Privacy

Three kinds of information, and nothing else.

• When a practice asks us to check its area, the form collects a name, practice name, city, license number, email address, phone number, how the practice wants to hear about inquiries, and an invite code if there is one.
• When a parent writes in through one of our assessment pages, the form collects a name, an email address, a phone number if they choose to give one, whatever they write about their child or themselves, and which page they were on.
• Ordinary server records: the pages requested, the time, and the browser used. These sit in our hosting logs and are not tied to a named person by us.

We do not ask for a date of birth, an address, a diagnosis, an insurance number or a payment card. There is no advertising pixel, no analytics script and no session recording on any page.

• A practice's details are used to verify its license with the California Board of Psychology or the Board of Behavioral Sciences, to build and run its pages, and to talk to it about its account.
• A parent's inquiry is sent to the practice whose page they were on, and is shown to that practice in its own inquiry log so it can act on it.
• Server records are used to keep the site working and to find faults.

We do not use a parent's inquiry to advertise anything to them, and we do not send them marketing email.

Our assessment pages carry one script, the Google Ads tag, and it is the only script on the site that is not ours. When a parent sends an inquiry, the page tells Google that an inquiry happened. That is the whole of it.

No name, no email address, no phone number and none of what the parent wrote is included in that event, or in any other message to Google. Google is told that a form was completed. It is not told who completed it or what it said.

An inquiry can contain health information about a child, so we handle it more carefully than the rest.

• It is stored in an access controlled database and is visible only to the practice the inquiry was written to, and to Book Assessments staff who need to see it to run the service.
• No advertising or analytics script ever receives it, and we place no tracking pixel on any page or record that holds it.
• It is sent to the practice by email, encrypted in transit.
• Where we hold this information for a practice, we hold it on that practice's behalf and act on its instructions. The practice remains responsible for the clinical record.

We use three companies to run the service, and each one only sees what it needs to do its job.

• Neon stores the database, which holds practice accounts, circles, balances and inquiries.
• Resend sends our email, so it processes the alert that goes to a practice when an inquiry arrives, and the sign in links we email.
• Vercel hosts the site and holds the server records described above.

Each of them acts for us and is not permitted to use what it holds for its own purposes.

We do not sell your information. We do not rent it, trade it, or hand it to a data broker. We do not pass a parent's details to any practice other than the one they wrote to, and we do not pass a practice's details to another practice.

• A practice account and its records are kept while the account is open, and for seven years after it closes, because a license verification and a billing record may need to be produced later.
• An inquiry is kept while the practice's account is open, so its log stays complete.
• Server records are kept for 30 days.

Email support@bookassessments.com and we will tell you what we hold about you, correct it if it is wrong, or delete it. If you are a parent asking about an inquiry, tell us the email address you used and the practice you wrote to.

We will answer within 30 days. If we have to keep something because the law requires it, we will say which record and why.

Our forms are written for adults. A parent or guardian writes to us about a child; we do not ask children to give us anything directly, and the pages are not aimed at them.

If we change how any of this works we will change this page and move the date at the top. If the change is a significant one for practices with an open account, we will email them about it.