Privacy Policy

Effective date: 2026-04-30. Edition PPR-PRIVACY-2026-V1. Material updates trigger a versioned republication; the prior version remains accessible under the same URL with a banner pointing to the current edition.

Summary

The site does not run advertising, does not sell or share personal information, does not use cookies for tracking, and does not participate in any cross-site tracking network. The institute collects email addresses of subscribers and press contacts who voluntarily provide them, plus aggregate anonymous site analytics. Subscribers can unsubscribe at any time. Anyone may request access, correction, or deletion of their information by writing to press@privatepracticeresearch.org.

Scope

This policy applies to https://privatepracticeresearch.org and to any communications sent by Private Practice Research to subscribers, press contacts, research collaborators, and the general public. The institute does not operate consumer-facing transactional services. The institute does not sell or rent personal information to any third party.

What information is collected

• Newsletter subscribers. Email address, submitted voluntarily through the subscribe form, used solely to deliver Private Practice Research publication digests. Subscribers can unsubscribe at any time via a one-click link in every email.
• Press inquiries. Email address and any content the inquirer voluntarily provides when contacting press@privatepracticeresearch.org.
• Aggregate site analytics. Vercel Analytics and Vercel Speed Insights collect aggregate, anonymized usage data: page paths visited, referrer domain, country (not city), device type, and Core Web Vitals timing. No personally identifying information is captured. Vercel Analytics does not use cookies.
• Server logs. Standard request logs (IP address, request path, user agent, timestamp) retained for 30 days for security and operational purposes; not joined to any other dataset.

Cookies and tracking

The site does not set advertising cookies, marketing cookies, or third-party analytics cookies. The site does not participate in any cross-site tracking network. Vercel platform may set strictly functional cookies for security or routing; these are not used for tracking.

See the Cookie disclosure for the current list of any platform cookies in use.

AI crawlers and content licensing

Private Practice Research publications are licensed CC BY 4.0 unless a publication notes a more restrictive license. AI search and training crawlers are explicitly permitted in robots.txt; the institute considers AI citation a desirable distribution channel for source-cited research.

Your rights

• Access. You may request the institute disclose what information it holds about you by writing to press@privatepracticeresearch.org. The institute will respond within 30 days.
• Correction. You may request correction of any inaccurate information by the same channel.
• Deletion. You may request deletion of any information the institute holds about you. The institute will comply within 30 days unless retention is required by law.
• Newsletter unsubscribe. Use the unsubscribe link in any email or write to press@privatepracticeresearch.org. Unsubscribes are processed immediately.

Retention

• Newsletter subscriber list: retained for as long as the subscription is active; deleted within 30 days of unsubscribe.
• Press inquiry correspondence: retained for editorial and audit purposes for the duration of the publication cycle plus three years.
• Server logs: 30 days, then deleted.
• Aggregate analytics: indefinite (no personal information).

Third-party processors

The institute uses the following named processors. None are used for advertising or behavioral profiling.

• Vercel, Inc. — hosting platform; serves the site and provides aggregate, cookieless analytics (Vercel Analytics + Vercel Speed Insights). Server logs are retained on Vercel infrastructure for the period stated in the Retention section below. Vercel privacy policy.
• Namecheap, Inc. — domain registrar and email forwarding for press@privatepracticeresearch.org. Email is forwarded to the institute’s designated inbox; Namecheap does not retain forwarded message content beyond standard mail-relay logging. Namecheap privacy policy.
• Future newsletter delivery vendor (forthcoming). When the institute integrates a transactional-email service (e.g., Resend), it will be named here and a privacy link added before any subscriber email passes through it.

California residents (CCPA / CPRA)

California residents have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. Private Practice Research does not sell or share personal information for cross-context behavioral advertising; there is no opt-out to exercise on that ground because no such sharing occurs. To exercise access, deletion, or correction rights, write to press@privatepracticeresearch.org. The institute will respond within 45 days as required by CPRA, with a single 45-day extension if needed and disclosed.

EU and EEA residents (GDPR)

EU and EEA residents have the rights of access, rectification, erasure, restriction, portability, and objection under the General Data Protection Regulation. The institute’s lawful bases for processing are: (a) consent for the newsletter (given by submitting the subscribe form); (b) legitimate interest for press correspondence and aggregate site analytics. Withdraw consent for the newsletter via any unsubscribe link or by writing to press@privatepracticeresearch.org. To exercise other GDPR rights, contact press@privatepracticeresearch.org; the institute will respond within 30 days. The institute does not have an EU representative because EU-resident data processing is incidental and limited; if the volume of EU subscriber data warrants representation in the future, an EU representative will be appointed and named here.

Do Not Track

The site does not respond to Do Not Track browser signals because the site does not engage in cross-site tracking. There is no behavior to suppress.

Jurisdiction and disputes

Private Practice Research is operated from the United States. This policy is governed by the laws of the United States and applicable state law. Privacy-related disputes that cannot be resolved by direct communication with the institute may be addressed under applicable consumer-protection law in the user’s jurisdiction.

Children’s privacy

The site and its publications are not directed at children under 13. The institute does not knowingly collect information from children under 13. If a parent or guardian believes the institute has collected information from a child under 13, please contact press@privatepracticeresearch.org and the information will be deleted.

Updates to this policy

Material changes to this policy trigger a new edition (`PPR-PRIVACY-YYYY-VN`) with a dated note here. Trivial updates (typos, link maintenance) are made in-line without an edition increment.

Contact

Privacy questions, access / correction / deletion requests: press@privatepracticeresearch.org.