Privacy Policy

As a chiropractic healthcare provider, Pura Vida Chiropractic is subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA). We maintain a separate Notice of Privacy Practices that governs how we use and disclose your Protected Health Information (PHI) in connection with your clinical care. That notice is provided to all patients at the time of their first visit and is available upon request at our office.

This website Privacy Policy applies to information collected through our website and digital communications and is separate from our HIPAA Notice of Privacy Practices. If you are a patient of Pura Vida Chiropractic, both documents apply to you.

A. Information You Provide Directly

We collect information you voluntarily submit through our website, including:

• Contact forms and intake questionnaires: name, email address, phone number, mailing address, and the nature of your health concern or inquiry.
• Online appointment scheduling: name, date of birth, email address, phone number, and appointment preferences submitted through our scheduling platform (Schedulista).
• Email and phone inquiries: any information you include when you contact us directly.
• New patient forms: health history, insurance information, and consent documents submitted prior to your first visit.

B. Information Collected Automatically

When you visit our website, we and our third-party service providers may automatically collect:

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, and date/time of your visit.
• Device information: device type, screen resolution, and unique device identifiers.
• Cookies and similar tracking technologies: we use cookies to analyze website traffic, remember your preferences, and improve your experience. See Section 6 for details.

C. Information from Third Parties

We may receive information about you from third-party platforms such as Facebook, Google, and review platforms when you interact with our advertisements or profiles on those services.

We use the information we collect for the following purposes:

• To schedule appointments and communicate with you regarding your care
• To respond to your inquiries, questions, and requests
• To send appointment reminders, health tips, and other communications you have requested
• To process and verify insurance information
• To improve our website, services, and patient experience
• To analyze website traffic and user behavior through analytics tools
• To comply with applicable laws and regulations, including HIPAA
• To protect the security and integrity of our website and business operations
• To run targeted advertising campaigns on platforms such as Facebook and Google (using non-health data only — see Section 5)

We do not sell your personal information to third parties. We do not use your Protected Health Information for marketing purposes without your explicit written authorization.

We may share your information in the following limited circumstances:

A. Service Providers

We share information with trusted third-party vendors who assist us in operating our website and providing services, including:

• Schedulista — online appointment scheduling platform
• Vercel — website hosting and content delivery
• Google Analytics — website traffic analysis
• Facebook / Meta — advertising and audience analytics
• FormSubmit.co — contact form submission processing
• Email and practice management software used in our office operations

These providers are contractually required to use your information only as directed by us and to maintain appropriate security measures.

B. Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Pura Vida Chiropractic, our patients, or the public.

C. Business Transfers

In the event of a merger, acquisition, or sale of our practice, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership.

D. With Your Consent

We may share your information with your explicit consent for purposes not described in this policy.

We use Facebook Pixel and Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. These tools may place cookies on your device to track actions taken on our website (such as completing a contact form or scheduling an appointment) and to serve relevant ads to users who have visited our site.

We do not share Protected Health Information (PHI) with advertising platforms. Any custom audiences created for advertising purposes use only general contact information (such as email or phone number) provided voluntarily by website visitors, never clinical health data.

You may opt out of interest-based advertising at any time through:

• Facebook Ad Preferences: facebook.com/ads/preferences
• Google Ads Settings: adssettings.google.com
• Network Advertising Initiative opt-out: optout.networkadvertising.org

Our website uses the following types of cookies:

• Strictly necessary cookies: required for the website to function properly (e.g., session management, security).
• Analytics cookies: help us understand how visitors interact with our website (Google Analytics). Data is aggregated and anonymized.
• Marketing cookies: used to track visitors across websites for advertising purposes (Facebook Pixel, Google Ads).

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Note that disabling certain cookies may affect the functionality of our website.

We implement industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted to and from our website
• Secure hosting infrastructure through Vercel with enterprise-grade security
• Access controls limiting who within our practice can access patient data
• Regular security reviews and updates

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

We retain personal information collected through our website for as long as necessary to fulfill the purposes described in this policy, or as required by law. Patient health records are retained in accordance with Texas state law requirements for healthcare providers (a minimum of 10 years for adult patients, or until age 21 for minor patients, whichever is longer). Website analytics data is retained for a period of 26 months.

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information, subject to certain legal exceptions.
• Opt-out of marketing: unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us directly.
• Data portability: request a copy of your data in a portable format where technically feasible.

Texas Residents: Texas law provides certain privacy rights for residents. You may submit a request to exercise any of the above rights by contacting us using the information in Section 12.

HIPAA Rights (Patients): As a patient, you have additional rights regarding your Protected Health Information as described in our Notice of Privacy Practices, including the right to access, amend, and request restrictions on disclosures of your health information.

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

For pediatric chiropractic patients under 18, all online scheduling and form submissions must be completed by a parent or legal guardian.

Our website may contain links to third-party websites, including scheduling platforms, review sites, social media profiles, and insurance portals. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies before providing any personal information.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to all privacy-related requests within 30 days of receipt.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.