Rau Neuropsychology, LLC

Privacy Policies

Last updated: August 8, 2026

OVERVIEW OF THIS POLICY

This Privacy Policy (this “Policy”) relates to the personal information that you submit when you access and use Rau Neuropsychology, LLC (the “Practice,” “we,” “us,” or “our”) website – rauneuropsychology.com (“Website”) and other information we automatically collect when you access the Website. This Policy explains all activities regarding your information, including but not limited to how we collect, use, disclose, and secure it and the rights available to you.

Please review this Policy and our Terms of Use carefully and retain a copy of each for your records. All defined terms not defined in this Privacy Policy shall have the meaning ascribed to them in the Terms of Use.

This Policy describes how we collect, use, disclose, and secure your information when you access and use our Website. By using the Website, you acknowledge that you have read and understand this Policy. Where applicable law requires your consent for specific processing activities, such as the use of non-essential cookies, processing of sensitive personal data, or behavioral advertising, we will obtain that consent separately. If you do not agree with the practices described in this Policy, you should not use the Website or submit information.

WHAT INFORMATION DOES THE PRACTICE COLLECT FROM YOU?

1. Sensitive Personal Information We Do Not Collect

Except as expressly authorized by you, we do not collect the following categories of “sensitive personal information” through our Website. Please note that certain categories listed below, such as protected health information and account login credentials, may be collected through our secure client portal, My Best Practice, (“Client Portal”) or in connection with clinical services and are governed by our Notice of Privacy Practices (NPP) rather than this Policy:

  • Social Security Numbers

  • Driver’s license or passport numbers

  • Account numbers or login credentials

  • Precise geolocation

  • Protected health information

  • Credit or criminal records

  • Racial or ethnic origin

  • Political opinions

  • Membership in political, professional, or trade associations

  • Trade union membership

  • Religious beliefs or affiliations

  • Philosophical beliefs

  • Sexual orientation or sexual practices

  • Biometric information

  • Contents of mail, email, or text messages (except messages sent through the Website)

2. Personal Information You May Provide

Information you voluntarily provide to us (“personal information”) when using our Website may include:

  • First and last name

  • Your child’s first and last name

  • Date of birth

  • Home address

  • Email address

  • Home telephone number

Protected Health Information (PHI)

The Website is not designed or intended to collect Protected Health Information ("PHI"). However, because the Practice may be subject to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), certain personal information submitted through the Website, such as your name, date of birth, or contact information, may constitute PHI if it relates to your health condition, health care, or payment for health care. PHI includes individually identifiable health information relating to an individual’s past or present health, medical conditions, medical histories, physical examinations, genetic information, disability status, or payment for health care services.

Do not provide any Protected Health Information through our Website or by email. Once you become a patient, PHI may only be submitted through our secure Client Portal.

To the extent any information collected through the Website constitutes PHI, it will be handled in accordance with our Notice of Privacy Practices (NPP). A current copy of our NPP is available on our Website at: Notice of Privacy Practices. This Privacy Policy applies to information collected through our Website and does not replace the NPP. In the event of any conflict between this Privacy Policy and the NPP with respect to Protected Health Information, the provision that provides greater protection for your Protected Health Information shall control.

Clinical Information for Neuropsychological Services

 

With your consent, we may collect additional personal information necessary to provide neuropsychological services. This may include:

  • Medical, developmental, and educational history

  • School records, psychological testing results, and reports from other clinicians

  • Communication preferences, including accommodations for Deaf and Hard of Hearing patients

  • Notes and documentation from evaluations, consultations, and follow‑up communications

We use this information solely to provide clinical services, including evaluations, consultations, written reports, feedback sessions, coordination with schools or medical providers, and authorized legal or forensic services, unless otherwise required by law. 

Do not provide any clinical information through our Website or by email.  Clinical information may only be submitted through our secure Client Portal once you become a patient.

Telehealth and Telepsychology Services

The Practice offers telepsychology services under the Psychology Interjurisdictional Compact (PSYPACT) and holds an active Authority to Practice Interjurisdictional Telepsychology (APIT). The Practice is licensed in Maryland and authorized to provide telepsychology services to patients located in PSYPACT-participating states. Prior to beginning telepsychology services, the Practice will obtain your written informed consent, which addresses privacy and security risks, emergency protocols, and other requirements specific to telepsychology.

WHAT DOES THE PRACTICE USE INFORMATION COLLECTED FOR?

Any information collected by us is in connection with your use of the Website, including: 

  • Provide services to you: We collect information to enable you to use the Website, provide services, or provide other types of patient relationship management and fulfillment.

