Privacy Policy

Last Updated: 18/4/2023

At Brooklyn Rehab Physical Therapy, we understand that you value the privacy of your personal information. We are committed to safeguarding your privacy and want to ensure that you are aware of our Privacy Policy.

When you use or access our Services, you acknowledge that you agree to the practices and policies outlined in this Privacy Policy. You also give your consent for us to collect, use, and share your information in the ways specified in this policy. It’s important to note that your use of Brooklyn Rehab Services is always subject to the Terms of Use, which includes this Privacy Policy. If there are any terms used in this Policy that are unclear, please refer to that document for definitions.

This Privacy Policy explains how we treat the Personal Information we collect from you while you are using our Services. It includes any information that identifies or relates to you as an individual, such as your name, email address, or phone number. This also covers your “protected health information” (“PHI”) as defined by HIPAA, which is treated differently than other Personal Information.

However, it’s important to note that this Privacy Policy does not cover the practices of companies that we do not own or control, or the actions of people we do not manage.

We collect various types of Personal Information from our users, which we use internally to personalize, provide, and improve our services. This includes allowing you to set up a user account, contacting you, fulfilling your requests for products and services, and analyzing how you use our Services. We may also share some Personal Information with third parties in certain cases, as described in this policy.

We do not knowingly collect or solicit Personal Information from anyone under the age of 13 without parental consent or from individuals residing outside of the United States. If you are under 13 years of age without parental consent or live outside the United States, please do not attempt to register for our Services or share any personal information with us. If we find that we have collected Personal Information from a child under 13 without parental consent or an individual residing outside the United States, we will delete it as soon as possible. If you suspect that a child under 13 may have provided us with Personal Information without parental consent, please contact us at support@brooklynptrehab.com.

Will Brooklyn Rehab Physical Therapy make changes to its Privacy Policy in the future ?

We are constantly striving to improve our services, so we may need to make changes to our Privacy Policy from time to time. If we do make changes, we will notify you by placing a notice on our website or applications, sending you an email, or using some other means of communication. Even if you have chosen not to receive legal notice emails from us, any legal notices will still apply to your use of our services, and you are responsible for reading and understanding them. If you continue to use our services after any changes to the Privacy Policy have been posted, it means you agree to the updated policy.

What types of information does Brooklyn Rehab Physical Therapy collect?

We collect personal information from various sources, including you and third-party providers. When you register with us or use our services, we may collect personal information such as your name, home address, email address, and phone number. We may also use cookies to automatically receive and record information whenever you interact with our services. Additionally, we may receive information about you from our service providers, analytics partners, advertising partners, and public records.

What is the purpose of collecting and disclosing Personal Information?

We collect and use personal information for various purposes, including creating and managing your account, personalizing the services we offer you, processing orders or transactions, providing support, improving our services, carrying out fraud protection, and security measures. We may also use personal information for marketing purposes, such as selling our services and showing you interest-based or online behavioral advertising. We may correspond with you to respond to any inquiries, requests, or complaints you may have, and to send you information about our services. We may also use your personal information to meet our legal obligations, enforce legal terms, protect our rights, property or safety, or resolve disputes.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If you are a California resident, please note that we only use or disclose your sensitive personal information for the purposes set forth in section 7027(m) of the CPRA regulations and we do not collect or process sensitive personal information with the purpose of inferring any characteristics about California residents.

What are my rights regarding my Protected Health Information (PHI)?

You can request an electronic copy of your medical record and other PHI by contacting us at support@brooklynptrehab.com. We will provide you with a copy or summary of your health information within 15 days of your request or as required by law. Your record will be sent via email to the address specified in your account details.

You may also request that we correct any PHI about you that you think is incorrect or incomplete. We will respond within 60 days of your request or as required by law.

You have the right to request confidential communications and restrict access to certain PHI. We will accommodate reasonable requests, but we are not required to agree if it would affect your care.

You may request a list of when and with whom we’ve shared your PHI, and we will provide one Accounting each year at no cost to you. You may also request a paper copy of this Privacy Policy at any time.

If you would like to assign an individual medical power of attorney, you may do so by contacting us at support@brooklynptrehab.com. This individual may exercise your rights and make choices about your PHI.

