Website Privacy Policy
Victorious Light Within P.L.L.C.
Effective Date: Effective as of the date this page is first published (the “Effective Date”) | Last Updated: October 14, 2026
This Website Privacy Policy (the “Policy”) explains how Victorious Light Within P.L.L.C., a New Hampshire professional limited liability company in Milford, New Hampshire (the “Practice,” “we,” or “us”), handles information collected through www.victoriouslightwithin.org (the “Site”).
Scope
This Policy covers information collected through the public Site. It does not govern protected health information (“PHI”) that the Practice receives or creates as a health care provider. The Practice is a HIPAA covered entity, and PHI is governed by our Notice of Privacy Practices, which is available on the Site and from the Practice on request. If this Policy and the Notice of Privacy Practices conflict, the Notice of Privacy Practices controls. Our Website Terms of Use also apply to your use of the Site.
1. Information We Collect and How
Information you give us. The Site has no contact, sign-up, or other forms, and we do not currently collect personal information through the Site itself. If you call our administrative line, we receive what you tell us and your phone number. If you message us through the Client Portal (which is hosted by SimplePractice), we receive your message and the information you include in it. Please do not include health or crisis information in any message sent outside the Portal.
Technical information from our website host. The Site is built and hosted on Framer. When you visit, the host may automatically collect technical information such as your IP address, browser and device type, the pages you view, the date and time of your visit, the page that referred you, and security logs. We use the host’s services as provided and do not separately review visitors’ individual activity.
Cookies and similar technologies. Cookies and similar technologies may be used only as needed to operate and secure the Site. As of the Effective Date, we do not knowingly use advertising cookies, cross-site tracking, or social media pixels on the Site, and our review on October 7, 2026 did not identify an analytics tool. Before we add any analytics, advertising, or tracking tool, we will update this Policy and, where appropriate, give you a choice. Other platforms. If you find us through Psychology Today, LinkedIn, or another platform, information you provide there is collected and governed by that platform’s own policies.
2. How We Use Information
We use information collected through the Site to operate, maintain, and secure the Site; respond to your calls and Portal messages about the Practice’s services; schedule an intake or consultation through the Portal; improve the Site’s content and usability; and comply with legal obligations and protect the rights and safety of others.
3. How We Share Information
We share information only as needed to run the Site and the Practice, and only with the following: Service providers. Our website host (Framer); SimplePractice, which provides the Portal, scheduling, electronic health records, telehealth, and billing; and Stripe, which processes payments. AI documentation and administrative tools. DeepCura and SimplePractice’s Note Taker are used as AI documentation and administrative assistants in the Practice’s clinical operations. Their use with client information is covered by the Notice of Privacy Practices and the Client Psychotherapy Agreement, not by this Policy. Legal and safety reasons. When required by law, court order, or other valid legal process, or when needed to protect someone’s safety. Business changes. If the Practice closes, merges, or transfers its business, information may be transferred in accordance with law and professional rules. We do not sell personal information, and we do not share it for targeted advertising.
4. Cookies, Tracking, and Browser Signals
You can set your browser to block or delete cookies, though parts of the Site may not work as expected if you do. As a courtesy, we honor Global Privacy Control signals sent by your browser, and we do not respond differently to “Do Not Track” signals because the Site does not track visitors across other sites.
5. How Long We Keep Information
Technical data collected by our website host is kept according to the host’s settings. Calls and messages that are not part of a clinical record are kept as long as needed to respond and to meet legal and business needs. Clinical records are different: they are kept for at least seven years after the last date of service under New Hampshire rules for mental health practice (Mhp 502.01(k)), as described in the Client Psychotherapy Agreement.
6. Your Choices and Rights
You may ask us to tell you what personal information from the Site we hold about you, to correct it, to delete it, or to stop using it, and you may ask for a copy. We believe that the Practice, as a HIPAA covered entity, is not subject to the New Hampshire Privacy Act (RSA 507-H). We nonetheless honor these requests voluntarily, where we reasonably can, for personal information collected through the Site that is not PHI. We will respond within 45 days of receiving your request. If we need more time, we may extend that period once by up to 45 more days and will tell you why.
If you disagree with our response, you may ask us to reconsider by contacting us as described in Section 11. You may also contact the New Hampshire Department of Justice Consumer Protection Bureau. Your rights over PHI, including to inspect and copy, amend, and receive an accounting of disclosures, are described in the Notice of Privacy Practices. You may complain about the handling of PHI to the Practice or to the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized for doing so.
7. Security
We use reasonable administrative, technical, and physical safeguards for information we control and rely on our service providers’ safeguards for the systems they operate. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Important Communication Guidance
Never send PHI or crisis information through the Site, email, social media, or text message. Use the Client Portal for clinical communications. In an emergency, call 911, call or text 988, or call or text NH Rapid Response at 1-833-710-6477.
8. Children
The Practice provides services to adults age 18 and older only. The Site is not directed to anyone under 18, and we do not knowingly collect information from children under 13 or from anyone under 18. If we learn that we have received information from a minor through the Site, we will delete it.
9. Links to Other Sites
The Site links to other sites and services, including SimplePractice, Psychology Today, LinkedIn, and community resources. We do not control those sites and are not responsible for their privacy practices. Please read their policies before you share information with them.
10. Sensitive Information and Your Own Privacy
Because of the nature of mental health services, please assume that anything you send outside the Client Portal is not confidential. Visiting a mental health practice’s website can also be inferred from a shared or monitored device, from browser history, or from a shared account. If that is a concern, consider using a private browsing window and a device and network that only you control.
11. Changes to This Policy; Contact
We may update this Policy from time to time. We will post the updated Policy on the Site with a new “Last Updated” date. If we make a material change to how we collect or use information, we will make that clear on the Site.
To make a request or ask a question about this Policy, call 661-475-6746 (administrative line, Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time; not for emergencies) or write to us through the secure message feature of the Client Portal at breonna-mcfarland.clientsecure.me. Victorious Light Within P.L.L.C., Milford, New Hampshire. Please do not include PHI in any message that is not sent through the Portal.