  • To allow communication with you: We collect your email address and phone number to (i) contact you regarding your use of our Website, (ii) respond to your questions, complaints, and queries, (iii) send you our periodic newsletters with important updates, and (iv) send you updates regarding our Website or this Policy and other agreements.

  • Research, Training, and Educational Initiatives: The Practice may participate in research, training, and educational activities to advance clinical knowledge and improve neuropsychological services. Identifiable patient information is never used for research or training without explicit written consent. Aggregate or de-identified information may be used to improve clinical practice, training programs, and professional knowledge in neuropsychology.

  • Analytics: We collect information for use in performing various types of analytics. For example, we use the information to analyze how visitors interact with our Website, where visitors to our Website arrive from and exit to, pages visited, links clicked, text entered and mouse movements to understand site usage, to detect fraud and potential threats and improve our Website.

  • Provide technical support: We collect information to optimize or improve our Website and operations, for example, training and quality assurance, data analysis, audits, developing new products, enhancing our Website, improving our products and/or Website, and identifying Website trends.

  • Fulfilling legal and compliance obligations: We collect information to fulfill our legal obligations. We may also collect information to detect fraud or other suspicious activity.

  • For other purposes through your consent: We may collect and process your information for other purposes for which your consent will be sought before we process such information.

We may use anonymous information that we collect from you for any legal purpose whatsoever, except where we are required to do otherwise under applicable law (for example, if we are required to treat such information as your personal information). If we combine your information that is not in a personally identifiable form with information that is (such as combining your name with your geographical location), we will treat the combined information as your personal information as long as it is combined.

DO THIRD PARTIES COLLECT OR USE INFORMATION?

When you use the Website, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include:

  • The third-party software and service providers identified in the "Third-Party Software/Website" section below.

  • Analytics companies. 

These third parties may use tracking technologies to collect information about you when you use the Website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third-party tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Third-Party Software/Website.  We use the following third-party software/Website to collect and process your personal data for the following reasons:

  • My Best Practice: to serve as our electronic health record (EHR) system and secure Client Portal for managing patient records, scheduling, and communications.

  • Squarespace: to host and operate our Website.

By using and continuing to use the Website, you agree to all privacy policies and other terms of these third-party software and service companies.  You agree not to hold us responsible for any claims or liabilities arising out of the use of these third-party software and services.

HOW PERSONAL DATA IS COLLECTED.

Active Collection.  Some features of our Website may ask you to submit your personal information in order for you to benefit from the specified features. We collect personal information from you only when you voluntarily submit it to us, such as when you:

  • Submit materials through our Website.

  • Complete intake documents or any other form.

  • Purchase a product or service from us or from one of our vendors, suppliers or other agents.

  • Sign-up to receive email newsletters or other correspondence.

  • Request email, mail or telephone support or services.

You will be informed on what information is required and what information is optional at the time of your submission.

Passive Collection. As you use our Website, we may passively collect (that is, gathered without you actively providing the information) non-personal identifiable information and/or use the following technologies which collect such information on our behalf:

Browser and/or Device Information. Certain information is collected from most browsers, such as your IP address, your media access control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system version, internet browser type and version. We also may collect information about any mobile device used to access our Website, such as a unique device identifier and type if you access our Website through a mobile device. Your IP address is a number that is automatically assigned to your computer or device by your Internet Service Provider. An IP address is identified and logged automatically in our server log files whenever a user accesses our Website, along with the time and date of the visit and/or use and the page(s) and/or features that are visited and/or used. Collecting IP addresses is standard practice on the Internet and is done automatically by many websites, including our Website.

Website Usage Data. When you access our Website, we and our service providers may track and collect application and/or Website usage data, such as date and time that your devices access our servers and what information and files have been downloaded and/or uploaded to our Website on your device number.

The Website uses cookies. A cookie is a small, removable data file that is stored by your web browser or application on your computer and/or device. Cookies allow us to collect various information including, but not limited to, browser type, time spent on our Website, features and pages visited, and language preferences. We and our service providers use this information for security purposes, to facilitate navigation, display information more effectively, serve you with more tailored information, facilitate your ongoing access to and use of our Website and to personalize your experience while using our Website. We also use cookies to recognize your computer and/or device, which makes your use of our Website easier, such as to help you log into our Website.

You can choose to have your computer and/or device warn you each time a cookie is being sent to your computer and/or device or you can choose to turn off all cookies. You do this through your computer and/or device settings. If you turn cookies off, you will not have access to many features that make your use of our Website more efficient and enjoyable, and in some cases, some of our Website will not function or will function with limited capability.

