Kindbridge Behavioral Health

Website Privacy Policy

How we collect, use, and protect information you share through our website — including tracking technologies, your consent choices, and your privacy rights.

Effective Date: March 15, 2026
GPC Signal Honored
CCPA · CPA · DPDPA · MCDPA

Kindbridge Behavioral Health is committed to protecting the privacy and security of individuals who visit our website, use our services, or otherwise interact with us. This policy explains how we collect, use, disclose, and protect information obtained through our website and related digital services.

This policy is separate from our HIPAA Notice of Privacy Practices, which governs Protected Health Information (PHI) collected in connection with clinical care. If you are a client, both documents apply to you.

Section 01Important Distinction: Website vs. Clinical Services

Information collected through this website is not the same as information collected as part of clinical care.

  • This website provides educational content, resources, and screening tools — these are informational only and are not diagnostic assessments
  • Use of this website does not establish a provider-patient relationship
  • Any Protected Health Information (PHI) collected in connection with clinical services is handled separately under HIPAA — see our Notice of Privacy Practices
  • We do not use website tracking technologies to collect or process PHI

Section 02Categories of Information We Collect

Information You Provide

  • Identifiers — such as name and email address submitted through contact or inquiry forms
  • Communications — messages, questions, or referral inquiries you send to us
  • Screening tool responses — responses to our informational mental health assessment tools (not used for clinical decisions or shared with advertising platforms)

Automatically Collected Information

  • Internet activity — pages visited, navigation behavior, time on page, links clicked
  • Device and browser information — browser type and version, operating system, device type, screen resolution, language settings
  • Approximate location — city or region level only, derived from IP address; not precise geolocation
  • Tracking technology data — data collected through cookies, tracking pixels, and similar technologies as described in Section 03

Information from Third Parties

  • Analytics providers — aggregated, pseudonymized usage data from platforms such as Google Analytics 4
  • Advertising platforms — campaign attribution data only; used to measure the effectiveness of outreach, not to build individual profiles

How we use this information: to operate and improve our website, respond to inquiries, deliver educational content and resources, analyze usage trends, and measure the effectiveness of outreach and campaigns. We do not use website-collected information to make clinical decisions.

Section 03Cookies, Tracking Pixels & Related Technologies

We use the following categories of tracking technologies on our website. Non-essential tracking technologies are activated only after you provide consent through our cookie consent banner. You may withdraw or modify your consent at any time — see Section 05.

Tracking technologies used on the Kindbridge website
CategoryWhat It DoesData CollectedSpecific TechnologiesBasis
Strictly Necessary Cookies Enable core website functionality — security, session management, consent preference storage, fraud prevention Session tokens, security identifiers, consent state Session and security cookies No consent required
Analytics Cookies Understand how visitors use the site — pages visited, time on page, navigation paths. Data is pseudonymized and used in aggregate only. Not used to collect form data or identify individuals by name. Pages visited, time on page, device/browser type, general location, referring URL Google Analytics 4 (GA4) Consent Only
Marketing / Advertising Cookies Measure campaign effectiveness and attribution for Google Ads. No remarketing or cross-site behavioral advertising is conducted. Click events, conversions, IP address, cookie identifiers Google Ads
_gcl_*, __gads
Consent Only
Tracking Pixels & Web Beacons Small, typically invisible image or code snippets that send information back to a third-party platform when a page loads. Currently used for Google Ads conversion tracking only. Because our site covers behavioral health topics, page URLs may indirectly indicate health-related interests — tracking pixels are therefore strictly consent-gated. If pixels from additional platforms (e.g., Meta, LinkedIn) are added in the future, this policy will be updated. Page URL visited, IP address, browser/device information, timestamp, referral source Google Ads conversion pixels Consent Only
Embedded Video Players Deliver video content — testimonials, educational videos — hosted on third-party platforms. Video players are consent-gated; see Section 06 (VPPA) for full details. Video viewing data, device identifiers, IP address YouTube (privacy-enhanced mode where possible), Vimeo Consent Only
Functional / Preference Cookies Remember settings and preferences across sessions (e.g., language, accessibility options) User-selected preferences, session state First-party preference cookies Consent Only

What We Do Not Do

  • Sell personal information
  • Share for cross-context behavioral advertising
  • Use session replay technologies
  • Use keystroke logging tools
  • Track form inputs for analytics or advertising
  • Collect or process PHI through tracking technologies
ℹ Form Submission Data Information submitted through forms on our website is transmitted directly to secure systems and is not shared with analytics or advertising platforms. Form data is handled separately from website tracking data.

Section 04Global Privacy Control (GPC) & Do Not Track (DNT)

These are two distinct browser-based privacy signals. We treat them differently because they have different legal standing.

Understanding the Difference — These Are Not the Same Signal

Global Privacy Control and Do Not Track are technically and legally distinct.

Global Privacy Control (GPC)

GPC is a legally enforceable opt-out signal under several U.S. state privacy laws. When your browser or browser extension transmits a GPC signal, it communicates that you do not consent to the sale or sharing of your personal information for cross-context behavioral advertising.

States that legally require recognition of GPC include: California (CCPA/CPRA), Colorado (CPA), Delaware (DPDPA), and Montana (MCDPA).

✓ Kindbridge honors GPC signals
Do Not Track (DNT)

Do Not Track is an older, voluntary browser signal with no consistent legal enforcement framework in the United States. There is no uniform standard for how DNT signals should be interpreted or implemented, and no U.S. state currently mandates that websites honor it.

