Effective Date: January 1, 2026
Last Updated: April 2026
This policy explains exactly what data we collect, why we collect it, how we protect it, and what rights you have. Read it in full. If you have questions, contact us directly.
1. INFORMATION WE COLLECT
We collect information in two ways: directly from you, and automatically when you use our website.
- Contact & Appointment Information — Name, email address, phone number, and any details you provide when booking an appointment, submitting a form, or reaching out to our team.
- Communication Preferences — Your consent status for SMS, email, and other communications, including opt-in and opt-out records with timestamps.
- Technical & Usage Data — IP address, browser type, device identifiers, pages visited, time on site, and referral sources. This data is collected automatically via cookies and analytics tools.
- Inferred Data — Location data derived from your IP address for analytics and service improvement purposes.
What We Do Not Collect We do not collect Protected Health Information (PHI) through this website. Do not submit medical history, diagnoses, or treatment details through any web form. PHI shared directly with our office is governed by our HIPAA Notice of Privacy Practices — not this policy.
2. HOW WE USE YOUR INFORMATION
We use the information we collect for specific, legitimate purposes only. We do not sell, rent, or trade your personal information — ever.
- Appointment Scheduling — To process, confirm, and manage your session bookings.
- Client Communications — To send confirmations, reminders, follow-ups, and educational content you've opted into receiving.
- Service Improvement — To analyze how our website is used so we can improve your experience and our systems.
- Legal Compliance — To meet our obligations under applicable law, including HIPAA, TCPA, CAN-SPAM, CCPA/CPRA, and other relevant regulations.
- Security & Fraud Prevention — To detect, investigate, and prevent unauthorized access or misuse of our systems.
- Marketing Communications — To send educational and promotional content to individuals who have explicitly opted in. Every marketing communication includes a clear unsubscribe mechanism.
We process your data based on one or more of the following legal grounds: your explicit consent, the performance of a contract (such as your appointment booking), a legitimate interest we pursue in a balanced and proportionate manner, or a legal obligation we must fulfill.
3. A2P MESSAGING & SMS COMMUNICATIONS
We use Application-to-Person (A2P) SMS messaging in compliance with the Telephone Consumer Protection Act (TCPA) and current CTIA Messaging Principles and Best Practices.
- Types of SMS We Send — Appointment confirmations, reminders, follow-up check-ins, identity verification codes, and — only with your explicit opt-in — promotional or educational content.
- Your Consent — By providing your mobile number and selecting opt-in, you agree to receive SMS communications from Physical Evidence Chiropractic. Consent to marketing SMS is never a condition of receiving care or scheduling services.
- Message Frequency — Message frequency varies based on your appointments and communication preferences. Standard message and data rates from your carrier may apply.
- How to Opt Out — Reply STOP to any text message at any time to unsubscribe. You will receive one final confirmation message, then no further messages. Reply HELP for assistance, or contact us directly at (561) 674-1217.
- Opt-Out Impact — Opting out of promotional messages will not affect your ability to receive critical appointment reminders, unless you opt out of all messaging entirely.
- No Sharing of Phone Numbers — We do not share, sell, or transfer your mobile phone number to third parties for their own marketing purposes.
4. HIPAA COMPLIANCE & PROTECTED HEALTH INFORMATION
Physical Evidence Chiropractic operates in compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996, as amended by the HITECH Act.
This website does not collect, transmit, or store Protected Health Information (PHI). Our website is a marketing and scheduling platform only.
- PHI Handled Separately — Any PHI you share with our clinical team is governed by our Notice of Privacy Practices (NPP), which is provided to you separately at the time of care.
- No PHI in Web Forms — Please do not submit medical information, diagnoses, medications, or other health data through any form on this website.
- Business Associates — Any third-party vendor that may come into contact with PHI in the course of supporting our clinical operations is bound by a signed Business Associate Agreement (BAA) meeting full HIPAA requirements.
5. DATA SHARING & THIRD PARTIES
We share your information only when necessary, only with trusted partners, and only for the specific purposes outlined below. We never sell your data.