Pixel Tags, web beacons, clear GIFs and other similar technologies. We and our service providers may use pixel tags, web beacons, clear GIFs and other similar technologies in connection with some of our Website (including email messages) to, among other things, analyze our users’ behavior and information about them, track the actions of the users of our Website and/or recipients of our emails, and compile statistics about our Website usage and response rates.

SHARING INFORMATION AND DISCLOSURE

We disclose your personal information collected from you though our Website to third parties in the following manner and for the following reasons:

  • If you have consented to such disclosures.

  • If there are special circumstances, including, but not limited to, any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business or assets (including in connection with a bankruptcy, liquidation or similar proceeding) and the due diligence related to such circumstances.

  • If the third party is our service provider who provides services to us in connection with our Website.

  • If the party is our affiliate, in which case we are the party responsible (or data controller) for the management of the jointly used personal information.

  • Upon request by the government (including, but not limited to, the investigatory and enforcement powers of the Federal Trade Commission and other administrative bodies).

  • As permitted or required by applicable law.

  • In response to a court order or other legal process.

  • To enforce our Privacy Policy, Terms of Use, or other agreements and policies applicable to our Website.

  • To protect our operations, rights, privacy, safety and/or property.

  • To contact, identify or bring legal action against someone who may be causing injury to or interference with our or others’ rights or property including, but not limited to, claims for infringement of intellectual property, invasions of privacy or situations involving threats or alleged threats to the physical safety of a person’s property; or companies assisting in fraud protection or investigation.

We also may provide aggregated, non-personally identifiable information to third parties for any legal purposes whatsoever.

PROTECTING YOUR INFORMATION

We use commercially reasonable efforts to safeguard and secure your personal information while stored on our computer systems and/or transmitted to or from our computer systems. Regardless of these efforts by us, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website. If you have reason to believe that your interaction, stored data and/or transmissions to and with us are no longer secure (for example, if you feel that the security of any account that you have with us has been comprised), please immediately notify us of the problem by contacting us immediately at Inquiry@RauNeuropsychology.com.

Some features of our services may require you to set up a user ID and password. We recommend that you do not divulge your password to anyone. We will never ask you for your password in an unsolicited telephone call or email. If you suspect you have received a fraudulent communication from us or any of our affiliates, please contact us immediately at Inquiry@RauNeuropsychology.com.

Do not provide your personal or financial information in response to an email request or after clicking on a link from an email. We do not ask for this type of information through an email or any communication.

To help protect your computer and personal information, make sure you have current anti-virus and firewall software installed on your computer and update such software on a regular basis. Also, please review your credit card statements carefully and verify that all transactions are authorized and report any discrepancies immediately to your credit card company.

CHILDREN'S ONLINE PRIVACY

The Website is intended for use by individuals who are 18 years of age or older. Minors under the age of 18 may use the Website only with the consent and under the supervision of a parent or legal guardian who agrees to be bound by our Terms of Use. We do not knowingly collect personal information from children under the age of 13 without a parent’s or legal guardian’s permission. The Website is not intended to solicit information of any kind from children under the age of 13, and we have made commercially reasonable efforts to design the Website to prevent our knowing acceptance of any such information.

It is possible that by fraud, deception or error, we may receive information pertaining to children under the age of 13. If we are notified of this, as soon as we verify the information, we will immediately obtain parental consent or otherwise delete the information from our servers. If you want to notify us of our receipt of personal information belonging to a child under the age of 13, please do so at Inquiry@RauNeuropsychology.com.

CROSS-BORDER TRANSFER

The Website is controlled and operated by us from the United States and is not intended to subject us to the laws or jurisdiction of any state, country or territory other than that of the United States. Your personal information may be stored and processed in any country where we have facilities or service providers, and by using the Website or by providing consent to us (where required by law), you agree to the transfer of information to countries outside of your country of residence, including the United States, which may provide for different data protection rules than in your country. Additionally, when using or disclosing personal information transferred from the European Union, we rely on the EU-U.S. Data Privacy Framework, standard contractual clauses approved by the European Commission, or other means under European Union law for ensuring adequate safeguards, or we obtain your consent. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your personal information.

Maryland Privacy Rights

If you are a resident of the State of Maryland, you may have rights under the Maryland Online Data Privacy Act, Md. Code, Commercial Law § 14-4701 et seq. ("MODPA"). This section supplements the rest of this Policy for Maryland residents. The exemptions in MODPA for Protected Health Information governed by HIPAA and for medical-record information do not necessarily exempt all personal data collected through our Website solely because the Practice is a healthcare provider. Accordingly, this section applies to personal data collected through the Website that is not otherwise exempt under MODPA.

Consumer Rights. Subject to applicable exceptions, you have the right to:

  • Confirm whether we are processing your personal data and access that data.

