Privacy Policy

1. Introduction

This Privacy Policy describes how our therapy practice ("we", "us", or "Company") collects, uses, and shares your personal information when you use our website and services. We are committed to protecting your privacy and ensuring you have a positive experience on our site.

As a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

Information You Provide Directly

• Contact information (name, email, phone number, address)
• Health and medical information (diagnosis, treatment history, medications)
• Insurance information
• Payment information
• Communication preferences
• Information provided through contact forms or appointment requests

Information Collected Automatically

• Browser and device information
• IP address and location data
• Pages visited and time spent on site
• Cookies and similar tracking technologies
• Referral source

3. How We Use Your Information

We use your information to:

• Provide and improve our therapy services
• Schedule and manage appointments
• Process payments and insurance claims
• Communicate with you about your care
• Comply with legal and regulatory requirements
• Prevent fraud and enhance security
• Send you educational materials and updates (with your consent)
• Analyze website usage and improve user experience

4. Legal Basis for Processing (GDPR)

For users in the EU, we process your personal data based on:

• Your explicit consent
• Performance of a contract with you
• Compliance with legal obligations
• Protection of vital interests
• Our legitimate interests

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Healthcare providers involved in your care (as permitted by HIPAA)
• Insurance companies for billing and claims processing
• Service providers who assist us (under strict confidentiality agreements)
• Legal authorities when required by law
• Emergency services when necessary to protect health or safety

All third parties are contractually obligated to maintain the confidentiality and security of your information.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication protocols
• Regular security audits and updates
• Limited access to personal information
• Employee training on data protection

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

GDPR Rights (EU Users)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

New Jersey Residents (New Jersey Data Privacy Act)

Under the New Jersey Data Privacy Act (NJDPA), New Jersey residents have the right to:

• Confirm whether we process their personal data and access that data
• Correct inaccuracies in their personal data
• Delete personal data we have collected
• Obtain a portable copy of their personal data
• Opt out of targeted advertising, the sale of personal data, and certain profiling

We will respond to verified requests within 45 days. Please note that protected health information (PHI) governed by HIPAA and New Jersey medical-confidentiality laws is handled under those laws; the rights above apply to other personal data, such as website and marketing information.

Communication Preferences

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

8. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your experience. You can control cookie settings through your browser. Please note that disabling cookies may affect website functionality. We use cookies for:

• Session management
• User preferences
• Analytics and performance monitoring
• Security and fraud prevention

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

10. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Healthcare records are typically retained for a minimum of 6 years from the date of last treatment, as required by law. After this period, information is securely destroyed.

11. International Data Transfers

If you are located outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries. By using our services, you consent to such transfers. We implement appropriate safeguards to protect your information during international transfers.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

15. Your HIPAA Rights

As a healthcare provider, we comply with HIPAA regulations. You have the right to:

• Access your medical records
• Request amendments to your records
• Request an accounting of disclosures
• Request restrictions on uses and disclosures
• Request confidential communications
• File a complaint with the U.S. Department of Health and Human Services

Last Updated: April 24, 2026