Last Updated: 18/4/2023
We collect various types of Personal Information from our users, which we use internally to personalize, provide, and improve our services. This includes allowing you to set up a user account, contacting you, fulfilling your requests for products and services, and analyzing how you use our Services. We may also share some Personal Information with third parties in certain cases, as described in this policy.
We do not knowingly collect or solicit Personal Information from anyone under the age of 13 without parental consent or from individuals residing outside of the United States. If you are under 13 years of age without parental consent or live outside the United States, please do not attempt to register for our Services or share any personal information with us. If we find that we have collected Personal Information from a child under 13 without parental consent or an individual residing outside the United States, we will delete it as soon as possible. If you suspect that a child under 13 may have provided us with Personal Information without parental consent, please contact us at email@example.com.
What types of information does Brooklyn Rehab Physical Therapy collect?
What is the purpose of collecting and disclosing Personal Information?
We collect and use personal information for various purposes, including creating and managing your account, personalizing the services we offer you, processing orders or transactions, providing support, improving our services, carrying out fraud protection, and security measures. We may also use personal information for marketing purposes, such as selling our services and showing you interest-based or online behavioral advertising. We may correspond with you to respond to any inquiries, requests, or complaints you may have, and to send you information about our services. We may also use your personal information to meet our legal obligations, enforce legal terms, protect our rights, property or safety, or resolve disputes.
We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If you are a California resident, please note that we only use or disclose your sensitive personal information for the purposes set forth in section 7027(m) of the CPRA regulations and we do not collect or process sensitive personal information with the purpose of inferring any characteristics about California residents.
What are my rights regarding my Protected Health Information (PHI)?
You can request an electronic copy of your medical record and other PHI by contacting us at firstname.lastname@example.org. We will provide you with a copy or summary of your health information within 15 days of your request or as required by law. Your record will be sent via email to the address specified in your account details.
You may also request that we correct any PHI about you that you think is incorrect or incomplete. We will respond within 60 days of your request or as required by law.
You have the right to request confidential communications and restrict access to certain PHI. We will accommodate reasonable requests, but we are not required to agree if it would affect your care.
If you would like to assign an individual medical power of attorney, you may do so by contacting us at email@example.com. This individual may exercise your rights and make choices about your PHI.
You have the right to inspect and copy your own health information, but we are not required to provide access to all health information we maintain. Access may also be denied if disclosure would endanger you or another person.
You have the right to verbally object to certain disclosures made for treatment, payment, or health care operations without an authorization. An authorization is required for most uses and disclosures of your health information for marketing purposes and disclosures that constitute a sale of protected health information. You may revoke a validly executed authorization.
If your unsecured protected health information is breached, you have the right to be notified.
You may file a complaint if you feel we have violated your rights by contacting us at firstname.lastname@example.org.
Will Brooklyn Rehab Physical Therapy share any of the Personal Information it receives?
Brooklyn Rehab Physical Therapy may disclose your Personal Information to third parties as described in this section. Depending on applicable state laws, some of these disclosures may be considered a “sale” of your Personal Information. For more information, please refer to the state-specific sections below.
De-identified information: Your Personal Information may be de-identified so that you cannot be identified as an individual, and this information may be shared with our partners or used in connection with our business. We may also provide aggregate usage information to our partners (or allow partners to collect such information from you) to understand how often and in what ways people use our services, in order to provide an optimal online experience. However, we will never disclose aggregate usage or de-identified information to a partner (or allow a partner to collect such information) in a way that would identify you as an individual.
Affiliated businesses/business partners: In certain situations, businesses or third-party websites that we are affiliated with may sell or provide products or services to you through or in connection with our services (either alone or with us). You can recognize when an affiliated business is involved in such a transaction or service, and we will only disclose your Personal Information to that affiliated business to the extent necessary for such transaction or service. We have no control over the policies and practices of third-party websites or businesses with regard to privacy or anything else, so please review all such business’ or websites’ policies if you choose to participate in any transaction or service related to an affiliated website or business.
