Privacy Policy

1. Introduction — Who We Are

Rehoboth Rehabilitation & Multispecialty Center is a multi-specialty medical and rehabilitation clinic located in Garland, Texas. We offer physical therapy, chiropractic care, general practice, wellness programs, massage therapy, nurse practitioner services, and IV therapy.

You can reach us at:

• Address: 2241 Peggy Lane, Suite E, Garland, TX 75042, USA
• Phone: (469) 615-4228 and (469) 615-5011
• Email: admin@rehobothrehab.com
• Website: www.rehobothrehab.com

The entity responsible for your information under this Policy is Rehoboth Rehabilitation & Multispecialty Center.

2. Scope & Relationship to Our HIPAA Notice of Privacy Practices

This Privacy Policy applies only to information collected through our Website and related online interactions. It does not change or replace the privacy protections that apply to your medical records.

As a healthcare provider, we are a 'covered entity' under HIPAA. Protected Health Information (PHI) that we create, receive, or maintain in connection with your care is governed by HIPAA and by our separate Notice of Privacy Practices, not by this Website Privacy Policy.

If you submit a request through the Website and later become our patient, the information you provided may be incorporated into your medical record. At that point it is treated as PHI and protected under HIPAA and Texas law.

To request a copy of our Notice of Privacy Practices, please contact us using the information in Section 16.

3. Information We Collect

We collect information in two ways: information you provide to us, and information collected automatically when you use the Website.

Information you provide. When you use our online booking or contact form, we collect:

• your full name;
• your phone number;
• the service you select;
• your preferred appointment date.

Our booking form does not require an email address or free-text health details. Please do not include sensitive health information in any free-text field on the Website.

Information collected automatically. When you visit the Website, we and our analytics providers may automatically collect:

• your IP address and approximate (city/region-level) location;
• device type, browser type, and operating system;
• pages viewed, links clicked, and time spent on the Website;
• the website or source that referred you to us;
• cookies and similar identifiers (see Section 7).

4. How We Use Information

We use the information we collect to:

• respond to your request and contact you about scheduling an appointment;
• provide, operate, maintain, and improve the Website and our services;
• communicate with you about appointments, services, and administrative matters;
• understand how visitors use the Website through analytics;
• maintain the security and integrity of the Website;
• detect, prevent, and respond to fraud, abuse, or safety concerns;
• comply with legal, regulatory, and professional obligations.

We do not use information collected through the Website to make decisions that produce legal or similarly significant effects about you without appropriate human involvement.

5. Your Health Information Under HIPAA & Texas Law (HB 300)

Protected Health Information is governed by HIPAA, the Texas Medical Records Privacy Act (House Bill 300, or 'HB 300'), and other applicable laws, as described in our Notice of Privacy Practices.

HB 300 applies more broadly than HIPAA in some respects and imposes additional obligations on us, including training our workforce on the proper handling of PHI and limitations on the sale and electronic disclosure of PHI.

We do not sell your Protected Health Information. We will obtain your written authorization when required by law before using or disclosing PHI for purposes that are not otherwise permitted.

Your rights with respect to PHI — including the right to access, inspect, copy, and amend your medical records, to request restrictions, and to receive an accounting of certain disclosures — are described in our Notice of Privacy Practices.

6. Calls, Texts & Email (TCPA Consent)

When you provide your phone number through the Website, you consent to receive calls and text messages from us about your request and your appointment, including scheduling, confirmations, reminders, and related follow-up. These communications may be made using automated technology.

Message and data rates may apply, and message frequency may vary. Consent to receive marketing calls or texts is not a condition of receiving care.

You may opt out of text messages at any time by replying STOP, or you may opt out of calls or texts by contacting us directly. Opting out does not apply to urgent communications about your care.

Do not rely on calls, texts, or email for medical emergencies — see our Terms of Use. If we send appointment reminders or updates by text message, you may opt out at any time by replying STOP or by contacting us.

7. Cookies & Analytics (Google Analytics 4)

Our Website uses cookies and similar technologies. Cookies are small files stored on your device that help the Website function and help us understand how it is used.

We use Google Analytics 4 (GA4), a web analytics service provided by Google, to understand how visitors interact with the Website. GA4 uses cookies and may collect your IP address and information about your online activity. This helps us measure and improve the Website.