You have the right to inspect and copy your own health information, but we are not required to provide access to all health information we maintain. Access may also be denied if disclosure would endanger you or another person.

You have the right to verbally object to certain disclosures made for treatment, payment, or health care operations without an authorization. An authorization is required for most uses and disclosures of your health information for marketing purposes and disclosures that constitute a sale of protected health information. You may revoke a validly executed authorization.

If your unsecured protected health information is breached, you have the right to be notified.

You may file a complaint if you feel we have violated your rights by contacting us at support@brooklynptrehab.com.

Will Brooklyn Rehab Physical Therapy share any of the Personal Information it receives?

Brooklyn Rehab Physical Therapy may disclose your Personal Information to third parties as described in this section. Depending on applicable state laws, some of these disclosures may be considered a “sale” of your Personal Information. For more information, please refer to the state-specific sections below.

De-identified information: Your Personal Information may be de-identified so that you cannot be identified as an individual, and this information may be shared with our partners or used in connection with our business. We may also provide aggregate usage information to our partners (or allow partners to collect such information from you) to understand how often and in what ways people use our services, in order to provide an optimal online experience. However, we will never disclose aggregate usage or de-identified information to a partner (or allow a partner to collect such information) in a way that would identify you as an individual.

Affiliated businesses/business partners: In certain situations, businesses or third-party websites that we are affiliated with may sell or provide products or services to you through or in connection with our services (either alone or with us). You can recognize when an affiliated business is involved in such a transaction or service, and we will only disclose your Personal Information to that affiliated business to the extent necessary for such transaction or service. We have no control over the policies and practices of third-party websites or businesses with regard to privacy or anything else, so please review all such business’ or websites’ policies if you choose to participate in any transaction or service related to an affiliated website or business.

Service providers: We use other companies and individuals to perform tasks on our behalf and need to disclose your information to them in order to provide products or services to you. For example, we may use a payment processing company to receive and process your credit card transactions. Unless we inform you otherwise, our service providers have no right to use the Personal Information we disclose to them beyond what is necessary to assist us.

User data and submissions: Certain user information, such as your name, location, and any video or image content uploaded to our services, may be displayed to other authorized users (such as your Brooklyn Rehab Physical Therapist and/or the Brooklyn Rehab Concierge) to facilitate user interaction within the services or to address your request for our services.

Business transfers: We may choose to buy or sell assets, and may disclose and/or transfer customer information in connection with the evaluation of and entry into such transactions. If we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party.

Analytics partners: We may use analytics partners, such as Google Analytics, to help us grow our business, improve and develop our services, monitor and analyze service usage, aid in our technical administration, and increase the functionality and user-friendliness of our services. These services may collect and retain certain information about you, such as the IP address assigned to you on the date you use our services, but not your name or other personally identifying information. We do not combine the information generated through the use of these services with your Personal Information. Although these services may place a persistent cookie on your web browser to identify you as a unique user the next time you use our services, the cookie cannot be used by anyone but Google. The Google Analytics services’ ability to use and disclose information about your use of the services is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You may find additional information about Google Analytics at http://www.google.com/policies/privacy/partners/. Finally, you can opt out of Google Analytics by visiting https://tools.google.com/dlpage/gaoptout/.

Partners for advertising: We work with third-party partners who help us promote our services and offer you other relevant content. These partners may include ad networks, data brokers, and marketing providers.

Protection of Brooklyn Rehab Physical Therapy and others: We reserve the right to access, read, store, and disclose any information that we deem necessary to comply with the law or a court order; enforce our Terms of Use and other agreements; or safeguard the rights, property, or safety of Brooklyn Rehab Physical Therapy, our staff, our users, or others.

When you use our Services, we automatically collect information from your browser or device, such as your IP address, geolocation data, device identification, and the type of browser and device you are using. We also use cookies, which are identifiers that we transfer to your browser or device to recognize it and track how you use our Services. You can adjust your browser or device preferences to prevent or limit the acceptance of cookies, but this may affect some of our Services’ features.

If you click on a link to a third-party website or service, they may also transmit cookies to you. We are not responsible for their privacy policies or practices, and their cookies may continue to track your online activities after you leave our Services.

