Legal

Privacy Policy

How On Target ABA LLC collects, uses, shares, and safeguards the information you provide on this Website.

Last updated: Feb 18, 2026 On Target ABA LLC — Ohio, United States

What information we collect and store

We collect and store any and all information that you enter on this Website. We collect and store the following information about you:

Identifying information — Name

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Processing or fulfilling orders or transactions
  • Processing payments
  • Providing customer service
  • Resolving disputes
  • Verifying customer information

Identifying information — Postal / Shipping address

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Processing or fulfilling orders or transactions
  • Processing payments
  • Providing customer service
  • Verifying customer information

Identifying information — Billing address

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Processing or fulfilling orders or transactions
  • Processing payments
  • Providing customer service
  • Verifying customer information

Identifying information — Phone number

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Processing or fulfilling orders or transactions
  • Processing payments
  • Providing customer service
  • Verifying customer information

Identifying information — IP address

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Processing or fulfilling orders or transactions
  • Processing payments
  • Providing customer service
  • Verifying customer information

Identifying information — Email address

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Processing or fulfilling orders or transactions
  • Processing payments
  • Providing customer service
  • Verifying customer information

Identifying information — Device identifier

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Participation in surveys and contests
  • Performing services
  • Providing customer service
  • Providing financing
  • Resolving disputes
  • Verifying customer information

Internet or other electronic activity — Information regarding your interaction with our website or application

How we use this information

  • Analytics
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Providing customer service
  • Verifying customer information

With whom we share your personal information

We share the following personal information with the following categories of third parties:

Name

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Email service providers
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors

Postal / Shipping address

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors

Billing address

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors

Phone number

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors

IP address

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors

Email address

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors

Device identifier

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Email service providers
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors
  • Social networks

Information regarding your interaction with our website or application

Categories of third parties

  • Customer management systems
  • Data analytics providers
  • Email marketing vendors
  • Financial transactions processors
  • Fraud prevention services vendors
  • Hosting providers
  • Website or application development and design vendors

Cookies & local storage

A cookie is a small piece of data sent from a website and stored on your device by your browser. This Website sets cookies. Please visit our Cookie Policy to learn more about what cookies we set, why we set them, and how to change your cookie settings.

We also use your browser's localStorage to persist your responses in our intake widget (under the ota_leadbot_v1 key) so we don't re-ask the same questions on a return visit. This data is stored locally on your device and is not transmitted to our servers unless you submit a form. You can clear it at any time through your browser's site-data settings.

Children's privacy

This Website is intended for use by a general audience and does not offer services to children. Should a child whom we know to be under 18 send personal information to us, we will use that information only to respond to that child to inform them that they cannot use this Website.

Analytics programs

This Website uses Google Analytics to collect information about you and your behaviors. If you would like to opt-out of Google Analytics, please visit https://tools.google.com/dlpage/gaoptout/. You can also opt out of cookies by using our cookie consent banner.

Third-party websites

This Website may contain hyperlinks to websites operated by parties other than us. We provide such hyperlinks for your reference only. We do not control such websites and are not responsible for their contents or the privacy or other practices of such websites. It is up to you to read and fully understand their Privacy Policies. Our inclusion of hyperlinks to such websites does not imply any endorsement of the material on such websites or any association with their operators.

Do Not Track

Do Not Track ("DNT") is a preference you can set on your browser to inform websites that you do not want to be tracked. We do not support DNT. You can either enable or disable Do Not Track by visiting the Preferences or Settings page of your browser.

SMS Communications

If you provide your phone number and opt in to receive text messages from On Target ABA, we may send you appointment confirmations, reminders, and service-related notifications. Message frequency varies. Message and data rates may apply.

You may opt out of receiving SMS messages at any time by replying STOP. For assistance, reply HELP or contact us directly.

SMS consent is not shared with third parties or affiliates for marketing purposes.

Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services.

Mobile Information

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

State privacy rights — Utah & Ohio

Because On Target ABA operates clinics in Utah and Ohio, the privacy rights described in this section may apply to you depending on your state of residence. These rights are in addition to (not in place of) any rights you may have under federal law, including HIPAA for information collected in the course of treatment.

