Privacy Policy

Scope of This Policy

This policy applies whenever you access this website, complete an online form, call our clinic, send an email to our team, book a session, or engage us for professional services. It also applies to information we receive from referral sources, other health care providers, your insurance carrier, or your chosen representatives when you have asked them to share details with us.

The policy is designed to be read alongside any separate authorization you sign before treatment. Where the two documents differ, the more specific authorization and the obligations required by law will control how your health information is used internally. Where this website simply collects general visit data, the practices described in this notice will apply.

This policy does not apply to websites owned by other people. When we put a link to another organization on our pages, clicking that link takes you to a site with its own rules. We cannot promise how those external services will treat your information, and we recommend that you review each sites notice before sharing personal details there.

Information We Collect

We collect information about you in several ordinary ways so that we can respond to requests, manage appointments, deliver care, and keep our systems secure. We limit what we gather to what is genuinely useful and keep unnecessary data out of our records wherever possible.

Details you provide directly

When you use our contact form, sign up for our email list, ask for a brochure, book an appointment, or otherwise write to us, you may give us your full name, a preferred email address, a phone number, your mailing address, your date of birth, insurance details, and a short description of why you are reaching out. We use these details only to respond and to support your care.

Information from your device and browser

Like most websites, ours automatically records standard details when your browser requests a page. This includes your internet protocol address, the type of browser and operating system you use, the general region you connect from, the web pages you open, and the time you spend on each one. We treat this data as anonymous statistics and never attempt to identify a specific person from it.

Health and treatment details

When you become a client, we create a clinical record that includes your medical history as you share it, results of our physical evaluation, your therapy goals, the exercises we prescribe, your progress notes, and any communications between you and our clinical staff. This protected health information is handled under stricter rules that we describe later in this notice.

Cookies and Similar Technologies

We use small text files known as cookies to help the website function smoothly and to understand how visitors move through our pages. Some cookies are strictly needed, such as the ones that remember your current session or keep a form working while you fill it in. These require no consent and cannot be turned off without harming the basic use of the site.

Other cookies are analytical. They tell us, in aggregate form, which pages are popular, where visitors come from, and how we can make navigation clearer. This data helps us improve the clinic website so that it is easier for you to find the information you need about our services on Redwood Road in North Salt Lake.

Your browser gives you choices about cookies. You may block them, clear them after each visit, or ask to be warned before a new cookie is placed. Choosing to disable nonessential cookies will not prevent you from viewing our pages or contacting us, though it may reduce the richness of the performance statistics we can collect.

Why We Collect and Use Information

We only process personal information when we have a proper reason to do so. Below we set out the main lawful grounds on which we rely.

When we collect health information for treatment, the law obliges us to obtain a clear authorization from you before most uses and before any disclosure not directly tied to your care. You may revoke that authorization at any time in writing, though revocation cannot undo a sharing decision that occurred before we received your notice.

We do not sell your personal information. We do not rent lists of our clients, and we do not hand over contact details to advertisers so that they can market to members of our community without your permission.

Communications and Newsletters

If you ask to join our email list, we will send you occasional updates about clinic hours, new rehabilitation programs, and useful wellness reminders. Every marketing message we send includes an obvious way to stop future messages, and we honor those requests promptly when you click unsubscribe or write to ask us to remove you.

Important service messages that relate to a scheduled appointment, a billing question, or the safe continuation of your care may still be sent even if you have opted out of newsletters, because those messages are necessary rather than promotional. You can always receive service notices by phone should you prefer to stop email completely.

When We Share Information

We share your personal information only in limited, justified situations and we never do so casually. These situations include the following.

• With our clinical and support staff who need the records to provide care and to run the office.
• With your health insurance provider so that a claim can be submitted and paid on your behalf, or with a billing agency that acts on our instructions to handle payments.
• With other clinicians or facilities when you have asked for a referral, request a second opinion, or continue care elsewhere and direct us to send your records.
• With our technology providers that store data or run our website under strict contracts that forbid independent use of your information.
• With authorities when a court order, a subpoena, or an applicable law compels a disclosure, or when we must protect the safety of a person in serious danger.
• With a cloud service, email host, or backup utility that helps us keep the information we hold secure and available.

Every outside partner that touches client information is bound by an agreement that limits its use solely to performing the task we hired it for. We review these relationships and require reasonable safeguards wherever protected details are stored or transmitted.

Service Providers and Business Partners

To operate a modern clinic, we rely on a small number of trusted technology providers. These include companies that host our website, deliver our email, store our files securely, process online payments, and supply the software that schedules appointments. Each provider receives only the data necessary to complete its service, and each is barred by contract from using that data for any independent purpose.

We choose providers with care, preferring those that keep our region in mind, apply strong encryption in transit and at rest, use industry-recognized permission controls, and can demonstrate a history of protecting sensitive records. Where a provider stores data outside your home country, we make sure that an approved legal mechanism provides the same level of protection you would expect at home, or we avoid that arrangement entirely.

Security Safeguards

Protecting your records is a core part of our professional responsibility. We use technical, administrative, and physical controls to reduce the chance of accidental loss, misuse, or unauthorized access. Staff access to clinical notes is limited to the people who genuinely need it, each access is tied to a unique account, and we review who can see what on a routine schedule.

When data travels across the internet, we use encryption to protect it. When data rests on our servers or with our providers, it is protected by further encryption and by strict access lists. We keep confidential information only as long as it is needed for care, billing, and the legal retention periods that apply to health records, and we dispose of files securely long after they are no longer required.

