Privacy Policy
Effective Date: January 15, 2022
Last Updated: January 8, 2026
1. Introduction
Elba Behavior Solutions ("EBS," "we," "us," or "our") is committed to protecting your privacy. We provide Applied Behavior Analysis (ABA) therapy services for children and young adults up to age 21, including in-home therapy throughout the greater Philadelphia area and telehealth services available nationwide.
This Privacy Policy explains how we collect, use, and protect information gathered through our website at elbabehaviorsolutions.com (the "Website"). We want you to feel confident about the information you share with us as you explore our services for your child or family.
What This Policy Covers
This Privacy Policy applies only to information collected through our public Website, including:
- Contact and consultation request forms
- Newsletter subscriptions
- Event registration forms
- General browsing activity on our Website
Important: Clinical Services Are Handled Separately
This Privacy Policy does not cover Protected Health Information (PHI) or clinical records created during ABA therapy services. When you become an EBS client, clinical information about your child is protected under the Health Insurance Portability and Accountability Act (HIPAA) and governed by our separate Notice of Privacy Practices, which is provided to all clients at the start of services.
Please do not submit medical diagnoses, treatment details, or sensitive health information through our website contact forms. Our team will collect necessary clinical information through secure, HIPAA-compliant channels during your consultation.
By using our Website, you agree to the terms of this Privacy Policy. If you have questions, please contact us at hello@elbabehaviorsolutions.com.
2. Information We Collect
We collect different types of information depending on how you interact with our Website:
2.1 Information You Provide Directly
When you fill out forms on our Website, you may provide:
- Contact Information: Your name, email address, and phone number
- Consultation Requests: Information about your child's age, general concerns, and scheduling preferences
- Event Interest Forms: Parent/guardian contact information and child's first name for social skills groups and camps. These forms express initial interest only—final registration and payment are handled separately. Any "interests" you select (such as activity preferences) help us understand what your child might enjoy and are not medical or treatment information.
- Newsletter Signup: Your email address and communication preferences
- General Inquiries: Any information you choose to share in the message field of our contact forms
Important: Our website forms are designed for general inquiries only. Please do not include detailed medical histories, diagnoses, or Protected Health Information in these forms. Such information should only be shared through secure channels after your consultation is scheduled.
2.2 Information Collected Automatically
When you visit our Website, we automatically collect certain technical information:
- Device Information: Browser type, operating system, and device type (computer, tablet, or phone)
- Usage Information: Pages visited, time spent on pages, links clicked, and how you found our Website
- Location Information: General geographic area based on your IP address (city/region level, not precise location)
- Cookies and Similar Technologies: Small data files that help us understand how visitors use our site (see Section 5 for details)
2.3 Information from Third Parties
We may receive limited information from:
- Referral Sources: If a pediatrician, school, or other professional refers you to us, they may share your contact information with your permission
- Social Media: If you interact with us on Facebook, Instagram, or LinkedIn, we may receive information according to those platforms' privacy settings
3. How We Use Your Information
We use the information we collect to:
3.1 Respond to Your Inquiries
- Answer your questions about our ABA therapy services
- Schedule free consultations
- Provide information about our social skills groups, camps, and events
- Follow up on your interest in our services
3.2 Communicate with You
- Send newsletters and educational content about child development and ABA therapy (if you've subscribed)
- Notify you about upcoming events, groups, and programs
- Share important updates about our services
3.3 Improve Our Website and Services
- Understand how visitors use our Website so we can make it more helpful
- Identify and fix technical problems
- Develop new resources and content that families find valuable
3.4 Ensure Security
- Protect our Website from spam, fraud, and abuse
- Maintain the security of our systems
- Verify that form submissions come from real people (using reCAPTCHA)
3.5 Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests when required
- Protect our rights and the safety of others
4. How We Share Your Information
We respect your privacy and limit how we share your information:
4.1 Service Providers
We work with trusted companies that help us operate our Website and communicate with you:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Siteground | Website hosting | All website data is stored on their secure servers |
| Google Analytics | Website analytics (understanding how visitors use our site) | Anonymous usage data, IP address (anonymized) |
| Google reCAPTCHA | Spam and bot protection for forms | Device and interaction data to verify human visitors |
| Mailchimp | Email newsletters and communications | Email address, name, communication preferences |
These service providers are contractually required to protect your information and use it only for the purposes we specify.
4.2 When Required by Law
We may disclose your information when required to:
- Comply with a legal obligation, court order, or government request
- Protect the safety of any person
- Investigate potential violations of our policies
- Protect our legal rights
4.3 Business Transfers
If EBS is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
4.4 Aggregated and De-Identified Information
We may share aggregated or de-identified information that cannot reasonably be used to identify you. This includes anonymized analytics data and statistical reports about how visitors use our Website.