We use this data to customize content for you based on your usage patterns and to improve our Services. We use four types of cookies: essential cookies, functional cookies, performance/analytical cookies, and retargeting/advertising cookies.

Essential cookies are necessary for providing features or services that you have requested, and disabling them may make certain features and services unavailable. Functional cookies record your preferences and settings and help us personalize our content for you. Performance/analytical cookies allow us to understand how visitors use our Services, and retargeting/advertising cookies collect data about your online activity to provide relevant advertising.

You can manage your cookie preferences through your internet browser’s settings and delete all cookies already on your device. However, doing so may require you to manually adjust some preferences each time you visit our website, and some functionalities may not work. For more information about cookies, including how to manage and delete them, please visit http://www.allaboutcookies.org.

We may display ads on our website and allow third-party advertising networks, including ad servers, ad agencies, technology vendors, and research firms, to display ads on our behalf. These ads may be tailored to users based on certain profile categories or preferences (“Interest-Based Ads”). We may collect information for Interest-Based Ads, including personal information, from you or by tracking your usage patterns on our website and other third-party services. To do this, we or our service providers may use Cookies, including web beacons, which allow ad networks to provide anonymous data for auditing, research, and reporting. These web beacons also allow ad networks to serve targeted ads to you on other websites and set their own Cookies on your browser.

We strive to follow the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Principles for Online Behavioral Advertising. The DAA and the Network Advertising Initiative (“NAI”) have developed a self-regulatory program to help consumers better understand and control ads that are customized based on their online behavior across different websites. To opt-out of receiving behaviorally targeted ads from participating organizations and make choices about Interest-Based Ads, please visit the DAA’s or NAI’s consumer opt-out pages at http://www.networkadvertising.org/choices/ or http://www.aboutads.info/choices.

At Brooklyn Rehab Physical Therapy, we are committed to protecting your privacy and will never rent or sell your personal health information (PHI). We will only use or share your PHI as described below, unless you have explicitly given us written permission to do otherwise.

We may share your PHI with family members, guardians, or other individuals involved in your care or treatment, but only as specifically requested by you or in circumstances where you have had the opportunity to agree or object (verbally or in writing) and have been notified in advance.

We may also share your PHI with our business associates, who are individuals or entities under contract with us to perform or assist in a function or activity that requires the use of your health information. This may include consultants, accountants, and third-party billing companies.

In order to provide you with our services and manage your treatment, we may share your PHI with your Brooklyn Rehab Physical Therapist. Additionally, we may obtain, use, and disclose your PHI to any outpatient clinic or hospital partner of Brooklyn Rehab Physical Therapy in order to coordinate treatment and payment for services.

If you are receiving treatment from a physician and have communicated that information to us, we may share your PHI with that physician’s office.

In the event of an emergency or serious threat to your health or safety, we may share your PHI if we believe it is in your best interest.

We may also share your PHI for public good and/or research purposes, including preventing disease, reporting adverse reactions to medications, and preventing or reducing a serious threat to anyone’s health or safety. Any sharing of PHI will only be done in accordance with the law.

We reserve the right to access, read, preserve, and disclose any PHI that we believe is necessary to comply with the law or court order, including requests from the Department of Health and Human Services to ensure our compliance with federal privacy law.

We may share PHI about you for workers’ compensation claims, law enforcement purposes, with health oversight agencies, and for any applicable mandated reporting purposes such as child abuse or intimate partner violence.

We are permitted to use and disclose your health information in the provision and coordination of your healthcare, in determining coverage, billing, claims management, medical data processing and reimbursement, and as part of Brooklyn Rehab routine healthcare operations such as utilization reviews, auditing, certification, licensing, or credentialing activities.

Finally, we may use and disclose your health information for purposes other than treatment, payment or healthcare operations with your written authorization. You may revoke your authorization at any time, but such revocation will not have any effect on uses or disclosures of your health information prior to our receipt of the revocation.

Can I trust that my Personal Information is secure?

To protect your privacy and security, your account is safeguarded by a password. It’s important to select and protect your password appropriately and limit access to your computer, device, and browser by signing off after accessing your account.

Although we strive to keep your account and Personal Information private and secure, we cannot guarantee complete security due to factors such as unauthorized access, hardware or software failure, or other reasons. As required by law, we maintain the privacy and security of your Personal Health Information (PHI) and will notify you promptly of any breach that may have compromised the privacy or security of your PHI.

