California Consumer Privacy Act (CCPA) Privacy Notice
Effective Date: February 8, 2026
Last Updated: February 8, 2026
Introduction
This California Consumer Privacy Act (CCPA) Privacy Notice supplements our Privacy Policy and applies solely to California residents. This Notice describes how Movement Cures collects, uses, discloses, and sells (or shares) personal information of California consumers, and the rights California residents have regarding their personal information.
Movement Cures
6729 Washington Ave
Whittier, CA 90601
Email: support@movementcures.com
Personal Information We Collect
Under the CCPA, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
We have collected the following categories of personal information from consumers within the last twelve (12) months:
IMPORTANT DISTINCTION: Online vs. In-Office Collection
Website Collection (Webflow Forms):Our website forms collect ONLY basic contact information for appointment scheduling:
- Name
- Email address
- Phone number
- Service/program interest category (general categories like "Movement Literacy," "Sports Performance," etc.)
- Optional notes you choose to provide
We do NOT collect protected health information, medical history, symptoms, health conditions, or any sensitive personal information through our website.
In-Office Collection (Paper Intake Forms):All protected health information and medical data is collected exclusively on paper intake forms when you visit our facility for the first time. This includes medical history, health conditions, insurance information, Social Security numbers, and other sensitive information.
Category A: Identifiers
Examples: Name, email address, phone number, mailing address, Social Security number, driver's license number, date of birth
Sources:
- Online (website forms): Name, email, phone only
- In-office (paper intake forms): All other identifiers including SSN, driver's license, date of birth, full address
Business Purpose:
- Online: To respond to inquiries and schedule appointments
- In-office: To provide services, maintain medical records, process payments, comply with legal requirements
Disclosed to:
- Online contact info: Webflow (form processing)
- In-office PHI: Healthcare providers (with consent), payment processors, professional advisors, legal/regulatory authorities
Sold/Shared: NO
Category B: California Customer Records (Cal. Civ. Code § 1798.80(e))
Examples: Name, contact information, insurance information, medical information, payment information
Sources:
- Online (website forms): Name, email, phone, service interest category only
- In-office (paper intake forms): All medical and health information
Business Purpose:
- Online: To schedule appointments
- In-office: To provide healthcare services, process payments, maintain medical records, coordinate care, comply with healthcare regulations
Disclosed to:
- Online contact info: Webflow (form processing)
- In-office medical records: Healthcare providers (with consent), insurance companies, payment processors
Sold/Shared: NO
Important: Protected health information (medical history, conditions, treatment information, insurance details) is collected only on paper intake forms at our facility, never through our website.
Category C: Protected Classification Characteristics
Examples: Age, sex, marital status
Sources: Directly from you (intake forms)
Business Purpose: To provide appropriate healthcare services, maintain medical records
Disclosed to: Healthcare providers (with consent)
Sold/Shared: NO
Category D: Commercial Information
Examples: Services purchased, payment history, appointment history
Sources: From your interactions with our services
Business Purpose: To provide services, process payments, maintain business records
Disclosed to: Payment processors, professional advisors
Sold/Shared: NO
Category F: Internet or Network Activity
Examples: Website browsing history on our site, search history on our site, information about interactions with our website
Sources: Automatically collected through cookies and analytics tools (Google Analytics, Webflow, Bing Webmaster Tools)
Business Purpose: To analyze website usage, improve user experience, optimize site performance
Disclosed to: Google Analytics, Webflow, Microsoft (Bing)
Sold/Shared: NO (though analytics providers may use data for their own purposes per their policies)
Category G: Geolocation Data
Examples: General geographic location (city/region level) from IP address
Sources: Automatically collected through website analytics
Business Purpose: To understand geographic reach, provide location-relevant information
Disclosed to: Google Analytics, Webflow
Sold/Shared: NO
Category H: Sensory Information
Examples: Photographs or videos (with explicit consent)
Sources: Captured at our facility with your written authorization
Business Purpose: Patient education, treatment documentation (when applicable)
Disclosed to: Only with your explicit consent
Sold/Shared: NO
Category I: Professional or Employment Information
Examples: Occupation, employer name and address
Sources: Directly from you (intake forms)
Business Purpose: To understand work-related injury context, coordinate workers' compensation claims if applicable
Disclosed to: Workers' compensation insurers (if applicable)
Sold/Shared: NO
Category J: Education Information
Examples: [Not typically collected unless relevant to services]
Sources: N/A
Business Purpose: N/A
Disclosed to: N/A
Sold/Shared: NO
Category K: Inferences
Examples: Inferences about service preferences, health and rehabilitation needs
Sources: Derived from your interactions and information provided
Business Purpose: To personalize and improve service delivery
Disclosed to: Healthcare providers involved in your care (with consent)
Sold/Shared: NO
Category L: Sensitive Personal Information
Examples: Social Security number, driver's license number, medical information, health conditions, treatment information
Sources: In-office paper intake forms only (NOT collected online)
Business Purpose: Identity verification, healthcare services, medical records, regulatory compliance
Disclosed to: Healthcare providers (with consent), insurers, legal/regulatory authorities as required
Sold/Shared: NO
Important: We do NOT collect sensitive personal information or protected health information through our website. All medical and health information is collected exclusively on paper forms at our facility.
