Privacy Policy
Effective Date: January 1, 2025
Last Updated: December 30, 2024
Find ABA Therapy ("we," "us," or "our") operates the website findabatherapy.org (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or use our services. Please read this policy carefully. By using the Site, you consent to the practices described herein.
1. Information We Collect
1.1 Information You Provide Directly
- Account Information: When you create an account as a therapy provider, we collect your name, email address, phone number, and business information (practice name, address, services offered).
- Contact Form Submissions: When families submit inquiries through provider contact forms, we collect the information provided (name, email, phone number, message content, and any details about care needs).
- Payment Information: When you subscribe to a paid plan, payment is processed by Stripe, Inc. We do not store your full credit card number. We receive only the last four digits, card type, and billing address for record-keeping purposes.
1.2 Information Collected Automatically
- Usage Data: We collect information about how you interact with the Site, including pages visited, search queries, clicks on listings, and time spent on pages.
- Device Information: We collect browser type, operating system, device type, and screen resolution.
- IP Address: We collect IP addresses for security purposes, fraud prevention, and to provide location-relevant search results.
- Cookies and Similar Technologies: We use essential cookies to maintain session state and remember your preferences. We do not use third-party advertising cookies.
1.3 Information from Third Parties
- Google Maps/Places API: When you use address autocomplete features, Google may collect usage data subject to Google's Privacy Policy.
- Stripe: Our payment processor provides us with transaction confirmations and subscription status.
2. How We Use Your Information
We use the information we collect to:
- Operate, maintain, and improve the Site and our services
- Process transactions and send related information (confirmations, invoices, renewal notices)
- Connect families with ABA therapy providers through our directory and contact forms
- Send administrative communications (service updates, security alerts, support messages)
- Respond to your comments, questions, and customer service requests
- Monitor and analyze usage patterns and trends to improve user experience
- Detect, prevent, and address fraud, spam, and security issues
- Comply with legal obligations and enforce our Terms of Service
3. How We Share Your Information
We do not sell your personal information. We may share information in the following circumstances:
3.1 With Therapy Providers
When you submit a contact form inquiry, your provided information (name, contact details, message) is shared with the therapy provider you are contacting. Providers may use this information to respond to your inquiry.
3.2 With Service Providers
We share information with third-party vendors who perform services on our behalf:
- Stripe: Payment processing
- Supabase: Database hosting and authentication
- Vercel: Website hosting
- Resend: Transactional email delivery
- Cloudflare: Security and spam protection (Turnstile)
- Google: Maps and address autocomplete services
3.3 For Legal Reasons
We may disclose information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
3.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.
4. Data Retention
- Account Data: We retain your account information for as long as your account is active. You may request deletion at any time.
- Contact Form Inquiries: Inquiry data is retained for up to 2 years to allow providers to reference past communications, unless earlier deletion is requested.
- Payment Records: Transaction records are retained for 7 years as required for tax and accounting purposes.
- Usage Analytics: Anonymized analytics data may be retained indefinitely for aggregate statistical analysis.
5. Your Rights and Choices
5.1 Access and Correction
You may access and update your account information at any time by logging into your dashboard.
5.2 Deletion
You may request deletion of your account and personal data by contacting us at support@findabatherapy.org. We will process your request within 30 days, subject to any legal retention requirements.
5.3 Opt-Out of Communications
You may opt out of promotional emails by clicking the "unsubscribe" link in any email. You cannot opt out of transactional emails related to your account or subscriptions.
5.4 Cookie Preferences
Most web browsers allow you to control cookies through settings. Disabling cookies may affect Site functionality.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Regular security assessments
- Access controls limiting employee access to personal data
- Secure authentication practices
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Children's Privacy
Our Site is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at support@findabatherapy.org.
8. Health Information Disclaimer
Find ABA Therapy is a directory service connecting families with therapy providers. We are not a healthcare provider and do not provide medical advice, diagnosis, or treatment. Information shared through contact forms is for scheduling and inquiry purposes only.
While our contact forms may collect general information about care needs, we are not a HIPAA-covered entity. Providers listed on our platform are responsible for their own HIPAA compliance when handling protected health information outside of our platform.
9. Third-Party Links
The Site may contain links to third-party websites, including provider websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any site you visit.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the Site after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: support@findabatherapy.org
- Website: findabatherapy.org/contact
This Privacy Policy is effective as of January 1, 2025 and applies to all users of findabatherapy.org.
