Therapy Brands services, including (without limitation) our website, various brands, and other interactive properties through which the services are delivered (collectively, the “Service”) are owned, operated and distributed by Therapy Brands (referred to in this Privacy Notice as “Therapy Brands” or “we” and through similar words such as “us,” “our,” etc.). This Privacy Notice outlines the personal information that Therapy Brands may collect, how Therapy Brands uses and safeguards that information, and with whom we may share it.
THIS SERVICE IS OFFERED FROM THE UNITED STATES (“US”), IN PARTICULAR, IT IS NOT INTENDED FOR USE IN THE EUROPEAN UNION (“EU”). For individuals located outside of the US, please note that Therapy Brands is a US based company. If you use the Service, all information, including personal information, will be transferred to Therapy Brands in the US and used as described in this Notice.
Therapy Brands encourages our customers, visitors, business associates, and other interested parties to read this Privacy Notice, which applies to all users. By using our Service or submitting personal information to Therapy Brands by any other means, you acknowledge that you understand and agree to be bound by this Privacy Notice and agree that Therapy Brands may collect, process, transfer, use, and disclose your personal information as described in this Notice. Further, by accessing any part of the Service, you are agreeing to THE TERMS AND CONDITIONS OF OUR OR OUR BRAND’S TERMS OF SERVICE or TERMS AND CONDITIONS (the “Terms of Service”). IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY NOTICE OR OUR TERMS OF SERVICE, PLEASE DO NOT USE ANY OF THE SERVICES.
Note on HIPAA
As a part of the Service, you may be offered the opportunity to use the Service for storage of data regulated by the Health Insurance Portability and Accountability Act (“HIPAA”). This Privacy Notice is not intended for compliance with HIPAA nor should it be presented to patients for HIPAA compliance. While the Service may provide HIPAA compliant storage of data, you are ultimately responsible for HIPAA compliance as it relates to your patients. By using the Service, you agree to abide by all federal and state laws, including laws that may apply to patient data or other personal information, including but not limited to HIPAA. You agree to fully indemnify Therapy Brands for any third-party damages resulting from your violation of any federal or state laws.
If you are a patient viewing this Privacy Notice, please contact your provider for information regarding your medical records and/or HIPAA privacy disclosures.
What personal information do we collect about you?
Personal information (also commonly known as personally identifiable information (PII) or personal data) is information that can be used to identify you or any other individual to whom the information may relate.
The personal information that we collect directly from those registering for the Service, includes the following categories:
- Name and contact information (e.g. address, phone number, email, fax);
- Billing Information (e.g. credit card, bank account, billing contact information);
- Order Information (e.g. current order/purchase information, purchase history);
- Company/employer information;
- Geographic or location information;
- Information contained in posts you make on the public forums and interactive features of the Service;
- Other information that may be exchanged in the course of engaging with the Service. You will be aware of any subsequently collected information because it will come directly from you.
When providing personal information to Therapy Brands as described in this Notice, that personal information is collected directly from you, and you will know the precise personal information being collected by us.
Collection of User Generated Content
We may invite you to post content publicly on the Service, including your comments, reviews, and any other information that you would like to be available on the Service, which may become public (“User Generated Content”). User Generated Content does not include any patient data and/or data regulated by HIPAA. If you post User Generated Content, all of the information that you post will be available to authorized personnel of Therapy Brands and may be made publicly available. You expressly acknowledge and agree that we may access in real-time, record and store archives of any User Generated Content on our servers to make use of them in connection with the Service. If you submit a review, recommendation, endorsement, or other User Generated Content through the Service or through other websites including Facebook, Instagram, Google, Yelp, and other similar channels, we may share that review, recommendation, endorsement or content publicly on the Service.
How does Therapy Brands use personal information?
Subject to the terms of this Privacy Notice, Therapy Brands uses the above described categories of personal information in several ways. Unless otherwise stated specifically, the above information may be used for any of the following purposes:
- to administer the Service to you;
- to respond to your requests;
- to distribute communications relevant to your use of the Service, such as system updates or information about your use of the Service;
- as may be necessary to support the operation of the Service, such as for billing, account maintenance, and record-keeping purposes;
- to send to you Therapy Brands solicitations, product announcements, and the like that we feel may be of interest to you (you may “opt out” of receiving these marketing materials);
- in other manners after subsequent notice is provided to you and/or your consent is obtained, if necessary.
Therapy Brands does not sell, re-sell, or distribute for re-sale your personal information. Aggregated information may be used internally and by third-party service providers in order to improve the Service as described below.
How do we share your personal information with third parties?
We may provide any of the described categories of personal information to Therapy Brands employees, consultants, affiliates or other businesses or persons for the purpose of processing such information on our behalf in order to provide the Service to you. In such circumstances, we require that these parties agree to protect the confidentiality of such information consistent with the terms of this Privacy Notice.
We will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you have the ability to opt-in or opt-out. We may share aggregated data with third-party service providers in order to improve the Service as described below.
In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce any provision of the Terms of Service, protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any user, or protect the public welfare; (iii) when disclosure is required to maintain the security and integrity of the Service, or to protect any user’s security or the security of other persons, consistent with applicable laws (iv) to respond to a court order, subpoena, search warrant, or other legal process, to the extent permitted and as restricted by law; or (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets.
Retention of Data
Therapy Brands will retain your personal information only for as long as is necessary for the purposes set out in this Notice. We will retain and use personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
Therapy Brands will also retain usage data for internal analysis purposes as described in the next section. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the Service, or we are legally obligated to retain this data for longer periods.
