Privacy policy.

This Privacy Policy explains how “Ah,” ACBTNLP (“we,” “our,” or “us”) collects, uses, discloses, and protects your personal information when you visit acbtnlp.com, use our services, or otherwise interact with us. We are committed to protecting your privacy and complying with applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and relevant U.S. health privacy regulations including HIPAA where applicable.

1. Information We Collect

We may collect the following types of information:

A. Information You Provide Directly

  • Name, email address, phone number, mailing address.

  • Payment details (processed through secure third-party payment processors; we do not store full credit/debit card numbers).

  • Health or wellness-related information provided voluntarily during consultations, coaching, therapy, or intake.

  • Signed consent forms, HIPAA releases, or care coordination authorizations.

B. Information Collected Automatically

  • IP address, browser type, device type, operating system, and referring URLs.

  • Website usage information, including pages visited and time spent (via cookies or analytics tools).

C. Sensitive Information

  • Personal health information (PHI) shared for care coordination, which will be collected, stored, and disclosed only in compliance with HIPAA and with your written authorization.

2. How We Use Your Information

We may use your information to:

  • Provide and manage services you have requested.

  • Coordinate care with other providers only after receiving a valid HIPAA release form signed by you.

  • Process payments and provide receipts.

  • Respond to inquiries, schedule appointments, and send updates.

  • Comply with legal and regulatory obligations.

3. Your Privacy Rights

Under GDPR (EU/EEA residents), you have the right to:

  • Access, correct, or delete your personal data.

  • Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

  • Request data portability and restrict processing in certain circumstances.

Under CCPA (California residents), you have the right to:

  • Know what personal information we collect, use, and disclose.

  • Request deletion of your personal information.

  • Opt-out of the sale of personal information (we do not sell personal information).

  • Non-discrimination for exercising your CCPA rights.

Requests can be made by using our contact form.

4. Disclosure of Information

We do not sell personal information. We may disclose your information in these limited circumstances:

  • Service Providers: With trusted third-party vendors who assist with payment processing, scheduling, hosting, or analytics (bound by confidentiality agreements).

  • Care Coordination: Only with your signed HIPAA release form, and only to designated healthcare providers or authorized support persons.

  • Legal Requirements: To comply with a legal obligation, court order, or government request.

  • With Your Consent: For purposes not covered above.

5. Method of Disclosure

  • Care coordination disclosures occur via secure encrypted communication channels or direct provider-to-provider transfer in compliance with HIPAA.

  • Other disclosures use secure encrypted methods appropriate to the type of information.

6. Security Measures

We use appropriate technical, administrative, and physical safeguards to protect your information, including:

  • SSL encryption for all website traffic.

  • Encrypted storage for sensitive records and PHI.

  • Secure password and access controls, with access limited to authorized personnel.

  • Regular updates and monitoring for security vulnerabilities.

While we take industry-standard precautions, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, including HIPAA’s minimum retention requirements for health records.

8. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the U.S., where privacy laws may differ. We will take appropriate steps to ensure your information receives an adequate level of protection.

9. Changes to This Policy

We may update this Privacy Policy at any time. Updates will be posted here with a revised “Effective Date.” Continued use of our services constitutes your acceptance of changes.