys, courts (for court-mandated programs), insurance carriers and clearinghouses, family members listed as emergency contacts, and former or treating providers.
- From service providers and vendors — our hosting, analytics, scheduling, secure-messaging, payment-processing, telehealth, fax, e-signature, electronic health record, and security vendors, all of whom act on our behalf under contractual restrictions. The Site currently uses the following named subprocessors to operate or secure the public website: Cloudflare, Inc. (Workers serverless platform — receives form submissions; Turnstile — anti-bot challenge on contact and career forms), Google LLC (Google Fonts — typography delivery; Google Maps — map embed on the Contact page only), and the operator's hosting provider for static-page delivery. None of these public-website subprocessors is used to deliver clinical care; PHI is governed by the Notice of Privacy Practices and is processed only by HIPAA-Business-Associate-Agreement-covered platforms.
5. Purposes for which we collect, use, and disclose information
- To respond to your inquiry, schedule appointments, and verify identity.
- To verify insurance benefits, process claims, and accept payment, including through PCI-compliant third-party payment processors.
- To provide, coordinate, and document clinical care (PHI is governed separately by the NPP).
- To send you administrative communications (appointment reminders, billing notices, policy updates).
- To send you, with your consent or as otherwise permitted, marketing communications about PCG services. You may opt out at any time.
- To operate, secure, debug, audit, and improve the Site, including to protect against fraud, malicious activity, and intrusion.
- To comply with legal, regulatory, licensure, accreditation, and tax obligations, including responses to lawful subpoenas, court orders, and audit requests, and to comply with mandated-reporting obligations under California law.
- To establish, defend, exercise, or assert legal rights, including the protection of PCG, its personnel, contractors, volunteers, and other clients, and to enforce our policies and Terms.
- To facilitate corporate transactions such as financing, merger, acquisition, reorganization, sale of assets, or bankruptcy, in which case we will require recipients to maintain comparable privacy protections.
We do not use sensitive personal information beyond what is necessary to perform the services reasonably expected by an average consumer or as permitted by Cal. Civ. Code §1798.121(a). We do not engage in profiling or automated decision-making that produces legal or similarly significant effects on you.
6. Disclosures of personal information
We disclose personal information for the business and commercial purposes described in Section 5 to the following categories of recipients:
- PCG personnel — clinicians, supervisors, supervisees, interns, postdoctoral fellows, administrators, billing staff, intake coordinators, and other personnel acting within the scope of their roles.
- Insurance carriers, clearinghouses, third-party administrators, and EAPs — to verify benefits and process claims, with authorization where required.
- Service providers and business associates — including hosting providers, analytics providers, electronic health-record vendors, secure-messaging providers, telehealth platforms, e-signature platforms, fax services, payment processors, and security vendors, each operating under contractual confidentiality and use restrictions and (where PHI is involved) under HIPAA-compliant Business Associate Agreements.
- Professional advisors — attorneys, accountants, auditors, consultants, and insurers, bound by confidentiality.
- Government authorities and law enforcement — when required by law, court order, or qualifying subpoena, or to comply with mandatory reporting (such as the Child Abuse and Neglect Reporting Act, Cal. Penal Code §11164 et seq., and the Elder and Dependent Adult Civil Protection Act, Cal. Welf. & Inst. Code §15630), or when reasonably necessary to protect the rights, safety, or property of any person.
- Successors — counterparties in a corporate transaction such as a merger, acquisition, reorganization, sale of assets, financing, or bankruptcy.
We do not sell personal information for monetary consideration. To the extent that the use of analytics, advertising, or measurement cookies on the Site (if any) is treated as "sharing" or "sale" under CCPA/CPRA, we honor opt-out requests submitted via the Global Privacy Control browser signal, where technically feasible, and through the contact methods in Section 12. As of the effective date above, we do not load advertising cookies and do not share personal information for cross-context behavioral advertising.
7. Children
The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of COPPA. We do not knowingly sell or share the personal information of consumers under 16 years of age without affirmative authorization (CPRA opt-in). If you believe a child has provided personal information to us, contact us and we will delete it.
8. Retention
We retain personal information only for as long as necessary to fulfill the purpose for which it was collected and to comply with legal, accounting, audit, regulatory, and licensure obligations. Specifically:
- Clinical records are governed by California Health & Safety Code §123145 (and analogous regulations of the Board of Psychology and Board of Behavioral Sciences) — generally retained for at least seven (7) years after the date of last service for adult patients, and for minors, until age 19 or seven (7) years after last service, whichever is later.
- Billing and tax records — retained for at least seven (7) years.
- HR and payroll records — retained per California Labor Code §1174 (typically 4+ years) and other applicable laws.
- Web-only inquiry records (where no clinical relationship is established) — generally retained for up to twenty-four (24) months, then deleted or anonymized.
- Server logs and security telemetry — retained for up to twelve (12) months for security and operational purposes.
- Employment-applicant records — retained per California law and the federal Equal Employment Opportunity Commission's recordkeeping rules.
9. Security
PCG maintains administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, alteration, or destruction, in accordance with applicable laws including HIPAA's Security Rule (45 C.F.R. Part 164, Subpart C) and California Civil Code §1798.81.5. Safeguards include access controls, role-based permissions, encryption-in-transit and at-rest where applicable, secure messaging for clinical communications, vendor due diligence, training, audit logging, and incident-response procedures. No method of internet transmission or electronic storage is 100% secure. Email and text are not fully secure modes of communication; sensitive information should be transmitted through our secure channels.
