How Archways ABA collects, uses, and protects your information.
Effective Date: March 1, 2025 | Last Updated: March 1, 2025
This Privacy Policy describes how Archways ABA, LLC ("Archways ABA," "we," "us," or "our") collects, uses, discloses, and safeguards information when you visit our website at archwaysaba.com (the "Site") or contact us about our Applied Behavior Analysis (ABA) therapy services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.
When you use our contact forms, intake request form, provider referral form, or newsletter subscription, we may collect:
When you visit our Site, certain information is collected automatically by our analytics provider (Google Analytics). This may include:
We do not collect precise geolocation data. See Section 6 for details on Google Analytics.
Our public website does not collect, store, or transmit formal Protected Health Information (PHI) as defined under HIPAA. Clinical and treatment records are maintained in separate, HIPAA-compliant systems used directly with active clients and their authorized caregivers. See Section 4 for more on HIPAA.
We use the information we collect to:
We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.
We do not sell, rent, or trade your personal information to third parties. We may share information only in the following limited circumstances:
We work with a small number of trusted third-party service providers who process data on our behalf, including:
These providers are contractually bound to protect your information and may only use it to perform services for us.
We may disclose your information if required to do so by law, court order, subpoena, or government authority, or if we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our legal rights.
If Archways ABA is acquired by or merged with another entity, your information may be transferred as part of that transaction. We will notify you via a prominent notice on our Site if this occurs and your information becomes subject to a different privacy policy.
We may share your information for any other purpose with your explicit prior consent.
Important: While Archways ABA is a healthcare provider subject to HIPAA, this public website is not a patient portal and does not transmit formal Protected Health Information (PHI). Our active clients and their authorized guardians receive a separate Notice of Privacy Practices (NPP) at the time services begin, as required by the HIPAA Privacy Rule (45 C.F.R. Part 164).
Nonetheless, inquiry forms submitted through our Site may contain health-related information (such as a diagnosis or insurance carrier). We treat all such information with the same level of care and discretion required under HIPAA, including:
For questions about your rights under HIPAA with respect to your active treatment records, please contact our Privacy Officer at info@archwaysaba.com.
Archways ABA provides services to children; however, our website is directed at parents, guardians, and healthcare providers — not at children themselves.
We do not knowingly collect personal information directly from children under the age of 13. All information submitted through our intake and referral forms must be provided by a parent, legal guardian, or licensed healthcare professional acting on behalf of a patient.
If you believe we have inadvertently collected personal information from a child under 13 without verifiable parental consent, please contact us immediately at info@archwaysaba.com and we will delete such information promptly.
This policy is consistent with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and the FTC's COPPA Rule, 16 C.F.R. Part 312.
Our Site uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies and similar tracking technologies to collect and report aggregate, anonymized information about how visitors use our Site.
We have configured Google Analytics with IP anonymization enabled, meaning the last octet of your IP address is masked before any data is stored. We do not use the advertising or demographic features of Google Analytics.
You may opt out of Google Analytics tracking by:
Google's privacy policy is available at policies.google.com/privacy.
Our contact, intake, and provider referral forms are processed by Formspree, Inc., a third-party form submission service. When you submit a form on our Site, your submission data is transmitted to Formspree's servers and then forwarded to our team.
Formspree may store submitted data temporarily on its servers in accordance with its own privacy policy, available at formspree.io/legal/privacy-policy. We have a data processing agreement with Formspree governing its handling of any personal data submitted through our forms.
We use a honeypot field on all forms to detect and discard automated spam submissions. This field is invisible to human users and captures no personal information.
Our Site uses the following types of cookies and similar technologies:
These cookies are required for the Site to function and cannot be disabled. They do not store personally identifiable information and are typically set in response to user actions such as submitting a form.
Set by Google Analytics to collect aggregate, anonymized data about how visitors use our Site. These cookies help us understand which pages are most popular and where visitors come from, allowing us to improve our content.
Key analytics cookies include:
Most web browsers allow you to control cookies through browser settings. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Note that disabling certain cookies may affect the functionality of our Site. For more information on managing cookies, visit allaboutcookies.org.
We retain the information you submit through our contact and intake forms for as long as necessary to respond to your inquiry and fulfill the purpose for which it was collected, or as required by applicable law.
Records related to active clients are governed by our HIPAA policies and applicable Missouri state law, which may require longer retention periods for medical records.
We take the security of your information seriously and implement a variety of technical and administrative measures to protect it, including:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee its absolute security. If you believe your information has been compromised, please contact us immediately.
Our Site may contain links to external websites, including provider directories, insurance company portals, and professional resources. These third-party sites have their own privacy policies, and we have no responsibility or liability for their content, practices, or policies. We encourage you to review the privacy policy of any third-party site you visit.
Depending on your location and applicable law, you may have the following rights regarding your personal information:
You may request access to the personal information we hold about you and ask us to correct any inaccuracies. To make such a request, contact us at info@archwaysaba.com.
You may request that we delete personal information we have collected from you, subject to certain exceptions (such as legal obligations or active client records). We will respond to deletion requests within 30 days.
You may opt out of marketing or newsletter emails at any time by clicking the "unsubscribe" link in any email we send or by contacting us directly. We will process your request within 10 business days.
We do not sell personal information. We have not sold personal information in the past 12 months, and we do not intend to do so in the future.
If you are an active client or the parent/guardian of an active client, you have specific rights under HIPAA with respect to your Protected Health Information, including the right to access, amend, and receive an accounting of disclosures. These rights are described in the Notice of Privacy Practices provided to you at intake.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your information.
Your continued use of the Site after any changes to this Policy constitutes your acceptance of the updated terms.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Archways ABA, LLCWe will respond to all privacy-related requests within 30 days of receipt.