Privacy Policy

Effective Date: June 3, 2025  Last Updated: October 10, 2025

Evans Hand Therapy (“Evans Hand Therapy,” “we,” “our,” “us”) respects your privacy and is committed to protecting your information.
This Privacy Policy explains how we collect, use, share, and safeguard personal and health information when you visit
https://www.evanshandtherapy.com (the “Site”) or otherwise interact with us.

We comply with the following laws and regulations:

• HIPAA / HITECH Act (for Protected Health Information – PHI)
• California Consumer Privacy Act (CCPA) as amended by the CPRA
• California Online Privacy Protection Act (CalOPPA)
• Telephone Consumer Protection Act (TCPA) for text messaging consent

1. Information We Collect

a. Information You Provide

• Name, email address, phone number, mailing address
• Appointment requests or inquiry details
• Health information you voluntarily submit through forms or during treatment (PHI)
• Insurance or billing details as required
• SMS opt-in preferences and communications consent

b. Automatically Collected Information

• Device and browser information (IP address, OS, browser type)
• Usage data (pages viewed, time on site, click paths)
• Cookies and similar technologies used for essential functions, analytics, and advertising

2. How We Use Information

• Schedule and manage appointments or treatment plans
• Communicate with you about your care or our services
• Process insurance claims and payments
• Maintain records required by law or medical standards
• Improve the Site and analyze usage trends
• Deliver marketing communications or ads only with your consent
• Comply with legal and regulatory obligations

3. Legal Basis and Consent

• PHI is used and disclosed under HIPAA-permitted purposes (treatment, payment, operations) or with your written authorization.
• Non-essential cookies and tracking tools operate only after your explicit consent through our cookie banner or settings.
• You may withdraw consent at any time via the “Cookie Settings” or “Do Not Sell or Share” links in the footer.

4. Data Sharing / Sale / Cross-Context Advertising

• We do not sell your personal information.
• We may share limited identifiers (e.g., cookie IDs or hashed emails) with advertising or analytics partners for cross-context behavioral advertising.
• This “sharing” is subject to your right to opt out (Section 9).
• PHI is shared only with vendors that have a signed Business Associate Agreement (BAA) and only for permitted HIPAA purposes.

5. Business Associates and HIPAA Compliance

We maintain BAAs with vendors that handle PHI (e.g., electronic health-record systems, secure intake forms, billing platforms).
Analytics or advertising vendors do not receive PHI. We audit vendors periodically for HIPAA compliance where applicable.

6. Cookies and Tracking Technologies

We use CookieYes to collect and record consent. Non-essential cookies are blocked until you choose “Accept.”

You can update preferences any time via the link below. We also honor the Global Privacy Control (GPC) signal for opt-out of sharing / advertising.

7. Data Retention

We retain PHI and other records as required by law (typically 6–7 years). Non-PHI information (e.g., analytics data) is retained only as long as needed for the purposes described above or as required by law.

8. Your Privacy Rights

• Right to Know / Access – Request the categories and specific pieces of information we have collected.
• Right to Delete – Ask us to delete non-PHI personal information.
• Right to Correct – Request correction of inaccurate data.
• Right to Portability – Receive data in a machine-readable format.
• Right to Opt-Out of Sharing – Use the “Do Not Sell or Share My Personal Information” link or GPC signal.
• Right to Non-Discrimination – We will not deny services or charge different prices if you exercise these rights.

How to Submit a Request: Email frontoffice@evanshandtherapy.com
or use the Privacy Rights Request form linked in our footer. We will verify your identity and respond within 45 days (or as required by law).

9. Withdrawing Consent and Preference Center

You may withdraw cookie or marketing consent at any time by clicking the links in our footer:

• Cookie Settings – reopens the CookieYes banner so you can change preferences
• Do Not Sell or Share My Personal Information – opt out of cross-context advertising

10. Security and Breach Notification

We use encryption (HTTPS), firewalls, and access controls to protect data. If a breach of PHI occurs, we will notify affected individuals in accordance with HIPAA/HITECH and state law.
For non-PHI breaches, we will notify as required by state law.

11. Children’s Privacy

We do not knowingly collect personal information from children under 13 without parental consent.
For users ages 13–16, we require parent or guardian authorization for any non-essential processing or marketing.

12. Third-Party Links and Embedded Content

Our Site may include links to third-party sites or embedded content (e.g., maps, videos).
These third parties have their own privacy policies. Key vendors include Google Analytics, Meta (Facebook) Ads, YouTube, and CookieYes.
We share only data necessary for their functions and never PHI.

13. Cross-Border Data Transfers

We store and process data in the United States. If data is transferred outside the U.S., we apply appropriate safeguards (e.g., standard contractual clauses or your consent).

14. Policy Updates and Versioning

We may update this Privacy Policy periodically. The “Last Updated” date above reflects the latest version.
If changes materially affect your rights, we will notify you via website banner or email and seek renewed consent if required.

15. Contact Us

Evans Hand Therapy
1740 W Katella Ave # D
Orange, CA 92867 USA
Email: frontoffice@evanshandtherapy.com
Phone: (714) 831 5599

16. Quick Links

• Privacy Policy
• Terms of Use
• Cookie Settings
• Do Not Sell or Share My Personal Information
• Accessibility Statement