4.5 What We Don't Do
We do not sell your personal information to third parties. We do not share your contact information with other businesses for their marketing purposes.
6. Data Security
We take reasonable measures to protect your information from unauthorized access, loss, or misuse:
- Secure Transmission: Our Website uses SSL/TLS encryption (HTTPS) to protect data transmitted between your browser and our servers
- Secure Hosting: Our Website is hosted on secure servers with regular security updates
- Limited Access: Only authorized team members can access personal information, and only when necessary for their job functions
- Trusted Partners: We work only with service providers who maintain strong security practices
While we work hard to protect your information, no website or internet transmission is 100% secure. We encourage you to use caution when sharing information online.
7. Your Privacy Rights and Choices
You have choices about your information:
7.1 Access and Correction
You can request to see what personal information we have about you and ask us to correct any inaccuracies.
7.2 Deletion
You can request that we delete your personal information. We will honor your request unless we need to keep certain information for legal or legitimate business reasons.
7.3 Email Communications
You can unsubscribe from our newsletters and marketing emails at any time by:
- Clicking the "unsubscribe" link at the bottom of any email
- Contacting us at hello@elbabehaviorsolutions.com
Even if you unsubscribe from marketing emails, we may still send you transactional messages related to services you've requested (such as consultation confirmations or event registrations).
7.4 How to Exercise Your Rights
To make a privacy request, please contact us at hello@elbabehaviorsolutions.com or call us at (267) 225-6219. We will respond to your request within 30 days.
8. Additional Rights for California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
8.1 Your California Privacy Rights
- Right to Know: You can request information about the categories and specific pieces of personal information we've collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it
- Right to Delete: You can request deletion of your personal information, subject to certain exceptions
- Right to Correct: You can request correction of inaccurate personal information
- Right to Opt-Out: You have the right to opt out of the "sale" or "sharing" of personal information. EBS does not sell personal information for monetary consideration. Our use of analytics cookies may constitute "sharing" under California law—you can opt out using the cookie controls described in Section 5.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
8.2 Categories of Information We Collect
In the past 12 months, we have collected the following categories of personal information from California residents:
- Identifiers: Name, email address, phone number, IP address
- Internet Activity: Browsing history on our Website, interactions with our content
- Geolocation Data: General location based on IP address
- Inferences: Preferences derived from your interactions with our Website
8.3 "Do Not Sell or Share My Personal Information"
While EBS does not sell personal information for monetary consideration, our use of analytics and advertising technologies (such as Google Analytics and Google Ads, when enabled) may constitute "sharing" for targeted advertising purposes under California law.
California residents may opt out of this sharing by:
- Using the advertising opt-out links provided in Section 5 above
- Adjusting your browser settings to block third-party cookies
- Contacting us directly at hello@elbabehaviorsolutions.com
8.4 California "Shine the Light" Law
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes. To make such a request, please contact hello@elbabehaviorsolutions.com.
8.5 How to Submit a Request
California residents can submit privacy requests by:
- Emailing hello@elbabehaviorsolutions.com
- Calling (267) 225-6219
We will verify your identity before processing your request and respond within 45 days.
9. Other U.S. State Privacy Rights
Residents of certain U.S. states have privacy rights under state comprehensive privacy laws.
9.1 States with Comprehensive Privacy Laws
The following states have enacted consumer privacy laws that may provide you with additional rights:
- Virginia (Consumer Data Protection Act)
- Colorado (Colorado Privacy Act)
- Connecticut (Connecticut Data Privacy Act)
- Utah (Utah Consumer Privacy Act)
- Texas (Texas Data Privacy and Security Act)
- Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island
If you are a resident of one of these states, you may have rights including:
- Confirm whether we process your personal information
- Access your personal information
- Correct inaccurate information
- Delete personal information
- Obtain a copy of your information in portable format
- Opt out of targeted advertising or profiling
9.2 Pennsylvania Residents
As a Pennsylvania-based company, we want to ensure Pennsylvania residents understand their privacy protections. While Pennsylvania does not currently have a comprehensive consumer privacy law like California's CCPA, Pennsylvania residents are protected by:
- Pennsylvania's Breach of Personal Information Notification Act (requiring notification of data breaches)
- Federal laws including the FTC Act's unfair and deceptive practices protections
- The privacy rights described in Section 7 of this policy, which we extend to all visitors
We monitor Pennsylvania privacy legislation and will update this policy if new state privacy laws are enacted.
