1. Scope

Northeast Chiropractic Center (“we,” “us,” or “our”) respects your privacy and is committed to protecting the confidentiality, integrity, and security of the information you share through neccga.com, related landing pages, online forms, booking tools, portals, patient communications, and digital services (collectively, the “Site”). This Website Privacy Policy explains what information we collect, how we use it, when we disclose it, how we safeguard it, and what choices and rights may be available to you. It applies to information collected online and through electronic communications connected to the Site. It does not replace any separate patient consent, financial policy, or Notice of Privacy Practices that applies to protected health information handled in the course of care.

2. Information We Collect

Depending on how you interact with the Site and the services offered by Northeast Chiropractic Center, we may collect the following categories of information:

• Identifiers and contact details, such as name, mailing address, email address, phone number, date of birth, emergency contact information, and similar identifying data.
• Appointment, intake, and care-related information, such as preferred dates and times, reason for visit, referral source, symptoms, pain complaints, health goals, accident details, pregnancy status, insurance details, uploaded documents, and information submitted through forms, chats, or secure portals.
• Protected health information and other sensitive information submitted in connection with patient care, scheduling, billing, insurance verification, records requests, treatment planning, or communications with the clinic.
• Payment and billing information, which may include billing address, payer information, claim-related data, payment card information handled through approved processors, or account status information.
• Demographic, preference, and interest information, such as postcode or ZIP code, survey responses, communication preferences, service interests, and feedback that helps us understand patient needs and improve our services.
• Technical and usage information, such as IP address, browser type, device identifiers, operating system, pages visited, referral URLs, form interactions, session data, cookies, tags, pixels, and similar tracking information.
• Consent records and communication settings, including whether you agreed to receive appointment reminders, newsletters, educational content, text messages, or other communications.

3. How We Collect Information

We may collect information directly from you, automatically through your use of the Site, or indirectly from other sources connected to the patient relationship. For example, we may collect information when you complete a contact form, request an appointment, submit intake paperwork, communicate by email or text, call the clinic, make a payment, respond to a survey, interact with cookies or analytics tools, or authorize another person or provider to share information with us.

4. How We Use Information

We may collect, use, and disclose information for legitimate business, clinical, and operational purposes, subject to applicable law and, where required, your authorization. Those purposes may include:

• Internal record keeping and administration.
• Responding to inquiries, scheduling appointments, processing intake, managing the patient relationship, and delivering requested services.
• Providing, coordinating, billing for, and supporting health care and related administrative operations.
• Improving our services, evaluating patient needs, conducting quality improvement activities, and carrying out limited surveys or market research related to practice operations.
• Customizing the Site, patient communications, and educational materials based on user preferences and interests.
• Processing payments, verifying insurance coverage, supporting claims activity, investigating suspected fraud, maintaining records, and responding to legal, regulatory, licensing, or professional obligations.
• Operating, securing, monitoring, and improving the performance, accessibility, and user experience of the Site.
• Sending service-related and marketing communications where permitted by law and consistent with your preferences. We do not condition treatment on consent to non-essential marketing communications.

5. HIPAA and Protected Health Information

If Northeast Chiropractic Center is a HIPAA covered health care provider, protected health information (“PHI”) that we collect, create, receive, maintain, or transmit is governed by HIPAA and related federal rules, as well as applicable state law. When this Website Privacy Policy overlaps with the HIPAA Notice of Privacy Practices in this document, the more specific notice or stricter legal requirement will control.
If a website page, form, portal, booking widget, chat feature, or communication channel may collect information that identifies an individual and relates to past, present, or future health status, treatment, or payment for care, Northeast Chiropractic Center should evaluate that workflow as potentially involving PHI and configure its processes, vendors, and disclosures accordingly. Patients should avoid sending urgent or highly sensitive medical information through unsecured channels unless the clinic expressly instructs them to do so.

6. Cookies, Pixels, Analytics, and Online Tracking

Northeast Chiropractic Center may use cookies, pixels, scripts, tags, call-tracking tools, local storage, analytics technologies, and similar tools to operate the Site, remember preferences, evaluate traffic, measure campaign performance, detect abuse, and improve functionality. Traffic log cookies and similar analytics tools may help us identify which pages are being used so we can improve the website and tailor content to patient needs.
These tools must be configured with caution on pages or workflows that involve appointment requests, symptom details, intake information, insurance details, payment workflows, patient portal activity, or other information that may constitute PHI or sensitive consumer health data. Optional advertising or retargeting technologies should not be used in patient-facing health workflows unless counsel confirms a compliant implementation.
Most browsers allow you to accept, reject, or delete cookies. Disabling cookies may affect certain site features.