No method of transmission or storage can be described as completely unhackable. If, despite our controls, we become aware of a data incident that creates a real risk to your information, we will investigate it, seek advice, and give you and the relevant authorities a prompt and honest notice in line with our legal duty.

Your Rights to Control Use and Disclosure

The law grants you specific rights over the health information we hold. Among them are the right to look at and copy your records, the right to ask that we correct a mistake, the right to receive an accounting of many disclosures we have made, and the right to request that we communicate with you through a preferred channel or location.

You also have the right to ask us to limit the ways we use or share protected information for treatment, payment, and clinic operations, though the law allows us to decline a request that would interfere with necessary care. With very few exceptions, we will not use or share the most sensitive of your records, such as psychotherapy notes, without a separate and express written permission from you.

We will never condition your treatment on signing a broad authorization you are uncomfortable with, and we will promptly apply a written revocation of any earlier authorization once we receive and confirm it.

Reviewing, Correcting, and Removing Information

You may ask us for a copy of the personal information we hold about you, and we will supply it in a readable format after confirming your identity. If you believe that something in your record is inaccurate or out of date, tell us what you believe to be wrong and we will correct it, or we will add your disagreement to the record where an edit is not appropriate.

For marketing and website data, we will gladly honor a request to stop processing or to delete details that are no longer needed. Health records are different, because federal and state rules require us to retain them for a set period after your care ends and to keep billing records for tax reasons. Where we cannot delete a record because of these obligations, we will restrict its use to the narrow purpose required by law and tell you what we have done.

To make any request, contact us using any of the details at the end of this page. We may ask for proof of identity to make sure that records are only released to the right person, and we will respond within the time window the rules allow.

Privacy for Children

Our website and the public areas of our services are intended for adults and for the families and guardians of children who receive care. We do not knowingly collect the personal information of children through this website without a parent or guardian being involved in that decision.

When we treat a younger client at the clinic, we communicate with a parent or legal guardian about the care that has been authorized, and access to that child health record follows the rules set by state and federal law. A parent or guardian may exercise the review and correction rights described above on behalf of a child in their care.

If you believe that a child has shared personal information with us without appropriate adult involvement, please contact our team so that we can review the record and remove the details where the law allows.

Retention of Information

We keep personal and clinical information only for as long as it serves a legitimate purpose. Appointment history helps us provide continuity when you return, billing records are required for accounting and tax compliance, and health records must be preserved for the retention period set by professional licensing rules before they can be destroyed.

Once a record has served its purpose and the legal retention window has passed, we delete or securely anonymize it so that it can no longer be linked to you. Website logs that support our analytics are kept for a short period and then stripped of identifying detail. This steady approach to retention keeps our files lean and lowers the chance that stale data ever causes you a problem.

Automated Decisions and Profiling

We do not make automated decisions that carry significant consequences for you based solely on computer evaluation of personal data. Our scheduling software may suggest appointment slots, and our analytics may group visitors by general trends, but no machine makes a judgment about your treatment, your insurance coverage, or your suitability for a program without a human clinician reviewing the real circumstances.

Because we value the human side of rehabilitation, every referral, every care plan, and every decision about your readiness to progress is reviewed by our trained staff. Any automated tool we use simply supports that human judgment rather than replacing it.

International Transfers

We primarily serve clients in the Salt Lake Valley and store most data within the United States. If you visit our website or contact us from another country, the information you share will be transmitted across international networks to reach our servers and to allow our team to respond to you.

When data does move across borders, we rely on standards that are designed to keep it protected, including contracts and security commitments that are recognized by applicable data protection frameworks. By sending us a message or engaging our services from outside the United States, you acknowledge that your information will be handled in line with this policy and the practices described here.

Changes to This Policy

We review this privacy policy from time to time so that it stays accurate as our services, our technology, and the law evolve. When we make a meaningful change, we will update the date at the top of this page and, where the change is significant, we will call attention to it on our home page or through a direct note to clients we still serve.

Your continued use of the website after a change takes effect means that you accept the updated version. If you do not agree with a revised policy, you may stop using the website or write to us with your concern before your next session. We are glad to talk through any change you find surprising, because understanding our practices should never require a law degree.

Notice About Protected Health Information

This policy should be read together with the separate notice of privacy practices that we give to every client at the start of care. That clinical notice provides the specific details that federal rules require, including how we may use protected information for treatment, payment, and clinic operations, and how you can object to particular disclosures, such as sharing your name in a hospital directory.

If there is ever a difference between this website policy and the formal clinical notice, the protections that are more favorable to you will apply to your health information. Please ask for a fresh printed copy of the clinical notice whenever you wish, and we will give it to you without charge.

Questions and Contact Details

If you have a question about this policy, wish to make a request about your data, or believe that a privacy expectation has not been met, please contact us by the simplest channel for you. We answer every legitimate enquiry and will take your concern seriously from the first message.

The business responsible for your information is AB Thompson Physical Therapy PLLC, a professional practice in the computer integrated systems design and related professional services field. Our visiting and mailing address is 691 N Redwood Rd Ste 200, North Salt Lake - 84054-2447, United States (US). Our team can always be reached at connect@abthompson.lol and by telephone at +17079364684.

If you remain unsatisfied after speaking with us, you may also raise a concern with your local privacy or health regulatory authority. In Utah and across the United States, complaints about the handling of health information can be directed to the office charged with protecting patient privacy, and we will cooperate fully with any legitimate investigation.

Thank you for trusting our clinic with your personal and health information. We built this practice on the belief that care succeeds when respect comes first, and that belief extends to every detail of how we protect what you share with us.