top of page

Privacy Policy

Last Updated: August 12, 2026

1. Purpose of This Policy

This Website Privacy Policy explains how S. Scott Tate and his practice (collectively, “Scott,” “the Practice,” “we,” “us,” or “our”) may collect, use, disclose, retain, and safeguard information obtained through this website and related online communications.

This policy applies to information collected through the public website, website forms, and other website-related interactions. It does not replace any separate Notice of Privacy Practices (“NPP”) that may be required under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) or other health-privacy laws.

2. Information We May Collect

Information You Provide Voluntarily

When you contact Scott, submit a website form, request information, register for a class or workshop, or otherwise communicate with the Practice, you may provide information such as your name, email address, telephone number, general reason for contacting Scott, scheduling preferences, and other information you choose to share.

Please avoid submitting detailed medical, mental-health, diagnostic, treatment, or other highly sensitive information through a general website contact form unless the form is specifically identified as a secure channel intended for that purpose.

Information Collected Automatically

Like most websites, this site may collect limited technical information automatically, such as Internet Protocol (IP) address, browser type, device information, referring pages, pages viewed, approximate location derived from IP address, and the date and time of visits. Cookies and similar technologies may also be used for essential website functions, security, performance, and—if enabled—analytics.

3. How Information May Be Used

Information collected through the website may be used to:

  • respond to inquiries and communicate with you;

  • determine the general nature of your request and appropriate next steps;

  • schedule consultations, sessions, classes, workshops, or other services;

  • provide requested information or resources;

  • operate, maintain, secure, and improve the website;

  • protect against misuse, fraud, security incidents, or unlawful activity;

  • comply with applicable legal, regulatory, licensing, or professional obligations; and

  • carry out other purposes with your authorization or as otherwise permitted by law.

4. HIPAA, Protected Health Information, and Clinical Information

HIPAA applies to covered health care providers that conduct certain health care transactions electronically, as well as to their business associates. To the extent Scott’s Practice is a HIPAA-covered entity and information constitutes Protected Health Information (“PHI”), the Practice will handle that information in accordance with applicable HIPAA Privacy, Security, and Breach Notification requirements.

Where HIPAA applies, electronic PHI (“ePHI”) must be protected through appropriate administrative, physical, and technical safeguards. Vendors or service providers that create, receive, maintain, or transmit PHI on behalf of the Practice will be evaluated for HIPAA requirements, including the need for a Business Associate Agreement (“BAA”), where applicable.

The Practice will use or disclose PHI only as permitted or required by applicable law and the Practice’s Notice of Privacy Practices. Where the HIPAA minimum-necessary standard applies, reasonable efforts will be made to limit uses, disclosures, and requests for PHI to the minimum necessary for the intended purpose.

If Scott is required to maintain a HIPAA Notice of Privacy Practices, that notice should be made available separately and, where required, prominently posted on the Practice website. If there is any conflict between this Website Privacy Policy and the applicable Notice of Privacy Practices concerning PHI, the Notice of Privacy Practices and applicable law control.

5. Website Forms, Email, Text, and Electronic Communications

General website forms, ordinary email, and text messaging may not provide the same level of security as a dedicated health-information system. For that reason, visitors should use the website contact form primarily for general inquiries and initial contact unless the Practice expressly identifies a secure method for exchanging sensitive information.

Where HIPAA applies, the Practice will use reasonable safeguards for electronic communications containing PHI and will follow applicable security requirements for access control, integrity, and transmission security.

6. Telehealth and Virtual Services

Scott may provide certain services virtually. When health care services subject to HIPAA are provided through remote communication technology, the Practice will use technology and procedures intended to comply with applicable HIPAA requirements, including appropriate vendor agreements when required.

Participants are also encouraged to use a private location and secure device and network when participating in virtual sessions.

7. Cookies, Analytics, and Tracking Technologies

This website may use cookies and similar technologies that are necessary for website functionality, security, and performance. Analytics or other tracking technologies may also be used if enabled by the Practice.

The Practice does not intend to use tracking technologies in a manner that impermissibly discloses PHI. Any tracking technology used on pages or systems involving PHI should be reviewed and configured in light of HIPAA requirements and current federal guidance.

Visitors may be able to manage certain cookies through their browser settings or through a website cookie-preference tool, if one is provided.

8. Service Providers and Third Parties

The Practice may use third-party providers for website hosting, forms, scheduling, email, telehealth, payment processing, data storage, analytics, or other operational services. These providers may receive information only as reasonably necessary to provide their services or as otherwise permitted by law.

Where a third party creates, receives, maintains, or transmits PHI on behalf of a HIPAA-covered Practice, the Practice will determine whether the third party is a business associate and whether a BAA is required.

9. Disclosure of Information

The Practice may disclose information when:

  • you authorize or request the disclosure;

  • disclosure is reasonably necessary to provide requested services;

  • a service provider is performing functions on behalf of the Practice subject to appropriate privacy and security obligations;

  • required or permitted by applicable law, court order, professional regulation, or licensing requirement;

  • necessary to protect rights, safety, security, or property; or

  • otherwise permitted under applicable health-privacy law and the Practice’s Notice of Privacy Practices, when relevant.

The Practice does not sell PHI. Any use of personal information for advertising, marketing, analytics, or other purposes should be reviewed for compliance with HIPAA and applicable state privacy law before implementation.

10. Data Security

The Practice uses reasonable administrative, physical, and technical measures intended to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No website, electronic transmission, or storage system can be guaranteed to be completely secure.

Where HIPAA applies, the Practice will maintain safeguards appropriate to the confidentiality, integrity, and availability of ePHI and will periodically evaluate risks and vulnerabilities as required by law.

11. Data Retention

Information is retained only for as long as reasonably necessary for the purposes for which it was collected, to provide services, to meet professional recordkeeping obligations, to resolve disputes, to enforce agreements, or to comply with applicable legal, licensing, insurance, tax, and regulatory requirements.

Clinical records and PHI may be subject to separate retention requirements under federal or state law and professional licensing rules.

12. Your Privacy Rights

Depending on the nature of the information and applicable law, you may have rights to request access to, correction of, or deletion of certain personal information, or to limit certain uses or communications.

If HIPAA applies to your information, you may have additional rights concerning PHI, including rights described in the Practice’s Notice of Privacy Practices. Those rights may include, where applicable, rights to access records, request amendments, receive an accounting of certain disclosures, request restrictions, and request confidential communications.

13. Children’s Privacy

This public website is not directed to children under 13, and the Practice does not knowingly collect personal information from children under 13 through the public website without appropriate authorization. Clinical services involving minors are governed by applicable law, professional requirements, and the Practice’s clinical policies.

14. Third-Party Links

The website may contain links to third-party websites, platforms, resources, or social-media services. The Practice is not responsible for the privacy, security, or content practices of third parties. Visitors should review the privacy policies of those services separately.

15. Changes to This Policy

This policy may be updated periodically to reflect changes in the Practice, technology, legal requirements, or website functionality. The revised policy will be posted with an updated effective date.

16. Contact

Questions about this Website Privacy Policy, privacy practices, or requests concerning personal information may be directed to:

S. Scott Tate
Fort Collins, Colorado
Email: scott@sscotttate.com
Phone: 970.227.8185


​

Official Federal Sources Consulted

bottom of page