You can control cookies through your browser settings and may delete or block them. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Blocking cookies may affect how the Website functions.

Some browsers offer a 'Do Not Track' or Global Privacy Control signal. Where required by law, we honor recognized opt-out preference signals.

8. How We Share Information

We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising. We may share information only in the following limited circumstances:

• Service providers and business associates: with vendors who perform services on our behalf, such as website hosting, analytics, and communications, under contracts that require them to protect the information. Where they handle PHI, they do so as 'business associates' under HIPAA.
• Legal and safety: when required by law, subpoena, or legal process, or to protect the rights, safety, and property of our patients, staff, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to applicable law.
• With your direction: when you ask us to share information or otherwise provide your consent.

Any sharing of Protected Health Information is handled in accordance with HIPAA, HB 300, and our Notice of Privacy Practices.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect the information we collect against unauthorized access, use, alteration, and disclosure. These include access controls, encryption where appropriate, and staff training.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. Please do not send sensitive health information through unsecured channels.

10. Data Retention

We retain information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal, regulatory, tax, accounting, and professional obligations, and to resolve disputes.

Medical records are retained in accordance with Texas law. Texas generally requires physicians to retain medical records for at least seven (7) years from the date of last treatment for adult patients, and for minors, until the patient reaches age 21 or for seven (7) years from the date of last treatment, whichever is longer. We retain your records for at least these minimum periods required by law, and may keep them longer when necessary or appropriate.

Website request and analytics data are retained only as long as needed for the purposes above and are then deleted or de-identified.

11. Your Privacy Rights

Texas residents. If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) gives you the right to:

• confirm whether we process your personal data and access that data;
• correct inaccuracies in your personal data;
• delete personal data that you provided or that we obtained;
• obtain a portable copy of your personal data;
• opt out of the sale of personal data, targeted advertising, and certain profiling.

To exercise these rights, contact us using the information in Section 16. We will verify your request and respond within the time required by law. If we decline your request, you may appeal by contacting us; if your appeal is denied, you may submit a complaint to the Texas Attorney General.

Please note that personal information governed by HIPAA and the Texas Medical Records Privacy Act is exempt from the TDPSA. Rights in your medical records are addressed through HIPAA and our Notice of Privacy Practices.

California residents. If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), provides rights to know, access, correct, and delete personal information, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. Medical information governed by HIPAA and the California Confidentiality of Medical Information Act is exempt. To make a request, contact us using the information in Section 16.

Your health information rights. For rights relating to your Protected Health Information — including access, amendment, restrictions, and an accounting of disclosures — please see our Notice of Privacy Practices or contact our privacy contact listed in Section 16.

12. Children's Privacy (COPPA)

Our Website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA).

If you believe a child under 13 has provided us personal information through the Website, please contact us and we will take appropriate steps to delete it. Appointments and care for minors are arranged by a parent or legal guardian.

13. Non-Discrimination & Accessibility (ACA Section 1557)

In accordance with Section 1557 of the Affordable Care Act and other applicable civil rights laws, we do not discriminate on the basis of race, color, national origin, age, disability, or sex in our health programs and activities.

Language assistance. Free language assistance services are available to individuals with limited English proficiency. Please contact us to request an interpreter or translated materials.

Accessibility. We are committed to making our Website accessible and are working toward conformance with the Web Content Accessibility Guidelines (WCAG). If you have difficulty accessing any part of the Website or need a reasonable accommodation, please contact us using the information in Section 16, and we will work to provide the information or service you need.

14. Third-Party Links

The Website may contain links to third-party websites and services that we do not control, such as mapping, payment, or social media services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the 'Last updated' date above and post the current version on the Website. Material changes will be highlighted as appropriate. Your continued use of the Website after changes take effect means you accept the updated Policy.

16. How to Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want a copy of our Notice of Privacy Practices, please contact us:

• Rehoboth Rehabilitation & Multispecialty Center
• Address: 2241 Peggy Lane, Suite E, Garland, TX 75042, USA
• Phone: (469) 615-4228 and (469) 615-5011
• Email: admin@rehobothrehab.com
• Privacy contact: our Privacy Officer, at admin@rehobothrehab.com or the phone and address listed above