Privacy Policy

Effective date: September 23, 2026

This Privacy Policy explains how HAVA Global Solutions (“HAVA,” “we,” “us,” or “our”) collects, uses, shares, stores, and protects information through havaglobalsolutions.com, HAVA forms and communications, and the Therapy4All Provider Registry and related provider-application, directory, and inquiry workflows. Therapy4All is a HAVA Global Solutions program designed to help people locate participating providers and related resources. This policy applies to website visitors, subscribers, provider applicants, participating providers, and people who use Therapy4All inquiry features.

Information we may collect

We collect information that you provide directly and limited technical information generated when you use our websites and services. Depending on how you interact with HAVA or Therapy4All, this may include your name, email address, telephone number, organization or practice name, mailing or service address, inquiry type, message content, newsletter preferences, and other information you choose to submit.

Our websites and service providers may also collect standard technical information such as IP address, browser and device type, referring pages, pages viewed, approximate location derived from IP address, timestamps, cookies or similar technologies, and security or anti-spam signals. We use this information to operate, secure, troubleshoot, and improve the websites and services.

Therapy4All provider applications and provider information

Providers who apply to participate in Therapy4All may be asked to submit information needed to review, verify, create, maintain, and publish a provider listing. This may include professional and practice contact information; professional biography; credentials; license type, license number, licensing jurisdictions, and related verification information; specialties; populations served; neurodivergent populations served; languages; telehealth service areas; in-person availability; payer and insurance participation; Medicaid or Medicare participation where applicable; private-pay and sliding-scale information; accessibility and communication accommodations; practice website or scheduling links; a professional photo or a link to one; and acknowledgements or consents related to listing publication and verification.

We may use information from provider applications to verify submitted credentials and practice information, determine registry eligibility, create and maintain Therapy4All listings, contact providers about their application or listing, configure registry and inquiry features, prevent fraud or misrepresentation, and administer Therapy4All membership.

Information published in the Therapy4All directory

Therapy4All is a public-facing provider directory. Information that a provider submits for publication may be displayed publicly in the registry, including provider name, credentials, practice name, professional photo, biography, specialties, populations served, languages, service locations, telehealth jurisdictions, insurance or payment information, sliding-scale information, accessibility information, website or scheduling links, and other provider-approved listing information.

Providers should not submit information for directory publication that they do not want made public. Providers may request corrections, updates, or removal of their listing by contacting HAVA Global Solutions. Removing a listing from the active directory does not necessarily remove information from backups, transaction records, legal records, archived publication copies, or third-party caches immediately.

Provider verification

Therapy4All may verify provider identity, licensure, credentials, jurisdiction, practice information, or other submitted information using public records, licensing-board information, payer information, direct provider communications, or other appropriate sources. Verification is intended to improve the accuracy of directory information. It is not an endorsement, recommendation, guarantee of clinical quality, guarantee of licensure status after the verification date, or guarantee that a provider is appropriate for any particular person.

Therapy4All prospective-client inquiries and sensitive health information

Therapy4All may provide a designated secure inquiry workflow that allows a prospective client, caregiver, or other authorized person to contact a participating provider. Information submitted through that workflow may include contact information and information about the reason for seeking services, which may be sensitive health information.

When you submit an inquiry for a specific provider, the information you submit may be made available to that provider so the provider can review and respond to the inquiry. HAVA may process the inquiry as necessary to operate the secure intake workflow, route the inquiry, provide notifications, troubleshoot delivery, maintain security, and meet applicable legal or contractual obligations.

Do not submit protected health information, patient records, diagnoses, treatment details, insurance documents, or other sensitive clinical information through ordinary HAVA contact forms, newsletter forms, public comments, email signup forms, or other general website forms. Use only a Therapy4All workflow that is specifically identified as the secure inquiry environment when sensitive health information is requested.

HIPAA applies only when its legal requirements are met for the entity, information, and activity involved. HAVA does not represent that every HAVA website page, public form, email, directory page, analytics tool, or general communication channel is subject to HIPAA. Where a Therapy4All workflow involves protected health information and HAVA or a service provider is acting in a role regulated by HIPAA, the information will be handled in accordance with the applicable HIPAA requirements, contractual obligations, and security controls for that workflow.

Payments and Stripe

Therapy4All provider membership or other paid HAVA services may use Stripe to process checkout and payment. Payment-card information is submitted to and processed by Stripe through its payment environment rather than being collected directly through ordinary HAVA website forms. HAVA may receive transaction information from Stripe such as payment status, amount, date, customer contact information, product or price selected, and transaction identifiers needed to administer the purchase, maintain records, and provide support. Stripe’s processing of payment information is governed by Stripe’s own privacy and security practices.