7. Text Messages, Email, Telephone, and Marketing Preferences

If you provide a mobile number, email address, or telephone number, Northeast Chiropractic Center may use it to send appointment reminders, intake requests, follow-up instructions, billing messages, practice updates, and other service communications. With the required consent where applicable, Northeast Chiropractic Center may also send newsletters, wellness content, special offers, or other promotional materials.

You may opt out of non-essential marketing communications at any time using the unsubscribe mechanism in the communication, by replying as instructed in the message. Message and data rates may apply to text communications. Electronic communications may carry some risk of interception, delay, or misdelivery and should not be used for emergencies.

8. When We Share Information

Northeast Chiropractic Center does not sell personal information or protected health information for third-party marketing. We may disclose information only as reasonably necessary for the following purposes:

• To clinicians, staff members, and contractors who need the information to perform their duties.
• To service providers that host, support, secure, or administer our systems, such as scheduling vendors, electronic health record vendors, secure form providers, payment processors, IT vendors, analytics providers, call tracking providers, legal advisers, accountants, and email or SMS platforms.
• To business associates and subcontractors where HIPAA requires a written Business Associate Agreement or similar contractual protections.
• To insurers, payers, billing companies, clearinghouses, collections vendors, and other parties involved in payment or health care operations where permitted by law.
• To another provider, caregiver, or person involved in your care when permitted or authorized.
• To government authorities, regulators, law enforcement, courts, licensing bodies, or professional advisers when required or permitted by law.
• In connection with a merger, financing, sale, reorganization, or transfer of assets, subject to applicable confidentiality and legal requirements.

9. Third-Party Links and Embedded Features

The Site may contain links to third-party websites, maps, review platforms, payment portals, telehealth services, social media pages, embedded videos, calendars, or widgets. Once you leave our website or interact with a third-party service we do not control, that provider’s privacy practices and terms will apply. We are not responsible for the privacy, security, content, or data practices of third-party services.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. Depending on the clinic’s real environment, these safeguards may include role-based access controls, written privacy and security policies, secure vendors, workforce training, multifactor authentication, encryption, audit logging, need-to-know limitations, and secure disposal practices. No website, transmission method, or electronic storage system can be guaranteed to be completely secure.

11. Retention and Destruction

We retain information only as long as reasonably necessary for the purposes described in this policy, including patient care, billing, legal, contractual, tax, insurance, professional, audit, archival, and recordkeeping requirements. Actual retention periods should be inserted here after review of Georgia law, payer rules, board requirements, EHR settings, and the clinic’s document destruction practices. When information is no longer required, Northeast Chiropractic Center will securely delete, destroy, de-identify, or anonymize it as appropriate.

12. Your Rights and Choices

Subject to applicable law and verification requirements, you may have rights relating to access, copies, corrections, restrictions, confidential communications, consent withdrawal, complaint submission, marketing preferences, and state privacy rights. For PHI governed by HIPAA, your rights are described more fully in the HIPAA Notice of Privacy Practices below.
• You may request access to information we hold about you, subject to legal limits and verification requirements.
• You may ask that inaccurate or incomplete information be corrected.
• You may choose to limit the use of your information for optional marketing communications.
• You may manage certain tracking technologies through your browser settings or other consent tools if available.
• You may contact Gregory King D.C. (770) 451-9494 to make a request or ask a privacy question.

13. Minors and Representatives

If the clinic provides services to minors or dependants, Northeast Chiropractic Center may collect and disclose information through a parent, legal guardian, personal representative, substitute decision-maker, or other authorized individual as permitted by law. Rights and access may vary depending on age, maturity, capacity, custody arrangements, confidentiality rules, and the nature of the care being provided.

14. State-Specific Addendum Placeholder

Insert any state-specific language required for Georgia, including consumer health data disclosures, sensitive data rights, medical records access timelines, telehealth disclosures, recording laws, texting consent language, minors’ rights, biometric rules, or other applicable requirements. Delete this placeholder after customization.

15. Changes to This Policy

We may update this Website Privacy Policy from time to time. The revised version will be posted on neccga.com with an updated effective date. Material changes may also be communicated through additional methods when required by law or when we believe notice is appropriate.