Privacy Policy

Introduction

Welcome to Castle Rock Russian Speaking Therapy’s online platform. We are committed to protecting your privacy and ensuring that your personal data is handled with the utmost care and in accordance with applicable privacy laws. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information we receive from users of our website (http://castle-rock-russian-speaking-therapy.denvermentalhealthcare.com) and related services.

Scope

This policy covers all aspects of our online presence, including but not limited to:

Our official website, its subdomains, and any web pages linked herein.
Mobile applications developed by or for Castle Rock Russian Speaking Therapy.
Services and products offered through our platform.
Interactions with our users via email, telephone, text messaging, and other communication channels.

Please note that this policy does not extend to third-party websites, applications, or services accessible through links on our site. These entities have their own privacy practices, and we encourage you to review their privacy statements before engaging with them.

Processing Activities

When you interact with us in the ways described above, we engage in certain data processing activities:

Account Management: Creating and managing user accounts, including personal information necessary for account accessibility.
Service Provision: Providing the services and products requested by users, which may involve collecting payment details and financial information.
Communication: Sending newsletters, promotional materials, and responsive communications as per user consent.
Analytics and Improvement: Tracking and analyzing user behavior to enhance our platform’s performance and user experience.

Personal Data Collection

We collect a range of personal data, including:

Account Information: This includes usernames, email addresses, and passwords (hashed and encrypted).
Payment Details: Credit/debit card numbers, billing addresses, and payment transaction records for processing payments securely.
Financial Data: Bank account information (for direct debit or similar transactions) and financial history related to our services’ fees.
Purchase Information: Details of products or services purchased through our platform, including quantities, pricing, and delivery preferences.
Mobile Device Identifiers: Unique device identifiers, IP addresses, browser types, and mobile network information for tracking user behavior and improving our services.
Location Data: Geolocation data provided by users’ devices, used to offer location-based services or content.
Feedback and Reviews: User-submitted reviews, ratings, comments, and responses to surveys or feedback forms.
Social Media Information: Data obtained from social media platforms when users choose to connect their accounts for seamless access or sharing.
Product Preferences: Information about products viewed, searched for, or purchased on our site to personalize recommendations.

We collect this data through direct user input, automated tracking technologies (such as cookies and device fingerprinting), and third-party service providers who assist us in delivering services.

Cookies and Tracking Technologies

We employ cookies and similar tracking technologies to enhance your experience on our platform:

Strictly Necessary Cookies: These ensure basic functionality, security, and performance of our website.
Preference Cookies: Customizing content preferences and settings based on user choices.
Analytics Cookies: Tracking user behavior across our site for analytics purposes, enabling us to understand how users interact with our services.

Users have the option to control non-essential cookies through our Cookie Manager, allowing them to customize their privacy settings.

Retention and Deletion of Data

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, plus additional periods required by law:

Legal Obligations: We may need to keep certain records for legal compliance or regulatory audit purposes.
Business Operations: Personal data is retained to support our business operations and improve services.
User Consent: Data associated with user accounts remains active until the user requests account deletion or their consent is withdrawn.

Once the retention period expires, we securely delete or anonymize the data to prevent re-identification.

Security Measures

We implement robust security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction:

Encryption: We use encryption for data at rest and in transit to safeguard sensitive information.
Secure Third-Party Processing: Engaging secure third-party service providers to process data on our behalf, ensuring they adhere to strict privacy and security standards.
Access Controls: Limiting access to personal data to authorized personnel only.

Children’s Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect or solicit personal information from minors. If we learn that a child has provided us with personal data, we will take steps to delete it and inform the child’s parents or legal guardians.

Your Rights

Depending on your location, you may have certain rights regarding your personal data:

Access: Request access to the personal data we hold about you.
Rectification: Ask for corrections to be made if your data is inaccurate or incomplete.
Erasure (Right to be Forgotten): Demand the deletion of your personal data, subject to certain exceptions.
Restriction: Limit our use of your data in specific circumstances.
Data Portability: Receive a copy of your data in a structured, commonly used format and transfer it elsewhere if you wish.
Objection: Object to the processing of your data for specific purposes, such as marketing or profiling.
Non-Discrimination: Assert your rights without negative impact on your use of our services.

To exercise these rights, please contact our Data Privacy Officer using the contact details provided below. We will respond to legitimate requests within a reasonable timeframe.

Changes to Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any significant changes will be posted on this page with an updated effective date. We encourage users to review this policy periodically for the latest information.

Contact Us

For any questions, comments, requests, or complaints regarding privacy or data protection, please contact us:

Email: contact@castle-rock-russian-speaking-therapy.denvermentalhealthcare.com
Mail: Castle Rock Russian Speaking Therapy, Privacy Team, [Physical Address]

We are committed to addressing your concerns and ensuring the secure handling of your personal data.