Service providers: We use other companies and individuals to perform tasks on our behalf and need to disclose your information to them in order to provide products or services to you. For example, we may use a payment processing company to receive and process your credit card transactions. Unless we inform you otherwise, our service providers have no right to use the Personal Information we disclose to them beyond what is necessary to assist us.
User data and submissions: Certain user information, such as your name, location, and any video or image content uploaded to our services, may be displayed to other authorized users (such as your Brooklyn Rehab Physical Therapist and/or the Brooklyn Rehab Concierge) to facilitate user interaction within the services or to address your request for our services.
Business transfers: We may choose to buy or sell assets, and may disclose and/or transfer customer information in connection with the evaluation of and entry into such transactions. If we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party.
Partners for advertising: We work with third-party partners who help us promote our services and offer you other relevant content. These partners may include ad networks, data brokers, and marketing providers.
If you click on a link to a third-party website or service, they may also transmit cookies to you. We are not responsible for their privacy policies or practices, and their cookies may continue to track your online activities after you leave our Services.
We use this data to customize content for you based on your usage patterns and to improve our Services. We use four types of cookies: essential cookies, functional cookies, performance/analytical cookies, and retargeting/advertising cookies.
Essential cookies are necessary for providing features or services that you have requested, and disabling them may make certain features and services unavailable. Functional cookies record your preferences and settings and help us personalize our content for you. Performance/analytical cookies allow us to understand how visitors use our Services, and retargeting/advertising cookies collect data about your online activity to provide relevant advertising.
You can manage your cookie preferences through your internet browser’s settings and delete all cookies already on your device. However, doing so may require you to manually adjust some preferences each time you visit our website, and some functionalities may not work. For more information about cookies, including how to manage and delete them, please visit http://www.allaboutcookies.org.
We strive to follow the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Principles for Online Behavioral Advertising. The DAA and the Network Advertising Initiative (“NAI”) have developed a self-regulatory program to help consumers better understand and control ads that are customized based on their online behavior across different websites. To opt-out of receiving behaviorally targeted ads from participating organizations and make choices about Interest-Based Ads, please visit the DAA’s or NAI’s consumer opt-out pages at http://www.networkadvertising.org/choices/ or http://www.aboutads.info/choices.
At Brooklyn Rehab Physical Therapy, we are committed to protecting your privacy and will never rent or sell your personal health information (PHI). We will only use or share your PHI as described below, unless you have explicitly given us written permission to do otherwise.
We may share your PHI with family members, guardians, or other individuals involved in your care or treatment, but only as specifically requested by you or in circumstances where you have had the opportunity to agree or object (verbally or in writing) and have been notified in advance.
We may also share your PHI with our business associates, who are individuals or entities under contract with us to perform or assist in a function or activity that requires the use of your health information. This may include consultants, accountants, and third-party billing companies.
In order to provide you with our services and manage your treatment, we may share your PHI with your Brooklyn Rehab Physical Therapist. Additionally, we may obtain, use, and disclose your PHI to any outpatient clinic or hospital partner of Brooklyn Rehab Physical Therapy in order to coordinate treatment and payment for services.
If you are receiving treatment from a physician and have communicated that information to us, we may share your PHI with that physician’s office.
In the event of an emergency or serious threat to your health or safety, we may share your PHI if we believe it is in your best interest.
We may also share your PHI for public good and/or research purposes, including preventing disease, reporting adverse reactions to medications, and preventing or reducing a serious threat to anyone’s health or safety. Any sharing of PHI will only be done in accordance with the law.
We reserve the right to access, read, preserve, and disclose any PHI that we believe is necessary to comply with the law or court order, including requests from the Department of Health and Human Services to ensure our compliance with federal privacy law.
We may share PHI about you for workers’ compensation claims, law enforcement purposes, with health oversight agencies, and for any applicable mandated reporting purposes such as child abuse or intimate partner violence.