How we use information

Operate, maintain, secure, and improve HAVA websites and services.
Respond to questions, contact requests, and support inquiries.
Review and administer Therapy4All provider applications.
Verify provider-submitted information and maintain registry accuracy.
Create, publish, update, and remove provider directory listings.
Route secure prospective-client inquiries to the selected provider.
Process membership, checkout, and transaction administration.
Send operational communications related to an application, listing, inquiry, transaction, or account.
Send newsletters or marketing communications when the recipient has opted in or when otherwise permitted by law.
Measure website performance and understand how resources are used.
Detect, prevent, investigate, or respond to fraud, abuse, security incidents, or unlawful activity.
Comply with legal, regulatory, contractual, tax, accounting, or recordkeeping obligations.

Newsletter and marketing choices

Newsletter subscriptions and optional promotional communications are separate from required operational communications. Therapy4All provider applicants may be offered optional enrollment in newsletters, including Behavioral Billing communications. Where an opt-in is presented, declining it will not prevent us from sending communications necessary to administer an application, membership, payment, directory listing, or inquiry. Marketing subscribers may unsubscribe using the link provided in marketing emails.

How information may be shared

We may share information only as reasonably necessary to operate the services described in this policy, including with:

Participating Therapy4All providers: when a prospective client directs an inquiry to that provider.
Website, hosting, security, analytics, communications, and form-service providers: when they process information on our behalf to provide their services.
Payment processors: including Stripe for payment processing and transaction administration.
Professional or technical service providers: when reasonably necessary for legal, accounting, compliance, security, technical support, or business operations.
Government, regulatory, licensing, legal, or law-enforcement authorities: when required by law, legal process, or a valid regulatory obligation, or when reasonably necessary to protect rights, safety, security, or prevent fraud.
A successor organization: if HAVA or a relevant program is involved in a merger, reorganization, acquisition, financing, or transfer of business assets, subject to applicable law.

Therapy4All application data and secure inquiry data are not intended to be used for unrelated behavioral advertising or disclosed merely because a third party requests access to it. We limit access to people and service providers with an operational need for the information.

Third-party services

HAVA and Therapy4All may rely on third-party services such as WordPress, Jetpack, Jotform, Stripe, hosting providers, email-delivery tools, analytics services, spam-prevention services, security tools, and other operational vendors. These providers may process information necessary to deliver their services and may maintain their own privacy policies. We evaluate services according to the type of information being processed and use designated secure or contractually appropriate workflows where sensitive information requires additional safeguards.

Cookies, analytics, and tracking technologies

Our public websites may use cookies or similar technologies for basic functionality, analytics, performance, security, spam prevention, and site administration. We aim to avoid placing unnecessary advertising or analytics technologies inside authenticated or sensitive Therapy4All workflows where doing so could expose health-related information. The technologies used on public informational pages may differ from those used in secure intake or account environments.

Data minimization and retention

We seek to collect information that is reasonably necessary for the stated purpose and to avoid collecting unnecessary sensitive information. We retain information for as long as reasonably necessary to operate the service, maintain accurate business and transaction records, resolve disputes, enforce agreements, meet legal or regulatory obligations, maintain security, and support legitimate archival or audit needs. Retention periods may vary depending on the type of record and the system in which it is maintained.

Security

We use administrative, technical, and organizational measures intended to protect information against unauthorized access, alteration, disclosure, or destruction. No website, form, email system, storage platform, or transmission method can be guaranteed to be completely secure. Users should use the designated secure Therapy4All inquiry environment when submitting sensitive information and should not send sensitive clinical information through ordinary email or public forms.

Your choices and requests

Depending on the information involved and applicable law, you may request that we correct or update information you submitted, update or remove a Therapy4All provider listing, unsubscribe from marketing communications, or ask questions about how your information is handled. We may need to verify the identity or authority of a person making a request before acting on it. Certain information may need to be retained for legal, security, accounting, transaction, contractual, or recordkeeping reasons.

Children and caregivers

Therapy4All may include resources or providers who serve children, but the public HAVA website and provider directory are not designed to collect personal information directly from children without appropriate adult involvement. A parent, guardian, caregiver, or other authorized adult should complete inquiries involving a minor unless the applicable provider workflow and law permit otherwise.

External links and provider websites

Therapy4All listings and HAVA resources may link to provider websites, scheduling systems, payer websites, community resources, or other third-party services. HAVA does not control the privacy, security, accuracy, or data practices of external websites. Review the privacy practices of the destination service before submitting information there.

Changes to this policy

We may update this Privacy Policy as our services, vendors, technology, or legal obligations change. Material changes will be reflected by updating the effective date on this page. Where appropriate, we may provide additional notice within the relevant service or communication channel.

Contact

Questions, privacy requests, provider-listing update or removal requests, and concerns about this Privacy Policy may be submitted through the HAVA Global Solutions Contact page.