Privacy Policy

1. Who We Are

Triple Crown Chiropractic operates two clinic locations in Northern Kentucky:

• Walton: 11053 Clay Dr, Walton, KY 41094 — (859) 918-6868
• Covington: 409 W 6th St, Covington, KY 41011 — (859) 307-8779

This Privacy Policy applies to the website triplecrownchiropractic.com, all contact and intake forms on the site, and any related digital communications. References to “we,” “us,” or “our practice” mean Triple Crown Chiropractic.

2. Information We Collect

Information You Provide Directly

When you use our contact forms, appointment request forms, or resource download forms, you may provide:

• Name, phone number, and email address
• Preferred location (Walton or Covington)
• Health symptoms or conditions you describe voluntarily (e.g., through our “Ask the Doc” symptom checker)
• Messages and questions submitted through contact forms

Providing this information is voluntary. You are not required to submit any form to browse our website. However, if you do not provide contact information, we cannot respond to your inquiry or schedule an appointment.

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, pixels, and standard server logging:

• IP address and approximate geographic location
• Browser type and version, operating system, and device type
• Pages visited, time spent on each page, and navigation path
• Referring website or search query that led you to our site
• Interactions with forms, buttons, and content

This information is used for analytics, advertising performance measurement, and website improvement. See Section 5 for full details on cookies and advertising tracking.

3. How We Use Your Information

We use the information we collect for the following purposes:

Patient and Appointment Services

• Responding to appointment requests and patient inquiries
• Calling or emailing you back when you request a callback
• Forwarding your inquiry to the appropriate clinic location
• Following up after submitted symptom information

Marketing and Advertising

• Delivering and measuring the performance of Google Ads campaigns
• Delivering and measuring Meta (Facebook and Instagram) advertising campaigns
• Displaying relevant retargeting ads to prior website visitors on third-party platforms
• Participating in programmatic advertising networks that serve ads based on browsing behavior
• Measuring which ad campaigns, keywords, or platforms generated form submissions or calls

These advertising activities use non-identifying behavioral data (browsing patterns, page interactions) collected through pixels and cookies — not your medical records or submitted health information. See Section 5 for details and opt-out options.

Website Analytics and Improvement

• Understanding how visitors use our website so we can improve it
• Identifying which pages and content are most helpful to patients
• Testing and improving form conversion performance

4. HIPAA Notice of Privacy Practices

What Is Protected Health Information (PHI)?

PHI includes any information that can identify you and relates to your past, present, or future physical health condition, health care treatment, or payment for health care. This includes clinical records, treatment notes, billing information, and health history collected in our offices.

How We Use and Disclose PHI

We may use and disclose your PHI for the following purposes without requiring additional authorization from you:

• Treatment: To provide, coordinate, and manage your chiropractic care, including sharing records with other healthcare providers involved in your treatment when necessary.
• Payment: To bill your insurance company, process claims, and collect payment for services rendered.
• Healthcare Operations: For internal quality improvement, staff training, compliance, and administrative functions of the practice.
• As Required by Law: To comply with applicable state and federal law, including public health reporting, court orders, or law enforcement requirements.

We will not use or disclose your PHI for marketing purposes, sell your PHI to third parties, or share it with any party not directly involved in your care without your written authorization. If you provide written authorization for a specific use or disclosure and later wish to revoke it, you may do so in writing at any time (except where the disclosure has already been made).

Important Distinction: Website Forms and PHI

Information you submit through our website contact forms and symptom checkers before becoming a patient is used only for scheduling and initial inquiry purposes. It is not added to a clinical patient record until you complete an in-office intake process. However, we treat all health-related information you share with us — including pre-appointment symptom descriptions — with the same discretion and security as clinical records.

Your HIPAA Rights as a Patient

Once you become a patient of Triple Crown Chiropractic, you have the following rights regarding your PHI:

• Right to Access: You may request a copy of your medical record and billing information.
• Right to Amend: You may request that we correct incomplete or inaccurate information in your record.
• Right to Restrict Disclosures: You may request that we limit how we use or share your PHI, though we are not required to agree to all requests.
• Right to an Accounting: You may request a list of disclosures we have made of your PHI to parties outside our practice.
• Right to Confidential Communications: You may request that we contact you at a specific phone number or address.
• Right to a Paper Copy: You may request a printed copy of this Notice of Privacy Practices at any time.

To exercise any of these rights, contact our office directly at your preferred location. We will respond within 30 days of your written request.

5. Cookies, Tracking, and Advertising

What Are Cookies?

Cookies are small text files placed on your device by a website to remember information about your visit. We use both first-party cookies (set by triplecrownchiropractic.com) and third-party cookies (set by advertising and analytics platforms). Cookies do not contain your name, contact information, or medical records.

Types of Cookies We Use

Strictly Necessary Cookies
These are required for the website to function and cannot be disabled. They manage form submissions, security, and session continuity. They do not track you for advertising purposes.