We retain your Personal Information for as long as it’s necessary to provide our Services or perform our business or commercial purposes for collecting your Personal Information. When establishing a retention period for specific categories of information, we consider factors such as who we collected the information from, why we collected it, and the sensitivity of the information. In some cases, we retain Personal Information for longer periods if it’s necessary to comply with legal obligations or resolve disputes.

You can access, and in some cases edit or delete, the Personal Information you’ve provided to us by logging into your account or contacting us. This includes your name, password, home address, email address, insurance details, and other related user information. Keep in mind that the information you can view, update, and delete may change as the Services change. If you have any questions about accessing or updating your information, please contact us at support@brooklynptrehab.com.

At Brooklyn Rehab Physical Therapy, we understand that we are considered a “health care provider” under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and must comply with its regulations. HIPAA protects the privacy of your individually identifiable health information, known as “protected health information” (PHI), and our Privacy Policy outlines your rights and our responsibilities regarding your PHI. By accepting our Terms, you acknowledge that you have access to our Privacy Policy and have received it.

As a health care provider, we are required to retain data related to your PHI, which may include designations, signed authorizations, our Privacy Policy, medical and billing records, enrollment and payment information, and other relevant records. We will retain this information in compliance with HIPAA, even if your account is suspended, deactivated, or marked for deletion. If you have any concerns regarding your PHI, please refer to our Privacy Policy for information on who to contact.

If you are a resident of California, you have certain rights related to your Personal Information under this section. Please note that we may process Personal Information of our customers’ employees or end-users while providing services to our customers. If we are processing your Personal Information as a service provider, please contact the entity that initially collected your data to address your rights related to such data.

If there is any conflict between this section and any other part of this Privacy Policy and you are a California resident, the more protective portion for Personal Information shall control in case of such conflict. If you have any queries regarding this section or whether any of the following rights apply to you, please contact us at support@brooklynptrehab.com.

Access:

You have the right to ask for specific information about our collection and use of your Personal Information for the past 12 months. We will provide you with the following details in response:

• The categories of Personal Information that we have collected from you.
• The sources from which that Personal Information was collected.
• The business or commercial purpose for collecting or selling your Personal Information.
• The categories of third parties with whom we have shared your Personal Information.
• The specific pieces of Personal Information that we have collected from you.

If we have disclosed your Personal Information to any third parties for a business purpose in the past 12 months, we will identify the categories of Personal Information that we have shared with each category of third-party recipient. If we have sold your Personal Information in the past 12 months, we will identify the categories of Personal Information that we have sold to each category of third-party recipient.

Deletion and Correction:

If you are a California resident, you have the right to request that we delete any Personal Information that we have collected about you, subject to certain exceptions. We may need to retain your Personal Information to provide you with our services, complete a transaction you have requested, or if we are required to retain this data by HIPAA, or if deletion of your Personal Information involves disproportionate effort. If your deletion request is subject to any of these exceptions, we may deny your deletion request.

You also have the right to request that we correct any inaccurate Personal Information we have collected about you. However, this right is also subject to certain exceptions. If we decide, based on the totality of circumstances related to your Personal Information, that such data is correct, we may deny your correction request.

Personal Information Sharing Opt-Out and Opt-In:

Under the CPRA, California residents have the right to opt-out of the sharing of their Personal Information for cross-contextual behavioral advertising purposes. We may have shared certain categories of Personal Information, such as contact data, device/internet protocol data, web analytics data, and geolocation data, for this purpose. Third parties who provide cookies on our Services may use this information to serve you relevant ads on our Services or other websites you visit.

If you wish to opt-out of data sharing/selling for online advertising, please follow the instructions in this section.

We may disclose Personal Information to the following types of third parties:

• Advertising partners.

In the past 12 months, we may have shared the following categories of Personal Information with the categories of third parties listed below for the stated purposes:

• Marketing and selling the Services.
• Showing you advertisements, including interest-based or online behavioral advertising.

You have the right to opt-out of the sharing of your Personal Information. To opt-out, you can take the following steps:

• Update your Cookie Settings to opt-out of the sharing of your Personal Information.
• Use a Global Privacy Control or similar control that is legally recognized by a government agency or industry standard. Please note that this does not include Do Not Track signals.