Cookies, Aggregated Data, Device Data, and How it is Used
When you use our Service, we may record unique identifiers associated with your device (such as the device ID and IP address), your activity within the Service, and your network location. Therapy Brands uses aggregated information (such as anonymous user usage information, cookies, IP addresses, browser type, clickstream information, etc.) to improve the quality and design of the Service and to create new features, promotions, functionality, and services by storing, tracking, and analyzing user preferences and trends. Specifically, we may automatically collect the following information about your use of Service through cookies, web beacons, and other technologies:
- domain name;
- browser type and operating system;
- web pages you view;
- links you click;
- IP address;
- the length of time you visit the Sites, Portals, and/or Services;
- the referring URL or the webpage that led you to the Sites.
We may also collect information regarding application-level events, such as crashes, and associate that temporarily with your account to provide customer service. In some circumstances, we may combine this information with personal information collected from you (and third-party service providers may do so on behalf of us).
International Data Transfer
If you are located outside the United States, in particular if you are located in Switzerland, the United Kingdom, or the European Economic Area (“EEA”), please note that we and our servers are located in the United States. Therapy Brands does not market to or solicit customers from outside the US, therefore, users of the Service should not expect to avail themselves of the rights provided under the EU’s General Data Protection Regulation (“GDPR”). If you use the Service, all information, including personal information, will be transferred to Therapy Brands in the US. By using the Service, you unambiguously consent to the transfer of your personal information and other information to the US and elsewhere for the purposes and uses described in this Notice. Further, you acknowledge that Therapy Brands is not subject to the GDPR or similar international privacy laws, and, therefore, you will be unable to claim the privacy rights provided in those laws.
California Privacy Rights
If you are a California resident, California law may provide you with certain rights regarding your personal information under the California Consumer Privacy Act (“CCPA”). Throughout this Privacy Notice you will find information required by CCPA regarding the categories of personal information collected from you, the purposes for which we use personal information, and the categories of third parties with whom your data may be shared. This information is current as of the date of the Notice and is applicable in the 12 months preceding the effective date of the Notice.
As a California resident, the CCPA provides you the ability to make inquiries regarding to your personal information. Specifically, the degree to which the information is not already provided in this Privacy Notice, you have the right to request disclosure about the collection and use of your personal information over the past 12 months, including:
- The categories of personal information collected about you.
- The categories of sources for the personal information collected about you.
- The business or commercial purpose for collecting your personal information.
- The categories of third parties with whom your personal information was shared.
- The specific pieces of personal information collected about you.
- If your personal information was disclosed for a business purpose, the personal information categories disclosed and the categories of third parties to which the information was disclosed.
- If your personal information was sold in the past 12 months, the personal information categories sold and the categories of third parties to which the information was sold. (Note: Therapy Brands DOES NOT SELL YOU PERSONAL INFORMATION).
Please note that you may only make the above requests twice in a 12-month period. You also have the right to request that any of your personal information collected and retained be deleted, subject to certain exceptions. Finally, you have the right not to receive discriminatory treatment by Therapy Brands or any business for exercising any of the rights provided under CCPA.
If we receive a CCPA request from you, we will first make a determination regarding the applicability of the law, and we will then take steps to verify your identity prior to responding. The steps to verify your identity may vary based on our relationship with you, but, at a minimum, it will take the form of confirming and matching the information submitted in the request with information already held by Therapy Brands and/or contacting you through previously used channels to confirm that you submitted the request (i.e. confirming identity through contact information that we have on file, not the contact information submitted to make the request).
Your rights as stated here can also be exercised by an authorized agent on your behalf. Therapy Brands will follow the standards set by the Attorney General of California regarding designation of an authorized agent to exercise rights under CCPA. You may review information available through the Attorney General website (https://www.oag.ca.gov/privacy/ccpa) regarding how an individual can be designated as an authorized agent under CCPA.
In addition to CCPA, California Civil Code Section 1798.83 permits users of the Website who are California residents to request certain information regarding its disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us as described here.
Third Party Advertisers
Information Security and User Responsibility
Therapy Brands employs industry-standard security measures designed to protect the security of all information submitted through the Service. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data.
Users of the Service are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of the Service. In order to protect you and your information, we may suspend your use of any of the Service, without notice, pending an investigation, if any breach of security is suspected.
The Service may contain links to other websites maintained by third parties. Please be aware that we exercise no control over linked sites and Therapy Brands is not responsible for the privacy practices or the content of such sites. Each linked site maintains its own independent privacy and data collection policies and procedures, and you are encouraged to view the privacy policies of these other sites before providing any personal information.
You hereby acknowledge and agree that Therapy Brands is not responsible for the privacy practices, data collection policies and procedures, or the content of such third-party sites, and you hereby release Therapy Brands from any and all claims arising out of or related to the privacy practices, data collection policies and procedures, and/or the content of such third-party sites.
While certain brands may allow Therapy Brands’ customers to upload information about children who are patients of the customer, the Service is not intended for customers under the age of 13. Therapy Brands does not knowingly collect the personal information of children under the age of 13 through its marketing or customer registration processes.
Changes to this Privacy Notice
Therapy Brands reserves the right to modify this Privacy Notice from time to time in order that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Privacy Notice, Therapy Brands will post the revised Notice on our website. This Privacy Notice was last modified as of April 2020.
If you have any questions or comments about this Privacy Notice or the Service provided by Therapy Brands, please contact us at: firstname.lastname@example.org.
Policy number: TBH-P-00100 (v2020.1) Date 04/10/2020