How We Use Personal Information
We use the personal information we collect for the following business purposes:
- Providing Healthcare Services
- Delivering sports medicine, rehabilitation, and performance training services
- Conducting assessments and developing treatment plans
- Maintaining medical records
- Coordinating care with other providers (with consent)
- Communication
- Responding to service inquiries submitted through website forms
- Scheduling appointments
- Sending appointment reminders
- Providing treatment updates and follow-up care
- Payment Processing
- Processing payments for services
- Submitting insurance claims
- Managing billing and collections
- Website Operation and Improvement
- Operating and maintaining our website
- Analyzing website usage and performance
- Improving user experience
- Optimizing site functionality
- Legal Compliance
- Complying with healthcare regulations (HIPAA, California medical records laws)
- Responding to legal processes
- Meeting regulatory reporting requirements
- Protecting rights and safety
- Business Operations
- Quality assurance and improvement
- Staff training and supervision
- Business analytics and planning
Disclosure of Personal Information
We may disclose your personal information to third parties for business purposes. When we disclose personal information for a business purpose, we enter into contracts that describe the purpose and require the recipient to keep that personal information confidential and not use it for any purpose except performing the contract.
We disclose personal information to the following categories of third parties:
- Healthcare Providers: With your written consent, to coordinate care
- Service Providers: Webflow (hosting), Google Analytics (analytics), payment processors
- Insurance Companies: For claims processing (if applicable)
- Professional Advisors: Attorneys, accountants, consultants
- Government Entities: To comply with legal requirements and regulations
- Business Partners: Domain registrars (GoDaddy), search engine tools (Bing)
Sale or Sharing of Personal Information
We do not sell personal information as defined by the CCPA. We have not sold personal information in the preceding twelve (12) months.
We do not share personal information for cross-context behavioral advertising as defined by the CCPA.
Retention of Personal Information
We retain personal information for as long as necessary to:
- Provide you with services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Specific retention periods:
- Medical records: Minimum 7 years from date of last service (California law requirement)
- Website inquiry data: 2 years from submission
- Payment records: 7 years for tax and accounting purposes
- Analytics data: As determined by third-party service provider policies (typically 26 months for Google Analytics)
Your California Privacy Rights
California residents have the following rights under the CCPA:
1. Right to Know
You have the right to request that we disclose:
- Categories of personal information we collected about you
- Categories of sources from which we collected personal information
- Our business or commercial purpose for collecting or selling personal information
- Categories of third parties with whom we share personal information
- Specific pieces of personal information we collected about you
2. Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions such as:
- Completing transactions or providing services you requested
- Detecting and resolving security incidents
- Complying with legal obligations (including medical records retention requirements)
- Internal uses reasonably aligned with your expectations
3. Right to Correct
You have the right to request correction of inaccurate personal information we maintain about you.
4. Right to Opt-Out of Sale/Sharing
You have the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information.
5. Right to Limit Use of Sensitive Personal Information
You have the right to limit our use of sensitive personal information to providing services or other purposes permitted by the CCPA. Due to the healthcare nature of our services, we only use sensitive personal information for permitted purposes.
6. Right to Non-Discrimination
You have the right not to receive discriminatory treatment for exercising your CCPA rights. We will not:
- Deny you goods or services
- Charge different prices or rates
- Provide different quality of services
- Suggest you will receive different prices or quality of services
How to Exercise Your Rights
To exercise your rights described above, please submit a verifiable consumer request by:
Email: support@movementcures.com
Phone: support@movementcures.com
Mail: Movement Cures, 6729 Washington Ave, Whittier, CA 90601
In Person: Visit our facility at our facility
Verifiable Consumer Request Requirements
To protect your privacy, we must verify your identity before fulfilling your request. You must:
- Provide sufficient information for us to verify you are the person about whom we collected personal information (typically name, email, phone number, and date of birth)
- Describe your request with sufficient detail for us to understand and respond appropriately
We will respond to your request within 45 days, unless we need additional time (up to 90 days total), in which case we will notify you.
Authorized Agents
You may designate an authorized agent to make a request on your behalf by:
- Providing written authorization signed by you
- Verifying your identity directly with us
- Providing proof of the agent's authority
For healthcare information requests, we may require additional documentation to comply with HIPAA regulations.
Special Notice for Minor Users
We do not knowingly collect personal information from minors under 18 without parental consent. If you are a parent or guardian and believe your child has provided personal information, please contact us.
No Financial Incentives
We do not offer financial incentives or price differences for the collection, retention, or sale of personal information.
Changes to This Notice
We may update this CCPA Privacy Notice periodically. We will post the updated notice on our website with a revised "Last Updated" date. Material changes will be communicated through:
- Prominent notice on our website
- Email notification (if you have provided an email address)
- Notice posted at our facility
Contact Information for Questions
If you have questions about this CCPA Privacy Notice or our privacy practices, please contact:
Movement Cures Privacy Officer
6729 Washington Ave
Whittier, CA 90601
Email: support@movementcures.com
California Shine the Light Law
California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
Additional California Rights
California residents also have rights under California's "Shine the Light" law and other privacy laws. For information about these rights, please contact us using the information above.