Our website does not currently make specific legal commitments to honor DNT signals due to this absence of a uniform standard.

⚠ No legal obligation — not currently honored

How GPC works on our site:

  • When our consent management platform detects a GPC signal transmitted by your browser, it automatically treats your visit as an opt-out of the sale and sharing of your personal information and suppresses all non-essential, non-strictly-necessary tracking — without requiring you to take any additional action.
  • Only strictly necessary cookies remain active when a GPC signal is detected. Analytics cookies, marketing cookies, advertising pixels, and web beacons are all suppressed.
  • GPC is detected at the browser or extension level. Compatible tools include Firefox with GPC enabled, Brave, DuckDuckGo Privacy Browser, and browser extensions. See globalprivacycontrol.org for a full list.
  • Honoring a GPC signal does not affect your access to any content or services on our website.
✓ State Compliance — No Additional Steps Required Residents of California, Colorado, Delaware, and Montana who use a GPC-enabled browser do not need to take any additional steps to exercise their opt-out right under applicable state law. The GPC signal is automatically detected and honored. You may also use the consent panel (Section 05) to manage preferences manually.

Section 06Video Content & the Video Privacy Protection Act (VPPA)

Our website may host or embed video content — including client testimonials and educational videos — served through third-party platforms such as YouTube or Vimeo.

The Video Privacy Protection Act (VPPA), 18 U.S.C. § 2710, restricts the disclosure of personally identifiable information in connection with video content viewed by a consumer. Where tracking pixels or third-party scripts associated with embedded video players could transmit video viewing data alongside identifying information (such as a cookie identifier, email address, or IP address) to third parties, Kindbridge Behavioral Health takes the following steps:

  • Consent before video tracking: Embedded video players that may transmit identifiable viewing data to third parties are only activated after you consent via our cookie consent banner. If you have not consented to non-essential tracking, embedded videos are presented as static previews requiring an explicit click to load the third-party player and any associated tracking.
  • No disclosure without authorization: We do not knowingly disclose information about the specific video content you have viewed — combined with your personally identifying information — to any third party without your specific, informed consent, except as required by law.
  • Privacy-enhanced embed modes: Where technically feasible, video content is embedded using privacy-enhanced or no-cookie configurations provided by the platform (e.g., YouTube's youtube-nocookie.com domain).
  • Third-party platform policies: Once a third-party video player is loaded, that platform's own privacy policy governs data it collects directly. We recommend reviewing the privacy policies of YouTube and Vimeo if you have concerns about video-platform data collection.
  • Right to deletion of video viewing data: If you believe that video viewing data associated with your identity has been collected, you may submit a deletion request as described in Section 08.
⚠ Third-Party Video Platforms Kindbridge Behavioral Health cannot fully control data collection by third-party video platforms once a player is loaded by you. For maximum privacy when viewing video content, we recommend using a GPC-enabled browser or declining non-essential cookies in the consent panel before playing videos.

Section 07How We Share Information, Data Security & Retention

Sharing

We do not sell personal information. We may share information with service providers — such as analytics providers, cloud hosting providers, and communications platforms — under appropriate safeguards and data processing agreements. We may also disclose information to comply with legal obligations or to protect our rights, safety, or property, or that of others.

Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer needed, it is securely deleted or de-identified.

International Users

If you access our website from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using our website, you acknowledge this transfer.

Section 08Your Privacy Rights Regarding Tracked & Collected Data

Depending on your state of residence, you may have one or more of the following rights regarding data collected about you through our website. These rights apply to website and tracking data. Rights related to your clinical health records are governed by our HIPAA Notice of Privacy Practices.

Right to Know / Access

Request disclosure of the categories and specific pieces of personal information we have collected about you, including through tracking technologies such as cookies, pixels, and web beacons.

Right to Delete

Request deletion of personal data collected about you through our website — including data collected via cookies, pixels, web beacons, and video players. Deletion requests are processed within 45 days.

Right to Opt Out of Sale / Sharing

Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Also exercisable automatically via a GPC-enabled browser — see Section 04.

Right to Correct

Request correction of inaccurate personal information we hold about you collected through our website or digital communications.

Right to Limit Sensitive Data Use

Request that we limit the use and disclosure of sensitive personal information to purposes strictly necessary for providing our services.

Right to Non-Discrimination

We will not discriminate against you for exercising any privacy right. Exercising these rights will not affect your access to our website or services in any way.

How to submit a request: Contact us at [email protected] with the subject line "Privacy Request — [Right You Are Exercising]." We will verify your identity before processing your request and respond within 45 days, with a possible 45-day extension where permitted by applicable law.

Children's Privacy

Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected].

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the updated policy with a revised effective date. We encourage you to review this page periodically.

Section 09Questions & Contact

Questions about this Website Privacy Policy, or to exercise any of your privacy rights? Contact us using the options below.

Privacy Requests & Questions

Kindbridge Behavioral Health

Mail4949 South Syracuse St. STE 625, Denver, CO 80237
ResponseWithin 15 business days for consent requests; 45 days for formal rights requests
Manage Consent Preferences

Cookie & Tracking Controls

On-siteClick "Cookie Settings" in the site footer
GPCEnable in your browser — honored automatically
Email opt-outUnsubscribe link in every KBH marketing email