We are permitted to use and disclose your health information in the provision and coordination of your healthcare, in determining coverage, billing, claims management, medical data processing and reimbursement, and as part of Brooklyn Rehab routine healthcare operations such as utilization reviews, auditing, certification, licensing, or credentialing activities.
Finally, we may use and disclose your health information for purposes other than treatment, payment or healthcare operations with your written authorization. You may revoke your authorization at any time, but such revocation will not have any effect on uses or disclosures of your health information prior to our receipt of the revocation.
Can I trust that my Personal Information is secure?
To protect your privacy and security, your account is safeguarded by a password. It’s important to select and protect your password appropriately and limit access to your computer, device, and browser by signing off after accessing your account.
Although we strive to keep your account and Personal Information private and secure, we cannot guarantee complete security due to factors such as unauthorized access, hardware or software failure, or other reasons. As required by law, we maintain the privacy and security of your Personal Health Information (PHI) and will notify you promptly of any breach that may have compromised the privacy or security of your PHI.
We retain your Personal Information for as long as it’s necessary to provide our Services or perform our business or commercial purposes for collecting your Personal Information. When establishing a retention period for specific categories of information, we consider factors such as who we collected the information from, why we collected it, and the sensitivity of the information. In some cases, we retain Personal Information for longer periods if it’s necessary to comply with legal obligations or resolve disputes.
You can access, and in some cases edit or delete, the Personal Information you’ve provided to us by logging into your account or contacting us. This includes your name, password, home address, email address, insurance details, and other related user information. Keep in mind that the information you can view, update, and delete may change as the Services change. If you have any questions about accessing or updating your information, please contact us at email@example.com.
If you are a resident of California, you have certain rights related to your Personal Information under this section. Please note that we may process Personal Information of our customers’ employees or end-users while providing services to our customers. If we are processing your Personal Information as a service provider, please contact the entity that initially collected your data to address your rights related to such data.
You have the right to ask for specific information about our collection and use of your Personal Information for the past 12 months. We will provide you with the following details in response:
- The categories of Personal Information that we have collected from you.
- The sources from which that Personal Information was collected.
- The business or commercial purpose for collecting or selling your Personal Information.
- The categories of third parties with whom we have shared your Personal Information.
- The specific pieces of Personal Information that we have collected from you.
If we have disclosed your Personal Information to any third parties for a business purpose in the past 12 months, we will identify the categories of Personal Information that we have shared with each category of third-party recipient. If we have sold your Personal Information in the past 12 months, we will identify the categories of Personal Information that we have sold to each category of third-party recipient.
Deletion and Correction:
If you are a California resident, you have the right to request that we delete any Personal Information that we have collected about you, subject to certain exceptions. We may need to retain your Personal Information to provide you with our services, complete a transaction you have requested, or if we are required to retain this data by HIPAA, or if deletion of your Personal Information involves disproportionate effort. If your deletion request is subject to any of these exceptions, we may deny your deletion request.
You also have the right to request that we correct any inaccurate Personal Information we have collected about you. However, this right is also subject to certain exceptions. If we decide, based on the totality of circumstances related to your Personal Information, that such data is correct, we may deny your correction request.
Personal Information Sharing Opt-Out and Opt-In:
Under the CPRA, California residents have the right to opt-out of the sharing of their Personal Information for cross-contextual behavioral advertising purposes. We may have shared certain categories of Personal Information, such as contact data, device/internet protocol data, web analytics data, and geolocation data, for this purpose. Third parties who provide cookies on our Services may use this information to serve you relevant ads on our Services or other websites you visit.
If you wish to opt-out of data sharing/selling for online advertising, please follow the instructions in this section.
We may disclose Personal Information to the following types of third parties:
- Advertising partners.
In the past 12 months, we may have shared the following categories of Personal Information with the categories of third parties listed below for the stated purposes:
- Marketing and selling the Services.
