MACH Therpay’s Website Privacy Policy

Effective Date: January 1, 2025

This Privacy Policy describes how MACH Therapy (“we,” “us,” or “our”) collects, uses, and discloses information about you when you visit our website machtherpay.com (the “Site”). This policy applies to information collected through the Site and related communications, including email and text messages.

This policy is distinct from our HIPAA Notice of Information Practices, which describes how we handle your Protected Health Information (PHI) in the course of providing healthcare services. You receive the HIPAA Notice separately as part of your intake process.

1. Information We Collect

We collect information in the following ways:

• Information Collected Automatically: When you visit our Site, we automatically collect certain information about your device and Browse activity using cookies and similar technologies, such as Google Analytics. This may include:
  • Your IP address
  • Browser type and version
  • Operating system
  • Pages you visit on our Site
  • Time spent on pages
  • Referring website addresses This information is typically aggregated and used to analyze trends, administer the Site, track user movements around the Site, and gather demographic information about our user base as a whole. It helps us improve our Site and services.  
• Information You Provide Directly (Potentially): While our current Site may be primarily informational, future features (like contact forms or appointment requests) might ask you to provide personal information voluntarily, such as your name, email address, or phone number.
• Information for Communications: If you provide us with your phone number or email address, either through the Site (if applicable) or during your intake process, we may use it to communicate with you as described below.

2. How We Use Your Information

We use the information we collect for purposes including:

• Operating and maintaining our Site.
• Analyzing Site usage to improve our content and user experience (via tools like Google Analytics).
• Communicating with you, including sending appointment reminder, sproviding information about your account balance, requesting payment, or other relevant information via email, phone call, or SMS/text message, subject to your consent and preferences.
• Responding to your inquiries (if you contact us).
• Complying with legal obligations.

3. Communications (Email, Phone Calls, SMS/Text Messages)

As part of our service, we may need to contact you regarding appointments, your account balance and payment, or other aspects of your care. Your intake paperwork includes an authorization for us to communicate with you via email, text message (SMS/MMS), and voice call for appointment reminders, billing matters, and potentially other health-related communications.

• Consent: By providing your mobile phone number and/or email address, you consent to receive communications from us via these methods for the purposes outlined. For SMS/text messages, standard message and data rates from your carrier may apply.
• Opting Out: You have the right to opt-out of these communications at any time:
  • SMS/Text Messages: Reply STOP to any text message you receive from us.
  • Email: Click the ‘unsubscribe’ link typically found at the bottom of our emails.
  • Any Communication: Inform our front desk staff of your updated communication preferences.
• Purpose: These communications are primarily for appointment reminders and essential information related to your care with us, and communication regarding your account status and payments. We strive to keep marketing communications separate and will obtain specific consent where required.
• Important Note on Opt-Outs: Please understand that opting out of communications via a specific channel (like SMS or email) does not relieve you of any financial obligations you may have to MACH Therapy. We may still contact you regarding your account balance using other permissible methods (such as postal mail or phone calls, subject to legal limitations and any specific requests you have made) or pursue other lawful means of collecting unpaid balances.

4. Sharing Your Information

We do not sell your personal information collected through this Site. We may share information under the following circumstances:

• Service Providers: We may share information with third-party vendors who perform services on our behalf, such as website hosting, analytics providers (like Google), and communication platforms (like Vonage for SMS). These providers are obligated to protect your information and use it only for the services they provide to us.  
• Legal Requirements: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.  
• Business Transfers: If MACH Therapy is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction.  
• Third Parties: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All OPT-IN requests include text messaging originator opt-in data and consent; this information will not be shared with third parties.

Sharing of your Protected Health Information (PHI) for treatment, payment, or healthcare operations is governed by our HIPAA Notice of Information Practices.

5. Cookies and Analytics

We use technologies like cookies and Google Analytics to collect the automatic information described above.

• Cookies: Cookies are small files stored on your device. You can manage or disable cookies through your browser settings, but doing so may affect the functionality of the Site.  
• Google Analytics: This service helps us understand how users engage with our Site. Google Analytics may collect information such as your IP address, but we do not combine this information with personally identifiable information. You can learn more about Google’s practices and opt-out by visiting Google’s Privacy & Terms page and the Google Analytics Opt-out Browser Add-on.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. However, no internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.  

7. Your Privacy Rights

Depending on your location (including Washington and Oregon) and the nature of the data, you may have certain rights regarding your personal information.

• Protected Health Information (PHI): Your rights regarding your PHI (such as access, amendment, restriction, and accounting of disclosures) are detailed in our HIPAA Notice of Information Practices. Please refer to that notice or contact our Privacy Officer for requests related to your PHI.
• Website Data & Communications:
  • You can manage cookies through your browser settings.
  • You can opt-out of SMS/text messages by replying STOP.
  • You can unsubscribe from emails using the ‘unsubscribe’ link.
  • You can update your communication preferences by contacting our front desk.
• State-Specific Rights (Washington & Oregon): Residents of Washington and Oregon have specific rights under state privacy laws (like the Washington My Health My Data Act and the Oregon Consumer Privacy Act). These may include rights to access, correct, delete, or obtain a copy of your personal data, and to opt-out of certain data processing activities like targeted advertising or the “sale” of data (as defined by those laws). Specific consent rules may apply to the collection and sharing of “consumer health data” under these laws. To exercise these rights regarding data collected via this Site or our communications systems, please contact our Privacy Officer using the details below.

8. Third-Party Links

Our Site may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.  

9. Children’s Privacy

Our Site and services are not intended for individuals under the age of 13 (or a higher age threshold if applicable in WA or OR for certain data). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we take steps to remove that information.  

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top. We encourage you to review this Privacy Policy periodically for any changes.  

11. Contact Us

If you have any questions about this Website Privacy Policy, your rights, or our privacy practices, or if you believe your privacy rights have been violated, please contact our Privacy Officer:

• Phone: in Washington 509-837-7400, in Oregon 541-567-5678
• Mail: PO Box 90, Sunnyside, WA 98944
• Email: privacy@machtherapy.com

You also have the right to file a complaint with the U.S. Secretary of Health and Human Services or relevant state authorities if you believe your privacy rights under HIPAA or state law have been violated. We will not retaliate against you for filing a complaint.