Privacy Policy

This policy explains what information this website collects, how we use it, and the choices you have. For the rules that govern your use of this website, see our Terms of Service.

1. Introduction

Autism Centers of Utah is sensitive to privacy issues on the internet. We believe it is important you know how we treat the information about you that we receive.

This policy describes the types of information we may collect from you, or that you may provide when you visit this website, and our practices for collecting, using, maintaining, protecting and disclosing that information. It applies to information we collect on this website and information we collect by email, text message, and other electronic messaging.

It does not apply to information we collect offline, or to any third-party website or service that may link to or be reachable from this website.

By using this website, you agree to this policy. We may change it from time to time. Your continued use of the website after we make changes means you accept those changes — see Section 15 for how we notify you.

2. How This Policy Relates to HIPAA

If your child is a patient at one of our locations, this policy is not the document that governs their medical record. Protected Health Information held in a clinical record is covered by our Notice of Privacy Practices, which we provide to you when care begins and which you may request from us at any time using the contact information in Section 16.

This policy covers the website: the pages you visit, the forms you fill out, and the technologies that run on our pages.

3. Information We Collect

We collect information you give us directly, and some information that is collected automatically as you browse.

Information you give us. When you contact us or complete a form on this website, we collect your name, email address, phone number, and ZIP code.

Our intake and consultation forms also ask you for limited information about the child you are inquiring about, so our team can tell whether our services are a fit and can check insurance coverage before your first visit. That includes:

• The child’s first and last name
• The child’s date of birth, which we use to calculate their age
• The child’s gender
• Your insurance provider, and your policy number if you choose to give it (this field is optional)
• Anything you type into a free-text or message field

You choose whether to give us this information. Fields marked optional can be left blank, and you can always call us instead of using a form. Please do not send detailed medical records, diagnostic reports, or clinical notes through a website form or email — see Section 5 of our Terms of Service.

Information collected automatically. As you navigate this website, we and the services we use may collect:

• Details of your visit, including the pages you view, how long you stay, and where you arrived from
• Your IP address, approximate location, operating system, browser type, and device type
• Information collected through cookies and similar technologies, described in Section 6

This information is statistical and does not identify you by name on its own. It may be combined with information you give us — for example, when a form submission is matched to the ad or search that brought you to the site.

We do not sell advertising space on this website and no third-party ads are displayed on our pages. However, several third-party features are embedded in the site — our scheduling and intake forms, our virtual facility tour, embedded maps, and our analytics and advertising measurement tags. When those features load, the provider behind them can set its own cookies and receive information about your visit. Each one is named in Section 7.

4. How We Use Your Information

We use the information we collect to:

• Respond to your questions and appointment requests
• Determine whether our services are a fit for your child and verify insurance benefits
• Schedule and manage consultations and appointments
• Send you information about our services when you have asked for it or consented to it
• Operate, secure, and improve this website
• Understand which pages, searches, and advertisements lead families to contact us
• Meet our legal, regulatory, and recordkeeping obligations

5. How We Share Your Information

We do not sell your personal information for money. We do not give your name, email address, or phone number to other companies so they can market their own products or services to you.

We do share information with the service providers that make this website and our intake process work. That includes our scheduling and CRM platform, our analytics providers, and our advertising platforms, which receive website activity data and conversion events so we can measure and improve our advertising. Those providers are listed in Section 7. Under some state privacy laws, sharing website activity with advertising platforms in this way may be treated as “targeted advertising” or a “sale” even though no money changes hands — Section 13 explains how to opt out.

Our service providers are bound by contract to keep the information confidential and to use it only for the purposes for which we disclose it to them.

We may share aggregated or de-identified information, which does not identify any individual, without restriction.

We may also disclose personal information to comply with a court order, law, or legal process, including in response to a government or regulatory request; to enforce our Terms of Service and other agreements; and where we believe disclosure is necessary to protect the rights, property, or safety of Autism Centers of Utah, our patients and families, or others.

If we are ever involved in a merger, acquisition, or sale of assets, information covered by this policy may transfer to the successor organization, which would remain bound by this policy or give you notice before changing it.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to keep the site running, understand how it is used, and measure our advertising. Cookies are small data files stored on your device when you visit a website. Some are set directly by us; others are set by third-party services embedded in our pages.

The following types of cookies may be active on this website:

• Strictly necessary cookies — Required for the website to function. These include security cookies used by our content delivery network (Cloudflare) to detect and prevent malicious traffic. These cannot be disabled.
• Analytics cookies — Set by Google Analytics, Google Tag Manager, and similar analytics platforms to help us understand how visitors interact with our website (pages visited, time on site, traffic source). Data is aggregated and anonymized. You can opt out via Google’s opt-out tool.
• Advertising and conversion cookies — Set by Google Ads and other similar advertising platforms so we can measure which advertisements lead families to contact us, and so those platforms can show our ads to people who have visited this site. You can manage Google’s advertising cookies at My Ad Center.
• Functional cookies — Set by third-party services embedded on our pages, including our scheduling widget (GoHighLevel / LeadConnector), our virtual facility tour (Matterport), and embedded maps. These are generally loaded only when you interact with those features.

Most web browsers let you control cookies through their settings. Disabling cookies may affect the functionality of certain features on this website.

