Privacy Policy

Welcome to the website of Windmill Health Center, operated by Dr. Eliot Corvin, D.C. ("The FightDr"), located at 17160 Royal Palm Blvd, Suite 1, Weston, FL 33326 ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at thefightdr.com (the "Site"). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

We collect information in the following categories:

Personal Information You Provide

• Contact information: Name, email address, phone number (collected via contact forms, appointment booking forms, and newsletter sign-up)
• Appointment details: Preferred date/time, reason for visit, insurance information
• Health information: Description of symptoms, injuries, or conditions you voluntarily provide through our forms (this may constitute Protected Health Information under HIPAA)
• Communication preferences: Whether you opt in to receive marketing communications

Information Collected Automatically

• Device information: Browser type, operating system, device type, screen resolution
• Usage data: Pages visited, time on page, click patterns, scroll depth, referring URL
• Network information: IP address, approximate geographic location (city/region level)
• Session recordings: Mouse movements, clicks, and scrolling behavior (see Section 6 for details)

Information from Third Parties

• Google reCAPTCHA: Risk scores and interaction patterns used to prevent spam and abuse
• Analytics platforms: Aggregated demographic and interest data from Google Analytics

We collect information through the following methods:

• Directly from you: When you fill out a contact form, request an appointment, sign up for our newsletter, or otherwise communicate with us through the Site
• Automatically: When you browse the Site, we automatically collect certain information through cookies, pixels, and similar tracking technologies (see Section 5)
• From third-party services: Google reCAPTCHA collects information to verify you are a human visitor and protect our forms from spam
• Local storage: We may temporarily store form progress in your browser's local storage to prevent data loss if you navigate away. This data is stored only on your device and is automatically cleared within 24 hours

We use the information we collect for the following purposes:

• Respond to inquiries: To reply to your contact form submissions and answer your questions
• Schedule appointments: To process and confirm appointment requests
• Provide healthcare services: To prepare for your visit and deliver appropriate chiropractic care
• Send communications: To send appointment confirmations, reminders, and follow-up communications
• Marketing (with consent): If you have opted in, to send newsletters, promotions, and health tips
• Improve our Site: To analyze usage patterns, optimize content, and enhance the user experience
• Security and fraud prevention: To detect and prevent spam, abuse, and unauthorized access
• Legal compliance: To comply with applicable laws, regulations, and legal processes

We use cookies, pixels, and similar tracking technologies to collect information about your browsing activity. Below is a comprehensive list of the tracking technologies used on our Site:

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, if you choose to block cookies, some features of our Site may not function properly.

We use Microsoft Clarity to record and analyze user sessions on our Site. This means that your interactions with our Site, including mouse movements, clicks, scrolling behavior, and page navigation, may be recorded and replayed for analysis.

The purpose of session recording is to:

• Understand how visitors interact with our Site to improve usability
• Identify technical issues and areas of confusion
• Optimize page layouts and content placement

What is NOT recorded: Microsoft Clarity automatically masks sensitive input fields such as passwords, credit card numbers, and other personally identifiable text inputs. However, general page content and non-sensitive form interactions may be visible in recordings.

For more information about how Microsoft processes this data, please see Microsoft's Privacy Statement.

Our Site uses Google reCAPTCHA to protect our forms from spam and abuse. Google reCAPTCHA collects hardware and software information, such as device and application data, and sends this data to Google for analysis.

By using our Site, you acknowledge that your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

We use the following third-party service providers to operate and improve our Site. Each provider may process certain data on our behalf:

We require all third-party providers to process your data only for specified purposes and in accordance with our instructions. We do not sell your personal information to any third party.

We retain your information for the following periods, depending on the type of data:

• Medical and health information (PHI): 7 years, as required by Florida medical record retention laws and HIPAA regulations
• Marketing and communication data: 2 years from your last interaction, or until you unsubscribe
• Analytics and log data: 90 days (IP addresses and server logs)
• Form auto-save data (local storage): 24 hours, stored only on your device
• Cookie consent preferences: 1 year from the date of your selection

After the applicable retention period, your data is securely deleted or anonymized. You may request earlier deletion of your data (see Section 12).

As a healthcare provider, Windmill Health Center is subject to the Health Insurance Portability and Accountability Act (HIPAA). This section explains how we handle Protected Health Information (PHI).

What Constitutes PHI on Our Site

Any health-related information you voluntarily submit through our forms, including descriptions of symptoms, injuries, medical history, or treatment preferences, combined with your identifying information (name, phone, email), may constitute PHI.

Our HIPAA Obligations

• We maintain administrative, technical, and physical safeguards to protect PHI
• PHI is only accessed by authorized staff on a need-to-know basis
• We maintain audit logs of access to patient records
• We will notify you in the event of a breach of unsecured PHI as required by law
• We do not use PHI for marketing purposes without your explicit authorization

Notice of Privacy Practices

A complete Notice of Privacy Practices is available at our office and will be provided to you at your first appointment. That notice provides additional detail about how we use and disclose your PHI for treatment, payment, and healthcare operations.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Encryption at rest: Sensitive data stored in our databases is encrypted at rest
• Access controls: Role-based access controls limit who can view and process personal data
• Audit logging: All access to sensitive data is logged and monitored
• Regular updates: We keep our systems and dependencies up to date with security patches

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

You have the following rights regarding your personal information:

• Right to access: You may request a copy of the personal information we hold about you
• Right to correction: You may request that we correct inaccurate or incomplete information
• Right to deletion: You may request that we delete your personal information, subject to legal retention requirements
• Right to opt out of marketing: You may unsubscribe from marketing communications at any time using the link in any email or by contacting us
• Right to revoke consent: You may withdraw your consent for data processing at any time, where consent is the legal basis for processing
• Right to data portability: You may request your data in a commonly used, machine-readable format

To exercise any of these rights, please contact us using the information in Section 16. We will respond to your request within 30 days.

Our Site is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete: You may request deletion of your personal information, subject to certain exceptions
• Right to opt out of sale: We do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link on our Site
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, please contact us using the information in Section 16. We may need to verify your identity before processing your request.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Post a notice on our Site for a reasonable period following the change

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact us:

• Business: Windmill Health Center
• Attention: Dr. Eliot Corvin, D.C.
• Address: 17160 Royal Palm Blvd, Suite 1, Weston, FL 33326
• Phone: (754) 999-9337
• Email: contact@thefightdr.com