If we become aware of an incident requiring notification under applicable law (e.g., HIPAA Breach Notification Rule, 45 C.F.R. §164.400 et seq.; Cal. Civ. Code §1798.82), we will notify affected individuals and authorities as and when required.
10. Your rights as a California resident (CCPA/CPRA)
Subject to verification and applicable exceptions, if you are a California resident you have the right to:
- Right to know. Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for which we collected, used, sold, or shared the information, and the categories of recipients.
- Right to access / portability. Receive a copy of the personal information we have about you in a portable, readable format.
- Right to delete. Request deletion of personal information we have collected from you, subject to legal exceptions (e.g., the medical-record retention requirements above; tax/audit obligations; anti-fraud; safety; exercise or defense of legal claims).
- Right to correct. Request correction of inaccurate personal information.
- Right to opt out of sale or sharing. Direct us not to "sell" or "share" your personal information (we do not sell, and as of this date do not share for cross-context behavioral advertising).
- Right to limit use of sensitive personal information. Direct us to limit the use and disclosure of sensitive personal information to the purposes permitted by Cal. Civ. Code §1798.121(a).
- Right to non-discrimination / non-retaliation. We will not discriminate against you for exercising any of these rights.
To submit a verifiable consumer request, contact us using the methods in Section 12. We may need to verify your identity by matching information you provide against information we already maintain. Authorized agents may submit requests on your behalf with your written, signed authorization and proof of their identity. We will respond within forty-five (45) days, with one extension of up to forty-five (45) days when reasonably necessary, in accordance with CCPA/CPRA timelines.
11. Other California rights and notices
- "Shine the Light" (Cal. Civ. Code §1798.83). Once per calendar year, California residents may request a list of categories of personal information disclosed to third parties for those third parties' direct-marketing purposes during the preceding calendar year. We do not disclose personal information for third-party direct marketing.
- "Do Not Track." The Site does not respond to "Do Not Track" signals because no consistent industry standard has been adopted. We do honor the Global Privacy Control opt-out preference signal.
- Eraser button (Cal. Bus. & Prof. Code §22581). The Site is not directed to minors. Minors who have submitted information may request removal by emailing us; subject to applicable law, we will remove the publicly visible content.
- Consumer Affairs notice (Cal. Civ. Code §1789.3). California residents may reach the Complaint Assistance Unit of the Division of Consumer Services at 1625 N. Market Blvd., Suite N 112, Sacramento, CA 95834, or (800) 952-5210.
12. How to contact us / how to submit privacy requests
- Email: office@pasadenaclinicalgroup.com (subject line: "Privacy Request")
- Phone: (626) 354-6440
- Mail: Pasadena Clinical Group, Attn: Privacy Officer, 301 N. Lake Ave, STE 600, Pasadena, CA 91101
13. Visitors outside California / outside the United States
The Site is operated from California for U.S. residents. If you access the Site from outside the United States, you do so on your own initiative and accept the transfer of your information to the United States, where laws may differ from those of your jurisdiction. We do not target the Site to residents of the European Economic Area, the United Kingdom, or other jurisdictions whose laws may impose additional requirements; if you nevertheless access the Site from such a jurisdiction, contact us with any inquiry concerning your rights.
14. Cookies, analytics, and similar technologies
Our use of cookies and similar technologies is described in our Cookie Policy. We do not knowingly load advertising or cross-context behavioral advertising trackers on the Site. Server-side analytics, where used, are configured for IP-anonymization and short retention.
15. Third-party links and embedded services
The Site may include links to or embeds from third-party services (such as mapping providers and font providers). Those third parties operate independently and have their own privacy practices. We are not responsible for those practices. Review the privacy notices of those services before providing them with personal information.
16. Information about clinicians, contractors, volunteers, and PCG personnel
Information about PCG's clinicians, employees, independent contractors, supervisees, interns, volunteers, and other personnel that appears on the Site (such as names, titles, professional credentials, biographical statements, and licensure numbers) is published with the personnel's consent for the purpose of describing the practice. Contact information for PCG personnel routes through the practice; please do not attempt to contact personnel outside of practice channels. PCG personnel's personal contact information, home address, personal email, personal phone, and personal social-media accounts are not maintained on or by the Site, and you must not seek to obtain or use such information.
17. Employment applicants
Information collected from job applicants (resumes, cover letters, references, and writing samples; in some cases licensure verification, background-check authorizations, and employment-eligibility verification) is processed under California's CCPA/CPRA applicant provisions and applicable employment laws. Applicants may request access to and correction of their personal information using the methods in Section 12. We retain applicant information for the period required by law.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be communicated through the Site and, where appropriate, by email to current clients. Your continued use of the Site after a change indicates acceptance of the updated Privacy Policy.
19. Limitations of liability and dispute resolution
Disputes arising out of or relating to this Privacy Policy are governed by the limitations of liability, mediation, arbitration, class-action waiver, jury-trial waiver, choice-of-law, forum-selection, shortened limitations period, and other dispute-resolution provisions in our Terms & Conditions, which are incorporated by reference and which control. Statutory rights that cannot be limited by contract are not affected.
20. Contact for privacy inquiries
Pasadena Clinical Group · Privacy Officer · 301 N. Lake Ave, STE 600, Pasadena, CA 91101 · (626) 354-6440 · office@pasadenaclinicalgroup.com