7. Third-Party Services We Use

We use the following third-party services on this website. Each operates under its own privacy policy, and we may add similar providers over time:

• GoHighLevel / LeadConnector — Powers our appointment scheduling and intake forms, our CRM records, and our SMS and email communications. Information you submit through our forms is stored and processed by GoHighLevel. See the GoHighLevel Privacy Policy.
• Google Analytics & Google Tag Manager — Collects anonymized website usage data to help us understand site performance. See Google’s Privacy Policy.
• Google Ads — We advertise on Google. Conversion tracking tags on this website tell us which advertisements lead to appointment requests, and may allow Google to show you our ads on other websites. We may use other similar advertising platforms in the same way. You can manage this at My Ad Center.
• Call tracking — On some visits, the phone number displayed on this website changes based on how you reached us (for example, from a Google or Facebook advertisement). This lets us tell which campaigns lead to phone calls. All of these numbers ring to the same team at the same location.
• Google Maps — Some pages embed a map showing our location and directions. When a map loads, your browser connects to Google and Google receives your IP address. See Google’s Privacy Policy.
• Matterport — Hosts our interactive virtual facility tour. When you start the tour, your browser connects to Matterport’s servers. See the Matterport Privacy Policy.
• Zippopotam.us — When you type a ZIP code into one of our forms, we send that ZIP code alone to a public postal-code lookup service to fill in your city and state. No name or other personal information is sent.
• Cloudflare — Provides content delivery, DDoS protection, and bot management for this website. Cloudflare may set security cookies as part of this service. See the Cloudflare Privacy Policy.

We do not control how these providers use the information they collect. If you have questions about a specific provider, we encourage you to review its privacy policy directly.

8. SMS and Text Message Information

Phone numbers collected for SMS purposes will not be sold or shared with any third party or affiliate for marketing purposes under any circumstances. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you the services of that campaign.

We do share your phone number and consent status with the vendors that help us deliver text messages, including our messaging platform, phone carriers, and similar service providers.

For the terms governing our text messages — including what we send, message frequency, and how to opt out — see Section 6 of our Terms of Service.

9. Children’s Privacy

This website is intended for use by adults — parents, guardians, caregivers, and professionals looking for information about our services. It is not directed to children, and we do not knowingly collect personal information directly from children under 13.

Our forms do ask you, as a parent or guardian, to provide limited information about your child so we can determine whether our services are appropriate and check insurance coverage. By submitting that information, you confirm that you are that child’s parent or legal guardian and that you are authorized to provide it.

If you believe a child has given us personal information directly through this website, please contact us using the information in Section 16 and we will delete it.

10. Marketing Emails and Communication Choices

If you no longer want to receive marketing or informational emails from us, click the unsubscribe link at the bottom of any message, or contact us using the information in Section 16. We will still send you messages needed to respond to a request you made or to manage a scheduled appointment.

To stop text messages, reply STOP to any message. Opting out of marketing or text messages will not affect your child’s ability to receive care from us.

11. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no agreed standard for how websites should respond to it, this website does not currently respond to those signals. We do honor the opt-out choices you make through the tools linked in Sections 6 and 13.

12. Data Retention

We keep website inquiry information only as long as needed to respond to you and to meet our recordkeeping obligations.

Technical logs of form submissions on our web server are automatically deleted after seven days; those logs never contain a child’s name, date of birth, policy number, or free-text fields. Inquiry and lead records in our scheduling and CRM platform are kept until they are no longer needed for the purpose described in Section 4, or until you ask us to delete them.

If your child becomes a patient, their clinical records are retained under our Notice of Privacy Practices and applicable healthcare recordkeeping law, not under this policy.

13. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding the personal information we hold about you through this website:

• Confirm and access — ask whether we are processing your personal information and get access to it
• Obtain a copy — receive a copy of the information you provided to us, in a portable format where practicable
• Correct — ask us to fix information that is inaccurate
• Delete — ask us to delete personal information we collected about you
• Opt out of targeted advertising — ask us to stop processing your personal information for targeted advertising, or for what some laws define as a “sale”

How to submit a request. Contact us using the information in Section 16 and tell us what you would like us to do. We may need to ask you for information to verify your identity before we act, and we will respond within the time the applicable law allows. If we cannot honor part of your request — for example, because information is part of a clinical record we are legally required to retain, or is held by a service provider on our behalf — we will tell you what we can and cannot remove, and why.

No discrimination. We will not deny you services, charge you a different price, or provide you a different level of service because you exercised any of these rights.

Utah residents. The Utah Consumer Privacy Act gives Utah consumers the rights to confirm processing and access their data, to obtain a copy of it, to delete data they provided, and to opt out of targeted advertising and the sale of personal data. We honor these requests as described above.

California residents. We do not sell personal information for monetary consideration. We do share website activity data with advertising and analytics partners, which California law may treat as “sharing” for cross-context behavioral advertising. To opt out, use the “Do Not Sell or Share My Personal Information” request process described above, or use the tools linked in Section 6. Where technically supported, we honor browser-based opt-out preference signals such as Global Privacy Control. California residents also have the rights to know, delete, correct, and to be free from discrimination for exercising those rights.

14. Data Security

We are committed to protecting the security of the personal information we collect and use. We use a combination of physical, administrative, and technical safeguards to protect your information from unauthorized access, use, and disclosure.

Unfortunately, no transmission of information over the internet is completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of information transmitted to our website, and any transmission is at your own risk.

If we learn of a security incident affecting your personal information, we will notify you and any required authorities as the law directs.

15. Changes to This Policy

We will post any changes to this policy on this page and update the date at the top. If the changes are significant, we will make that clear on this website or notify you directly where we have your contact information. Please review this page periodically.

16. Contact Information

If you have any questions about this Privacy Policy, or if you want to make a privacy request, you can reach us:

• By emailing us at privacy@autismcentersofutah.com
• By calling us at 385-503-2581
• By mail at Autism Centers of Utah, 8851 S Sandy Pkwy, Suite 100, Sandy, UT 84070