Privacy Policy

Overview & plain-English summary

Effective date: July 3, 2026. Chiropractic Health Center (“the clinic,” “we,” “us”) is the Reno, Nevada chiropractic practice of Dr. Alan S. Bader, DC — Chiropractic Physician, Nevada License B-567, located at 294 E. Moana Lane, Suite 28, Reno, NV 89502. This policy explains what information this website collects, why, who touches it, and the choices you have. It is written to satisfy Nevada's online-privacy statutes (NRS 603A.300–603A.360), Nevada's consumer health data law (SB 370 of 2023), and plain decency.

The short version, in one paragraph: this website collects the minimum needed to call you back — a name, a phone number, an optional email, and whatever one line you choose to type about why you want an appointment. It uses ordinary analytics to see which pages help people. It does not collect medical records, does not sell anything about you to anyone, does not run advertising trackers, and deliberately keeps your health story out of the website entirely — that conversation happens by phone and in the exam room, where it belongs and where HIPAA protects it.

Two different worlds: this website vs. your medical record

It's important to understand the boundary this practice maintains on purpose:

1. The website world (this policy). Appointment requests, chat messages, analytics, cookies. Small, minimal, governed by this policy and Nevada privacy law.

2. The patient world (HIPAA). Everything from your first visit forward — histories, examinations, imaging reports, diagnoses, billing, insurance claims. That information lives in the clinic's records systems, never on this website, and is governed by the federal HIPAA Privacy and Security Rules and our Notice of Privacy Practices (NPP). The NPP describes your rights to access your records, request amendments and an accounting of disclosures, and how to file a complaint. You receive it at your first visit, and you can request a copy any time at the front desk or by calling (775) 829-7575. Nothing on this website is part of your medical record, and website analytics never receive clinical information.

What this website collects

• Appointment-request details — name, phone number, optional email, preferred contact time, and the brief optional “reason for visit” line. Every form on this site explicitly asks you not to include detailed personal medical information — health specifics are discussed when we call you.
• Chat messages to “Atlas” — our virtual front-desk assistant. If you use it, the text you type is processed to generate replies and reviewed by real staff so your request isn't missed (details in the AI-assistant section below). Atlas is instructed never to ask for your medical history.
• Internet & device activity — pages viewed, referring page, approximate location derived from IP address, browser and device type, collected through cookies and similar technologies (see the cookie inventory below).
• Security signals — our forms use Cloudflare Turnstile to distinguish humans from bots; it evaluates technical browser signals to do that.
• Server logs — IP address, requested URLs and timestamps, kept by our hosting and content-delivery providers for security and troubleshooting.

What this website deliberately does NOT collect

No medical histories or symptom questionnaires. No insurance member IDs. No Social Security numbers. No payment-card details (the website takes no payments). No precise GPS location. No biometric identifiers. No advertising or cross-site tracking profiles. If you type medical detail into a form or chat despite our request, we handle it as described under “If you send us health information anyway,” below.

Consumer health data (Nevada SB 370)

Nevada's consumer health data law (SB 370 of 2023) gives Nevadans specific rights over “consumer health data” collected by websites and apps. Information that is part of your patient record under HIPAA is exempt from that law (HIPAA governs it instead) — but we treat the small health-adjacent slice this website can touch with the same care:

What that slice is: the optional one-line “reason for visit” you may type into a form, and anything health-related you choose to type into the Atlas chat. That's it — the website collects no other health information.

Our basis for collecting it: you volunteer it while requesting an appointment, and we use it only to the extent necessary to provide the service you asked for — the callback. We do not use it for marketing, do not build profiles from it, and do not share it with anyone except the service providers listed below who deliver your request to our office.

We never sell consumer health data. Nevada law prohibits selling it without written authorization; we simply don't sell it, period.

No geofencing. We do not use geofencing around any health facility to identify, track or send messages to people — a practice Nevada's law specifically prohibits.

Your rights: you may ask (a) what website-collected health data we hold about you, (b) who received it, and (c) that we delete it. Call (775) 829-7575 or ask at the front desk; we verify it's really you, then respond within the statutory time. If we ever decline a request, you may appeal by asking the office manager to review the decision; if you remain unsatisfied, you may contact the Office of the Nevada Attorney General.

The Atlas chat assistant & AI processing

Atlas is an automated software assistant, not a person and not a clinician. When you chat with it:

• Your messages are transmitted to our artificial-intelligence service provider (Anthropic) to generate each reply. Under the service terms we use, these conversations are not used to train the provider's models.
• Conversation transcripts are delivered to our website operator (YelloPost) and to clinic staff so a human can follow up on your request and check the assistant's quality.
• If you give Atlas your name and phone number to request a callback, those details are emailed to the office exactly like a form submission, and this policy applies to them.
• Atlas is instructed not to request medical details and to route anything that sounds like an emergency to 911. Please don't type sensitive health information into chat — one line about why you want an appointment is plenty.
• You can hide the assistant entirely with its “Hide” button; the preference is stored in your own browser.