Once you submit an opt-out request, we will not ask you to reauthorize the sharing of your Personal Information for at least 12 months.

Under the CPRA, we may share the Personal Information of minors under 16 years old in a way that may be considered sharing or selling. If you are between the ages of 13 and 16, you must authorize us to share your Personal Information. If you are under 13 years old, your parent or guardian must authorize us to share your Personal Information.

We will not retaliate against you for using your rights under the CPRA. We will not refuse to provide you with our products or services, charge you different prices, or offer you lower quality goods and services if you exercise your rights under the CPRA. However, we may offer different levels of our services in accordance with relevant data privacy laws (including the CPRA), with varying prices, rates, or levels of quality of goods or services depending on the value of the Personal Information we receive from you.

To exercise your rights under this Privacy Policy, you, or your Authorized Agent if you are a California resident, must send us a request that contains sufficient information to verify your identity and describes your request in detail. A request that meets both criteria will be considered a “Valid Request,” and we will only use your Personal Information provided in a Valid Request to verify your identity and fulfill your request. You do not need an account to submit a Valid Request.

We will respond to your Valid Request within the time period required by applicable law and will not charge a fee unless your request is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you and explain the decision before completing your request.

You can submit a Valid Request through our Data Rights Request page or by emailing us at support@brooklynptrehab.com. If you are a California resident, you may authorize an Authorized Agent to exercise your rights on your behalf by providing them with written permission to do so. We may request a copy of the written permission from your Authorized Agent when they make a request on your behalf.

There are other state law privacy rights that may apply to you depending on your location. If you are a California resident, you have the right to contact us and prevent the disclosure of your Personal Information to third parties for their direct marketing purposes. To do so, please contact us at support@brooklynptrehab.com.

If you are a Nevada resident, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to license or sell that information. You can exercise this right by contacting us at support@brooklynptrehab.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not sell your Personal Information, as defined in Nevada Revised Statutes Chapter 603A.

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA). To exercise these rights, please follow the instructions provided below. Please note that we may process Personal Information of our customers’ end users or employees in connection with our provision of certain services to our customers. If we are processing your Personal Information as a service provider, you should contact the entity that collected your Personal Information in the first instance to address your rights with respect to such data. Additionally, please note that these rights are subject to certain conditions and exceptions under applicable law, which may permit or require us to deny your request.

If you are a Virginia resident and there are any conflicts between this section and any other provision of this Privacy Policy, the part that provides more protection to your Personal Information will control to the extent of such conflict. If you have any questions about this section or your rights, please contact us at support@brooklynptrehab.com.

Access: You have the right to confirm if we are processing your Personal Information and to access it.

Correction: You have the right to correct inaccuracies in your Personal Information, considering the nature of such data and our purposes of processing it.

Portability: You have the right to request a copy of your Personal Information in a machine-readable format, if technically feasible.

Deletion: You have the right to delete your Personal Information.

Opt-Out of Certain Processing Activities: You have the right to opt-out of the processing of your Personal Information for targeted advertising purposes. To do this, please update your Cookie Settings.

We do not currently sell your Personal Information as defined under the VCDPA.

You have the right to opt-out of the processing of your Personal Information for the purposes of profiling that may produce legal or similarly significant effects to you, if applicable.

If we fail to take action on your request within a reasonable amount of time, you have the right to appeal our decision. To appeal, you must provide sufficient information for us to verify your identity and the original request, as well as the basis of your appeal. Your appeal will be subject to the rights and obligations provided by the VCDPA. We will respond to your appeal within 60 days of receiving it. If your appeal is denied, you can contact the Virginia Attorney General using the methods described on their website. To appeal a decision, please email us at support@brooklynptrehab.com.

What options are available to me?

You can choose not to disclose information to us, but please note that some information may be necessary to register with us or use certain features.

You may be able to add or update information as explained above. However, if you update information, we may still keep a copy of the original information in our records. In compliance with the law, certain information will remain in our records after you suspend, deactivate, or mark it for deletion. We may use aggregated data that incorporates your Personal Information but will not use it in a way that personally identifies you.

What if I have questions about this policy?