Effective Date: September, 2026

Last Updated: September, 2026

Evotega ("Evotega," "we," "our," or "us") provides Applied Behavior Analysis (ABA) therapy services. We are committed to protecting the privacy of the children, families, caregivers, and visitors who use our website and who contact us about our services.
 

This Privacy Policy explains what information we collect through https://evotega.com/ (the "Site"), how we use and share that information, and the choices available to you. By using the Site, you agree to the practices described in this Policy.

​​

1. Scope of This Policy

This Privacy Policy applies to information collected through the Site and to general inquiries you send us before you become a client.

This Policy does not govern protected health information (PHI) that we collect, use, or disclose as a HIPAA covered entity in the course of providing services. That information is governed by the Health Insurance Portability and Accountability Act (HIPAA) and by our Notice of Privacy Practices, available at [LINK TO NOTICE OF PRIVACY PRACTICES]. Where this Policy and our Notice of Privacy Practices differ with respect to PHI, the Notice of Privacy Practices controls.
 

2. Information We Collect​

Information You Provide to Us

When you complete a contact form, request a consultation, call us, or otherwise communicate with us through the Site, we may collect:

• Name

• Phone number

• Email address

• Preferred method and time of contact

• The general reason you are contacting us

• Any other information you choose to provide in a message or form field

Please see Section 4 regarding health information. We ask that you not submit clinical or medical details through the Site.

​

Information Collected Automatically

When you visit the Site, we and our service providers may collect:

• IP address and the approximate geographic location derived from it

• Browser type and version

• Device type and operating system

• Referring website, search term, or advertisement

• Pages viewed, links clicked, and time spent on the Site

• Date and time of your visit

​

3. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and consultation requests

• Provide information about our ABA therapy services

• Communicate with families regarding scheduling, availability, and services

• Operate, maintain, secure, and improve the Site

• Measure the performance of our outreach and community education efforts

• Detect, investigate, and prevent fraud, abuse, or security incidents

• Comply with legal, regulatory, and professional obligations

We do not use information collected through the Site to make automated decisions that produce legal or similarly significant effects concerning you.

​

4. Healthcare Information and HIPAA

Evotega is a covered entity under HIPAA. We protect the privacy and security of protected health information in accordance with HIPAA and applicable state law.

​

This Site is an informational and general inquiry channel. It is not a secure intake, scheduling, or clinical communication channel. Please do not submit diagnoses, evaluation or assessment results, medical records, treatment history, or insurance member numbers through our website forms, chat, or email. If we need clinical or insurance information from you, we will collect it through our secure intake process after we connect with you directly.

Information you submit through this Site before becoming a client, such as your name, contact details, and the general reason you are reaching out, is handled under this Privacy Policy.

​

Health information you provide through our official intake, scheduling, assessment, or treatment processes is collected, used, and disclosed in accordance with HIPAA and our Notice of Privacy Practices, which you can read at [LINK TO NOTICE OF PRIVACY PRACTICES].

​

[CONFIRM] Our website analytics and advertising technologies do not receive the contents of our contact forms.

If you have questions about how we handle health information, contact our Privacy Officer using the details in Section 18. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.

​

5. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, software development kits, and similar technologies on the Site. These fall into the following categories:

• Strictly necessary. Required for the Site to load, function, and remain secure. These cannot be disabled.

• Performance and analytics. Help us understand how visitors find and use the Site so we can improve it.

• Functional. Remember your preferences and improve your experience.

• Advertising. Help us measure and improve the reach of our community outreach and paid placements.

 

You may adjust your browser settings to refuse or delete cookies. Some features of the Site may not function properly if you do. [IF A CONSENT BANNER IS DEPLOYED, DESCRIBE IT AND LINK THE PREFERENCE CENTER HERE.]

Where required by applicable law, we treat a Global Privacy Control (GPC) or similar browser signal as a valid request to opt out of the sale or sharing of personal information from that browser.

​

6. Analytics and Advertising Partners

[CONFIRM AND COMPLETE THIS LIST AGAINST THE LIVE SITE.] We currently use the following third-party technologies on the Site:

• [GOOGLE ANALYTICS 4] for website traffic measurement. Opt out at tools.google.com/dlpage/gaoptout.

• [GOOGLE ADS] for measuring the performance of paid placements.

• [META PIXEL] for measuring the performance of social media outreach.

• [CALL TRACKING VENDOR] for measuring inbound phone inquiries.

• [ADD OR REMOVE VENDORS AS APPLICABLE]

[CONFIRM] We configure these technologies so that they do not receive the contents of submitted forms, and we do not transmit health information to advertising platforms.

​

7. Third-Party Service Providers

We use trusted third-party providers to operate our website and business, including website hosting, analytics, scheduling, electronic health records, billing, and communication platforms.

​

Where a service provider creates, receives, maintains, or transmits protected health information on our behalf, we enter into a Business Associate Agreement with that provider as required by HIPAA before any protected health information is shared. Service providers that handle only non-health website data are bound by written agreements limiting their use of that data to the services they perform for us.

