Privacy Policy

1. Introduction

Golden State Rehab ("Company," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.goldenstate-rehab.com (the "Website"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Website.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Effective Date" of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

2. Information We Collect

2.1 Information You Provide Voluntarily

We may collect personal information that you voluntarily provide to us when you:

• Fill out a contact, inquiry, or appointment request form on the Website.
• Subscribe to our newsletter or email communications.
• Participate in promotions, surveys, or other Website features.
• Send us communications, including emails or phone calls initiated through the Website.

The personal information we collect may include: your name, email address, phone number, mailing address, and any other information you choose to provide. We do not collect Protected Health Information (PHI) through the Website's standard forms. If you are a current or prospective patient, your health information is collected and handled under a separate HIPAA-compliant process.

2.2 Information Collected Automatically

When you visit the Website, certain information is collected automatically through cookies and similar tracking technologies, including:

• Log and usage data: IP address, browser type and version, operating system, referring URLs, pages viewed, and time spent on pages.
• Device data: information about the device you use to access the Website, including device type and identifiers.
• Location data: general geographic location derived from your IP address.
• Cookie data: session cookies, preference cookies, and analytics cookies as described in Section 7 below.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries, appointment requests, and provide customer service.
• To send you administrative information, including changes to our terms and policies.
• To send marketing and promotional communications, where you have opted in to receive them.
• To improve and optimize the Website and user experience through analytics.
• To protect against fraudulent, unauthorized, or illegal activity.
• To comply with applicable legal obligations, including those under California law and HIPAA.
• To enforce our Terms and Conditions and protect our legal rights.

4. Disclosure of Your Information

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

4.1 Service Providers

We may share your information with third-party vendors and service providers that perform services on our behalf, such as website hosting, data analytics, email delivery, and customer service. These service providers are contractually obligated to use your information only to provide services to us and may not use it for their own commercial purposes.

4.2 Business Transfers

If we undergo a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor entity as part of that transaction, subject to an equivalent or greater level of privacy protection.

4.3 Legal Obligations

We may disclose your information if required to do so by law, court order, subpoena, or other governmental authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of the Company; (c) prevent or investigate possible wrongdoing in connection with the Website; or (d) protect the personal safety of users or the public.

4.4 With Your Consent

We may disclose your personal information for any other purpose with your explicit consent.

5. HIPAA and Health Information

As a rehabilitation services provider, Golden State Rehab is subject to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") with respect to Protected Health Information ("PHI"). Please note the following:

• This Website is not designed or intended to collect, transmit, or process PHI.
• Do not submit PHI through any form, chat, or message function on this Website.
• Health information shared in the context of actual treatment services is governed separately by our HIPAA Notice of Privacy Practices, provided to patients at intake.
• For questions regarding your health information rights under HIPAA, please contact our Privacy Officer directly.

6. Your California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us using the information provided in Section 10. We will respond to verifiable consumer requests within 45 days as required by law. We may need to verify your identity before processing your request.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Website. Cookies are small data files placed on your device. We use the following types:

• Essential Cookies: Required for the Website to function properly. These cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with the Website (e.g., Google Analytics). Data collected is aggregated and anonymized.
• Preference Cookies: Used to remember your settings and preferences.

Most web browsers allow you to control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8. Data Security

We implement commercially reasonable technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, and destruction. These measures include SSL/TLS encryption for data in transit, access controls, and regular security assessments.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your data. If you become aware of any breach or unauthorized use of your information, please contact us immediately.

9. Data Retention

We retain personal information collected through the Website for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need personal information, we will securely delete or anonymize it.

10. Contact Us

11. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. When we do, we will revise the Effective Date at the top of this policy. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Website after any modifications to the Privacy Policy will constitute your acknowledgment of the modifications.

Last Updated: March 23, 2026