Privacy Policy
Codex Psychological and Forensic Services, PLLC
Effective Date: March 24, 2026 Last Reviewed: March 24, 2026
Introduction
Codex Psychological and Forensic Services, PLLC (“the Practice,” “we,” “us,” or “our”), operated by Dr. Genevieve Bartuski, is committed to protecting the privacy of individuals who visit this website and those who engage our professional services. This Privacy Policy explains what information we collect through this website, how we use it, how we protect it, and your rights under applicable law.
This Practice is a healthcare provider subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, as well as the Virginia Consumer Data Protection Act (VCDPA), Va. Code Ann. § 59.1-575 et seq. This Privacy Policy addresses our website data practices. Our separately issued Notice of Privacy Practices governs the handling of protected health information (PHI) collected in the course of providing professional psychological services.
This Website Does Not Use Cookies
This website does not use cookies, tracking pixels, web beacons, or similar tracking technologies. We do not track your browsing behavior, build user profiles, or share behavioral data with third-party advertisers or analytics providers. When you visit this website, no persistent identifiers are placed on your device.
Information We Collect Through This Website
Information you provide voluntarily. This website contains contact and inquiry forms that allow visitors to submit information to the Practice. The information you submit through these forms may include your name, email address, phone number, professional affiliation (such as law firm or court), and the nature of your inquiry. This information is submitted voluntarily and only when you choose to complete and submit a form.
Automatically collected technical information. Like most websites, this site may collect certain technical information automatically when you visit, including your IP address, browser type, operating system, referring URL, and the pages you view. This information is collected through standard server logs maintained by our web hosting provider, Squarespace. This information is used solely for the purpose of maintaining and improving website security and functionality and is not used to identify individual visitors or for marketing purposes.
How We Use the Information You Submit
Information submitted through website forms is used for the following purposes only:
To respond to your inquiry or referral request. To evaluate whether a professional engagement is appropriate. To communicate with you regarding the services of the Practice. To comply with applicable legal and professional obligations.
We do not use information submitted through this website for marketing purposes, and we do not sell, rent, lease, or otherwise transfer your information to third parties for commercial purposes.
Forensic Practice Context and Confidentiality Limitations
Individuals who are the subject of a forensic psychological evaluation should be aware that forensic psychological services operate under different confidentiality rules than traditional therapy. Forensic evaluations are conducted at the request of courts, attorneys, or other legal parties, and the findings are reported to those parties. The limited nature of confidentiality in forensic contexts is explained directly to evaluees before any evaluation begins.
Attorneys and other professionals who submit inquiries through this website should be aware that information shared in an initial inquiry is used only to determine whether and how the Practice can assist with a matter. No professional relationship is established by the submission of a web form inquiry alone.
HIPAA and Protected Health Information
To the extent that information collected through this website constitutes protected health information (PHI) as defined under HIPAA, it is handled in accordance with our HIPAA Notice of Privacy Practices, which is available upon request. All electronic communications with this Practice, including those initiated through website forms, are transmitted and stored using systems designed to comply with applicable HIPAA security requirements.
Virginia Consumer Data Protection Act (VCDPA)
The Virginia Consumer Data Protection Act (Va. Code Ann. § 59.1-575 et seq.), effective January 1, 2023, provides Virginia residents with certain rights regarding their personal data. To the extent the VCDPA applies to data collected through this website, Virginia residents have the following rights:
Right to know. You have the right to know whether we are processing your personal data and to access that data.
Right to correct. You have the right to request correction of inaccurate personal data we hold about you.
Right to delete. You have the right to request deletion of personal data you have provided to us, subject to applicable legal and professional retention obligations.
Right to data portability. You have the right to obtain a copy of your personal data in a portable format where technically feasible.
Right to opt out. You have the right to opt out of the processing of your personal data for purposes of targeted advertising or the sale of personal data. This Practice does not engage in targeted advertising or the sale of personal data, so this right is not implicated by our current practices.
Sensitive data. To the extent that information submitted through this website constitutes sensitive data as defined under the VCDPA — including data concerning an individual’s health — such data is processed only for the purposes described in this Privacy Policy and in accordance with applicable law.
To exercise any of the rights described above, please contact us using the information provided at the end of this policy. We will respond to verifiable requests within the timeframes required by law. We will not discriminate against you for exercising your privacy rights.
Data Retention
Information submitted through website forms is retained for the period reasonably necessary to respond to your inquiry and, where a professional engagement results, in accordance with applicable professional, ethical, and legal record retention requirements. Virginia law and the ethical standards of the American Psychological Association govern our record retention obligations for professional services. Information that does not result in a professional engagement is retained only as long as necessary to address the inquiry.
Third-Party Service Providers
This website is hosted by Squarespace, Inc. Squarespace may collect certain technical information as part of providing hosting services. Squarespace’s privacy practices are governed by its own privacy policy, available at squarespace.com. We do not control Squarespace’s data practices and encourage you to review their policy directly.
We use HIPAA-compliant video conferencing technology to conduct remote evaluations. That platform’s privacy and security practices are governed by a Business Associate Agreement executed between the Practice and the platform provider, consistent with HIPAA requirements.
Beyond our hosting provider and video conferencing platform, we do not share information collected through this website with third-party service providers except as required by law or as necessary to fulfill a professional engagement with your knowledge and consent.
No Artificial Intelligence in Professional Services
As a matter of professional policy, Codex Psychological and Forensic Services does not use artificial intelligence tools in the delivery of forensic psychological services. This includes, but is not limited to, the review of records, formulation of professional opinions, and preparation of reports. This policy applies to all services provided by the Practice and is described in full in our separately published AI Policy, available on this website.
No AI tools are used to process, analyze, or respond to information submitted through this website’s contact forms.
Children’s Privacy
This website is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors through this website. The professional services of this Practice are provided in connection with legal proceedings and are directed to courts, attorneys, and other legal professionals. If you believe a minor has submitted personal information through this website, please contact us immediately.
Security
We take reasonable and appropriate measures to protect information submitted through this website from unauthorized access, disclosure, alteration, or destruction. These measures include the use of encrypted transmission protocols (HTTPS) and secure hosting infrastructure. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law, including Va. Code Ann. § 18.2-186.6.
Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Changes will be posted to this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of this website following the posting of changes constitutes your acknowledgment of the updated policy.
Contact Information
Questions, concerns, or requests regarding this Privacy Policy or your personal data may be directed to:
Dr. Genevieve Bartuski Codex Psychological and Forensic Services, PLLC, PO Box 1732, Chihowie, VA 24319, (276) 246-2912, drbartuski@codexpsych.com
This Privacy Policy does not constitute legal advice. Dr. Bartuski is not an attorney. This policy has been prepared in good faith based on applicable law as of the effective date and should be reviewed periodically by qualified legal counsel to ensure continued compliance with evolving legal requirements.