Who we are
Stepflow Studios builds websites for therapists and health practices across the United States. This page explains how this website, stepflowstudios.com, handles information. When we say "we", we mean Stepflow Studios.
What this website collects
Very little. You can read every page without telling us anything about yourself.
- No accounts. There's nothing to sign up for.
- No advertising or tracking cookies. We don't follow you around the internet, and we don't sell or share information with advertisers.
- Visit counts, without cookies. We count how many people visit each page using Cloudflare Web Analytics. It uses no cookies and doesn't identify you or follow you to other websites.
- Where you came from, if you send us a form. When you send a message or ask for your full website report, we also note the first page you visited and the website that sent you (for example, Google). It helps us see which pages are useful. It's kept for your visit only, not in a cookie.
- Basic technical records. Like almost every website, the service that delivers our pages may briefly keep basic technical records, such as your internet address and the page you asked for. These are used to keep the website running and safe.
- Fonts. Our fonts are stored on this website, so your browser doesn't contact any other company to show them.
The free website check
When you use the free website check, the website address you type (for example, yourpractice.com) is sent to Google's free page-testing service. Google opens that website, measures how quickly it loads and how it's built, and sends the results back to your browser.
We don't send your name, your email or anything else. Google's own privacy policy applies to what Google does with the request.
When you get in touch
If you email us at hello@stepflowstudios.com, we receive your name, email address and whatever you write. We use it only to reply and, if you become a client, to work with you. We don't add you to a mailing list unless you ask.
If you use the contact form or ask for your full website check report, what you type goes to our own system, which we run ourselves, and to our inbox. It's used the same way: to reply to you. We don't share it or sell it.
Please never send us client information, like client names, health details or anything from your client records. We don't need it to build your website.
Your practice's information
When we build your website, we work with your words, photos and clinician details. We never sign in to your booking or records system and never see your client records, schedule or notes.
What about HIPAA?
HIPAA is the US law that protects health information held by health care providers and the companies that handle it for them. We don't collect, receive or store health information, on this website or on the websites we build, so HIPAA isn't triggered by anything we do.
That's on purpose. The websites we build keep no client information, their contact forms ask only for a name, an email and a short message, and intake stays in your booking or records system, where it belongs. We don't give legal advice, so check your practice's overall compliance with your own advisor.
State privacy laws
Several states, including California, have their own privacy laws that give people rights over their personal information. We're a small business and collect very little, but we follow the same principles wherever you live. In plain words, we:
- only collect what we need, and tell you why
- use it only for that reason
- never sell or share it for advertising
- keep it safe, and only for as long as we need it
- let you see it, correct it or ask us to delete it
Questions or requests
To ask what we hold about you, correct it, or have it deleted, email hello@stepflowstudios.com. We'll reply within 30 days, and usually much sooner.