Privacy Policy

RealPath ABA ("we," "our," or "us"), founded and led by Brittany Marshall, MBA, BS, is committed to protecting the privacy and confidentiality of all individuals who interact with our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit realpathaba.com or contact us to inquire about or receive ABA therapy services.

By using this website, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the site.

Information You Provide Directly

• Full name, email address, and phone number submitted through consultation or contact forms
• Information about your child, including age, diagnosis, and current services
• Insurance information provided during the intake process
• Messages, questions, or referral details submitted through our forms
• Workshop and support group registration details
• Membership account information if you create an account on our site

Information Collected Automatically

• Browser type, operating system, and device information
• IP address and general geographic location
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 7)

• To respond to consultation requests, inquiries, and referrals
• To schedule and coordinate ABA therapy services
• To verify insurance coverage and process authorizations
• To communicate updates about your child's care and treatment progress
• To send confirmations and reminders for workshops, support groups, and appointments
• To manage membership accounts and deliver member benefits
• To improve our website, services, and communications
• To comply with legal and regulatory obligations, including HIPAA

As a behavioral health services provider, RealPath ABA is subject to the Health Insurance Portability and Accountability Act (HIPAA). Any Protected Health Information (PHI) — including information about a child's diagnosis, treatment, or health records — is handled in strict accordance with HIPAA Privacy and Security Rules.

PHI is used only for treatment, payment, and healthcare operations as permitted by HIPAA. We maintain administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of all electronic PHI. We will not disclose PHI to third parties without a valid written authorization, except as required or permitted by law.

Clients and guardians have the right to access, amend, and request restrictions on their PHI. To exercise these rights, please contact us using the information in Section 10 below.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share information only in the following limited circumstances:

• Service Providers: Trusted vendors who assist with website hosting, email delivery, scheduling, or payment processing, under confidentiality agreements
• Healthcare Coordination: With other treating providers, schools, or specialists involved in your child's care, with appropriate authorization
• Insurance & Billing: With insurance carriers and billing services as necessary to process claims and authorizations
• Legal Requirements: When required by law, court order, or government authority, or to protect the safety of any individual
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected individuals

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls, and secure data storage practices. While we take reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to use caution when sharing sensitive information online and to contact us directly by phone for highly sensitive matters.

Our website may use cookies — small text files stored on your device — to improve your browsing experience, remember your preferences, and analyze site traffic. We may use:

• Essential cookies: Required for basic site functionality
• Analytics cookies: To understand how visitors use our site (e.g., page views, session duration)
• Preference cookies: To remember your settings and choices

You can control or disable cookies through your browser settings. Disabling cookies may affect certain features of the website.

Our website is directed to parents, guardians, and professionals — not to children. We do not knowingly collect personal information directly from children under the age of 13. All information about minor clients is collected from and managed by their parent or legal guardian. If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately and we will promptly delete it.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to legal retention requirements
• Opt out of non-essential communications at any time by contacting us or using unsubscribe links
• Request a copy of your data in a portable format
• File a complaint with a relevant data protection authority if you believe your rights have been violated

To exercise any of these rights, please contact us using the information in Section 10.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us: