CONSUMER HEALTH DATA PRIVACY POLICY

CATEGORIES WE COLLECT AND WHY

• A request to be contacted about our services. We collect a first name, preferred clinic or remote option, callback method, and the email address or phone number needed to respond. A person may optionally choose one broad service area. A person who selects return-to-throw or strength and conditioning also chooses an in-person, remote, hybrid, or not-sure delivery preference. A Tampa visitor who selects manual therapy and recovery may choose a broad treatment option such as manual therapy, dry needling, or ARPwave. The form records that the person acknowledged our cash-based, out-of-network payment notice. The request and broad choices may indicate that a person is seeking health care. We use them only to route and provide the requested callback, confirm that the payment notice was shown, and protect the form from abuse.
• Health-related page requests. A page address may name Tommy John rehab, shoulder pain, elbow pain, or another condition. The hosting request can include that address with an IP address, browser or user agent, time, and referrer. We process this only to deliver the page, maintain security, prevent abuse, and diagnose technical failures.
• Arizona opening interest. If a person checks the separate consent box, we collect an email address and a record of that choice to send Arizona opening updates. The person can withdraw consent at any time by using the unsubscribe link or contacting us.

Please do not submit injury, diagnosis, surgery, symptom, imaging, medication, or treatment information through the public form or ordinary email. If clinical details are needed, we will direct you to the patient workflow.

SOURCES

• Directly from you when you request a callback or join the Arizona email list.
• From your browser and network when they send the technical request needed to open a page or submit a form.

PROCESSORS AND DISCLOSURES

We use processors only for the limited jobs described below. They receive data as needed to provide the service a person requested or to operate the site consistently with this policy.

• Vercel: website hosting, technical request handling, security, and short-term runtime logs.
• Resend: delivery of the limited callback fields and payment-notice acknowledgment to the clinic mailbox.
• Google Workspace: receipt and handling of the callback request by the clinic. Athletic Potential has a Business Associate Agreement with Google.
• Kit: storage and delivery for the Arizona opening email list only after the person opts in.

We do not share consumer health data with third parties or affiliates as “sharing” is defined by the Washington law. We do not sell consumer health data. We do not use it for targeted advertising. The site does not load Google Analytics, Meta Pixel, Vercel Web Analytics, Google Maps embeds, or YouTube embeds.

PT EVERYWHERE AND CLINICAL RECORDS

PT Everywhere is our separate scheduling and clinical system. When you click a booking link, you leave this website and provide information directly to PT Everywhere. The public site does not transmit your callback form to PT Everywhere. Treatment records collected through the patient workflow are outside this website policy and are handled under our clinical privacy practices and applicable health privacy law.

YOUR WASHINGTON RIGHTS

Subject to the law, you may:

• Confirm whether we collect, share, or sell consumer health data about you and access that data.
• Receive a list and contact information for third parties or affiliates with whom we shared or sold that data. We currently have none in those categories.
• Withdraw consent from future collection or sharing.
• Ask us to delete consumer health data about you.
• Appeal if we refuse to act on a request.

We will not unlawfully discriminate against you for exercising these rights. We provide responses free of charge up to twice per year, unless the law permits a fee or refusal for a manifestly unfounded, excessive, or repetitive request.

HOW TO MAKE A REQUEST

Email dylan.newcomer@athleticpotentialpt.com with the subject “Consumer Health Data Request.” Include only your name, contact email, and the right you want to exercise. Do not email medical details. We may ask for information reasonably needed to authenticate you before acting, and we will not require you to create a new account.

We will act without undue delay and within 45 days. When reasonably necessary, we may extend once for another 45 days and will explain the extension during the first 45-day period. A deletion from archived or backup systems may be delayed for up to six months as allowed by law. We will also notify applicable processors and contractors of a valid deletion request.

APPEALS

To appeal a refusal, email the same address with the subject “Consumer Health Data Appeal.” We will respond in writing within 45 days. If we deny the appeal, we will give you a way to contact the Washington State Attorney General.

POLICY CHANGES

We will update this page before collecting, using, or disclosing another category of consumer health data. Where the law requires consent, we will obtain it before the new collection, use, or disclosure begins.

CONTACT

Athletic Potential Performance Physical Therapy LLC (Washington)
Athletic Potential LLC (Florida)
23211 66th Ave S, Kent, WA 98032
dylan.newcomer@athleticpotentialpt.com