Privacy & notices
Privacy & notices
This website collects as little as possible: no cookies, no analytics, no tracking, and no forms.
This website
- No cookies, analytics, advertising, or tracking pixels. Fonts and images are served from this website itself; your browser makes no requests to third parties while you read it.
- No forms. The site does not ask for, collect, or store personal information.
- Server logs. Like any web server, ours records technical details of each request — IP address, browser type, page requested, and time — to keep the site secure and reliable. Logs are kept for a limited period and then deleted; they are not used to identify or profile visitors.
- Cloudflare. The site is delivered through Cloudflare, which protects it from attacks and processes the same technical request data on our behalf. It sets no tracking cookies; a strictly necessary security cookie appears only if suspicious traffic has to be challenged.
When you email the office
Email is handled by the practice’s email provider and is used only to reply to you. Standard email is not a secure channel, so please do not send diagnoses, medications, or other detailed health information by email.
Clients of the practice
Before care begins, every client receives the practice’s Notice of Privacy Practices, which explains how health information is used and protected under HIPAA and California law, and the limits of confidentiality.
Professional disclosures
- Flora Ma, PhD — Licensed Psychologist, State of California.
- Dr. Ma’s private practice is independent of Stanford University and Stanford Health Care. References to her faculty appointment are for identification only and do not imply endorsement by Stanford.
- Information on this website is for general educational purposes. It is not medical or psychological advice and does not create a psychologist–client relationship.
- Clients who pay for care themselves have the right to a written Good Faith Estimate before services — see the full notice.
Accessibility
This website is built to meet WCAG 2.2 AA: it works with a keyboard and screen readers, respects reduced-motion and dark-mode preferences, and scales with your browser’s text size. If anything is difficult to use, please let the office know.
Security
To report a security issue with this website, see security.txt.
Last updated: November 9, 2026