Privacy Policy - The Posture Clinic

PRIVACY POLICY

Your information.

Our duty to protect it.

Effective date · August 3 2026 · Last updated · August 3 2026

01 About this policy

This Privacy Policy explains how The Posture Clinic ("we," "us," or "our") collects, uses, protects, and shares information when you visit thepostureclinic.com (the "Site") and when you become a patient of the clinic located at 6425 53rd St N Ste 6, Pinellas Park, FL 33781.

The Posture Clinic is a cash-pay chiropractic and integrative pain practice. We do not bill insurance, we do not file electronic claims, and we do not transmit protected health information to clearinghouses or payers. We may not be a "Covered Entity" under the federal Health Insurance Portability and Accountability Act (HIPAA), but we treat your medical information with HIPAA-style care because that is what you should expect from a doctor's office, and because Florida state law independently protects medical records. By using the Site or by becoming a patient, you agree to the practices described here. If you do not agree, please do not use the Site and do not become a patient.

02 Information we collect

We collect two broad categories of information · website information collected through the Site, and clinical information collected once you become a patient.

A · WEBSITE INFORMATION

Collected through thepostureclinic.com

Contact information you submit on forms (name, email, phone). Usage data captured automatically by analytics tools (IP address, browser type, device type, pages visited, referring URL, timestamps). Cookies and similar technologies. The Site does not collect medical history, symptoms, conditions, or insurance information on any public-facing form.

B · CLINICAL INFORMATION

Collected only after you become a patient

Once you schedule a Patient Interview and become a patient, we collect health information necessary for clinical care · health history, current and prior conditions, medications, prior providers and treatments, physical and diagnostic exam findings, scan and assessment data (qEEG, WAVI, Spine 3D, PostureScreen, PodoScan, EMG, etc.), and progress measurements (the IPS score and its five domains). We may also collect emergency contact information, photo identification, and a payment method for self-pay billing.

C · PAYMENT INFORMATION

Handled by third-party processors

We do not store full credit card or bank account numbers on our own servers. Payments are processed by third-party payment processors that are responsible for the security of the card data they handle. Financing applications (CareCredit) are handled entirely on CareCredit's own platform · we receive only the approval or decline outcome, not your full application data.

03 How we use your information

We use the information we collect for the following purposes.

Provide clinical care · diagnose, treat, monitor, and discharge you under the program
Communicate with you · appointment reminders, results, follow-up, recall, and customer service
Bill and collect payment · process your self-pay charges, issue receipts, and handle billing disputes
Operate the Site · serve pages, prevent abuse, secure the platform, and improve functionality
Marketing · send you information about programs and services (with the right to opt out at any time)
Comply with law · respond to legal process, subpoenas, court orders, and regulatory inquiries
Internal quality · improve our protocols, train staff, and conduct case review (with PHI access limited to those who need it)

04 Who we share information with

We do not sell your information. We do not share clinical information with marketing partners or data brokers. We share information only as described below.

INTERNAL CLINICAL AND OPERATIONS TEAM

Dr. Mark T. Wade, DC, DrPH and Dr. Krista Burns, DC, DHA, DACNB
Clinical assistants and licensed staff assigned to your care
Front-desk and operations team for scheduling and billing only

THIRD-PARTY SERVICE PROVIDERS (UNDER WRITTEN AGREEMENTS)

Electronic health record (EHR) vendor · HIPAA-compliant, under a Business Associate Agreement (BAA) where applicable
Practice management and CRM platforms · contact and scheduling data only · no clinical data in marketing CRM
Payment processors · card and bank data handled directly by the processor; we receive transaction outcomes only
CareCredit · if you choose to apply for financing, your application data goes directly to CareCredit; we receive only the approval/decline outcome
Email and SMS providers · contact information for transactional and marketing communications
Website analytics and advertising platforms (Google Analytics, Meta Pixel) · usage data only · we do not transmit PHI to these platforms

LEGAL AND SAFETY DISCLOSURES

When required by law · subpoena, court order, regulatory inquiry, or mandatory reporting
To prevent imminent harm · to you or to others, consistent with applicable law and professional ethics
In a business transition · if the clinic is acquired, merged, or transferred, patient records may transfer to the successor under applicable law

05 Cookies, analytics, and online tracking

The Site uses cookies and similar technologies for two purposes · to make the Site work (essential cookies) and to understand how visitors use the Site (analytics and marketing cookies).

