Privacy Policy

Divine Physical Therapy, LLC is a mobile, direct-pay physical therapy practice serving Stafford County, Fredericksburg, Quantico, and Spotsylvania, Virginia. Care is delivered in clients’ homes and other agreed locations rather than at a clinic address. This Privacy Policy explains how Divine Physical Therapy, LLC ("Divine Physical Therapy," "we," "us," or "our") collects, uses, discloses, and safeguards information obtained through divinephysicalhealth.com and related online services. Clinical records and protected health information ("PHI") created or maintained as part of physical therapy care are subject to separate privacy, recordkeeping, and other legal requirements that may apply to the practice.

​

Information we collect

Depending on how you interact with us, we may collect:

• Contact information, such as your name, telephone number, email address, and information you voluntarily submit through a contact or callback form.

• Scheduling and account information, such as appointment type, date and time, contact information, and information submitted through a scheduling, practice-management, payment, communication, or other third-party platform.

• Payment information. Payments may be processed by third-party payment processors. We generally do not receive or store your complete payment-card number.

• Technical and usage information, such as IP address, browser or device information, pages viewed, approximate location, cookies, and similar data generated when you use the website.

• Location and access information. Because care is delivered in your home or another agreed location, we collect the service address and related practical details you provide, such as parking, entry, building access, and household considerations relevant to conducting a safe visit.

• Health information you choose to provide. Please do not submit sensitive medical information through general website contact forms, ordinary email, or other channels not specifically designated for clinical communication.
   

How we may use information

We may use information as reasonably necessary to respond to inquiries; determine whether our services may be appropriate; schedule and manage appointments; plan travel and routing to your location; communicate about care or services; process payments; maintain business and clinical records; operate, secure, troubleshoot, and improve our website and systems; comply with professional, legal, regulatory, insurance, accounting, and record-retention obligations; prevent fraud or misuse; and protect the rights, safety, and property of our clients, the practice, and others.

​

Health information and clinical communications

A website inquiry does not create a provider-patient relationship. General website forms are not intended for detailed medical histories, urgent concerns, or emergency communications. Once you become a client, clinical information may be maintained or exchanged through systems selected by the practice for documentation, scheduling, communication, payment, telehealth, file storage, or other healthcare operations. Where applicable, Divine Physical Therapy will use vendors and safeguards consistent with its legal obligations, including business associate agreements when required by HIPAA.

​

No website, email system, electronic health record, cloud platform, payment processor, telecommunications network, or other electronic system can be guaranteed to be completely secure. Please use the communication method designated by the practice for sensitive clinical information.

​

Third-party platforms and service providers

Divine Physical Therapy relies on independent third-party companies to operate portions of its practice and website. These may include website hosting and forms, scheduling or practice-management software, electronic health records, payment processing, email or text communication, telehealth, cloud storage, electronic signatures, fax services, analytics, accounting, and other business-support technologies.

When you use a feature operated by a third party, information may be transmitted to, stored by, or processed through that provider according to the service arrangement, applicable law, and that provider's own systems, privacy practices, security measures, and terms. Third-party providers may change over time as the practice's technology and operational needs change. This policy therefore does not promise that any particular vendor will be used indefinitely.

​

Providers currently in use. As of the date of this policy, these include Jane App for scheduling and clinical documentation, Spruce for client communication, and Google Workspace for email, calendar, and file storage. This list is provided for transparency so that you can recognize these services when you encounter them. It is illustrative rather than exhaustive, describes the practice only as of the date shown above, and may change without an update to this page. Each of these companies operates independently, publishes its own privacy policy and terms, and is responsible for its own systems and security practices.

​

Some communication channels are inherently less secure than others regardless of which company provides them. Standard text messages, ordinary email, and fax leave the sending platform's control before reaching you, and their security along the full path cannot be guaranteed. Where a secure method is available, the practice will indicate which method to use for sensitive clinical information, and you may ask that a different method be used for communications with you.

​

We select and use third-party services in a manner we reasonably believe is appropriate for the information and function involved and will enter into required agreements when applicable. However, third-party platforms are independently operated, and Divine Physical Therapy does not control their infrastructure, software, employees, cybersecurity practices, service interruptions, or independent acts and omissions.

​

Security, cybersecurity incidents, and third-party breaches

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we maintain. Despite these measures, no method of electronic transmission or storage is completely secure, and we cannot warrant or guarantee absolute security.

​

To the fullest extent permitted by applicable law, Divine Physical Therapy is not responsible for a security incident, cyberattack, system failure, unauthorized access, or data breach caused solely by an independent third-party service provider and outside Divine Physical Therapy's reasonable control. This limitation does not waive or eliminate any responsibility that cannot legally be disclaimed, including duties Divine Physical Therapy may have to use reasonable safeguards, appropriately select and contract with vendors, respond to a known material violation, investigate an incident, mitigate harm, or provide legally required notifications.

​

If we learn of a privacy or security incident affecting information for which Divine Physical Therapy has legal notification or response obligations, we will evaluate and address the incident in accordance with applicable law and our contractual obligations.

​

When information may be disclosed

We do not sell personal information for money. We may disclose information when reasonably necessary to service providers acting on our behalf; healthcare providers or others involved in your care when authorized or legally permitted; professional advisers such as attorneys, accountants, insurers, or consultants; government agencies, regulators, courts, or law enforcement when required or permitted by law; or in connection with a business reorganization, sale, merger, or transfer, subject to applicable legal protections.

​

Cookies and analytics

The website may use cookies and similar technologies required for website functionality, security, preferences, and measurement of site performance. Analytics or other website tools may collect technical information about how visitors use the site. We do not intentionally use website analytics or advertising technologies to disclose PHI for targeted advertising. You may restrict cookies through your browser or available consent controls, although some website features may not function properly.

​

External websites and third-party content

Our website may contain links to websites, applications, resources, or services that we do not own or control. A link does not mean that Divine Physical Therapy controls or guarantees the privacy, security, accuracy, availability, or practices of the third party. Once you leave our website or interact directly with an independent service, that provider's terms and privacy practices may apply.

​

Data retention

Information is retained for as long as reasonably necessary for the purpose for which it was collected and as required by applicable healthcare, professional, tax, insurance, contractual, record-retention, and other legal obligations. Different categories of information may have different retention periods.

​

Privacy requests and Virginia residents

Depending on the law that applies to the information and to Divine Physical Therapy, you may have rights to request access, correction, deletion, or other action regarding certain personal information. Some information, including information maintained as part of a healthcare record or information that must be retained by law, may be subject to different rules or exceptions.

​

Virginia's Consumer Data Protection Act applies only to organizations meeting statutory requirements and contains exemptions for certain healthcare information and entities. Regardless of whether a particular statutory right applies, you may contact us with a privacy request and we will respond as required by applicable law.

​

Children's privacy

This general website is directed to adults and is not designed to solicit personal information directly from children under 13. A parent or legal guardian may contact the practice regarding services for a minor. Information collected in connection with treatment of a minor is handled according to applicable healthcare and privacy requirements.

​

Changes to this policy

We may update this Privacy Policy as our services, technology, vendors, or legal obligations change. The current version will be posted on this page with its revision date. Continued use of the website after an update is subject to the then-current policy.

​

Contact

Questions or privacy requests may be submitted to care@divinephysicalhealth.com or through the contact page. Please do not include detailed medical information in a general privacy inquiry.

​

This Privacy Policy describes information practices; it is not a promise that security incidents can never occur and does not create contractual rights beyond those provided by applicable law. Nothing in this policy limits any privacy, security, breach-notification, professional, or patient right that cannot lawfully be limited or waived.