Privacy Policy

Introduction

Georgia Regional Behavioral Services ("GRBS," "we," "our," or "us") is committed to protecting the privacy of the families, learners, and visitors who interact with us. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have. It applies to garegionalbsvc.com and to information collected through our contact and intake forms, phone calls, and email.

Because we provide Applied Behavior Analysis (ABA) and Speech-Language therapy services, some of the information we handle is Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). We follow HIPAA and applicable Georgia state law for all clinical PHI.

Information we collect

Information you give us directly

• Contact form and intake requests: your name, phone number, email address, city/ZIP, insurance carrier, and any details you choose to share about the person seeking services (for example, age, diagnosis if disclosed, and current needs).
• Phone and email inquiries: what you tell us during calls and in messages.
• Insurance verification: insurance ID, member details, and coverage information you provide so we can perform a benefits check.
• Clinical records: once we begin services, we collect and maintain clinical documentation, assessment results, treatment plans, and progress notes as PHI under HIPAA.

Information collected automatically

• Website analytics: pages viewed, time on page, referring source, approximate location (city/region), device type, and browser. Collected via Google Analytics 4 and Google Ads conversion tracking.
• Cookies and similar technologies: we use first-party and third-party cookies for analytics and advertising measurement. You can disable cookies in your browser settings.

How we use your information

• To respond to your inquiry and schedule an intake or benefits check
• To verify insurance coverage and determine eligibility
• To provide, coordinate, and document ABA and Speech-Language services
• To communicate with you about appointments, care, and administrative matters
• To meet legal, regulatory, licensure, and accreditation requirements
• To improve our website, our services, and our outreach to families in Georgia
• To measure the effectiveness of our marketing (aggregate, not individual)

How we share information

We do not sell your personal information or PHI. We share information only in the following situations:

• Treatment, payment, and operations: with clinicians, supervisors, insurance payors, and business associates as permitted by HIPAA to provide and get paid for care.
• Service providers: vendors that help us operate (secure hosting, email, scheduling, EHR, phone systems). These vendors are bound by contract and, where applicable, HIPAA Business Associate Agreements.
• Legal and safety: when required by law, subpoena, or court order, or to protect the safety of a learner, family, or staff member.
• With your written authorization: for any other disclosure of PHI not otherwise permitted by HIPAA.

How we protect information

We use administrative, physical, and technical safeguards to protect the information we hold, including encrypted transmission (HTTPS/TLS) on our website, access controls on clinical systems, staff training, and Business Associate Agreements with our HIPAA-covered vendors. No system is 100% secure, but we treat your information with the level of care required for healthcare data.

Advertising and analytics

Our website uses Google Analytics 4 and Google Ads conversion tracking to understand how visitors find and use our site and to measure the effectiveness of our advertising. These tools may set cookies and collect IP address, device, and page-view data. We do not include PHI in any advertising or analytics event. We have configured Google's IP anonymization and follow Google Ads' healthcare and personalized advertising policies.

You can opt out of Google Analytics with the Google Analytics opt-out browser add-on, and you can manage Google ad personalization in your Google Ad Settings.

Children's privacy

Many of the people we serve are minors, and their parents or legal guardians typically initiate contact and provide information on their behalf. We collect information about a minor only from a parent or legal guardian, and we handle any resulting PHI under HIPAA. Our website is not directed to children under 13, and we do not knowingly collect information directly from children under 13 without parental consent.

Your rights

If we hold PHI about you or your child under HIPAA, you have rights under HIPAA, including the right to:

• Request access to and copies of the PHI we hold
• Request corrections to that PHI
• Request an accounting of certain disclosures
• Request restrictions on certain uses and disclosures
• Receive a copy of our full Notice of Privacy Practices
• File a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights

Depending on your state of residence, you may also have additional rights (for example, the right to know what personal information we collect, or to request deletion of non-PHI personal information). To exercise any right, contact us using the details below.

Retention

We retain clinical records for the period required by Georgia law, licensure, and payor contracts (generally at least the greater of applicable state retention requirements and payor requirements). Website inquiry data is retained for as long as needed to respond to your request and for routine business records.

Do Not Track

Our website does not currently respond to "Do Not Track" browser signals in a differentiated way. You can control cookies through your browser settings and use the opt-out tools linked above.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Material changes will be highlighted on our website.

Contact us

Questions about this Privacy Policy, or requests to exercise your HIPAA or state-law privacy rights, can be directed to:

Georgia Regional Behavioral Services
Privacy Officer
Email: info@garegionalbsvc.com
Phone: (404) 407-5224
Mon-Sat, 8am-6pm ET

If you believe your privacy rights under HIPAA have been violated, you may also file a written complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.