9.3 How to Exercise State Privacy Rights
To exercise rights under applicable state laws, please email hello@elbabehaviorsolutions.com or call (267) 225-6219. We will respond within the timeframes required by applicable law (typically 45 days).
10. Children's Privacy
While EBS provides ABA therapy services for children and young adults up to age 21, our Website is designed for parents, caregivers, and adults over 18 who are seeking information about services for their children.
9.1 We Do Not Collect Information from Children
We do not knowingly collect personal information directly from children under 13 through our Website. Our contact forms, newsletter signups, and other data collection points are intended for adult users only.
9.2 Event Interest Forms
When parents express interest in social skills groups or camps through our Website, we collect only basic contact information and the child's first name. This information is provided by the parent or guardian, not collected directly from the child. Final registration and payment are handled separately through direct communication with our team.
9.3 If We Learn We've Collected a Child's Information
If we discover that we have collected personal information directly from a child under 13 without parental consent, we will delete that information promptly. If you believe your child has provided us with personal information, please contact us immediately at hello@elbabehaviorsolutions.com.
11. Use of Children's Images
Our Website and marketing materials may feature photographs of children participating in our programs and services.
10.1 Written Parental Consent
We only use photographs of children with written parental consent. Before any child's image is used on our Website, social media, or marketing materials, we obtain explicit written permission from a parent or legal guardian.
10.2 Purpose of Images
Photographs are used solely for:
- Illustrating our services and programs on our Website
- Educational content about ABA therapy
- Marketing materials for our social skills groups and camps
- Social media posts about our programs
10.3 Your Right to Request Removal
Parents may request removal of their child's image from our Website and marketing materials at any time by contacting us at hello@elbabehaviorsolutions.com. We will remove the images within a reasonable timeframe.
12. What This Policy Does NOT Cover
This Privacy Policy governs only information collected through our public Website. The following are handled separately:
Protected Health Information (PHI) and Clinical Records
When you become an EBS client, we create clinical records about your child as part of providing ABA therapy services. This information is Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).
PHI is governed by our Notice of Privacy Practices, which is provided to all clients at the start of services. This notice explains:
- How we use and disclose clinical information
- Your rights regarding your child's health records
- Our legal obligations to protect this information
- How to request access, amendments, or restrictions
If you have questions about how we handle clinical information, please ask our team when you begin services.
Third-Party Websites and Services
Our Website may contain links to third-party websites, including:
- Social media platforms (Facebook, Instagram, LinkedIn)
- Insurance company websites
- Educational resources and references
- Partner organizations and advocacy groups
These websites have their own privacy policies, and we are not responsible for their privacy practices, content, or security. We do not control and are not liable for any information you provide to third-party websites.
Some third-party services integrated into our Website (such as social media plugins or embedded content) may collect information about your browsing behavior even if you do not interact with them. These integrations are disclosed in our Cookie Policy.
We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.
13. How Long We Keep Your Information
We retain your information for as long as necessary to fulfill the purposes described in this policy:
- Contact Form Submissions: We keep inquiry information for up to 3 years to follow up on your interest and maintain records of our communications
- Newsletter Subscribers: We retain your email address until you unsubscribe or your account becomes inactive (no opens or clicks for 2 years)
- Event Interest Forms: We keep interest form submissions for 2 years to follow up on inquiries and for future program planning
- Website Analytics: Anonymous analytics data is retained for up to 26 months
- Unsubscribed Emails: We maintain a suppression list of unsubscribed email addresses to honor your opt-out preferences
We may retain certain information longer when required by law or to protect our legal rights.
14. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- For significant changes, we will provide notice through our Website or by email to newsletter subscribers
- Your continued use of our Website after changes are posted means you accept the updated policy
We encourage you to review this policy periodically to stay informed about how we protect your information.
15. International Visitors
Elba Behavior Solutions is based in Pennsylvania, United States, and our services are designed primarily for families in the United States. Our Website is hosted on U.S.-based servers.
If you access our Website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country of residence.
By using our Website, you consent to the transfer of your information to the United States and the use and disclosure of your information as described in this Privacy Policy.
If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights regarding your personal information. Please contact us at hello@elbabehaviorsolutions.com if you have questions about how we handle your information.
16. Contact Us
If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your information, please contact us:
Elba Behavior Solutions
Contact us for mailing address options.
Philadelphia, PA
Email: hello@elbabehaviorsolutions.com
Phone: (267) 225-6219
Website: elbabehaviorsolutions.com
We will respond to your inquiry within 30 days.
Related Documents:
- Terms of Use – Rules for using our Website
- Cookie Policy – Detailed information about cookies and tracking technologies
- Legal Disclaimer – Important disclaimers about Website content