Privacy Policy
BrightSteps ABA (“BrightSteps”) is committed to protecting the privacy of the families we serve, the providers who support them, and visitors to our website. This Privacy Policy explains what information we collect, how we use it, and how we safeguard it in compliance with HIPAA, federal law, and applicable state laws.
1. Information We Collect
We collect information that you voluntarily provide when you:
- Complete an intake or contact form
- Request information about ABA services
- Sign up for communications or resources
- Apply for employment or submit professional inquiries
This may include your name, email address, phone number, zip code, insurance information, and limited clinical details related to autism services.
2. HIPAA & Clinical Data Protection
BrightSteps complies with the Health Insurance Portability and Accountability Act (HIPAA), including the Privacy, Security, and Breach Notification Rules.
Protected Health Information (PHI)
Any medical or treatment-related information submitted through our website or systems is treated as PHI and protected accordingly.
Secure Transmission
We use industry-standard encryption and secure technologies to safeguard data transmitted through our forms and communication systems.
3. How We Use Your Information
We use collected information to:
- Provide and manage ABA therapy services
- Respond to inquiries and support requests
- Send appointment reminders and service updates
- Communicate regarding your account or services
- Send marketing or promotional messages only with your consent
4. SMS Communication & Consent
By providing your phone number and opting in through our website or other channels, you consent to receive SMS text messages from BrightSteps ABA.
These messages may include:
- Appointment reminders
- Service updates and notifications
- Customer support responses
- Promotional or marketing messages if opted in
Additional SMS Disclosures
- Message frequency may vary
- Message and data rates may apply
- You may opt out at any time by replying STOP
- For help, reply HELP or contact us directly
5. Mobile Data Privacy (No Sharing Policy)
BrightSteps ABA respects your privacy.
- We do not sell, rent, or share your personal information with third parties for marketing purposes.
- No mobile information or SMS opt-in data will be shared with third parties or affiliates for marketing or promotional purposes.
- Information may be shared with trusted subcontractors, such as scheduling platforms, customer support tools, or secure communication providers, strictly for operational purposes.
- All SMS opt-in data and consent remain confidential and are not shared externally.
6. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to analyze traffic and improve user experience. You may disable cookies in your browser settings, though some features may not function properly.
7. Third-Party Service Providers
We may share information with trusted service providers who assist in operating our website and delivering services, such as HIPAA-compliant systems, scheduling tools, and communication platforms. These providers are contractually obligated to maintain confidentiality and security.
8. Children’s Privacy
Our website is intended for parents, guardians, and professionals. We do not knowingly collect personal information directly from children under the age of 13.
9. Data Security and Retention
BrightSteps uses administrative, technical, and physical safeguards to protect personal and clinical information from unauthorized access, disclosure, or misuse.
We retain information only as long as necessary to:
- Provide services
- Comply with legal obligations
- Meet applicable clinical record retention requirements
10. Data Breach Notification
In the event of a data breach affecting personal information, BrightSteps will notify affected individuals without unreasonable delay and in accordance with applicable laws. Where required, we will also notify regulatory authorities.
11. Your Privacy Rights
Depending on applicable laws, you may have the right to:
- Access the personal information we hold about you
- Request corrections to inaccurate information
- Request deletion of your data where permitted
Rights related to PHI are governed by our Notice of Privacy Practices (NPP).
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
13. Contact Us
If you have questions about this Privacy Policy or your data:
BrightSteps ABA
Phone: 888-784-8080
Website: https://brightsteps-aba.com/
“`
Introduction
BrightSteps (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website. By using our services, you agree to the terms outlined in this policy.
Information We Collect
We collect and process various types of data, including:
- Information You Provide Directly
Personal Identification Data: Name, email address, phone number
Account Information: Username, password, profile details
Payment Information: Billing details, transaction history
Communication Data: Messages, feedback, inquiries
- Information Collected Automatically
Device Data: IP address, browser type, operating system
Usage Data: Pages visited, time spent on the site, interaction data
Cookies and Tracking Technologies: Data collected through cookies, pixels, and analytics tools
How We Use Your Data
We use your information for the following purposes:
- To provide services: Processing requests, managing user accounts
- To improve user experience: Customizing content, analyzing performance
- For communication: Sending updates, newsletters, and support responses
- For security and fraud prevention: Protecting against unauthorized access
- For legal compliance: Adhering to applicable laws and regulations
Legal Basis for Processing
We process your data under the following legal grounds:
- Contractual Necessity: Providing services and fulfilling agreements
- Legitimate Interests: Improving services and preventing fraud
- Consent: Sending marketing communications (when opted-in)
- Legal Obligation: Complying with financial and regulatory laws
Data Sharing and Third Parties
We do not sell or rent personal data. However, we may share your information with:
- Service Providers: Hosting, payment processing, analytics services
- Legal Authorities: If required by law or legal process
- Business Transfers: In case of mergers, acquisitions, or restructuring
Cookies and Tracking Technologies
We use cookies to enhance user experience, analyze website traffic, and provide personalized content. Users can manage cookie preferences via browser settings. For details, refer to our Cookie Policy.
Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.
Your Rights
Depending on applicable laws, you may have the right to:
- Access, correct, or delete your data
- Withdraw consent for processing
- Object to certain types of data usage
- Request data portability
To exercise your rights, contact us at [Insert Contact Email].
Data Security
We implement technical and organizational measures to protect your data. However, no system is 100% secure, and users should take precautions when sharing personal information online.
International Data Transfers
If your data is transferred outside your country, we ensure compliance with legal safeguards such as Standard Contractual Clauses (SCCs) or other regulatory frameworks.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated through our Website. Continued use of our services constitutes acceptance of the updated terms.
Contact Information
For any questions, concerns, or legal inquiries regarding this Legal Notice, please contact us at:
Email: hello@brightsteps-aba.com
Phone: 440 363 4400
Address: 31 rue Jean-Jacques Rousseau 93100 Montreuil-Sous-Bois
