Privacy Policy

Last updated: August 10, 2026

1. Introduction

BrainSpa, LLC d/b/a BrainSpa Neurofeedback ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and safeguard your information when you visit our website, use our services, or interact with us.

2. Information We Collect

Personal Information

We may collect the following types of personal information:

• Name, email address, phone number, and mailing address
• Date of birth and gender
• Insurance information and billing details
• Health and medical history relevant to treatment
• Emergency contact information

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our site
• Referring website addresses
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve our healthcare services
• Schedule and manage appointments
• Process payments and insurance claims
• Communicate with you about your care, appointments, and treatment plans
• Send appointment reminders and follow-up communications
• Send promotional offers and practice updates (with your consent)
• Comply with legal and regulatory requirements
• Improve our website and patient experience

4. SMS/Text Messaging

If you opt in to receive text messages from BrainSpa Neurofeedback, you may receive:

• Appointment confirmations and reminders
• Follow-up care instructions
• Promotional offers and special announcements (marketing messages only with explicit opt-in)

Message and data rates may apply. Message frequency varies. You can opt out at any time by replying STOP to any message. Reply HELP for assistance. Your consent to receive text messages is not a condition of purchasing any goods or services.

For details on how mobile information is handled, see Section 5 (Mobile Information Sharing) below.

5. Mobile Information Sharing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the text message services.

6. Information Sharing

We do not sell your personal information. We may share your information with:

• Healthcare providers involved in your care
• Insurance companies for billing purposes
• Service providers who assist our operations (e.g., scheduling software, payment processors)
• Legal authorities when required by law

7. Data Security and Handling

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure server infrastructure, access controls limiting data to authorized personnel, and regular security assessments. Personal data is retained only as long as necessary to fulfill the purposes described in this policy or as required by law. When data is no longer needed, it is securely deleted or anonymized.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• File a complaint with a regulatory authority

9. HIPAA Compliance

As a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA) regarding protected health information (PHI). Our Notice of Privacy Practices, available at our office, provides additional details about how we handle PHI.

10. Cookie & Tracking Practices

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and serve relevant content. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for basic website functionality such as navigation and form submission.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting usage data (e.g., pages visited, time on site). We may use services such as Google Analytics for this purpose.
• Marketing Cookies: Used to track visitors across websites to display relevant advertisements. These cookies may be set by third-party advertising partners.

You can control or delete cookies through your browser settings at any time. Disabling cookies may affect the functionality of certain features on our website. For more information on how to manage cookies, visit your browser\'s help documentation.

11. Children's Privacy

Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a new effective date.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

BrainSpa, LLC
2440 Sandy Plains Rd, Bldg 10, Marietta, GA 30066
Phone: (470) 706-5250
Email: [email protected]