- SMS & Communication Providers — HIPAA-aware A2P messaging platforms that facilitate appointment reminders and SMS communications, bound by strict confidentiality agreements.
- Scheduling & Practice Management Software — Platforms used to manage your appointment bookings and communication history.
- Website Analytics — Tools that help us understand site traffic and usage patterns. These tools collect non-personal, aggregated data. No PHI or sensitive personal data is shared with analytics providers.
- Payment Processors — If applicable, third-party processors that handle transactions securely. We do not store your full payment card details.
- Legal & Regulatory Disclosure — We may disclose information if required by law, court order, or to protect the rights, safety, or property of Physical Evidence Chiropractic, our clients, or the public.
- Business Transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change and your rights will be maintained.
All third-party partners are contractually required to maintain the confidentiality and security of your data and are prohibited from using it for their own independent purposes.
6. COOKIES & TRACKING TECHNOLOGIES
Our website uses cookies and similar tracking technologies to operate effectively and improve your experience.
- Essential Cookies — Required for core website functionality such as form submissions and session management. These cannot be disabled without disrupting site performance.
- Analytics Cookies — Used to collect aggregated, anonymous data about how visitors use our site. This helps us identify what's working and what can be improved.
- Marketing & Remarketing Cookies — With your consent, we may use cookies from platforms such as Meta or Google to show you relevant content after visiting our site. You may opt out of these at any time.
You can manage or disable non-essential cookies through your browser settings or via any cookie preference center available on the site. Disabling essential cookies may limit your ability to use certain features.
Global Privacy Control (GPC) We honor browser-level Global Privacy Control (GPC) signals where technically feasible, in compliance with applicable state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).
7. DATA SECURITY
We apply administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction.
- Encryption — Data transmitted between your browser and our website is encrypted using TLS (Transport Layer Security).
- Access Controls — Access to personal information is restricted to team members who require it to perform their role. All access is logged and reviewed.
- Third-Party Security Standards — We only work with vendors who maintain industry-standard security certifications and data protection practices.
- Incident Response — In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within the timeframes required by applicable law, including Florida's Information Protection Act (FIPA).
No method of data transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously assess and upgrade our safeguards to minimize risk.
8. DATA RETENTION
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.
- Appointment & Contact Records — Retained for a minimum of 7 years to comply with healthcare and tax record-keeping requirements, unless a longer period is required by law.
- Marketing Consent Records — Opt-in and opt-out records with timestamps are retained for the duration of our relationship and for at least 4 years after the last communication, to demonstrate regulatory compliance.
- Analytics Data — Aggregated and anonymized. Not linked to individual identities once anonymized.
- Deletion Requests — If you request deletion of your data, we will process your request within 30 days, subject to any legal obligations that require us to retain certain records.
9. YOUR PRIVACY RIGHTS
Depending on your location, you may have the following rights regarding your personal data. We honor these rights for all our clients, regardless of jurisdiction.
- Access — Request a copy of the personal data we hold about you.
- Correction — Request that we correct inaccurate or incomplete data.
- Deletion — Request removal of your data, subject to legal retention requirements.
- Opt-Out of Sale — We do not sell your data. This right is honored by default.
- Portability — Receive your data in a structured, machine-readable format where applicable.
- Opt-Out of Marketing — Unsubscribe from email or SMS marketing at any time, without penalty or reduction in service.
- Restrict Processing — Request that we limit how we use your data in certain circumstances.
- Non-Discrimination — Exercising your privacy rights will never result in reduced service, higher pricing, or penalization of any kind.
To exercise any of these rights, contact us at the information listed in Section 13. We will respond within 30 days. For California residents: you may designate an authorized agent to submit requests on your behalf. We may require identity verification before processing certain requests.
10. CHILDREN'S PRIVACY
Our website and digital services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has submitted personal information to us, please contact us immediately. We will delete that information promptly upon verification.
For clients between the ages of 13 and 17, we require verifiable parental or guardian consent before collecting or processing personal information in connection with our services.