Cookies, analytics & similar technologies

We keep this boring on purpose. The complete inventory:

• Google Tag Manager / Google Analytics 4 — usage measurement (which pages are read, roughly where visitors come from). Analytics cookies (names beginning _ga) load as configured through the cookie banner (Accept All / Decline). You can also install Google's Analytics opt-out browser add-on, or block cookies in your browser settings.
• Cloudflare — security/CDN cookies (e.g., cf_clearance) and Turnstile bot-detection on forms. These are security-essential.
• Local preferences — small values stored in your own browser (localStorage/sessionStorage), never transmitted to us: your accessibility-widget settings, whether you hid the chat assistant or dismissed the exit reminder. Clearing your browser storage resets them.

Global Privacy Control and do-not-track signals: declining in our cookie banner and a recognized opt-out preference signal accomplish the same thing here — non-essential analytics stay off. We serve no targeted advertising, so there are no ad-trackers to opt out of.

Who receives website information (service providers)

We share website information only with providers who operate the site on our instructions — never with data brokers, never for their own marketing:

• Bluehost — web hosting (stores the site and standard server logs).
• Cloudflare — content delivery, security screening, Turnstile.
• Google — Tag Manager and Analytics as described above.
• Anthropic — AI processing for the Atlas chat assistant.
• Zoho (email delivery) — transmits appointment requests and chat-lead notifications to our office inbox.
• YelloPost — our website operator; receives copies of appointment notifications and chat transcripts so no request is missed and the site keeps working.

Beyond service providers, we disclose information only if the law requires it (for example, a valid subpoena), to protect someone's safety, or in the unlikely event the practice itself changes hands — in which case patient records would transfer under the strict rules that govern medical practices, and website data would remain subject to a policy at least as protective as this one.

We do not sell personal information (Nevada SB 220)

Nevada law (NRS 603A.330–.340) lets consumers direct a website operator not to sell their covered information. We do not sell covered information and never have. If you want that promise on the record for your own information, submit a verified request through our designated request address: call (775) 829-7575, ask at the front desk, or write to Privacy Request, Chiropractic Health Center, 294 E. Moana Lane, Suite 28, Reno, NV 89502. We respond within 60 days as the statute provides.

If you send us health information anyway

People sometimes type more than we ask for — that's human. If a form or chat message arrives containing medical detail, it is read only by office staff, used solely to prepare for your callback, and is not added to any marketing list or analytics system. If you'd like a submission deleted, call and ask; we'll confirm when it's done. Once you become a patient, anything clinically relevant is re-collected properly at the clinic, inside the HIPAA-protected record — not from website email.

Retention — how long things live

• Appointment-request and chat-lead emails — kept like ordinary office correspondence while we schedule and follow up, then deleted in the ordinary course of business.
• Chat transcripts — retained briefly for quality review, then deleted in the ordinary course.
• Analytics — Google Analytics data ages out on Google's standard retention schedule as configured for this site.
• Server/security logs — rotate on our providers' standard short schedules.
• Patient medical records — a different world entirely: retained for the period Nevada healthcare-records law (NRS 629.051) requires, under the clinic's records policies, regardless of anything on this website.

Security

TLS encryption for every page and form on this site; bot protection on submissions; minimal collection in the first place (the best security for data is not having it); access limited to office staff and the providers above; reputable, major providers for hosting, delivery and email. No internet system is perfectly secure — if a breach of website-collected personal information ever required notice under Nevada law (NRS 603A.220), we would notify affected people as the statute requires, promptly and plainly.

Children

This website is for adults arranging care and is not directed to children under 13; we do not knowingly collect information from children online. Pediatric patients are cared for with a parent or guardian — the intake conversation happens with the adult, at the clinic, not through this website. If you believe a child submitted information here, call us and we will delete it.

Visitors from outside Nevada

We are a single Reno clinic, and this site is intended for the Reno–Sparks area. We honor the Nevada rights described above for everyone who asks, wherever you live — if your state gives you additional rights (access, deletion, correction), make the same call and we will simply honor the request rather than argue jurisdiction.

Your choices, summarized

• Decline analytics in the cookie banner (or use browser controls / Google's opt-out add-on).
• Skip the optional email and reason fields — name and phone are all a callback needs.
• Use the phone instead of the website entirely: (775) 829-7575. Nothing about your care ever requires this website.
• Hide the chat assistant with its Hide button.
• Ask us what we hold, ask us to delete it, or direct us not to sell it (we don't): call or ask at the desk.
• Request the clinic's Notice of Privacy Practices for everything HIPAA covers.

Changes & contact

If this policy changes, the new version posts here with a new effective date; material changes get a notice on this page for 30 days. This version: July 3, 2026.

Chiropractic Health Center · Dr. Alan S. Bader, DC — Chiropractic Physician, Nevada License B-567 · 294 E. Moana Lane, Suite 28, Reno, NV 89502 · (775) 829-7575 · Fax 775-829-7755