Consumer Health Data Privacy Notice

1. What we treat as consumer health data

We treat as consumer health data the information you give us that relates to seeking behavioral-health care, including:

• the fact that you are seeking, researching, or requesting ABA therapy for yourself or a family member;
• whether the child you are seeking care for has an autism (ASD) diagnosis, and their general age range;
• your insurance or payment situation as it relates to ABA care;
• your stated care preferences, reasons for seeking care, and general availability; and
• your location (state, city, or ZIP code) to the extent it is tied to seeking care.

2. How we collect it

We collect this data only when you choose to provide it through our family intake forms or our guided matching quizzes. We do not collect it passively, and the answers you enter into our educational "Does my child need ABA?" screener stay in your browser and are not attached to any identified request.

3. How we use it

We use consumer health data to match you with potentially suitable ABA providers, to communicate with you about and follow up on your request, and to plan and improve our directory. We use it for these purposes only, and only as described in this Notice and our Privacy Policy.

4. Who we share it with, and why

• ABA providers you ask to hear from. We share your request with the specific provider(s) it identifies, so they can respond to you. This sharing is at your direction and to provide the service you requested.
• Service providers processing data on our behalf under contract — currently Amazon Web Services (hosting and database) and Resend (delivery of the email that routes your request). These vendors may use the data only to provide services to us.

We do not sell consumer health data. We do not share it with advertising platforms, and we do not use it to target advertising to you. We do not use it to create advertising audiences, lookalike audiences, or suppression lists.

5. Sources and retention

We collect this data directly from you. We keep it for 24 months after your last interaction with us, then delete or de-identify it, unless a longer period is required by law.

6. Your rights

You have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data;
• Obtain a list of all third parties and affiliates with whom we have shared your consumer health data, along with an active contact for each;
• Delete your consumer health data; and
• Withdraw your consent to our collection and sharing of your consumer health data.

To exercise any of these rights, email [email protected]. We will verify and respond within the timeframe required by law and will not discriminate against you for exercising a right. If we deny a request, you may appeal by replying with "Appeal" in the subject line.

7. Consent and withdrawal

We ask for your consent before collecting consumer health data — the intake forms state exactly what is collected and shared before you submit — and we share it only to fulfill your request. Consent to use the matching service is separate from any consent to receive marketing. You may withdraw consent at any time by emailing [email protected]; withdrawal does not affect processing that already occurred.

8. Security

We protect consumer health data with encryption in transit, access controls on our hosting and database providers, and least-privilege operator access. No system is perfectly secure, and we cannot guarantee absolute security.

9. Contact us

ABA Care Network™

Email: [email protected] or [email protected]

Mailing address available on written request.