Effective date: June 10, 2026 · Draft — review with your attorney before publishing
This Privacy Policy explains how [Practice legal name], doing business as ADHD for All ("we," "us"), handles information collected through adhdforall.com (the "Site"). It applies to the Site only.
Health information we receive in connection with providing care — for example, intake questionnaires, evaluations, and visit records — is protected health information governed by HIPAA and by our Notice of Privacy Practices, which is provided to you during registration and intake. Where that notice and this policy differ, the Notice of Privacy Practices controls for health information.
The Site does not currently use advertising cookies or third-party analytics. If that changes, this policy will be updated first.
We use registration details to contact you, confirm eligibility (such as your state), schedule visits, and provide care. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We share information only with service providers that help us operate, under appropriate agreements: our scheduling and electronic health record system (Healow / eClinicalWorks), our telehealth video platform (Doxy.me), our website hosting and form-delivery providers, and professional advisors. We may also disclose information when required by law, or to protect safety.
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to request a copy, to ask us to correct or delete it (subject to medical-record retention laws), and to opt out of sale or sharing — though we do not sell or share personal information as those terms are defined. We will never discriminate against you for exercising these rights. To make a request, contact us at [contact method — e.g., a dedicated email or web form].
We care for children as patients, with information provided and managed by a parent or legal guardian. The Site itself is directed to adults; we do not knowingly collect personal information online from children under 13 without parental involvement. If you believe a child has submitted information without consent, contact us and we will delete it.
We use reasonable administrative and technical safeguards, including encrypted (HTTPS) transmission. We retain registration information as long as needed for the purposes above; medical records are retained as required by law.
We may update this policy and will post the new effective date here. Questions? Contact us at [contact method] or write to [business mailing address].