​

8. Social Media

The Site may link to social media platforms such as Facebook, Instagram, LinkedIn, and YouTube. Once you leave our Site, the privacy practices of that platform apply. We encourage you to review their privacy policies.

We are not responsible for content posted by visitors on our social media pages. Please do not post health information about yourself or your child in public comments or messages on social media. If you contact us through a social media platform, that communication is not a secure channel.
 

9. Text Messaging

[INCLUDE THIS SECTION ONLY IF EVOTEGA SENDS SMS. REMOVE IF NOT APPLICABLE.]

If you provide your mobile number and consent, we may send you text messages related to your inquiry, scheduling, or services. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time and HELP for assistance. Consent to receive text messages is not a condition of receiving services.

We do not sell, rent, or share mobile numbers or text message consent with third parties or affiliates for their own marketing purposes.

​

10. How We Share Information

We do not sell, rent, or trade personal information. [CONFIRM] We do not share personal information for cross-context behavioral advertising.

We may disclose information in the following circumstances:

• To service providers who perform functions on our behalf, subject to written agreements

• When required by law, subpoena, court order, or other legal process

• To report suspected abuse or neglect as required by mandatory reporting laws

• When necessary to protect the rights, safety, or property of Evotega, our clients, or others

• In connection with a merger, acquisition, financing, or sale of assets, subject to applicable law

• With your authorization or at your direction

Disclosures of protected health information are governed separately by HIPAA and our Notice of Privacy Practices.

​

11. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law.

• Website inquiry and contact form submissions: [NUMBER] months, unless you become a client

• Analytics data: [NUMBER] months

• Marketing and email list data: until you unsubscribe, plus [NUMBER] months

• Client and clinical records: retained in accordance with [STATE] record retention law and applicable payer requirements. For records of minors, retention periods are generally measured from the date the client reaches the age of majority. [CONFIRM WITH COUNSEL]

When information is no longer needed, we securely delete or de-identify it.

​

12. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. These include [ENCRYPTION IN TRANSIT AND AT REST, ROLE BASED ACCESS CONTROLS, WORKFORCE TRAINING, VENDOR REVIEW, AND PERIODIC RISK ASSESSMENT].

No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

​

13. Notification of a Breach

If we discover a breach of unsecured protected health information, we will provide notice to affected individuals, the U.S. Department of Health and Human Services, and, where required, the media, in accordance with the HIPAA Breach Notification Rule.

If a security incident affects personal information that is not protected health information, we will provide notice in accordance with applicable state breach notification law.

​

14. Children's Privacy

Our services are designed for children and families. This Site, however, is intended for use by parents, guardians, caregivers, and other adults age 18 and older. We do not knowingly collect personal information directly from children under 13 through the Site.

Information about a child that a parent or guardian provides to us is collected from and with the involvement of that adult.

If you believe a child has submitted personal information through the Site without parental involvement, please contact our Privacy Officer using the details in Section 18. We will delete that information promptly.

​

15. Your Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

• Confirm whether we process your personal information and request access to it

• Request a copy of your personal information in a portable format

• Request correction of inaccurate personal information

• Request deletion of your personal information, where permitted by law

• Opt out of the sale or sharing of personal information, or of targeted advertising

• Limit the use and disclosure of sensitive personal information

• Opt out of marketing communications at any time

• Be free from retaliation for exercising any of these rights

To submit a request, contact our Privacy Officer using the details in Section 18. We will verify your identity before responding, which may require you to provide information that matches our records. An authorized agent may submit a request on your behalf with written permission and proof of authority.

​

We will respond within the time frame required by applicable law. If we decline your request, you may appeal by contacting us at the same address, and we will respond to the appeal within the period required by law.

​

[CONFIRM STATE COVERAGE] These rights arise under laws including [THE FLORIDA DIGITAL BILL OF RIGHTS, THE CALIFORNIA CONSUMER PRIVACY ACT AS AMENDED, AND COMPARABLE LAWS IN OTHER STATES]. Certain information governed by HIPAA is exempt from these state laws. Your rights with respect to protected health information are described in our Notice of Privacy Practices.

​

16. Accessibility

We are committed to making the Site usable by people with disabilities and are working toward conformance with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA.

If you encounter a barrier on the Site or need this Policy, our Notice of Privacy Practices, or any other information in an alternative format, contact us using the details in Section 18 and we will provide the information in a format you can use.

​

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised Effective Date and Last Updated date. If we make material changes, we will provide additional notice as required by applicable law.

​

18. Contact Us

If you have questions about this Privacy Policy, the information we collect, or how your information is used, contact:

Privacy Officer, Evotega

[NAME AND TITLE]

[EMAIL ADDRESS]

[PHONE NUMBER]

[STREET ADDRESS, CITY, STATE, ZIP]

​

​

You may also file a complaint regarding our privacy practices with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints or by calling 1-800-368-1019. We will not retaliate against you for filing a complaint.

​

We make reasonable efforts to respond to privacy inquiries in a timely manner.

​

​

​