Privacy Policy

Psychiatry by Mantilla-Rivas — mantillarivas.com Effective date: September 5, 2026

This policy explains what information this website collects when you visit it, what I do with that information, and the choices you have. It is written in plain language on purpose. If anything is unclear, please ask me through the Contact page.

This policy covers the website only. Information you share with me as a patient — in appointments, through the patient portal, or in messages about your care — is protected health information and is governed by my Notice of Privacy Practices and by HIPAA, not by this policy.

Who I am

This website is operated by Jose Mantilla-Rivas, MD, a psychiatrist practicing in Florida, New York, Pennsylvania, Massachusetts, and New Hampshire, and in Colombia. You can reach me through the Contact page or at my practice mailing address.

What the website collects, and from whom

Information you type. The website itself has no forms. When you click "I'm interested in a discovery call," you leave this site and go to a form hosted by Google. That form asks for your name, date of birth, email, phone number, the state or country you'll be in for appointments, how you'd like to be contacted, and a brief description of what you're looking for help with. Only I can read the responses. Please don't include emergency information in that form; if you are in crisis, call or text 988 (in the U.S.) or go to your nearest emergency room. If you are completing the form for a child, please do so as their parent or legal guardian.

The form is hosted in a Google Workspace account covered by a HIPAA Business Associate Agreement. The form is a general-purpose Google Form; please share only the information needed for me to return your call, and save clinical detail for our conversation.

Information collected automatically. Like most websites, this site records basic technical information when you visit: the pages you view, the date and time, your approximate location (from your IP address), and the type of browser and device you use. The website platform, Squarespace, collects this on my behalf and shows it to me only in aggregate — for example, how many people read a blog post. Squarespace also keeps a short-lived security cookie so that the site functions.

Cookies and analytics — only if you accept. When you first visit, a banner asks whether you accept non-essential cookies. If you click "Decline all" or ignore the banner, no analytics cookies are set and nothing is shared with Google. If you click "Accept all" (or turn on "Performance and Analytics" under "Manage cookies"), Google Analytics records which pages you visit so I can understand how the site is used. Google Analytics is configured with IP anonymization and with Google Signals (cross-device and advertising features) turned off. You can change your choice at any time by opening "Manage cookies" from the banner or the cookie icon on the page.

[If you removed Google Analytics entirely, replace the paragraph above with:] The only analytics on this site are Squarespace's built-in statistics, which stay on my own site and are shown to me in aggregate. The cookie banner lets you turn even those off.

Translation. The English/Español switcher is provided by Weglot. Weglot delivers translated text for the pages; it does not receive anything you type.

Payments. If you purchase a service through the Services page, checkout is handled by Squarespace Commerce. Your card details go directly to the payment processor and are never stored on this website. I partner with IvyPay and Thrizer for out-of-network billing; those are separate services with their own privacy policies, and you use them only if you choose to.

What I don't do

I don't run advertising on this site or use advertising pixels from Meta, TikTok, Google Ads, or anyone else. I don't use session-recording tools, heat maps, or chat widgets. I don't sell your information, and I don't share it with anyone for marketing. The only companies that touch website data are the ones named above — Squarespace, Google, Weglot, and the payment processor — and each acts only as a service provider to me.

How long information is kept

Squarespace's aggregate site statistics are kept by Squarespace according to its own retention settings. Google Analytics data, if you accepted it, is kept for 2 months and then deleted automatically. Responses to the discovery-call form are kept until I've returned your call and, if you become a patient, moved into your clinical record; otherwise deleted within 30 days.

Children

This site is meant for adults, including parents and guardians seeking care for a child. I don't knowingly collect information directly from anyone under 18 through the website. If you believe a child has submitted the form on their own, contact me and I will delete the response.

Your choices and rights

You can decline or withdraw consent to analytics cookies at any time using the cookie banner. You can ask me what information I hold about you from the website, ask me to correct or delete it, or ask me not to contact you, by writing to me through the Contact page. I'll respond within 30 days. If you are a patient, requests about your health records go through the process described in my Notice of Privacy Practices.

Depending on where you live, you may have additional rights under your state's privacy law. I honor those requests regardless of where you live.

Security

The site is served over HTTPS. Form responses are protected by the security controls of the Google account that hosts them, and I am the only person with access.

Changes to this policy

If I change how the website collects or uses information, I'll update this page and the effective date at the top. Meaningful changes — for example, adding a new analytics tool — will be reflected in the cookie banner as well.

Contact

Questions about this policy or about your information: use the Contact page at mantillarivas.com/contact, or write to 6501 Arlington Expressway, Jacksonville, FL 32211