Privacy Policy

Last updated October 2026

Our commitment to your privacy

Dr. Bill Morgan, Psy.D., is committed to protecting the privacy and confidentiality of his clients and of visitors to this website. This policy explains what information this website collects, how it’s used, and how it’s protected.

This policy does not replace the Notice of Privacy Practices required under HIPAA. Dr. Morgan practices through Paoli Psychological Associates, which provides clients with a separate Notice of Privacy Practices describing your rights and its obligations regarding your protected health information. Please ask for a copy if you haven’t received one.

HIPAA and protected health information

As a healthcare provider covered by the Health Insurance Portability and Accountability Act (HIPAA), Dr. Morgan is required to maintain the privacy and security of your protected health information and to use or disclose it only as permitted or required by law and as described in the Notice of Privacy Practices.

Clinical records, including session notes, assessment results, and treatment information, are confidential and aren’t shared without your written authorization, except in limited circumstances required or permitted by law, such as mandatory reporting obligations, court orders, or imminent safety concerns.

Information this website collects

  • Contact form. When you send a message through the contact form, the form collects your name, email address, phone number (if you provide it), preferred office, and your message. This information is used only to respond to your inquiry and isn’t shared with third parties for any other purpose.
  • Usage data. This website uses Google Analytics to understand how visitors use the site, such as which pages are viewed and for how long. Google Analytics uses cookies and collects information like your browser type, device, approximate location, and the pages you visit. This information is reported in aggregate and isn’t used to identify you personally.
  • Cookies. Beyond Google Analytics, the contact form uses a temporary session cookie so it can show you a confirmation or error message after you submit it. Cookies on this site aren’t used for advertising or to track you across other websites.

Services provided by Google

Some features of this website are provided by Google, which may receive information such as your IP address and browser details when you use them:

  • reCAPTCHA on the contact form, which helps prevent spam by checking that a person, not an automated program, is sending the message.
  • Google Maps on the Locations page, which shows the office locations.
  • Google Fonts, which supplies the typefaces used on this site.

Google’s use of this information is governed by the Google Privacy Policy.

How information is used

Information collected through this website is used to:

  • Respond to your inquiries and schedule appointments
  • Improve the content and usefulness of this website
  • Comply with legal obligations

Your personal information is never sold, rented, or shared with third parties for marketing purposes.

Please don’t send health details through the form

Messages sent through the contact form are delivered by email. While the form itself is submitted over a secure, encrypted connection (HTTPS), email isn’t designed for sensitive health information. Please share only what’s needed to get in touch, and save clinical details for a phone call or your first appointment.

The contact form isn’t monitored for emergencies. If you are in crisis, call or text 988 (Suicide & Crisis Lifeline), call 911, or go to the nearest emergency room.

Confidentiality of therapy communications

Communications between clients and Dr. Morgan are confidential and protected by HIPAA and by Pennsylvania law governing the confidentiality of mental health records. Online sessions are conducted through a secure, HIPAA-compliant video platform.

Confidentiality has certain legal limits. Dr. Morgan is required by law to report situations involving imminent risk of harm to you or others, suspected child or elder abuse, or when ordered by a court. These limits are explained in the Notice of Privacy Practices and in the informed consent documents reviewed at the start of treatment.

Your rights

Under HIPAA, you have the right to:

  • Request access to your health records
  • Request corrections to your records
  • Request restrictions on how your information is used or disclosed
  • Request an accounting of disclosures of your health information
  • File a complaint if you believe your privacy rights have been violated

To exercise any of these rights, please use the contact information below.

Security

Reasonable administrative, technical, and physical safeguards are in place to protect your personal and health information from unauthorized access, disclosure, or misuse. This website and its contact form use a secure, encrypted connection (HTTPS).

External links

This website links to other sites, such as Google Maps, Paoli Psychological Associates, and outside resources about CBT and psychological testing. Those sites have their own privacy practices, and we encourage you to review their policies.

Changes to this policy

This policy may be updated from time to time. Changes will be posted on this page with a new “last updated” date. Continued use of this website after changes are posted means you accept the updated policy.

Contact

If you have questions about this privacy policy, or would like to exercise your privacy rights, please contact:

Dr. Bill Morgan, Psy.D.
Paoli Psychological Associates
43 Leopard Road, Suite 200
Paoli, PA 19301
610.644.8182
info@drbillmorgan.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr.

This privacy policy is provided for informational purposes and reflects standard private-practice requirements under HIPAA and Pennsylvania law. Please direct any questions to the office.