Privacy Policy
Privacy Policy
Effective Date: January 17, 2026
Owner: Kalyn Mattis
Practice Name: The Healing Space
Licensure Status: Provisionally Licensed in the State of Georgia; practicing under clinical supervision in accordance with Georgia licensing laws and regulations
Website: https://www.kalynlmattis.com
Contact Email: contact@kalynlmattis.com
1. Introduction
This Privacy Policy describes how The Healing Space, owned and operated by Kalyn Mattis, collects, uses, maintains, and protects personal information obtained through this website (https://www.kalynlmattis.com).
This website privacy policy is separate from and supplemental to the HIPAA Notice of Privacy Practices (NPP) provided to clients at the initiation of services. In the event of any inconsistency, the HIPAA Notice of Privacy Practices shall control with respect to Protected Health Information (PHI).
This policy is intended to comply with applicable federal law, including the Health Insurance Portability and Accountability Act (HIPAA), and with the laws, rules, and ethical standards governing the practice of provisionally licensed mental health professionals in the State of Georgia.
By using this website, you acknowledge and agree to the terms of this Privacy Policy.
2. Information Collected
a. Personal Information (which may constitute Protected Health Information under HIPAA):
Name
Email address
Phone number
Information voluntarily submitted through website contact forms, intake forms, or secure portals
Submission of information through this website does not establish a therapist–client relationship.
b. Non-Personal / Technical Information:
Internet browser type
IP address
Date, time, and duration of visits
Pages viewed and interaction data
Non-personal information may be collected through cookies or analytics tools solely to evaluate website performance and usability.
3. Use of Information
Information collected through this website may be used to:
Respond to inquiries and requests for information
Determine service eligibility and availability
Provide therapy or consultation services once a formal therapeutic relationship has been established
Send administrative communications (e.g., scheduling, practice updates)
Meet legal, ethical, supervisory, or licensing obligations
The Healing Space does not sell or trade personal information. Disclosure of information occurs only with written authorization or as required or permitted by law.
4. Private Pay and Insurance Billing
At this time, The Healing Space primarily operates as a private pay practice. Payment arrangements, fees, and financial policies are outlined in a separate informed consent and financial agreement provided prior to services.
Should insurance billing be offered in the future, additional information may be collected as required by insurers, including diagnosis, treatment information, and billing codes. Use and disclosure of such information would be governed by HIPAA and detailed in the HIPAA Notice of Privacy Practices.
5. Data Security and Safeguards
Reasonable administrative, technical, and physical safeguards are used to protect personal information, consistent with HIPAA standards.
Electronic records are stored in secure, encrypted systems when available
Access to client information is restricted to authorized individuals, including supervisors when required by licensure
Online communication and documentation platforms are selected based on security and compliance features
Despite these safeguards, no method of electronic transmission or storage can be guaranteed to be completely secure.
6. Cookies and Analytics
This website may use cookies or similar technologies to collect anonymous usage statistics, such as page views or time spent on the site. This information is used exclusively to improve website functionality.
Visitors may disable cookies through their browser settings.
Third-party analytics services may be utilized; these services do not intentionally collect Protected Health Information.
7. Third-Party Platforms and External Links
This website may link to or integrate with third-party services, including but not limited to:
Telehealth platforms
Scheduling or payment systems
Secure client portals
Third-party services maintain independent privacy policies and terms. The Healing Space is not responsible for the privacy practices or content of external platforms.
8. Teletherapy, Supervision, and Confidentiality
Teletherapy services are provided using secure, HIPAA-compliant platforms when clinically appropriate. Clients must review and sign an informed consent for teletherapy prior to initiating services.
As a provisionally licensed clinician in Georgia, Kalyn Mattis practices under required clinical supervision. Supervisors may have access to client information strictly for training, consultation, and compliance purposes.
Confidentiality is maintained in accordance with Georgia law, HIPAA, and applicable ethical standards. Confidentiality may be breached without consent only under legally mandated circumstances, including:
Suspected abuse or neglect of a child, elder, or vulnerable adult
Imminent risk of serious harm to the client or others
Valid court orders or legal subpoenas
9. Individual Privacy Rights
Consistent with HIPAA, clients have the right to:
Access their clinical records
Request amendments to records
Request limits on certain uses or disclosures of information
Receive an accounting of disclosures, where applicable
File complaints without retaliation
Procedures for exercising these rights are fully described in the HIPAA Notice of Privacy Practices.
10. Children’s Privacy
This website is not intended for use by children under the age of 13. The Healing Space does not knowingly collect personal information from minors through this website without verified parental or legal guardian consent.
11. Policy Updates
This Privacy Policy may be revised to reflect changes in legal requirements, licensure status, supervision structure, or business practices. Updates will be reflected by a revised effective date. Continued use of the website constitutes acceptance of the revised policy.
12. Contact Information
Questions regarding this Privacy Policy may be directed to:
Kalyn Mattis
The Healing Space
Provisionally Licensed – Georgia
📧 Email: contact@kalynlmattis.com
I’ve tightened the policy to be Georgia board-defensive, aligned it explicitly with a HIPAA Notice of Privacy Practices, and future-proofed it for private pay now / insurance billing later. Key improvements you’ll notice in the canvas:
What I changed (and why it matters)
Clear hierarchy between documents
Explicitly states this is a website privacy policy and that the HIPAA NPP controls if there’s any conflict.
This is important for HIPAA audits and complaints—it prevents contradictory obligations.
Georgia supervision protection
Added precise language acknowledging practice under supervision and supervisor access solely for training/compliance.
This mirrors how Georgia boards expect provisionally licensed clinicians to frame confidentiality.
No implied therapist–client relationship
Website submissions are clearly excluded from establishing a clinical relationship.
This protects you from duty-to-treat arguments tied to contact forms or emails.
Private pay → insurance safe transition
States private pay clearly without locking you in.
Insurance language is conditional and defers details to the HIPAA NPP—this avoids premature insurer obligations.
HIPAA-accurate rights section
Rights are referenced but procedural details are deferred to the NPP.
This avoids mismatches that boards and insurers flag.
Conservative, audit-friendly tone
Uses “reasonable safeguards,” “where applicable,” and “as required by law” consistently.
These phrases matter in regulatory reviews.