Kindbridge Behavioral Health
Website Privacy Policy
How we collect, use, and protect information you share through our website — including tracking technologies, your consent choices, and your privacy rights.
Kindbridge Behavioral Health is committed to protecting the privacy and security of individuals who visit our website, use our services, or otherwise interact with us. This policy explains how we collect, use, disclose, and protect information obtained through our website and related digital services.
This policy is separate from our HIPAA Notice of Privacy Practices, which governs Protected Health Information (PHI) collected in connection with clinical care. If you are a client, both documents apply to you.
Section 01Important Distinction: Website vs. Clinical Services
Information collected through this website is not the same as information collected as part of clinical care.
- This website provides educational content, resources, and screening tools — these are informational only and are not diagnostic assessments
- Use of this website does not establish a provider-patient relationship
- Any Protected Health Information (PHI) collected in connection with clinical services is handled separately under HIPAA — see our Notice of Privacy Practices
- We do not use website tracking technologies to collect or process PHI
Section 02Categories of Information We Collect
Information You Provide
- Identifiers — such as name and email address submitted through contact or inquiry forms
- Communications — messages, questions, or referral inquiries you send to us
- Screening tool responses — responses to our informational mental health assessment tools (not used for clinical decisions or shared with advertising platforms)
Automatically Collected Information
- Internet activity — pages visited, navigation behavior, time on page, links clicked
- Device and browser information — browser type and version, operating system, device type, screen resolution, language settings
- Approximate location — city or region level only, derived from IP address; not precise geolocation
- Tracking technology data — data collected through cookies, tracking pixels, and similar technologies as described in Section 03
Information from Third Parties
- Analytics providers — aggregated, pseudonymized usage data from platforms such as Google Analytics 4
- Advertising platforms — campaign attribution data only; used to measure the effectiveness of outreach, not to build individual profiles
How we use this information: to operate and improve our website, respond to inquiries, deliver educational content and resources, analyze usage trends, and measure the effectiveness of outreach and campaigns. We do not use website-collected information to make clinical decisions.
Section 03Cookies, Tracking Pixels & Related Technologies
We use the following categories of tracking technologies on our website. Non-essential tracking technologies are activated only after you provide consent through our cookie consent banner. You may withdraw or modify your consent at any time — see Section 05.
| Category | What It Does | Data Collected | Specific Technologies | Basis |
|---|---|---|---|---|
| Strictly Necessary Cookies | Enable core website functionality — security, session management, consent preference storage, fraud prevention | Session tokens, security identifiers, consent state | Session and security cookies | No consent required |
| Analytics Cookies | Understand how visitors use the site — pages visited, time on page, navigation paths. Data is pseudonymized and used in aggregate only. Not used to collect form data or identify individuals by name. | Pages visited, time on page, device/browser type, general location, referring URL | Google Analytics 4 (GA4) | |
| Marketing / Advertising Cookies | Measure campaign effectiveness and attribution for Google Ads. No remarketing or cross-site behavioral advertising is conducted. | Click events, conversions, IP address, cookie identifiers | Google Ads |
|
| Tracking Pixels & Web Beacons | Small, typically invisible image or code snippets that send information back to a third-party platform when a page loads. Currently used for Google Ads conversion tracking only. Because our site covers behavioral health topics, page URLs may indirectly indicate health-related interests — tracking pixels are therefore strictly consent-gated. If pixels from additional platforms (e.g., Meta, LinkedIn) are added in the future, this policy will be updated. | Page URL visited, IP address, browser/device information, timestamp, referral source | Google Ads conversion pixels | |
| Embedded Video Players | Deliver video content — testimonials, educational videos — hosted on third-party platforms. Video players are consent-gated; see Section 06 (VPPA) for full details. | Video viewing data, device identifiers, IP address | YouTube (privacy-enhanced mode where possible), Vimeo | |
| Functional / Preference Cookies | Remember settings and preferences across sessions (e.g., language, accessibility options) | User-selected preferences, session state | First-party preference cookies |
What We Do Not Do
- Sell personal information
- Share for cross-context behavioral advertising
- Use session replay technologies
- Use keystroke logging tools
- Track form inputs for analytics or advertising
- Collect or process PHI through tracking technologies
Section 04Global Privacy Control (GPC) & Do Not Track (DNT)
These are two distinct browser-based privacy signals. We treat them differently because they have different legal standing.
Global Privacy Control and Do Not Track are technically and legally distinct.
GPC is a legally enforceable opt-out signal under several U.S. state privacy laws. When your browser or browser extension transmits a GPC signal, it communicates that you do not consent to the sale or sharing of your personal information for cross-context behavioral advertising.
States that legally require recognition of GPC include: California (CCPA/CPRA), Colorado (CPA), Delaware (DPDPA), and Montana (MCDPA).
Do Not Track is an older, voluntary browser signal with no consistent legal enforcement framework in the United States. There is no uniform standard for how DNT signals should be interpreted or implemented, and no U.S. state currently mandates that websites honor it.
Our website does not currently make specific legal commitments to honor DNT signals due to this absence of a uniform standard.
