Privacy Policy

Last updated: July 2026

Budding Futures ABA Therapy ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. As a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA), Colorado privacy laws, and all applicable federal regulations.

Information We Collect

We may collect the following types of information:

• Contact information: Names, phone numbers, email addresses, and mailing addresses of parents, guardians, and family members
• Insurance information: Insurance plan details, member IDs, group numbers, and Medicaid information
• Clinical records: Assessment results, treatment plans, progress notes, behavior data, and session documentation
• Child information: Name, date of birth, diagnosis, medical history, and school information
• Website usage data: IP address, browser type, pages visited, and referring URLs collected through cookies, analytics tools, and advertising technologies such as the Meta Pixel

How We Use Your Information

We use the information we collect to:

• Provide ABA therapy services and coordinate your child's care
• Process insurance claims and verify benefits
• Communicate with you about appointments, treatment progress, and account matters
• Respond to consultation requests submitted through our website
• Comply with legal obligations, including mandatory reporting requirements
• Improve our website and services

How We Protect Your Information

We take the security of your personal and health information seriously. Our safeguards include:

• Encrypted electronic health record systems that meet HIPAA security standards
• Role-based access controls so only authorized staff can view protected health information
• Regular HIPAA compliance training for all employees and contractors
• Secure, encrypted communication channels for sharing sensitive information
• Physical safeguards for any paper records maintained at our office
• Business Associate Agreements with all third-party vendors who handle protected health information

When We Share Your Information

We never sell, rent, or trade your health information, your child's clinical records, or anything you tell us on an intake or consultation form. We may share that information only in the following circumstances:

• Insurance companies: To process claims and obtain authorizations for treatment
• Referring physicians and healthcare providers: With your written consent, to coordinate care
• Legal requirements: When required by law, including mandatory abuse and neglect reporting
• Emergency situations: When necessary to prevent serious harm to your child or others

We will always obtain your written consent before sharing clinical information with any party not listed above.

Separately from the above, our website uses analytics and advertising cookies that share limited browsing data with third parties. That is described in the next section, and it never includes your child's information or the contents of a form you submit.

Website Analytics and Advertising

We advertise our services on Meta's platforms (Facebook and Instagram). To measure whether those ads work, our website uses the Meta Pixel. We also use Google Analytics to understand how visitors use our site. These tools place cookies in your browser and send limited technical information to Meta and Google, including your IP address, the pages you viewed on our site, and whether you reached our thank-you page after submitting a consultation request.

This means some visitors will later see Budding Futures ads on Facebook or Instagram. Under Colorado law, this is considered targeted advertising, and some privacy laws may treat the sharing of this browsing data as a sale of personal data. We want to be direct about that rather than bury it.

Here is what these advertising tools do not receive:

• Your child's name, date of birth, diagnosis, or any clinical information
• Your insurance details or Medicaid status
• Your name, email address, or phone number
• Anything you type into a form on our website

We have deliberately disabled the Meta Pixel feature that would otherwise collect contact details from our forms. Meta and Google are told that a consultation request happened. They are not told who made it or what it was about.

How to Opt Out of Targeted Advertising

You have the right to opt out, and you have two ways to do it:

• Browser signal: We honor the Global Privacy Control (GPC). If you turn GPC on in your browser or install a browser extension that sends it, we will treat that as an opt-out automatically and you do not need to contact us.
• Ask us directly: Email info@buddingfuturesaba.com with the subject line "Opt out of targeted advertising," and we will honor it.

Opting out does not affect your ability to contact us, request a consultation, or receive services. It only stops the advertising cookies.

SMS Communications

When you opt in to SMS communications from Budding Futures LLC, we may use your name, phone number, email address, and other contact details you provide to send appointment reminders, assessment scheduling messages, intake follow-ups, service updates, and customer support communications. Message frequency may vary. Message and data rates may apply. Reply STOP to opt out. Reply HELP for more information.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All information sharing categories above exclude text messaging originator opt-in data and consent. SMS opt-in data and consent will not be shared with any third parties.

Children's Privacy (COPPA Compliance)

We are committed to protecting children's privacy. Our website is not directed at children under 13, and we do not knowingly collect personal information from children through our website. All clinical information about the children we serve is collected directly from parents or guardians and is protected under HIPAA.

If you believe we have inadvertently collected information from a child under 13 through our website, please contact us immediately so we can delete it.

Your Rights Under Colorado Law

As a Colorado resident, you have the following rights regarding your personal data under the Colorado Privacy Act:

• Right to access: You may request a copy of the personal data we hold about you
• Right to correction: You may request that we correct inaccurate personal data
• Right to deletion: You may request deletion of your personal data, subject to legal and clinical record retention requirements
• Right to data portability: You may request your data in a portable, readily usable format
• Right to opt out: You may opt out of targeted advertising and of the sale of personal data. Our website does use advertising cookies, so this right is a real one. See How to Opt Out of Targeted Advertising above, or email us. We also honor the Global Privacy Control browser signal.

To exercise any of these rights, contact us using the information below. We will respond to your request within 45 days.

Your HIPAA Rights

As a patient or parent/guardian of a patient, you also have rights under HIPAA, including:

• The right to receive a Notice of Privacy Practices
• The right to request restrictions on certain uses and disclosures of your health information
• The right to access and obtain copies of your health records
• The right to request amendments to your health records
• The right to receive an accounting of disclosures of your health information
• The right to file a complaint if you believe your privacy rights have been violated

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: