What information we collect and store
We collect and store any and all information that you enter on this Website. We collect and store the following information about you:
Identifying information — Name
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Performing services
- Processing or fulfilling orders or transactions
- Processing payments
- Providing customer service
- Resolving disputes
- Verifying customer information
Identifying information — Postal / Shipping address
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Performing services
- Processing or fulfilling orders or transactions
- Processing payments
- Providing customer service
- Verifying customer information
Identifying information — Billing address
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Performing services
- Processing or fulfilling orders or transactions
- Processing payments
- Providing customer service
- Verifying customer information
Identifying information — Phone number
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Performing services
- Processing or fulfilling orders or transactions
- Processing payments
- Providing customer service
- Verifying customer information
Identifying information — IP address
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Performing services
- Processing or fulfilling orders or transactions
- Processing payments
- Providing customer service
- Verifying customer information
Identifying information — Email address
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Performing services
- Processing or fulfilling orders or transactions
- Processing payments
- Providing customer service
- Verifying customer information
Identifying information — Device identifier
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Participation in surveys and contests
- Performing services
- Providing customer service
- Providing financing
- Resolving disputes
- Verifying customer information
Internet or other electronic activity — Information regarding your interaction with our website or application
How we use this information
- Analytics
- Enforcing our Terms of Service
- Marketing and advertising
- Performing services
- Providing customer service
- Verifying customer information
Children's privacy
This Website is intended for use by a general audience and does not offer services to children. Should a child whom we know to be under 18 send personal information to us, we will use that information only to respond to that child to inform them that they cannot use this Website.
Analytics programs
This Website uses Google Analytics to collect information about you and your behaviors. If you would like to opt-out of Google Analytics, please visit https://tools.google.com/dlpage/gaoptout/. You can also opt out of cookies by using our cookie consent banner.
Third-party websites
This Website may contain hyperlinks to websites operated by parties other than us. We provide such hyperlinks for your reference only. We do not control such websites and are not responsible for their contents or the privacy or other practices of such websites. It is up to you to read and fully understand their Privacy Policies. Our inclusion of hyperlinks to such websites does not imply any endorsement of the material on such websites or any association with their operators.
Do Not Track
Do Not Track ("DNT") is a preference you can set on your browser to inform websites that you do not want to be tracked. We do not support DNT. You can either enable or disable Do Not Track by visiting the Preferences or Settings page of your browser.
SMS Communications
If you provide your phone number and opt in to receive text messages from On Target ABA, we may send you appointment confirmations, reminders, and service-related notifications. Message frequency varies. Message and data rates may apply.
You may opt out of receiving SMS messages at any time by replying STOP. For assistance, reply HELP or contact us directly.
SMS consent is not shared with third parties or affiliates for marketing purposes.
Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services.
Mobile Information
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
State privacy rights — Utah & Ohio
Because On Target ABA operates clinics in Utah and Ohio, the privacy rights described in this section may apply to you depending on your state of residence. These rights are in addition to (not in place of) any rights you may have under federal law, including HIPAA for information collected in the course of treatment.
Utah Consumer Privacy Act (UCPA)
Under the Utah Consumer Privacy Act (sometimes referred to as UTDAL), Utah residents may have the right to:
- Confirm whether we process your personal data and access that data.
- Receive a portable copy of your personal data.
- Delete personal data you provided to us.
- Opt out of the sale of personal data and of targeted advertising.
Ohio Personal Privacy Act (OPPA)
Pending and forthcoming Ohio legislation (including the Ohio Personal Privacy Act, OPPA) is expected to give Ohio residents rights similar to those listed for Utah. Where OPPA or a successor statute applies, Ohio residents may have the right to:
- Know what personal information we collect about you.
- Access, correct, or delete that information.
- Opt out of the sale of personal data and of targeted advertising.
- Receive notice of any material changes to how that data is used.
How to submit a request
To exercise any of the rights above, please email [email protected] with the subject line "State Privacy Request" and tell us (a) your state of residence, (b) the right(s) you want to exercise, and (c) enough information for us to verify your identity. You may also call us at (888) 989-5011.
We will respond within forty-five (45) days of receipt and may extend that period by another forty-five (45) days when reasonably necessary. We will not charge a fee for the first request you make in any twelve-month period. If we deny a request, you have the right to appeal that decision by replying to our denial within sixty (60) days.
HIPAA exemption
Most state privacy statutes, including the UCPA and OPPA, exclude information that is governed by the Health Insurance Portability and Accountability Act (HIPAA). Protected Health Information ("PHI") collected in connection with clinical services, billing, or care coordination is handled under our HIPAA Notice of Privacy Practices and is not subject to the request mechanisms described above. If your request relates to PHI, please contact our Privacy Officer at [email protected].
Data processors we use
In running this website and our practice, we engage a small number of service providers ("data processors") that handle limited categories of information on our behalf. We act as the controller for the data described in this policy; each provider below acts as a processor unless noted otherwise. Where any provider handles Protected Health Information (PHI), we maintain a HIPAA-compliant Business Associate Agreement (BAA) with that provider.
| Provider | Role | Data & purpose | Location |
|---|---|---|---|
| Cloudflare, Inc. | Processor | Website hosting (Cloudflare Pages), CDN, DDoS protection. Receives request metadata (IP address, user agent) and serves static site content. SOC 2 Type II, ISO 27001. | USA (global edge) |
| Jotform Inc. | Processor | Embedded intake, contact, and evaluation request forms. Receives form submissions including name, email, phone, and any information you provide. HIPAA-compliant tier with a BAA in place for forms that may receive PHI. | USA |
| Google LLC — Google Analytics | Processor | Aggregate web analytics. Receives pseudonymous identifiers (cookies), page URLs, IP-truncated location. We do not send PHI to Analytics. | USA |
| Google LLC — Google Tag Manager | Processor | Tag and pixel orchestration for our marketing tooling. | USA |
| Meta Platforms, Inc. — Facebook Pixel | Processor / Joint controller for ad attribution | Conversion attribution for our paid social campaigns. Receives pseudonymous event signals; no PHI is sent. | USA |
| Hotjar Ltd. | Processor | Anonymized session recording and heatmaps for usability research. Form fields and PHI-bearing inputs are suppressed. | Malta (EU) |
| GitHub, Inc. | Processor | Source control and content delivery pipeline. Stores website source code and content edits; does not receive end-user form submissions. | USA |
| LeadTrap (chat widget) | Processor | Floating chat / intake assistant. Receives any messages you choose to send through the chat widget. | USA |
This list is reviewed periodically and updated when we add or remove a vendor. If you need confirmation of a specific provider's current security certifications or a copy of an executed BAA covering your data, email [email protected].
Changes to Privacy Policy
We reserve the right to amend this Privacy Policy at any time. We will notify you of any changes to this Privacy Policy by posting the updated Privacy Policy to this website.
To view our Terms of Service page, please visit our Terms of Service.
Questions & Contact
If you have any questions about this Privacy Policy, please contact us at [email protected].
- Cleveland, OH · (216) 343-1198
767 Beta Dr, Suite C, Mayfield, OH 44143 - Columbus, OH · (614) 681-1030
2760 Airport Dr, Suite 110, Columbus, OH 43219
130 E Wilson Bridge Rd, Suite 200, Worthington, OH 43085 - Salt Lake City, UT · (385) 550-3500
5444 South Green St, Murray, UT 84123