Introduction
Whitestone Health ABA ("we," "our," or "us") is committed to protecting your privacy and ensuring the confidentiality of your personal and health information. This Privacy Policy outlines how we collect, use, protect, and disclose information obtained through our services, website, and clinical interactions.
1. Information We Collect
a. Personal Information
We may collect personal details such as:

• Name

• Address

• Email address

• Phone number

• Date of birth

• Insurance information

• Emergency contact information

b. Health Information (PHI)
As a healthcare provider, we collect protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA). This may include:

• Diagnosis and treatment information

• Assessment reports and therapy notes

• Scheduling and progress documentation

• Communications with referring providers or payers

c. Website and Online Usage Data
When you visit our website, we may collect:

• IP address

• Browser type and device

• Date/time of visits

• Pages viewed

• Referral source

This data helps us improve our website functionality and user experience.
2. How We Use Your Information
We may use your information for the following purposes:

• To provide ABA therapy and related clinical services

• To communicate appointment reminders and updates

• To process insurance claims and billing

• To respond to inquiries or feedback

• To comply with legal and regulatory requirements

• To improve our services and website performance

3. Disclosure of Information
We do not sell your personal information.
We may share your information only in the following circumstances:

• With healthcare providers involved in your care

• With insurance companies or payers for reimbursement

• With your written consent to third parties

• When required by law (e.g., court order, public health reporting)

• With business associates who support our operations and are bound by confidentiality agreements

4. Your Rights Under HIPAA
As a client, you have the right to:

• Access and request copies of your health records

• Request corrections to your information

• Request restrictions on how your data is used or shared

• Receive an accounting of disclosures

• File a complaint if you believe your rights have been violated

To exercise these rights, please contact our Privacy Officer at the information below.
5. Data Security
We implement administrative, technical, and physical safeguards to protect your information. These include:

• Secure Electronic Health Record (EHR) systems

• Encrypted communication tools

• Access controls for staff

• Ongoing training on data privacy practices

6. Children’s Privacy
We provide services to children with parental or guardian consent. We do not knowingly collect personal information from minors without appropriate authorization.
7. Website Privacy & Cookies
We may use cookies or analytics tools to understand how visitors interact with our website. You can manage or disable cookies through your browser settings. We do not use cookies to collect identifiable health or personal information.
8. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those third-party sites.
9. Updates to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised effective date.