We’re hiring occupational therapists, OT assistants, and physical therapists
Yagel Home Health(915) 703-6380Yagel 2.0 Clinics(915) 224-2443
Yagel Therapy Services, PLLC
Menu

Legal

Privacy Policy

Not legal advice · Do not publish as-is

This Privacy Policy is a structural scaffold, not a finished document.

Every section below lists what the section has to cover and nothing more. There is no operative legal language on this page, and none of it has been reviewed by anyone qualified to review it.

This is attorney or reputable-generator work. Yagel Therapy Services is a healthcare provider in Texas. The wording here carries real regulatory weight — HIPAA, the Texas Data Privacy and Security Act, and COPPA can all touch it — and it should be written or reviewed by a professional before a single line goes public.

Until then this page is noindex and unlinked from search, so nothing here can be mistaken for a commitment the practice has made.

The outline below is what a privacy policy for this practice needs to address. Each item is a question for whoever drafts it — not an answer.

  1. 01Who this policy covers

    This section must cover

    • That it applies to this website only, and names the legal entity — Yagel Therapy Services, PLLC.
    • That it does not replace the practice’s HIPAA Notice of Privacy Practices.

  2. 02How this relates to HIPAANeeds specialist input

    This section must cover

    • The distinction between this policy and the HIPAA Notice of Privacy Practices, which is a separate document with separate legal force.
    • Whether information sent through the website contact form is treated as protected health information (PHI), and what happens to it.
    • A clear instruction to parents not to send medical details through the website form.
    • Where the Notice of Privacy Practices lives. It is currently a PDF on a Bluehost address rather than on yageltherapy.com — that should be a real page on her own domain.

  3. 03What we collect

    This section must cover

    • Contact form fields: name, email, phone, subject, preferred location, and a free-text message.
    • Careers form fields, including an uploaded résumé file.
    • Technical data: IP address, browser, and pages visited.
    • That the site uses cookie-free analytics and sets no advertising or tracking cookies.

  4. 04Why we collect it

    This section must cover

    • Answering inquiries, scheduling, and responding to job applications.
    • That a submitted form is stored and emailed to the practice.
    • That data is never sold, and the policy should say so plainly.

  5. 05Who else sees it

    This section must cover

    • Every processor in the chain: Cloudflare (hosting, D1 database, email routing), and the practice’s own email provider.
    • Whether a Business Associate Agreement exists with each, if any of them could touch PHI.
    • Any analytics or uptime provider.

  6. 06How long we keep it

    This section must cover

    • A retention period for form submissions and for résumés.
    • How a record is deleted, and by whom.

  7. 07How it is protected

    This section must cover

    • Encryption in transit, access controls, and who at the practice can read submissions.
    • What happens in the event of a breach, and the notification obligations that apply.

  8. 08Children’s privacyNeeds specialist input

    This section must cover

    • This is a pediatric practice, so the policy must address children directly.
    • COPPA applies to information collected *from* children under 13, not information a parent provides *about* their child. The policy should be explicit about which of those the site does.
    • That the site is intended for parents and caregivers, not for children to use directly.

  9. 09Your rights

    This section must cover

    • Rights under the Texas Data Privacy and Security Act — access, correction, deletion, and opting out of sale or targeted advertising.
    • How to exercise them, and how long the practice takes to respond.
    • How to appeal a refused request.

  10. 10Links to other sites

    This section must cover

    • That the practice is not responsible for the privacy practices of sites it links to.

  11. 11Changes to this policy

    This section must cover

    • A "last updated" date and how material changes are communicated.

  12. 12How to contact us

    This section must cover

    • A named contact, a postal address (3118 Montana Avenue, El Paso), a phone number, and an email address for privacy requests specifically.

Before this page goes live

  • — Replace every section above with drafted, reviewed language.
  • — Remove noindex from this page.
  • — Add a "last updated" date.
  • — Link it from the footer of every page.
  • — Decide, in writing, whether the contact form can receive PHI.