- Showing you advertisements, including interest-based or online behavioral advertising.
You have the right to opt-out of the sharing of your Personal Information. To opt-out, you can take the following steps:
- Update your Cookie Settings to opt-out of the sharing of your Personal Information.
- Use a Global Privacy Control or similar control that is legally recognized by a government agency or industry standard. Please note that this does not include Do Not Track signals.
Once you submit an opt-out request, we will not ask you to reauthorize the sharing of your Personal Information for at least 12 months.
Under the CPRA, we may share the Personal Information of minors under 16 years old in a way that may be considered sharing or selling. If you are between the ages of 13 and 16, you must authorize us to share your Personal Information. If you are under 13 years old, your parent or guardian must authorize us to share your Personal Information.
We will not retaliate against you for using your rights under the CPRA. We will not refuse to provide you with our products or services, charge you different prices, or offer you lower quality goods and services if you exercise your rights under the CPRA. However, we may offer different levels of our services in accordance with relevant data privacy laws (including the CPRA), with varying prices, rates, or levels of quality of goods or services depending on the value of the Personal Information we receive from you.
We will respond to your Valid Request within the time period required by applicable law and will not charge a fee unless your request is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you and explain the decision before completing your request.
You can submit a Valid Request through our Data Rights Request page or by emailing us at firstname.lastname@example.org. If you are a California resident, you may authorize an Authorized Agent to exercise your rights on your behalf by providing them with written permission to do so. We may request a copy of the written permission from your Authorized Agent when they make a request on your behalf.
There are other state law privacy rights that may apply to you depending on your location. If you are a California resident, you have the right to contact us and prevent the disclosure of your Personal Information to third parties for their direct marketing purposes. To do so, please contact us at email@example.com.
If you are a Nevada resident, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to license or sell that information. You can exercise this right by contacting us at firstname.lastname@example.org with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not sell your Personal Information, as defined in Nevada Revised Statutes Chapter 603A.
If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA). To exercise these rights, please follow the instructions provided below. Please note that we may process Personal Information of our customers’ end users or employees in connection with our provision of certain services to our customers. If we are processing your Personal Information as a service provider, you should contact the entity that collected your Personal Information in the first instance to address your rights with respect to such data. Additionally, please note that these rights are subject to certain conditions and exceptions under applicable law, which may permit or require us to deny your request.
Access: You have the right to confirm if we are processing your Personal Information and to access it.
Correction: You have the right to correct inaccuracies in your Personal Information, considering the nature of such data and our purposes of processing it.
Portability: You have the right to request a copy of your Personal Information in a machine-readable format, if technically feasible.
Deletion: You have the right to delete your Personal Information.
Opt-Out of Certain Processing Activities: You have the right to opt-out of the processing of your Personal Information for targeted advertising purposes. To do this, please update your Cookie Settings.
We do not currently sell your Personal Information as defined under the VCDPA.
You have the right to opt-out of the processing of your Personal Information for the purposes of profiling that may produce legal or similarly significant effects to you, if applicable.
If we fail to take action on your request within a reasonable amount of time, you have the right to appeal our decision. To appeal, you must provide sufficient information for us to verify your identity and the original request, as well as the basis of your appeal. Your appeal will be subject to the rights and obligations provided by the VCDPA. We will respond to your appeal within 60 days of receiving it. If your appeal is denied, you can contact the Virginia Attorney General using the methods described on their website. To appeal a decision, please email us at email@example.com.
What options are available to me?
You can choose not to disclose information to us, but please note that some information may be necessary to register with us or use certain features.
You may be able to add or update information as explained above. However, if you update information, we may still keep a copy of the original information in our records. In compliance with the law, certain information will remain in our records after you suspend, deactivate, or mark it for deletion. We may use aggregated data that incorporates your Personal Information but will not use it in a way that personally identifies you.
What if I have questions about this policy?