Privacy Policy

United Autism Therapy (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect through www.unitedautismtherapy.com (the “Site”), how we use and protect it, and the choices you have. It works together with two other documents: our Terms & Conditions, which govern use of the Site, and our Notice of Privacy Practices, the formal HIPAA notice that governs protected health information (“PHI”) once your family receives care from us. If this Policy and the Notice of Privacy Practices ever overlap with respect to PHI, the Notice of Privacy Practices controls.

Information you give us. When you use our forms or contact us, we collect what you choose to provide: your name, phone number, and email address; a brief message; and, if you include them, your child’s age and your insurance plan. If you apply for a job through the careers page, we collect your name, contact details, the position you are applying for, and your resume. If you subscribe to our newsletter, we collect your email address. If you ask us to verify insurance benefits, our intake team may collect additional details from you directly — such as insurance card images and your child’s date of birth — which we ask you to share by phone or another secure channel rather than through a website form.

Information collected automatically. Like most websites, we automatically receive certain technical information when you visit: IP address, browser and device type, the pages you view, how long you stay, and the site that referred you. We collect this through cookies and similar technologies, including Google Analytics 4, to understand how the Site is used in aggregate. See Section 3 for details and choices.

Information we do not want through the Site. Our forms are not designed to collect medical records or detailed health information, and every form reminds you not to include them. Please share health details with our team by phone so they can be handled through the secure systems we use for client care.

We use the information described above to respond to your inquiries and consultation requests; to verify insurance benefits you have asked us to check; to schedule and manage intake; to evaluate job applications; to send newsletters and updates you have signed up for; to operate, secure, and improve the Site; and to comply with legal obligations. We use analytics data only in aggregate — to see which pages help families and where the Site can improve — not to identify individual visitors.

Cookies are small files a website stores in your browser. We use them for basic site functions and for analytics. Our analytics tool (Google Analytics 4) helps us count visits and understand which pages are useful; it is configured to measure Site usage, not to collect health information. We do not use analytics, advertising pixels, or session-recording tools on pages where you enter information about your child or within any parent portal, and we do not use website data for third-party advertising.

You can control cookies through your browser settings, including blocking or deleting them, and you can opt out of Google Analytics with Google’s browser opt-out add-on. The Site does not currently respond to “Do Not Track” browser signals, because no common standard for them exists.

United Autism Therapy is a healthcare provider and a “covered entity” under the Health Insurance Portability and Accountability Act (HIPAA). Once your family begins care with us, the health information we create or receive about your child — assessments, treatment plans, session data, and billing records — is PHI, protected by federal law. We use and disclose PHI only as HIPAA permits — for treatment, payment, and health care operations, or with your written authorization — as fully described in our Notice of Privacy Practices. Vendors that handle PHI on our behalf, such as our practice-management, secure-communication, and billing providers, are required to sign HIPAA business associate agreements and to protect that information to the same standards.

The public pages of this Site are not intended to collect PHI. The limited information you send through a contact form is used to reach you, answer your questions, and begin intake — and from that point forward, your child’s information moves into our HIPAA-protected clinical systems.

We never sell your personal information, and we never share it for third-party advertising. We share information only in these limited situations:

• Service providers that help us run the Site and our practice — such as website hosting, form processing, scheduling, email delivery, and analytics — under contracts that limit how they may use the information;


• Business associates that handle PHI for us under signed HIPAA business associate agreements, as described in our Notice of Privacy Practices;


• Legal and safety purposes, when disclosure is required by law or reasonably necessary to protect the rights, safety, or property of a child, a family, our staff, or others — including reports we are mandated to make under Virginia law;


• Business transfers, if our practice is ever reorganized or transferred, in which case information remains protected by this Policy and by HIPAA;


• With your direction or consent, when you ask us to share information with someone else.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold: the Site is served over HTTPS encryption; access to inquiry and client information is limited to trained team members who need it for their work; our workforce is trained on HIPAA privacy and security and undergoes background checks; and vendors are bound by contract. No website or transmission method is 100% secure, which is exactly why we ask you to keep detailed health information out of web forms and share it with us by phone instead.

We keep website inquiries for as long as needed to respond and maintain reasonable business records; career applications for the hiring cycle and any period required by employment law; and newsletter subscriptions until you unsubscribe. Clinical records for families in our care are retained as required by Virginia law, licensing standards, and payer requirements, and are governed by our Notice of Privacy Practices and record-retention policies.

Our practice serves children — but this website is meant for the adults who care for them. The Site is not directed to children, and we do not knowingly collect personal information online from children under 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has submitted information through the Site, contact us and we will delete it. Information about your child that you provide as a parent or legal guardian is handled as described in this Policy and, once your family is in care, protected under HIPAA.

You can unsubscribe from our newsletter at any time using the link in any email, opt out of text messages by replying STOP, and manage cookies in your browser. You may also contact us to request access to, correction of, or deletion of information you submitted through the Site; we will honor reasonable requests unless we are required to keep the information by law. For your child’s PHI, HIPAA gives you specific rights — including the right to get copies of records, request corrections, and request restrictions — which are described in our Notice of Privacy Practices. Health information held by a HIPAA covered entity is exempt from the Virginia Consumer Data Protection Act; for non-health website data, Virginia residents are welcome to contact us with any privacy request and we will respond in good faith.

The Site links to third-party websites — such as our Instagram profile, insurance carriers, and public resources like Cover Virginia and TRICARE. Their privacy practices are their own; we encourage you to review the privacy policy of any site you visit.

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and revise the effective date at the top of the page. Material changes will be noted prominently on this page.

Questions or requests about privacy? Contact us and ask for our Privacy Officer: United Autism Therapy · Woodbridge, VA — serving all of Northern Virginia · Phone: +1 (703) 261-4446 · Email: info@unitedautismtherapy.com