LEGAL
Last updated: MAY 19, 2026
This policy was last reviewed on May 19, 2026. We are a small US-based business and recommend international users seeking specific legal guidance contact their local data protection authority. For data requests, write to contact@mytherapygroups.com.
My Therapy Groups LLC (“we,” “us,” or “our”), a Colorado limited liability company doing business as My Therapy Groups, operates the website mytherapygroups.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or use our services, including for visitors located outside the United States.
1. Information We Collect
Information You Provide
When you register for an account, submit a listing, send a message, leave a review, submit a contact form, subscribe to our newsletter, or make a payment, we may collect: your name, email address, phone number, professional credentials (for Providers), geographic location, practice or group details, payment information (processed securely through our payment provider), and any other information you choose to provide.
Information Collected Automatically
When you visit the Site, we may automatically collect certain information including your IP address, browser type, operating system, referring URLs, pages visited, time spent on pages, and general location data. We use cookies and similar tracking technologies to collect this information. See Section 4 and our Cookie Policy for details.
Information from Third Parties
If you sign in using a third-party authentication service, we may receive your name and email address from that service. We do not receive your passwords from these services.
2. How We Use Your Information
We use the information we collect to:
- Operate and maintain the Site
- Create and manage your account
- Process payments and subscriptions
- Facilitate communication between group seekers and providers
- Display listing information publicly as intended
- Send administrative emails (account verification, listing approval, password resets)
- Send optional notification emails (new messages, new reviews, search alerts)
- Send our newsletter to subscribers who have opted in
- Improve the Site and user experience
- Monitor for fraud, abuse, and violations of our Terms of Use
- Respond to customer service inquiries and support requests
- Comply with legal obligations and enforce our agreements
3. Legal Bases for Processing (GDPR / UK GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information only when we have a lawful basis under the GDPR or UK GDPR. The legal basis depends on the activity:
- Contract (Art. 6(1)(b)) — to provide the Site and services you have signed up for: creating and managing your account, processing payments, displaying your listing, facilitating messages between group seekers and providers.
- Consent (Art. 6(1)(a)) — for our newsletter and any optional marketing communications. Newsletter signup is strictly opt-in — the subscribe button is the affirmative action, and you can withdraw consent at any time using the unsubscribe link in any email.
- Legitimate interests (Art. 6(1)(f)) — to keep the Site secure, prevent fraud and abuse, monitor for Terms of Use violations, and improve the Site through aggregated analytics. We have assessed that these interests do not override your fundamental rights.
- Legal obligation (Art. 6(1)(c)) — to comply with applicable laws, respond to lawful requests from authorities, and maintain records required by law.
For residents of the UK, the lawful bases above apply under the UK GDPR and the Data Protection Act 2018. For residents of Switzerland, the lawful bases above apply under the revised Federal Act on Data Protection (revFADP).
4. How We Share Your Information
Publicly Displayed Information
If you are a Provider, your listing information — including your name, practice details, group descriptions, location, and any other information you choose to include in your listing — will be displayed publicly on the Site.
Service Providers
We share information with third-party service providers who help us operate the Site, including hosting providers, payment processors, email delivery services, analytics providers, and customer support tools. These providers are contractually obligated to protect your information and use it only for the services they provide to us.
Legal Requirements
We may disclose your information if required to do so by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Business Transfers
If My Therapy Groups is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
5. International Data Transfers
We are based in the United States, and the service providers we rely on — including Klaviyo (email marketing and on-site form rendering), Google Analytics, Stripe (payments), and our WordPress hosting — process and store data on US-based servers. If you access the Site from outside the United States, including from the European Economic Area, the United Kingdom, Switzerland, or other regions with data protection laws, your information will be transferred to, stored, and processed in the United States.
For visitors in the EEA, UK, and Switzerland, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission (and the UK International Data Transfer Addendum where applicable) as the legal mechanism for transferring your personal information to the United States. Our service providers have committed to these clauses as part of their own privacy frameworks. You can request a copy of the relevant SCCs by writing to contact@mytherapygroups.com.
We acknowledge that data protection laws in the US may differ from those in your country and may not provide the same level of protection. By using the Site, you acknowledge that your information may be transferred to the US as described in this policy.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to remember your preferences, keep you logged in, analyze Site traffic, and improve your experience. For a detailed list of the cookies we use and how to control them, please see our Cookie Policy.
