Privacy Policy

Last updated: February 19, 2025

Introduction

At Arizona Institute for Autism, we are dedicated to protecting the privacy and security of our website visitors, clients, and their families. This policy explains how we collect, use, and safeguard your personal information.

As a healthcare provider, we strictly adhere to the HIPAA (Health Insurance Portability and Accountability Act), COPPA (Children’s Online Privacy Protection Act), and all applicable federal and state regulations governing the privacy and security of PHI (Protected Health Information).

Information We Collect

We may collect the following types of information:

• Personal Identification Information: Your name, address, phone number, email address, and other contact details.

• Health Information: Diagnoses, treatment plans, medical history, and other health-related information required to provide autism treatment services.

• Website Usage Data: Information such as IP addresses, browser type, device type, operating system, and pages visited. This data is collected in a non-identifiable, aggregated form for analytics purposes.

• Payment Information: Credit card numbers, expiration dates, and other payment details needed to process transactions securely.

How We Use Your Information

We use the collected information for the following purposes:

• Providing Services: To deliver autism treatment services, including Applied Behavior Analysis (ABA) therapy and related programs.

• Communication: To respond to inquiries, send newsletters, and provide updates about our services.

• Marketing (Non-Personalized & HIPAA-Compliant): We use aggregated, anonymized data to analyze trends and enhance our outreach efforts.

• We do not use any health-related data for targeted advertising or remarketing.

• PHI is never shared with third-party marketers, advertisers, or analytics platforms.

• Research and Development: To improve our services, optimize website functionality, and support research in autism treatment.

• Legal Compliance: To comply with HIPAA, COPPA, and other relevant laws, including meeting legal and law enforcement requirements.

How We Protect Your Information

We implement robust security measures to ensure the confidentiality and integrity of your data:

• Encryption: We use HIPAA-compliant encryption protocols to protect data during transmission and storage.

• Access Controls: Only authorized personnel, with proper background checks and confidentiality training, can access your information.

• Secure Data Storage: All data is stored on secure, HIPAA-compliant servers, both physically and electronically.

• Incident Response: We maintain a comprehensive data breach response plan to promptly address and mitigate any security incidents.

Sharing Your Information

We do not sell, rent, or share PHI with third-party advertisers. Information may be shared only in the following necessary and permitted circumstances:

• Service Providers: Contractors, vendors, and partners who assist in delivering our services in a HIPAA-compliant manner.

• Insurance Companies: For processing claims and obtaining reimbursement for services.

• Research Institutions: In a de-identified format to support research and the advancement of autism treatment.

• Legal Obligations: When required by law, regulation, or court order.

Your Rights

You have the following rights regarding your personal and health information:

• Access: You may request a copy of your records at any time.

• Correction: If any information is incorrect or incomplete, you can request corrections.

• Opt-Out: You may opt out of receiving newsletters, marketing emails, or other non-essential communications.

• Deletion: You can request the deletion of your personal data when legally permissible. Please note that some records must be retained in accordance with HIPAA regulations.

Children’s Privacy & COPPA Compliance

We comply with the Children’s Online Privacy Protection Act . This means:

• We obtain verifiable parental consent before collecting personal information from children under 13.

• We do not knowingly collect information from children without parental or guardian approval.

• Any data collected from children is used solely for autism treatment services and is never shared for marketing purposes.

• If you believe we have inadvertently collected data from a child without proper consent, please contact us immediately for removal.

Data Protection Agreements (DPA)

We have established Data Protection Agreements with our service providers and contractors. These agreements require that:

• Your information is processed in accordance with HIPAA and all applicable data protection laws.

• No personal health data is used for advertising, analytics tracking, or marketing purposes.

• PHI is never shared with third-party marketing platforms.

Third-Party Tracking & Website Usage Data

Our website uses anonymous analytics to improve functionality. Specifically:

• We do not track website visitors for personalized health-related advertising.

• We do not use third-party advertising cookies to collect health-related data.

• We do not engage in behavioral tracking that targets users based on health conditions.

These practices are designed to ensure compliance with healthcare and sensitive information policies.

Changes to This Policy

We may update this privacy policy periodically. All changes will be posted on this page with an updated Last updated date. Your continued use of our website and services after such changes signifies your acceptance of the revised terms.

Contact Us

If you have any questions or concerns about this privacy policy or wish to exercise your privacy rights, please contact us at:

• Email: info [at] azinstitute4autism [dot] com

• Address: 8901 E. Raintree Drive, Suite #160 Scottsdale Arizona 85260

• Phone: 9907-786 (084)

By using our website and services, you confirm that you have read, understood, and agree to the terms outlined in this privacy policy.