Privacy Policy

Effective Date: May 4, 2026

Overtime Physical Therapy and Rehabilitation (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal and health information.

This Policy applies to information we collect on this Website or in emails and other electronic messages between you and this Website, and information gathered when you interact with our advertising on third-party websites if such advertisements include links to this Policy.

This Policy does not apply to information collected by us offline or through any other means, including on any other website operated by the Company or any third party, or information collected by any third party through any application or content (including advertising) that may link to or be accessible from the Website (for further information, see below, “Third-party Services”).

Please read this Policy carefully to understand our practices regarding your information and how we will treat it. If you do not agree with our policies and practices, then please do not use our Website. By using our Website, you agree to the terms of this Policy. This Policy may change from time to time (see below, “Changes to this Policy”). Your continued use of our Website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

1. Information We Collect

A. Personal Information

When you use our website or book an appointment, we may collect:

Name, phone number, email
Address and date of birth
Insurance and billing information

Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

B. Health Information (PHI)

Through our SPRY EMR system, we may collect:

Medical history
Physical therapy evaluations
Treatment notes and progress reports

This information is considered Protected Health Information (PHI) under HIPAA.

C. Online Booking & Forms

When you:

Request an appointment
Fill out intake forms
Submit contact forms

Your information is securely processed through SPRY or integrated systems.

D. Website Usage Data

We may automatically collect:

IP address
Browser type
Pages visited
Interaction data (via Wix analytics or similar tools)

2. How We Use Your Information

We use your information to:

Schedule and manage appointments
Provide physical therapy services
Document care in SPRY EMR
Process payments and insurance claims
Communicate with you (appointment reminders, updates)
Improve website performance

3. HIPAA Compliance

As a healthcare provider, we comply with HIPAA regulations.

Your PHI:

Is used only for treatment, payment, and healthcare operations
Is stored securely within SPRY EMR or compliant systems
Is not shared without your authorization unless required by law

Our use and disclosure of your Protected Health Information is further described in our Notice of Privacy Practices, which is provided to all patients during intake. You may request a copy at any time by contacting us.

4. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

Request access to your personal data
Request deletion of your data
Request correction of inaccurate data
Limit use of sensitive personal information

Please note that Protected Health Information (PHI) governed by HIPAA is subject to different retention requirements and may be exempt from certain CCPA/CPRA requests, such as the right to deletion.

To exercise your rights:
Email: hello@overtimetherapy.com

We do not sell your personal information.

5. Cookies & Tracking (Wix)

We use cookies to:

Improve website functionality
Analyze traffic (Wix Analytics or similar)
Enhance user experience

You can disable cookies through your browser settings.

Our website currently does not respond to 'Do Not Track' (DNT) signals as there is no uniform standard for such signals.

6. Third-Party Services

We may use trusted third-party providers, including:

SPRY EMR (scheduling, documentation, intake)
Payment processors
Email/SMS reminder systems

These vendors are required to maintain appropriate data security and, where applicable, HIPAA compliance.

7. Data Security

We implement reasonable safeguards, including:

Secure hosting via Wix
Encrypted systems where applicable
Access controls within SPRY EMR

However, no system is completely secure.

We encourage you to use secure browsers and private devices when accessing your patient portal or submitting intake forms to further protect your privacy.

8. Online Forms Disclaimer

Submitting a form or booking request:

Does not establish a provider-patient relationship until confirmed
Should not include urgent or emergency medical concerns

If this is a medical emergency, call 911.

9. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here with a revised effective date.

10. Contact Us

We value your opinions and welcome any feedback. To contact us about this Policy or your Personal Information, please contact us by email at hello@overtimetherapy.com, or call us at (626) 888-2545.