Privacy policy

Last updated: September 2026

Tenfold Therapy is the online therapy and coaching practice of Tina Bilyeu, LMHC, based in Florida, United States. Tina is responsible for your information and is the person to contact about it: hello@tenfoldtherapy.com. Trust is the foundation of therapy, so this page explains plainly what this website collects, why, where it is kept, for how long, and what you can ask for. It applies to clients wherever they live, including clients in Egypt, Saudi Arabia, the United Arab Emirates, and other countries.

What this website collects and why

• Booking: your name, email, phone number, date of birth, an emergency contact, the session you booked, and an optional short note about what brings you in. Used to schedule and provide your sessions, to reach someone if your safety is at risk, and to take payment.
• Reduced fee requests: your name, email, country, and your note. Used to decide on a reduced fee.
• Messages: what you send through the contact form or the website assistant, and your email. Used to reply to you.
• Reviews: what you submit on the reviews page, published only with your consent and after approval.
• Approximate location: on the booking page your IP address is checked on this website's own server against a country database and a list of VPN and data-center networks, so regional pricing can be applied. It is never sent to an outside service and is not used to track you. IP geolocation by DB-IP.

Some of this is health information, which privacy laws treat as sensitive. It is only collected with your explicit consent, which you give with a separate checkbox on each form, and it is used only to arrange and provide your care. Your consent is recorded with the date and the version of the wording you agreed to.

Where your information is kept

Everything is stored and processed in the United States, which may have different privacy laws from your country. Only these providers handle it, each under a written agreement to protect health information (a HIPAA Business Associate Agreement), except Stripe, which only sees payment details:

• Amazon Web Services hosts this website, its database, and its emails.
• Sessions Health holds your clinical record and runs the secure video sessions.
• Stripe processes card payments. Your card details go directly to Stripe and never touch this website. Stripe only sees a generic session charge, nothing about your care.
• The practice email provider carries messages between you and Tina.

Your information is never sold, and never used for advertising.

How it is protected

Sensitive fields (date of birth, emergency contact, intake note, reduced-fee note, and messages) are encrypted before they are stored, and the whole database sits on encrypted storage. Only Tina can see it, her sign-in is protected with two-step verification, and every time client information is viewed or changed it is recorded in an audit log. Emails from this site contain scheduling details only, never clinical content.

How long it is kept

• If you start a booking but never pay, your details are deleted automatically after 30 days.
• Resolved messages and reduced-fee requests are deleted after 12 months.
• For clients, booking records are kept for 7 years after the last session, because Florida law requires therapy records to be kept that long. They are then anonymized automatically.
• Email verification codes are deleted after one day.

Your rights

Wherever you live, you can ask to:

• get a copy of the information held about you;
• have it corrected;
• have it deleted, except what the law requires to be kept;
• withdraw your consent (this does not affect what was done before you withdrew);
• object to or limit how your information is used.

Use the privacy request form or email hello@tenfoldtherapy.com. You will get an answer within 30 days. Your clinical record in Sessions Health is covered by the same rights; Tina handles both together.

If something goes wrong

If your information is ever exposed in a security incident, you will be told without delay, along with what happened and what you can do, and the authorities that the law requires will be notified (generally within 72 hours).

Your clinical records and HIPAA

Clinical records, including your full intake paperwork, live in the Sessions Health record system, not on this website. As a client you receive a Notice of Privacy Practices explaining how health information may be used and disclosed and your rights under HIPAA, including access, corrections, restrictions on certain disclosures, and an accounting of disclosures. Confidentiality has narrow legal limits, such as imminent risk of serious harm or a court order; these are covered in the informed consent.

Questions or complaints

Contact hello@tenfoldtherapy.com with any privacy question or concern. You can also complain to the authority where you live, for example the Saudi Data and Artificial Intelligence Authority (SDAIA), Egypt's Personal Data Protection Center, the UAE Data Office, or Bahrain's Personal Data Protection Authority, or in the United States to the Department of Health and Human Services Office for Civil Rights.