ESSENTIAL COOKIES (ALWAYS ON)

Session management, form security (reCAPTCHA), and basic preference storage
Cannot be disabled without breaking core Site functionality

ANALYTICS AND MARKETING COOKIES (OPT-IN VIA BANNER)

Google Analytics 4 · understand traffic, pages visited, conversion paths
Meta Pixel · measure campaign effectiveness and, where you opt in, deliver relevant advertising
You may decline these cookies through the consent banner or your browser settings without affecting your ability to use the Site

NO PHI IN ANALYTICS

We do not transmit clinical data, scan results, IPS scores, or any patient-identifiable health information to Google, Meta, or any other advertising platform
Analytics event payloads are limited to non-clinical website usage data
IP addresses are masked where the analytics platform supports it

DO NOT TRACK

Web browsers may transmit "Do Not Track" signals. There is currently no industry standard for honoring these signals. We do not currently respond to Do Not Track headers. Use the consent banner or your browser cookie controls to manage tracking on the Site.

06 How we protect your information

We use administrative, technical, and physical safeguards to protect your information against unauthorized access, loss, or disclosure. No system is perfectly secure · we cannot guarantee absolute security, but we work to maintain a high standard.

Administrative · written policies, role-based access, staff training, written agreements with vendors who may handle your information
Technical · encryption in transit (TLS), encryption at rest where the platform supports it, multi-factor authentication on administrative accounts, audit logging
Physical · locked clinic premises, locked storage for paper records, monitored access during after-hours
Vendor due diligence · third-party providers handling clinical information are required to meet HIPAA-equivalent security standards under written agreement
Breach response · documented process for identifying, containing, and notifying affected individuals if a breach occurs, consistent with state and federal law

07 Your rights and choices

You have specific rights regarding your information. Some rights apply to clinical records and are governed by state and federal law; others apply to website data.

ACCESS

Get a copy of your clinical record

You may request a copy of your clinical record at any time. We will provide it within a reasonable time consistent with Florida law. We may charge a reasonable, cost-based fee for copying.

AMENDMENT

Request a correction

If you believe information in your record is inaccurate or incomplete, you may request an amendment in writing. We will review the request and respond in a reasonable time. If we deny the request, you may submit a written statement of disagreement that becomes part of the record.

RESTRICTION

Limit how we use or share

You may request that we restrict certain uses or disclosures of your information. We are not required to agree to every request, but we will work with you in good faith.

COMMUNICATION CHOICES

How we contact you

You may ask us to contact you at a specific address or phone number, or to use a specific method (email, phone, text). You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by writing to us.

WEBSITE DATA

Manage cookies and analytics

You may decline non-essential cookies through the consent banner or your browser settings. You may request deletion of the contact information you provided through the Site (separate from clinical records, which are governed by retention law).

08 How long we keep your information

We keep information only as long as we need it for the purposes described in this policy or as required by law.

Clinical records · retained for the period required by Florida law for chiropractic records · at minimum five years from the date of last patient contact, longer if the patient is a minor or if otherwise required
Website lead and CRM records · retained for up to seven years from last contact, then purged on a rolling basis
Billing records · retained as required by tax and accounting law
Marketing email contact data · retained until you unsubscribe, then purged within a reasonable time
Analytics data · retained per the platform's default retention (currently 14 months in Google Analytics 4)

09 Children's privacy

The Site and our services are not directed to children under 13. We do not knowingly collect information from children under 13 through the Site. Clinical care of minors is provided only with the consent of a parent or legal guardian, and all minor clinical records are subject to the same protections as adult records (plus additional protections under Florida law).

10 Visitors from outside Florida and outside the United States

The Site is operated from the United States. If you visit the Site from outside the United States, your information will be transferred to and processed in the United States. By using the Site you consent to that transfer and processing. Clinical care is provided in person at our Pinellas Park, Florida location. We do not currently provide telehealth or out-of-state care. If you contact us from out of state or out of country, we will discuss whether in-person care in Florida is appropriate before scheduling.

11 Links to other websites

The Site may link to third-party websites or platforms (for example, social media, CareCredit, scheduling tools). We are not responsible for the privacy practices of those sites. Read their privacy policies before providing them with any information.

12 Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (for example, an email or a banner on the Site). Continued use of the Site or continued patient relationship after the effective date of an update means you accept the updated policy.

13 How to contact us

If you have questions about this Privacy Policy, want to exercise a right described above, or have a privacy concern, contact us by any of the following methods.

PRIVACY CONTACT

The Posture Clinic · Privacy Office

6425 53rd St N Ste 6 Pinellas Park, FL 33781

Clinic@PostureClinic.com

(727) 233-5268

REGULATOR

If you believe we have not handled your privacy concern appropriately, you may also contact the Florida Department of Health, Board of Chiropractic Medicine.