Privacy Policy - Square One Behavioral Services Inc.

Effective date: July 23, 2026

Website: https://sq1behavioral.com/

Privacy contact: 561-568-9367

Square One Behavioral Services Inc. (“Square One,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit sq1behavioral.com, submit an inquiry or service request, apply for a position, communicate with us, or otherwise interact with our website and related online services (collectively, the “Site”).

Please read this Policy together with our HIPAA Notice of Privacy Practices, when applicable. This Site is not intended for emergencies, and online forms and email may not be monitored continuously. If you are experiencing an emergency, contact local emergency services.

Scope

This Policy applies to information collected through the Site and related digital communications. It does not replace Square One’s HIPAA Notice of Privacy Practices, which explains how we may use and disclose protected health information (“PHI”) and describes the rights that patients and their authorized representatives have under applicable health-privacy law.

If information collected through the Site becomes part of a patient’s medical or clinical record, or otherwise qualifies as PHI, our HIPAA Notice of Privacy Practices and applicable law govern that information. If this Policy conflicts with the HIPAA Notice of Privacy Practices regarding PHI, the HIPAA Notice of Privacy Practices controls.

Information We Collect

We collect information that you provide directly, information generated automatically when you use the Site, and information we may receive from authorized third parties.

Information You Provide

Contact and inquiry information. This may include your name, the name of a parent or legal guardian, email address, mailing address, city, state, ZIP code, telephone numbers, marital status where requested for intake, preferred method of contact, and the content of messages you send to us.

Child, patient, and service-request information. When you request services, we may collect a child’s or patient’s name, date of birth, age, gender, diagnosis information, assessments or neuropsychological evaluations, prescriptions or referrals, service needs, physician contact information, Individualized Education Program (IEP) documents, and other records you choose or are asked to provide.

Insurance and policy information. We may collect insurer names, policy and group numbers, coverage effective dates, policyholder information and date of birth, secondary-insurance information, and images of the front and back of insurance cards.

Identity and supporting documents. Where needed for intake, authorization, identity verification, or administrative purposes, the Site may request images of a driver’s license or other supporting documentation.

Employment-application information. If you apply for a position, we may collect your date of birth, position of interest, resume, qualifications, professional credentials, employment history, and other information contained in materials you submit.

Communications and preferences. We may retain records of emails, calls, form submissions, appointments, consent choices, referral sources, and requests to receive or stop receiving communications.

Information Collected Automatically

When you use the Site, we and our service providers may automatically collect technical and usage information, such as Internet Protocol (IP) address, browser and device type, operating system, referring website or advertisement, pages viewed, links clicked, date and time of access, approximate location derived from an IP address, cookie identifiers, and information used to measure calls, form submissions, and advertising performance.

Information From Other Sources

With appropriate authorization or as otherwise permitted by law, we may receive information from parents or legal guardians, healthcare providers, health plans and insurers, referral sources, schools, service partners, and other persons or organizations involved in a patient’s care, coverage, intake, or application process.

How We Use Information

We may use personal information to respond to inquiries; evaluate service requests; verify identity, guardianship, eligibility, benefits, and insurance coverage; coordinate evaluations, intake, referrals, scheduling, treatment, billing, payment, and related healthcare operations; communicate with patients, parents, guardians, providers, insurers, and authorized representatives; maintain patient, business, and employment records; consider employment applications; operate, secure, troubleshoot, and improve the Site; measure outreach and advertising effectiveness; prevent fraud or misuse; comply with legal, regulatory, contractual, and professional obligations; and protect the rights, safety, and property of Square One, our patients, families, workforce, and others.

We do not intentionally use diagnosis information, clinical records, insurance documents, IEPs, prescriptions, or other intake or treatment materials to create advertising audiences or to target advertisements.

HIPAA and Health Information

Square One is a healthcare provider. Some information submitted through the Site may be PHI when it is created, received, maintained, or transmitted by Square One in its role as a HIPAA covered entity or as otherwise provided by law. We use and disclose PHI only as described in our HIPAA Notice of Privacy Practices and as permitted or required by applicable law. This Website Privacy Policy does not expand or reduce rights or obligations under HIPAA.

A current copy of our HIPAA Notice of Privacy Practices should be available through the Site and may also be requested using the contact information at the end of this Policy.

