This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally Identifiable Information’ (PII) is being used online. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.
What personal information do we collect from the people that visit our blog, website or app?
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, phone number or other details to help you with your experience.
When do we collect information?
We collect information from you when you fill out a form or enter information on our site.
How do we use your information?
We may use the information we collect from you when you request more information about a procedure in the following way:
- To follow up with you after correspondence (email or phone inquiries)
How do we protect your information?
We do not use vulnerability scanning and/or scanning to PCI standards.
We only provide articles and information. We never ask for credit card numbers.
We use regular Malware Scanning.
Do we use ‘cookies’?
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow it) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
Third-party disclosure
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
Third-party links
Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
We may also use trusted third-party services that track this information on our behalf.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.
If you turn cookies off, some features will be disabled. It won’t affect the user’s experience that make your site experience more efficient and may not function properly.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. Google Ads policies.
We have not enabled Google AdSense on our site but we may do so in the future.
California Online Privacy Protection Act
CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers to post a conspicuous privacy policy on its website stating exactly which information is being collected and those individuals or companies with whom it is being shared. Please see:
California Online Privacy Protection Act (CalOPPA)
According to CalOPPA, we agree to the following:
Users may visit our site anonymously.
Once this privacy policy is created, we will add a link to it on our home page or as a minimum, on the first significant page after entering our website.
Our Privacy Policy link includes the word ‘Privacy’ and can be easily be found on the page specified above.
You will be notified of any Privacy Policy changes on our Privacy Policy Page.
How does our site handle Do Not Track signals?
We honor Do Not Track signals and Do Not Track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
Does our site allow third-party behavioral tracking?
It’s also important to note that we allow third-party behavioral tracking.
COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under the age of 13 years old.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
We will notify you via email within 7 business days.
We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.
CAN SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
Send information, respond to inquiries, and/or other requests or questions
To be in accordance with CANSPAM, we agree to the following:
- Not to use false or misleading subjects or email addresses.
- Identify the message as an advertisement in some reasonable way.
- Include the physical address of our business or site headquarters.
- Monitor third-party email marketing services for compliance, if one is used.
- Honor opt-out/unsubscribe requests quickly.
- Allow users to unsubscribe by using the link at the bottom of each email.
If at any time you would like to unsubscribe from receiving future emails
Follow the instructions at the bottom of each email and we will promptly remove you from ALL correspondence.
HIPPA
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
This Notice of Privacy Practices describes how we may use and disclose your protected health/personal information (PHI) to carryout out treatment, payment or business operations (TPO) and for other purposes that are permitted or required by law. It also describes our rights to access and control your protected information. Protected health/personal information is information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services.
1.Uses and Disclosures of Protected Health/Personal Information
Uses and Disclosures of Protected Health/Personal Information
Your protected health/personal information may be used and disclosed by our medical director, our office staff and others outside of our office that are involved in your care and treatment for the purpose of providing health care services to you to support business operations of this office, if requested by you to a finance company to pay for your care, and any other use required by law.
Treatment: We will use and disclose your protected health/personal information to provide, coordinate, or manage your health care and any related services. This includes the coordination or management of your health care with a third party. For example, we would disclose your protected health/personal information, as necessary, if, as a result of our services, you require treatment by a physician. Your protected health/personal information may be provided to a physician to whom you have been referred to ensure that the physician has the necessary information to diagnose or treat you.
Payment: Your protected health/personal information will be used, if requested, to obtain payment for your services. For example, if you desire to finance the costs of your treatments, this may involve disclosing relevant protected private information in order to obtain approval.
Healthcare Operations: We may use or disclose, as needed, your protected health/personal information in order to support the business activities of this office. These activities include, but are not limited to, quality assessment activities, employee review activities, licensing, and conducting or arranging for other business activities. In addition, we may use a sign-in sheet at the registration desk where you will be asked to sign your name. We may also call you by name in the waiting room when we are ready to see you. We may use or disclose your protected health/personal information, as necessary, to contact you to remind you of your appointment.
We may use or disclose your protected health/personal information in the following situations without your authorization. These situations include: as required by law; public health issues as required by law, communicable diseases; health oversight; abuse or neglect; Food and Drug Administration requirements; legal proceedings; law enforcement; coroners, funeral directors and organ donation; research; criminal activity and national security; workers� compensation; inmates; required uses and disclosures. Under the law, we must make disclosure to you and, when required by the Secretary of the Department of Health and Human Services, to investigate or determine our compliance with the requirements of Section 164.500.
Other Permitted and Required Uses and Disclosures will be made only with your consent, authorization or opportunity to object unless required by law.
You may revoke this authorization, at any time, in writing, except to the extent that this office has taken an action in reliance on the use or disclosure indicated in the authorization.
2. Your Rights
Following is a statement of your rights with respect to your protected health/personal information.
You have the right to inspect and copy your protected health/personal information. Under federal law, however, you may not inspect or copy the following records: information compiled in reasonable anticipation of, or use in, a civil, criminal, or administrative action or proceeding, and protected health/personal information that is subject to law that prohibits access to protected health/personal information.
You have the right to require a restriction of your protected health/personal information. This means you may ask us not to use or disclose any part of your protected health/personal information for the purposes of treatment or healthcare operations. You may also request that any part of your protected health/personal information not be disclosed to family members or friends who may be involved in your care or for notification purposes as described in this Notice of Privacy Practices. Your request must state the specific restriction requested and to whom you want the restriction to apply.
We are not required to agree to a restriction that you may request. If our medical director believes it is in your best interest to permit use and disclosure of your protected health/personal information, your protected health/personal information will not be restricted. You then have the right to use another service provider.
You have the right to request to receive confidential communications from us by alternative means or at an alternative location. You have the right to obtain a paper copy of this notice from us, upon request, even if you have agreed to accept this notice alternatively, i.e., electronically.
You may have the right to amend your protected health/personal information. If we deny your request for amendment, you have the right to file a statement of disagreement with us and we may prepare a rebuttal to our statement and will provide you with a copy of any such rebuttal.
You have the right to receive an accounting of certain disclosures we have made, if any, of your protected health/personal information.
We reserve the right to change the terms of this notice and will inform you by mail of any changes. You then have the right to object or withdraw as provided in this notice.
Complaints
You may complain to us or to the Secretary of Health and Human Services if you believe your privacy rights have been violated by us. You may file a complaint with us by notifying our privacy contact of your complaint. We will not retaliate against you for filing a complaint.
This notice was published and becomes effective on/or before April 14, 2009.
We are required by law to maintain the privacy of, and provide individuals with, this notice of our legal duties and privacy practices with respect to protected health/personal information. If you have any objections to this form, please ask to speak with Christine Wood, our HIPPA Compliance Officer, in person or by phone at our 757-496-4937.
If there are any questions regarding this privacy or HIPPA policy, you may contact us using the information below.
Salt Spa & Wellness Center
1817 Republic Road, Suite B
Virginia Beach, VA 23454
