Privacy Policy

1. INFORMATION WE COLLECT

A. Protected Health Information (PHI) – Governed by HIPAA

As a HIPAA-covered entity, we collect and maintain PHI necessary to provide you with high-quality physical therapy care. This may include:

• Demographic information (name, date of birth, address, phone, email, insurance details)

• Medical history, injury details, treatment notes, progress reports, diagnoses, and therapy plans

• Payment and insurance information

• Any information you voluntarily share during appointments, intake forms, or telehealth sessions

B. Website and Online Information

When you visit our website, we may automatically collect:

• Device and usage data (IP address, browser type, pages viewed, time spent)

• Cookies and similar technologies for functionality, analytics, and session management (see Section 7)

• Information you submit through contact forms, appointment request forms, newsletters, or patient portals (name, email, phone, message)

We do not collect or store PHI directly through the public website unless you use a secure, HIPAA-compliant patient portal (if applicable).

C. Information from Third Parties

We may receive information from referring physicians, insurance companies, or other healthcare providers involved in your care.

2. HOW WE USE YOUR INFORMATION

We use your information only as permitted by law:

For PHI (HIPAA-permitted uses):

• Treatment: To provide, coordinate, and manage your physical therapy care (e.g., evaluations, exercises, progress tracking).

• Payment: To bill you or your insurance and process claims.

• Healthcare Operations: To operate and improve our clinic (quality assurance, scheduling, training staff).

• Other uses allowed or required by law (e.g., public health reporting, court orders).

For website and general information:

• To respond to inquiries and schedule appointments.

• To send appointment reminders, newsletters, or educational materials (you may opt out anytime).

• For analytics, website improvement, and security.

• To personalize your experience on our site.

We do not sell your PHI or personal information.

3. WHEN WE SHARE YOUR INFORMATION

We may share information in these situations:

• With other healthcare providers involved in your treatment (with appropriate safeguards).

• With your insurance company or payment processors for billing.

• With business associates (e.g., billing companies, electronic health record providers, secure messaging services) under HIPAA Business Associate Agreements.

• As required by law (e.g., court order, mandatory reporting).

• In the event of a merger, acquisition, or business transfer.

• With your written authorization for any other purpose.

We do not share PHI for marketing without your authorization.

4. YOUR RIGHTS UNDER HIPAA AND APPLICABLE LAW

You have the following rights regarding your PHI (most requests must be made in writing):

• Access and receive a copy of your records.

• Request amendments or corrections.

• Request restrictions on certain uses/disclosures.

• Request confidential communications (e.g., alternative contact methods).

• Receive an accounting of certain disclosures.

• File a complaint if you believe your rights have been violated.

Website visitors also have rights to:

• Opt out of marketing emails.

• Manage cookie preferences via your browser or our cookie banner.

To exercise any rights, contact us using the information above. We will respond as required by law (typically within 30 days for HIPAA requests).

5. DATA SECURITY

We use administrative, technical, and physical safeguards to protect your information, including encryption for electronic PHI, secure servers, access controls, and staff training. No system is 100% secure, but we maintain reasonable and appropriate protections as required by HIPAA.

6. DATA RETENTION

We retain your PHI and other records as long as necessary for treatment, legal, or operational purposes, or as required by Florida and federal law (typically 7 years after your last visit for adults). We securely destroy or de-identify information when no longer needed.

7. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies for essential functions, analytics (e.g., Google Analytics), and improved user experience. You can manage or disable cookies through your browser settings. We do not use tracking for advertising purposes without your consent. For more details, see our [Cookie Policy link or section].

8. INTERNATIONAL USERS AND DATA TRANSFERS

Our clinic and servers are located in the United States. If you access our website from outside the U.S., your information may be transferred to and processed in the U.S. under U.S. laws.

9. CHILDREN’S PRIVACY

Our Services are not directed to children under 13 (or 18 for certain health services). We do not knowingly collect data from minors without appropriate parental consent as required by law.

10. CHANGES TO THIS PRIVACY POLICY

We may update this policy periodically. Material changes will be posted on our website with a new “Last updated” date. Continued use of our Services after changes means you accept the updated policy. We will notify patients of significant changes to PHI practices as required by HIPAA.

11. HOW TO CONTACT US

For questions about this Privacy Policy, your information, or to exercise rights:

• Email: info@pprdpt.com

• Phone: 561-203-4449

• Mail: Peak Performance and Recovery
810 Saturn St Unit 27
Jupiter, Florida 33458

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr or (800) 368-1019.