How We Disclose Information

We may disclose personal information only as reasonably necessary for the purposes described in this Policy, as directed or authorized by you, or as permitted or required by law.

Service providers and business associates. We may provide information to vendors that support website hosting, form processing, secure document storage, communications, information technology, cybersecurity, analytics, advertising and call measurement, billing, payment, records management, or other business functions. Where required, we use business-associate agreements, confidentiality terms, or other appropriate safeguards.

Healthcare and coverage parties. With authorization or as otherwise permitted by law, we may disclose information to healthcare professionals, health plans, insurers, referral sources, schools, caregivers, and other parties involved in treatment, payment, care coordination, intake, or healthcare operations.

Legal, safety, and compliance disclosures. We may disclose information to comply with a law, court order, subpoena, audit, licensing or regulatory request, public-health obligation, or other lawful process; to investigate suspected fraud, abuse, security incidents, or unlawful activity; or to protect rights, safety, and property.

Business changes. If Square One is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be disclosed as permitted by law and subject to appropriate confidentiality and privacy protections.

Square One does not sell or rent PHI. We also do not sell personal information for monetary payment. We do not permit third parties to use information from intake or treatment records for their own targeted advertising.

Cookies, Analytics, Advertising, and Call Measurement

The Site uses or may use cookies, pixels, tags, scripts, and similar technologies to keep the Site functioning, remember preferences, understand traffic and Site performance, identify technical problems, measure advertising results, and determine whether an advertisement led to a call or form submission. These technologies may collect the technical and usage information described above.

Some analytics, advertising, social-media, or call-measurement providers may set their own cookies or receive limited device and interaction data. Their handling of information is also governed by their own privacy policies. You can limit cookies through your browser settings, device settings, or available industry opt-out tools. Disabling cookies may affect some Site features. We process legally recognized privacy preference signals when required by applicable law.

Data Retention

We retain personal information for as long as reasonably necessary for the purpose for which it was collected and to meet clinical, medical-record, insurance, billing, employment, legal, regulatory, contractual, security, and dispute-resolution requirements. Retention periods vary based on the type of information and applicable obligations. We may retain backup or archived copies for a limited period or longer when required by law.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction. Safeguards may include access controls, workforce training, secure systems, vendor oversight, and incident-response procedures, as appropriate to the information and risk. No website, electronic transmission, or storage system can be guaranteed to be completely secure. Please submit only the information requested and contact us if you believe information has been submitted or accessed improperly.

Children’s Privacy

The Site is intended for use by adults, including parents and legal guardians seeking services for a child. It is not intended for children under 13 to submit personal information directly. Information about a child should be submitted by the child’s parent, legal guardian, or another authorized adult. If we learn that a child under 13 submitted personal information directly without appropriate authorization, we will take reasonable steps to delete it, subject to legal and record-retention obligations.

Your Choices and Rights

You may contact us to ask about, correct, or update personal information you submitted through the Site, or to request deletion where applicable. We may need to verify your identity or authority before acting on a request. Certain information may not be deleted when it must be retained for treatment, medical-record, insurance, billing, employment, legal, security, or other legitimate purposes.

You may opt out of promotional emails by using the unsubscribe instructions in the message or by contacting us. You may still receive non-promotional communications concerning inquiries, appointments, intake, services, billing, safety, or our relationship with you.

Patients and authorized representatives may have additional rights regarding PHI, including rights to access, amend, restrict, or obtain an accounting of certain disclosures, as explained in our HIPAA Notice of Privacy Practices. Depending on where you live, additional privacy rights may apply. We will not unlawfully discriminate against you for exercising an applicable privacy right.

Third-Party Websites and Services

The Site may link to social-media platforms, insurers, professional resources, review websites, or other third-party services. We do not control and are not responsible for the privacy or security practices of third parties. Review their privacy policies before providing information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, services, or legal obligations. We will post the updated version on the Site and revise the effective date above. Material changes may be communicated through the Site or by another appropriate method.

Questions, concerns, privacy requests, or requests for our HIPAA Notice of Privacy Practices may be directed to:

Square One Behavioral Services Inc.

Attn: Privacy Contact

420 S State Road 7, Suite 174

Royal Palm Beach, FL 33414

Phone: 561-568-9367