Analytics Cookies
We use Google Analytics to understand how visitors use our website — pages visited, time on site, traffic sources, and device types. This data is aggregated and anonymized. Google Analytics sets cookies including _ga, _ga_*, and _gid. You can opt out of Google Analytics tracking via the Google Analytics Opt-Out Browser Add-On.

Google Ads and Remarketing Cookies
We run advertising on Google Search, Google Display Network, and YouTube. Google's advertising platform sets cookies (including _gcl_au and others) to measure conversions from our ads, attribute phone calls and form submissions to specific campaigns, and serve our ads to people who have previously visited our website (remarketing). You can manage your Google ad preferences at adssettings.google.com or opt out via the Digital Advertising Alliance opt-out tool.

Meta Pixel (Facebook and Instagram Advertising)
We use the Meta Pixel on our website to measure the effectiveness of our Facebook and Instagram advertising campaigns. The Meta Pixel tracks certain actions on our site (such as page views and form submissions) and may be used to show our ads to people who have visited our site when they use Facebook or Instagram (custom audiences), and to find new potential patients with similar interests (lookalike audiences). Meta's data use is governed by Meta's Privacy Policy. You can manage your Facebook ad preferences in your Facebook account settings.

Programmatic Advertising Cookies
We may participate in programmatic advertising networks that deliver our ads across third-party websites and apps. These networks use cookies and device identifiers to serve ads based on your browsing behavior and interests. These cookies are set by demand-side platform (DSP) and ad exchange providers, not directly by Triple Crown Chiropractic. You can opt out of interest-based advertising from many programmatic advertising providers via the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI).

Managing and Disabling Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. Note that disabling cookies may affect your ability to use certain features of our website. Opting out of advertising cookies does not mean you will stop seeing ads — it means ads will not be personalized based on your browsing history.

6. Third-Party Service Providers

We use the following trusted third-party providers to operate our website and business. Each processes limited information on our behalf and is contractually prohibited from using it for any purpose beyond the services they provide to us:

• Vercel — website hosting and delivery infrastructure. Vercel processes server logs and request data to serve our website. Vercel Privacy Policy
• Resend — transactional email delivery. When you submit a contact form, Resend delivers your message content to our staff email inboxes. Form data transits Resend's servers but is not stored or used by Resend for any other purpose. Resend Privacy Policy
• Google LLC — Google Analytics (website analytics) and Google Ads (search, display, and remarketing advertising). Google Privacy Policy
• Meta Platforms, Inc. — Facebook and Instagram advertising. Meta Privacy Policy

We do not share your name, contact information, submitted health details, or any personally identifiable information with advertising platforms. Advertising platforms receive only anonymized behavioral signals (page views, button clicks) through standard cookie and pixel technology.

7. We Never Sell Your Information

8. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, loss, misuse, or disclosure. Our website uses HTTPS encryption for all data transmitted between your browser and our servers. Form submissions are transmitted securely and delivered directly to staff inboxes.

No method of electronic transmission or storage is 100% secure. While we take data security seriously and maintain appropriate safeguards, we cannot guarantee absolute security. If you have concerns about transmitting sensitive health information online, you are welcome to call us directly.

9. Data Retention

Patient clinical records are retained for a minimum of 7 years following the last date of service, or longer if required by Kentucky state law or applicable federal regulations.

Website contact form submissions are retained in staff email inboxes and may be retained for up to 3 years for follow-up and records purposes.

Analytics and advertising datais retained according to the data retention settings of each third-party platform (Google Analytics default: 14 months; Meta: per Meta's current policy).

10. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 through our website. Minors may receive chiropractic care as patients with the consent of a parent or guardian, and that relationship is governed by our in-office consent and intake procedures rather than this website's Privacy Policy.

If you believe a minor has submitted personal information through our website, please contact us and we will promptly remove it.

11. California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request a disclosure of the categories and specific pieces of personal information we have collected about you over the past 12 months.
• Right to Delete: You may request that we delete personal information we have collected about you, subject to certain legal exceptions.
• Right to Opt Out of Sale: We do not sell personal information. No opt-out is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a request, contact us by phone or through the contact page. We will respond within 45 days.

12. Your Rights and Choices

Regardless of your location, you have the right to:

• Request access to the personal information we hold about you as a website visitor
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal and regulatory retention requirements)
• Opt out of interest-based advertising using the tools described in Section 5
• Opt out of future email communications by replying “unsubscribe” to any email we send

For HIPAA-specific rights regarding your clinical patient record, see Section 4.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy, contact us at:

• Walton Office: (859) 918-6868 — 11053 Clay Dr, Walton, KY 41094
• Covington Office: (859) 307-8779 — 409 W 6th St, Covington, KY 41011
• Website: triplecrownchiropractic.com/contact

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after a policy update constitutes your acceptance of the revised policy. If changes are material, we will make reasonable efforts to notify patients directly.