Who is responsible
This website is operated by Corbo Counseling, the private practice of Raymond S. Corbo, Jr., LMFT, licensed in New Jersey and New York. For anything on this page, or any question about your information, write to ray@corbocounseling.com.
This policy covers the website only. Information you share once we are working together is governed by the confidentiality rules that apply to therapy and by the privacy practices you receive before your first session, which are stricter than anything here.
What the website collects
Inquiry form. Your name, your email address, an optional phone number, the kind of work you are interested in, whatever you choose to write in the message box, and the fact that you ticked the consent box. A timestamp is recorded with the submission so the consent record is meaningful, and a technical timestamp is used to filter spam.
Free self-check opt-in. Your first name, your email address, the fact that you consented, and the time you consented. That is all.
Spam protection. Forms are protected by Cloudflare Turnstile, which looks at browser and network signals to tell people from bots. Your IP address is processed for that purpose and for rate limiting, so that one source cannot flood the form.
Analytics. The site uses Google Analytics 4 in an aggregate form: which pages are read, roughly how people arrived, and whether a form was submitted. IP anonymisation is on. Analytics tells me that a page was read, not who read it, and it is never joined to anything you type into a form.
What the website does not collect
- No health, clinical, or diagnostic information, at any point, in any field. The forms are deliberately built so there is nowhere to put it, and you are asked to keep messages general.
- No payment details. Fees are handled entirely inside the SimplePractice client portal, not on this site.
- No account, no password, no profile.
- No data sold, rented, or shared for advertising. There are no advertising or social tracking pixels on this site.
Cookies and local storage
Google Analytics sets its usual measurement cookies. Nothing else on the site sets a cookie.
The site stores two small values in your browser's local storage, not as cookies: one records that you closed the free self-check invitation, so it does not reappear for a week, and one records that you already asked for the self-check, so it does not ask again. They stay on your device, and clearing your browser storage removes them.
Who else touches your information
- Cloudflare hosts the site, serves it over HTTPS, and provides Turnstile and the form endpoint. Cloudflare processes requests on my behalf and does not use them for its own advertising.
- A transactional email service (Resend, unless the site configuration names another provider) delivers email: the notification I receive about an inquiry, the automatic reply you receive, and the occasional note to people who asked for the guide.
- Google provides Google Analytics, and Google Workspace hosts the practice email address.
- SimplePractice provides the secure client portal, telehealth platform and scheduling. If you request an appointment there, their privacy policy applies to that portal.
Each of these providers processes data under its own privacy terms, and each is a well-known service with published policies you can read before submitting anything.
How long it is kept
- Inquiries: kept in the practice mailbox while we are in contact, and for up to 24 months afterwards in case you come back to it.
- Guide subscribers: kept until you unsubscribe, plus a short period afterwards to record that you did.
- Analytics: the standard retention setting for the property, currently 14 months.
- Spam and rate-limit records: a short period, measured in days, because they exist only to keep bots out.
Unsubscribing, erasing, and asking questions
Every email sent to the guide list has a one-click unsubscribe link, and using it takes you off the list immediately.
To see what is held about you, to correct it, or to have it deleted, email ray@corbocounseling.com with the request, or send it through the contact page if you would rather use a form. You do not need to give a reason, and there is no charge. A small amount of information may need to be retained where the law requires it, such as a record that you opted out, and I will tell you if that applies.
Your rights in law
If you are in New Jersey or New York, you have the rights described above by practice rather than by statute. If you are elsewhere, including the UK or the European Union, you have additional legal rights of access, correction, deletion, restriction and portability, and you can object to analytics being processed. Email the address above and it will be handled. You can also use a browser setting or extension that blocks analytics, and the site will work exactly the same.
Security
The site is served over HTTPS and forms are submitted over an encrypted connection. Email is not an encrypted channel, which is why the site asks you not to send clinical details by email. Anything sensitive belongs in session or in the secure portal.
Crisis information
This website is not monitored for emergencies and cannot help in one. If you are in crisis, call or text 988 (Suicide & Crisis Lifeline) or call 911.
Changes to this policy
If this policy changes, the date at the top of the page will change with it. Material changes will be described on this page rather than made quietly.