How GPC works on our site:
- When our consent management platform detects a GPC signal transmitted by your browser, it automatically treats your visit as an opt-out of the sale and sharing of your personal information and suppresses all non-essential, non-strictly-necessary tracking — without requiring you to take any additional action.
- Only strictly necessary cookies remain active when a GPC signal is detected. Analytics cookies, marketing cookies, advertising pixels, and web beacons are all suppressed.
- GPC is detected at the browser or extension level. Compatible tools include Firefox with GPC enabled, Brave, DuckDuckGo Privacy Browser, and browser extensions. See globalprivacycontrol.org for a full list.
- Honoring a GPC signal does not affect your access to any content or services on our website.
Section 05Managing Your Preferences: Consent, Modification & Withdrawal
When you first visit our website, a consent banner allows you to accept or decline each category of non-essential tracking technology. You may change or withdraw your consent at any time — consenting once does not prevent you from withdrawing later.
How to manage, modify, or withdraw your consent:
- Cookie Settings panel (on-site): Click "Cookie Settings" in the footer of any page on our website. This reopens the consent management panel where you can enable or disable each category of non-essential tracking independently — at any time, including after initially opting in.
- Browser GPC signal: Enable Global Privacy Control in a compatible browser or extension (see Section 04). Our system detects and honors this signal automatically, suppressing all non-essential tracking without any further action on your part.
- Browser cookie controls: Delete cookies already set on your device through your browser's settings or developer tools. Note that deleting existing cookies does not prevent new ones from being placed on future visits — use the Cookie Settings panel to prevent new non-essential cookies from being set.
- Email marketing opt-out: Every marketing or newsletter email from Kindbridge includes an unsubscribe link. Clicking it removes you from that specific mailing list. This does not automatically change your website cookie preferences — manage those separately via the Cookie Settings panel.
- Submit a withdrawal request: Email [email protected] to request withdrawal of consent. Include "Privacy Request — Consent Withdrawal" in the subject line. We will process your request and confirm completion within 15 business days.
Section 06Video Content & the Video Privacy Protection Act (VPPA)
Our website may host or embed video content — including client testimonials and educational videos — served through third-party platforms such as YouTube or Vimeo.
The Video Privacy Protection Act (VPPA), 18 U.S.C. § 2710, restricts the disclosure of personally identifiable information in connection with video content viewed by a consumer. Where tracking pixels or third-party scripts associated with embedded video players could transmit video viewing data alongside identifying information (such as a cookie identifier, email address, or IP address) to third parties, Kindbridge Behavioral Health takes the following steps:
- Consent before video tracking: Embedded video players that may transmit identifiable viewing data to third parties are only activated after you consent via our cookie consent banner. If you have not consented to non-essential tracking, embedded videos are presented as static previews requiring an explicit click to load the third-party player and any associated tracking.
- No disclosure without authorization: We do not knowingly disclose information about the specific video content you have viewed — combined with your personally identifying information — to any third party without your specific, informed consent, except as required by law.
- Privacy-enhanced embed modes: Where technically feasible, video content is embedded using privacy-enhanced or no-cookie configurations provided by the platform (e.g., YouTube's
youtube-nocookie.comdomain). - Third-party platform policies: Once a third-party video player is loaded, that platform's own privacy policy governs data it collects directly. We recommend reviewing the privacy policies of YouTube and Vimeo if you have concerns about video-platform data collection.
- Right to deletion of video viewing data: If you believe that video viewing data associated with your identity has been collected, you may submit a deletion request as described in Section 08.
Section 08Your Privacy Rights Regarding Tracked & Collected Data
Depending on your state of residence, you may have one or more of the following rights regarding data collected about you through our website. These rights apply to website and tracking data. Rights related to your clinical health records are governed by our HIPAA Notice of Privacy Practices.
Right to Know / Access
Request disclosure of the categories and specific pieces of personal information we have collected about you, including through tracking technologies such as cookies, pixels, and web beacons.
Right to Delete
Request deletion of personal data collected about you through our website — including data collected via cookies, pixels, web beacons, and video players. Deletion requests are processed within 45 days.
Right to Opt Out of Sale / Sharing
Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Also exercisable automatically via a GPC-enabled browser — see Section 04.
Right to Correct
Request correction of inaccurate personal information we hold about you collected through our website or digital communications.
Right to Limit Sensitive Data Use
Request that we limit the use and disclosure of sensitive personal information to purposes strictly necessary for providing our services.
Right to Non-Discrimination
We will not discriminate against you for exercising any privacy right. Exercising these rights will not affect your access to our website or services in any way.
How to submit a request: Contact us at [email protected] with the subject line "Privacy Request — [Right You Are Exercising]." We will verify your identity before processing your request and respond within 45 days, with a possible 45-day extension where permitted by applicable law.
Children's Privacy
Our website is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected].
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the updated policy with a revised effective date. We encourage you to review this page periodically.
Section 09Questions & Contact
Questions about this Website Privacy Policy, or to exercise any of your privacy rights? Contact us using the options below.