You can control cookies through your browser settings, but disabling certain cookies may limit your ability to use some features of the Site. We may also use third-party analytics tools such as Google Analytics, which collect information about how visitors use the Site. This information is used in aggregated form and does not personally identify you.
Note: We are working to implement an EU/UK-scoped cookie consent banner. Until that is live, visitors who wish to limit non-essential cookies can do so through their browser settings or by contacting contact@mytherapygroups.com.
7. Data Security
We use reasonable administrative, technical, and physical safeguards to protect the information we collect. Payment information is processed by our payment provider using industry-standard encryption, and we do not store full credit card numbers on our servers. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.
8. Data Retention
We retain your information for as long as your account is active or as needed to provide you with services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Account information: retained for the life of your account, plus up to 90 days after deletion for backup and dispute-resolution purposes.
- Listing content: retained while the listing is active; archived for up to 12 months after a listing is removed.
- Contact form and support messages: retained for up to 24 months.
- Newsletter subscriber data: retained until you unsubscribe, plus up to 12 months thereafter to honor your unsubscribe request and prevent re-subscription without consent.
- Payment and transaction records: retained for up to 7 years to comply with US tax and accounting requirements.
- Analytics data: retained in aggregated, non-identifying form for up to 14 months.
- Backups: routine backups may contain your data for up to 90 days after deletion before being overwritten.
9. Your Rights and Choices
Depending on where you live, you may have the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct inaccurate or incomplete information.
- Deletion — request that we delete your personal information, subject to certain exceptions.
- Restriction of processing — request that we limit how we use your information in certain circumstances.
- Data portability — request that we provide your information in a structured, commonly used, machine-readable format.
- Object to processing — object to processing based on legitimate interests or for direct marketing purposes.
- Withdraw consent — where we rely on consent (such as our newsletter), you can withdraw consent at any time without affecting the lawfulness of processing before the withdrawal.
- Opt out of marketing — unsubscribe from promotional emails at any time by clicking the unsubscribe link in any email.
- Cookie preferences — adjust your browser settings to refuse cookies or alert you when cookies are being sent.
To exercise any of these rights, please email us at contact@mytherapygroups.com. We will respond to verified requests within the timeframes required by applicable law (typically 30 days under GDPR, 45 days under California law). We may need to verify your identity before fulfilling certain requests.
If you are unhappy with how we have handled your request or our privacy practices, you have the right to lodge a complaint with your local data protection authority. In the EU, you can find the appropriate authority through the European Data Protection Board. In the UK, the authority is the Information Commissioner’s Office (ICO). We would, however, appreciate the chance to address your concerns directly before you contact your regulator.
10. State-Specific Rights (United States)
In addition to the rights above, residents of certain US states have specific rights under their state privacy laws, including (but not limited to) California (CCPA / CPRA), Colorado (CPA), Virginia (VCDPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA). These rights generally include:
- Right to know what personal information we collect and how we use it.
- Right to access the personal information we hold about you.
- Right to correct inaccurate personal information.
- Right to delete personal information, subject to certain exceptions.
- Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not sell or share your information in this way).
- Right to limit the use of sensitive personal information (California — CPRA).
- Right of non-discrimination for exercising your privacy rights.
- Right to appeal a denial of a privacy request (in states that provide this right).
Notice at Collection (California): The categories of personal information we collect are described in Section 1. We collect this information for the business purposes described in Section 2. We retain it for the periods described in Section 8.
To exercise any state-specific rights, please email contact@mytherapygroups.com with your state of residence and the right you wish to exercise.
11. Children’s Privacy
The Site is not directed to children. We do not knowingly collect personal information from children under 18 in the United States, or from children under 16 in the European Economic Area, the United Kingdom, or Switzerland (or such other minimum age as may apply in your specific country). If we learn that we have collected personal information from a child below the applicable age without verified parental consent, we will delete that information promptly. If you believe we have collected information from a child, please contact us at contact@mytherapygroups.com.
12. Third-Party Links
The Site may contain links to third-party websites, including group provider websites, social media platforms, and other external resources. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any site you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will provide additional notice (such as an email or a prominent notice on the Site). Your continued use of the Site after changes become effective means you accept the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or if you want to exercise any of your rights, please contact us at:
contact@mytherapygroups.com
mytherapygroups.com