Privacy Policy

Alchemy Chiropractic (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website: alchemychiropractic.com.

1. Information We Collect

Personal Information

When you interact with our website, schedule an appointment, or contact us, we may collect the following personal information:

• Name

• Email address

• Phone number

• Appointment details

• Information submitted via contact or appointment request forms

Health Information

Any health-related information you submit through our website is treated as Protected Health Information (PHI) and handled in accordance with HIPAA and applicable healthcare laws. Please see Section 3 (HIPAA Compliance) and our separate Notice of Privacy Practices for more detail on how your health information is used and protected.

Automatically Collected Information

When you visit our website, certain information may be collected automatically through cookies and similar technologies, including:

• IP address

• Browser type and version

• Device information (operating system, screen size)

• Pages visited, time spent on the site, and referring URLs

• General geographic location (derived from IP address)

This information is collected through tools such as Google Analytics and Meta Pixel (see Section 6 for details).

2. How We Use Your Information

We use the information we collect for the following purposes:

• Scheduling and managing appointments

• Responding to your inquiries and requests

• Providing chiropractic care and related services

• Improving our website’s performance, usability, and content

• Sending administrative communications related to your care or appointments

• Analyzing website traffic and usage patterns to improve our services

• Complying with legal and regulatory obligations

We do not sell, rent, or trade your personal information. We limit data collection to what is adequate, relevant, and reasonably necessary for the purposes described above.

3. HIPAA Compliance

Alchemy Chiropractic is a HIPAA-covered entity. We comply with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations. Your Protected Health Information (PHI) is:

• Used only for treatment, payment, and healthcare operations unless you provide explicit authorization for other uses

• Stored using secure, access-controlled systems

• Accessed only by authorized personnel who need it to provide your care

For a full description of how we use and protect your health information, including your rights under HIPAA (such as the right to access, amend, and request restrictions on your PHI), please refer to our separate Notice of Privacy Practices, available at our office and upon request.

4. Information Sharing

We may share your information in the following limited circumstances:

• When required by law, regulation, or legal process

• To provide services you have requested (such as insurance billing or payment processing)

• With your explicit consent

• With third-party service providers who assist us in operating our website and business (see Section 7 below)

• To protect the rights, safety, or property of Alchemy Chiropractic, our patients, or the public

We do not sell your personal information to any third party for marketing or advertising purposes.

5. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encrypted connections (SSL/TLS), access controls, and regular review of our security practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to analyze traffic, improve site functionality, and support our marketing efforts. The following tools may be in use on our site:

• Google Analytics: Collects anonymized data about how visitors use our website, including pages visited, time on site, and traffic sources. This data helps us improve our website. Google’s privacy policy is available at policies.google.com/privacy.

• Meta Pixel (Facebook/Instagram): Tracks visitor activity to measure the effectiveness of our advertising on Meta platforms and to deliver relevant ads. You can manage your Meta ad preferences at facebook.com/adpreferences. Meta’s privacy policy is available at facebook.com/privacy/policy.

• Functional Cookies: These cookies enable core website features such as scheduling forms and page navigation.

You may disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features on our website. We may use additional analytics or marketing tools from time to time; this policy will be updated to reflect any material changes.

7. Third-Party Service Providers

We work with trusted third-party service providers to help operate our website and business. These providers may have access to your personal information only as needed to perform services on our behalf and are obligated to protect it. Our current service providers include:

• Aloha: Online appointment scheduling and patient intake.

• Google (Analytics, Workspace): Website analytics, email communication, and business productivity tools.

• Meta (Facebook, Instagram): Advertising, audience measurement, and social media marketing.

We may also use additional vendors, contractors, or technology platforms in the course of operating our business. Any such providers are held to the same standard of data protection described in this policy. We will update this section as our vendor relationships change materially.

8. Your Rights

Rights Regarding Non-Health Personal Data

You have the following rights regarding the personal information we collect through our website (separate from your health information, which is governed by HIPAA):

• Right to Access: You may request a copy of the personal information we hold about you.

• Right to Correction: You may request that we correct inaccurate personal information.

• Right to Deletion: You may request that we delete your personal information. We will delete all data we are reasonably able to delete, subject to any legal or regulatory obligations that require us to retain certain records.

• Right to Opt Out of Tracking: You may disable cookies and tracking through your browser settings or by using available opt-out tools (see Section 6).

To exercise any of these rights, please contact us at alchemychiropracticME@gmail.com. We will respond to your request within 30 days.

Rights Regarding Health Information (HIPAA)

Your rights regarding Protected Health Information (PHI), including the right to access, amend, and request an accounting of disclosures, are described in our separate Notice of Privacy Practices.

9. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Health records (PHI): Retained in accordance with HIPAA requirements and Maine state law governing medical records.

• Appointment and contact information: Retained for the duration of the patient relationship and for a reasonable period afterward to support continuity of care and legal compliance.

• Website analytics data: Retained according to the default retention settings of the analytics tools in use (e.g., Google Analytics, Meta). This data is typically anonymized or aggregated.

• Deletion requests: When you request deletion of your non-PHI personal data, we will delete all data we are reasonably able to delete within 30 days, subject to legal retention requirements.

10. Children’s Privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at alchemychiropracticME@gmail.com.

11. Do Not Sell My Personal Data

Alchemy Chiropractic does not sell, rent, lease, or trade your personal information to third parties for monetary or other valuable consideration. If this practice ever changes, we will update this policy and provide you with the opportunity to opt out before any such sale occurs.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this policy. We encourage you to review this policy periodically.

13. Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

Alchemy Chiropractic

251 US Rt 1, Suite W17

Falmouth, ME 04105

Email: alchemychiropracticME@gmail.com

Phone: (207) 613-9424