Privacy Policy

Last Updated: February 5, 2026

Ries Chiropractic ("we," "us," or "our") is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect your information in accordance with the Health Insurance Portability and Accountability Act (HIPAA), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

1. Information We Collect

Protected Health Information (PHI)

As a healthcare provider, we collect and maintain protected health information as defined by HIPAA, including:

• Personal identifiers (name, address, phone number, email, date of birth, Social Security number)
• Medical history and current health conditions
• Examination findings and diagnoses
• Treatment plans and clinical notes
• Billing and insurance information
• Appointment records and scheduling information
• Communication records between you and our practice

Website Information

When you visit our website (RiesChiroFortBragg.com), we may collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, links clicked)
• Form submissions (contact forms, appointment requests)
• Cookies and similar tracking technologies

2. How We Use Your Information

Treatment, Payment, and Healthcare Operations

We use your protected health information for:

• Treatment: Providing, coordinating, and managing your healthcare and related services
• Payment: Billing and collecting payment for services, including working with insurance companies
• Healthcare Operations: Quality improvement, training, business planning, and administrative functions

Communication

We may use your contact information to:

• Send appointment reminders via text, email, or phone
• Provide test results or treatment updates
• Send practice updates, health tips, or newsletters (with your consent)
• Respond to your inquiries and requests

3. How We Share Your Information

Permitted Disclosures Under HIPAA

We may share your protected health information without your authorization in the following situations:

• Healthcare Providers: With other healthcare providers involved in your care
• Insurance Companies: For billing and payment purposes
• Business Associates: With vendors who help us operate (e.g., billing services, IT support) under HIPAA-compliant agreements
• Legal Requirements: When required by law, court orders, or government agencies
• Public Health: To prevent or control disease, injury, or disability as required by law
• Emergency Situations: To prevent serious threats to health or safety

Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for:

• Marketing purposes
• Sale of your information
• Most uses of psychotherapy notes (if applicable)
• Any other purpose not permitted by HIPAA

4. Your Privacy Rights Under HIPAA

You have the following rights regarding your protected health information:

Right to Access

You have the right to inspect and obtain a copy of your health records. We may charge a reasonable fee for copying and mailing.

Right to Amend

You may request corrections to your health records if you believe they are incorrect or incomplete.

Right to an Accounting of Disclosures

You may request a list of certain disclosures we have made of your PHI.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI. We are not required to agree to your request but will consider it.

Right to Request Confidential Communications

You may request that we communicate with you in a specific way or at a specific location.

Right to a Paper Copy of This Notice

You may request a paper copy of this Privacy Policy at any time.

5. Your Rights Under California Law (CCPA)

As a California resident, you have additional rights under the California Consumer Privacy Act:

Right to Know

You have the right to request disclosure of the personal information we collect, use, and share about you.

Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions (including HIPAA retention requirements for medical records).

Right to Opt-Out

We do not sell your personal information. If our practices change, we will update this policy and provide you with opt-out rights.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

Authorized Agent

You may designate an authorized agent to make requests on your behalf. We may require proof of authorization.

6. Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your information:

• Secure electronic health records systems with encryption
• Limited access to PHI based on job roles and need-to-know
• Regular staff training on privacy and security
• Secure storage of physical records
• Regular security assessments and updates
• Secure website with SSL/TLS encryption

7. Cookies and Website Tracking

Our website uses cookies and similar technologies to:

• Remember your preferences
• Analyze website traffic and usage
• Improve user experience
• Enable certain website features

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

8. Third-Party Services

We may use third-party services such as:

• Google Analytics: To analyze website traffic (anonymized data)
• Email Marketing: To send newsletters and practice updates (with consent)
• Online Scheduling: To manage appointments
• Payment Processing: To process credit card payments securely

These services are bound by their own privacy policies and, where applicable, HIPAA Business Associate Agreements.

9. Data Retention

We retain your health records in accordance with:

• California law requiring retention of medical records for at least 7 years from the date of service
• HIPAA requirements
• Professional standards and best practices

Website data and marketing information may be retained for shorter periods as appropriate for business purposes.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 through our website. If we become aware of such collection, we will delete it promptly.

We do provide chiropractic care to minors with parental or guardian consent, and their health information is protected as described in this policy.

11. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to our website. We will provide notice of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Providing a copy at your next visit
• Email notification for significant changes (if you've consented to email communications)

12. How to Exercise Your Rights

To exercise any of your privacy rights or to request more information:

13. Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Our Practice

Contact our Privacy Officer at the address above. We will not retaliate against you for filing a complaint.

U.S. Department of Health and Human Services

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Website: www.hhs.gov/ocr/privacy/hipaa/complaints/

California Attorney General

For CCPA-related complaints:
California Attorney General's Office
Privacy Enforcement and Protection Unit
300 S. Spring Street
Los Angeles, CA 90013
Website: oag.ca.gov/privacy

14. Acknowledgment

By using our services or website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

Effective Date: February 5, 2026
Practice Name: Ries Chiropractic
Location: 205 E Pine St, Fort Bragg, CA 95437