  • Correct inaccuracies in your personal data.

  • Delete your personal data.

  • Obtain a copy of your personal data in a portable format.

  • Opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. 

Sensitive Data. We will not process sensitive data without first obtaining your consent. Sensitive data under MODPA includes data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data, personal data of a known child, and precise geolocation data.

Consumer Health Data. MODPA defines "consumer health data" broadly to include personal data that identifies or is reasonably linkable to a consumer's physical or mental health condition or diagnosis, including information that may be inferred from online activity. Website activity that reveals an interest in neuropsychological services, a particular condition, or treatment options may constitute consumer health data under MODPA even if it does not constitute Protected Health Information under HIPAA. We will obtain your consent before processing consumer health data and will not sell consumer health data. Consumer health data processed in connection with clinical services as Protected Health Information under HIPAA is governed by our Notice of Privacy Practices rather than this section.

Categories of Personal Data and Third-Party Sharing. The categories of personal data we collect and the purposes for which we process that data are described in the "WHAT INFORMATION DOES THE PRACTICE COLLECT FROM YOU?" and "WHAT DOES THE PRACTICE USE INFORMATION COLLECTED FOR?" sections of this Policy. The categories of third parties to whom we disclose personal data and the categories of data shared with each are described in the "DO THIRD PARTIES COLLECT OR USE INFORMATION?" and "Sharing Information and Disclosure" sections of this Policy. We use the following categories of service providers in connection with personal data collected through our Website: website hosting and analytics providers (Squarespace), electronic health record and patient portal providers (My Best Practice), and payment processors.

How to Exercise Your Rights. To exercise any of the rights described above, please email us at Inquiry@RauNeuropsychology.com. We will authenticate your identity before fulfilling your request and will respond within the time required by applicable law.

Appeal Process. If we decline your request to exercise a right under MODPA, we will inform you of our reasons. You may appeal that decision by contacting us at Inquiry@RauNeuropsychology.com with the subject line "Privacy Rights Appeal." We will respond to your appeal within the time required by applicable law. If your appeal is denied, you may contact the Office of the Maryland Attorney General to submit a complaint.

Consent Revocation. Where we process your personal data based on your consent, you may revoke that consent at any time by contacting us at Inquiry@RauNeuropsychology.com. Revoking your consent does not affect the lawfulness of processing that occurred before the revocation.

YOUR RIGHTS WITH RESPECT TO PERSONAL DATA.

  • You can review and change your personal information by sending us an email at Inquiry@RauNeuropsychology.com to request access to, correct, or delete any personal information free of charge that you have provided to us. We cannot delete your personal information except by also deleting your user account.

  • We will respond to a request to access, correct, or delete any data within a reasonable time or as required under applicable law.

  • We may not accommodate a request to change information if we believe the change would violate or breach any law or legal requirement or cause the information to be incorrect.

  • If upon your request, we refuse to amend, correct, or delete your personal information, we will set out our reasons for not doing so and provide you with details of how you may complain about our refusal.

  • If you believe that a federal, state, or local privacy law not specifically addressed in this Policy grants you rights with respect to your personal information, please contact us at Inquiry@RauNeuropsychology.com. We will review your request and respond in accordance with applicable law.

HOW LONG IS PERSONAL DATA KEPT?

We retain your personal information, as long as necessary, to fulfill the purposes it was initially collected for or otherwise required by law.  We may retain personal information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.  Clinical and patient records are retained in accordance with applicable state and federal record-retention requirements, including Maryland regulations governing the retention of psychological records. 

DO NOT TRACK AND GLOBAL PRIVACY CONTROL DISCLOSURE 

Third parties such as analytics providers and website-hosting platforms may collect information about your online activities over time and across different websites when you access or use our Website.  We honor Global Privacy Control (GPC) signals sent by your browser as valid opt-out requests where required by applicable law, including the California Consumer Privacy Act.

CHANGES TO OUR PRIVACY POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the “LAST UPDATED” legend at the top of this page will be revised accordingly. Any such change shall be effective immediately upon posting of the revised Privacy Policy within our Website. You are responsible for periodically visiting our Website and reviewing this Privacy Policy to check for any changes. Your continued use of the Website following the posting of changes constitutes your acceptance of those changes. 

CONTACT US WITH QUESTIONS AND FEEDBACK

We welcome your questions, comments, and concerns about this Privacy Policy and our privacy practices. Please contact us at:

Rau Neuropsychology, LLC

6 Montgomery Village Ave, Suite 345

Gaithersburg, MD 20879 (Address effective October 1, 2026)

Phone: 301-450-8866

Email: Inquiry@RauNeuropsychology.com