Website privacy policy
This page is about the website. How clinical records are handled is in the notice of privacy practices.
What this site collects
Nothing at all until you fill in the request a call form. There is no account to create, nothing to log in to, and no tracking that follows you between pages.
When you do use the form, it asks for:
- your name;
- a phone number or an email address, whichever you prefer to be reached on;
- when it suits you to be called;
- whether the enquiry is for you or for somebody else;
- your insurer, if you know it;
- an optional note, if there is something you would like us to know.
There is no condition list, no service dropdown, no date of birth, no address and no insurance member number. The form does not ask, so the database cannot hold it.
What happens to what you send
- Your note is encrypted before it is stored. Anybody with access to the database itself, including a backup of it, sees ciphertext.
- The email that tells the practice an enquiry has arrived contains a reference and a timestamp. It does not contain your name, your number or your note. Email is the least controlled channel in this system and it is kept out of the path deliberately.
- Staff sign in to read an enquiry, and opening one writes a record of who opened it and when.
- Enquiries that do not become appointments are deleted automatically after a set period. Information nobody needs any more is information nobody can lose.
What this site does not do
- No analytics, no advertising pixel and no conversion tag.
- No session recording or heat mapping.
- No third-party chat widget.
- No advertising or analytics cookies, and no tag manager.
- No web fonts loaded from anybody else's server. The two typefaces are served from this site.
- Nothing at all that follows you from one page to the next.
The map on the contact page
The contact page shows a Google map of the office. It is the one thing on this site that is loaded from another company, and it loads when you scroll to it, without you pressing anything. When it loads, Google receives your IP address and the fact that a map of this office was shown. It is not told which page you were reading, and this site sends Google nothing about you beyond that request.
Every other page of this site, and everything else on the contact page, comes from this server alone. The content security policy allows exactly one outside host, www.google.com, and only to show that map in a frame. A test fails the build if anything else is added.
If you would rather not load it, the address, the hours and a plain link to directions sit beside the map as ordinary text, and a browser set to block frames loses nothing but the picture.
Cookies
No advertising or analytics cookies are set. The site uses only what it needs to work: a security token that protects the form against being submitted from another site, and, for staff who sign in, a session cookie. Neither is used to follow you anywhere.
Security
Traffic to and from this site is encrypted in transit. The free-text note is encrypted at rest. Staff accounts are a closed set: there is no public sign-up on this site and no way to create an account.
Please do not send details about a health concern by email. The practice's mailbox is an ordinary consumer email account, which is not an appropriate place for information about somebody's health. Use the phone, or the form, which encrypts what you write.
Children
This site is written for adults. Where counseling is for a child, the enquiry should be made by a parent or by whoever has legal authority to consent to that child's care.
Asking about your information
Call (989) 728-2364 or write to Blooming Consultants, P.L.L.C., 4093 M-65, Hale, MI 48739.
Changes
If this policy changes, the changed version replaces this one on this page. This version was published in September 2026.