Utah residents

Utah Consumer Privacy Act (UCPA)

Under the Utah Consumer Privacy Act (sometimes referred to as UTDAL), Utah residents may have the right to:

  • Confirm whether we process your personal data and access that data.
  • Receive a portable copy of your personal data.
  • Delete personal data you provided to us.
  • Opt out of the sale of personal data and of targeted advertising.
Ohio residents

Ohio Personal Privacy Act (OPPA)

Pending and forthcoming Ohio legislation (including the Ohio Personal Privacy Act, OPPA) is expected to give Ohio residents rights similar to those listed for Utah. Where OPPA or a successor statute applies, Ohio residents may have the right to:

  • Know what personal information we collect about you.
  • Access, correct, or delete that information.
  • Opt out of the sale of personal data and of targeted advertising.
  • Receive notice of any material changes to how that data is used.

How to submit a request

To exercise any of the rights above, please email [email protected] with the subject line "State Privacy Request" and tell us (a) your state of residence, (b) the right(s) you want to exercise, and (c) enough information for us to verify your identity. You may also call us at (888) 989-5011.

We will respond within forty-five (45) days of receipt and may extend that period by another forty-five (45) days when reasonably necessary. We will not charge a fee for the first request you make in any twelve-month period. If we deny a request, you have the right to appeal that decision by replying to our denial within sixty (60) days.

HIPAA exemption

Most state privacy statutes, including the UCPA and OPPA, exclude information that is governed by the Health Insurance Portability and Accountability Act (HIPAA). Protected Health Information ("PHI") collected in connection with clinical services, billing, or care coordination is handled under our HIPAA Notice of Privacy Practices and is not subject to the request mechanisms described above. If your request relates to PHI, please contact our Privacy Officer at [email protected].

Data processors we use

In running this website and our practice, we engage a small number of service providers ("data processors") that handle limited categories of information on our behalf. We act as the controller for the data described in this policy; each provider below acts as a processor unless noted otherwise. Where any provider handles Protected Health Information (PHI), we maintain a HIPAA-compliant Business Associate Agreement (BAA) with that provider.

Provider Role Data & purpose Location
Cloudflare, Inc. Processor Website hosting (Cloudflare Pages), CDN, DDoS protection. Receives request metadata (IP address, user agent) and serves static site content. SOC 2 Type II, ISO 27001. USA (global edge)
Jotform Inc. Processor Embedded intake, contact, and evaluation request forms. Receives form submissions including name, email, phone, and any information you provide. HIPAA-compliant tier with a BAA in place for forms that may receive PHI. USA
Google LLC — Google Analytics Processor Aggregate web analytics. Receives pseudonymous identifiers (cookies), page URLs, IP-truncated location. We do not send PHI to Analytics. USA
Google LLC — Google Tag Manager Processor Tag and pixel orchestration for our marketing tooling. USA
Meta Platforms, Inc. — Facebook Pixel Processor / Joint controller for ad attribution Conversion attribution for our paid social campaigns. Receives pseudonymous event signals; no PHI is sent. USA
Hotjar Ltd. Processor Anonymized session recording and heatmaps for usability research. Form fields and PHI-bearing inputs are suppressed. Malta (EU)
GitHub, Inc. Processor Source control and content delivery pipeline. Stores website source code and content edits; does not receive end-user form submissions. USA
LeadTrap (chat widget) Processor Floating chat / intake assistant. Receives any messages you choose to send through the chat widget. USA

This list is reviewed periodically and updated when we add or remove a vendor. If you need confirmation of a specific provider's current security certifications or a copy of an executed BAA covering your data, email [email protected].

Changes to Privacy Policy

We reserve the right to amend this Privacy Policy at any time. We will notify you of any changes to this Privacy Policy by posting the updated Privacy Policy to this website.

To view our Terms of Service page, please visit our Terms of Service.

Questions & Contact

If you have any questions about this Privacy Policy, please contact us at [email protected].

Email
[email protected]
General Phone
1-888-989-5011
Locations
  • Cleveland, OH · (216) 343-1198
    767 Beta Dr, Suite C, Mayfield, OH 44143
  • Columbus, OH · (614) 681-1030
    2760 Airport Dr, Suite 110, Columbus, OH 43219
    130 E Wilson Bridge Rd, Suite 200, Worthington, OH 43085
  • Salt Lake City, UT · (385) 550-3500
    5444 South Green St, Murray, UT 84123