Guided Reinforcement for Ongoing Wellness, doing business as G.R.O.W. ABA ("G.R.O.W.," "we," "us"), operates:
Together, these are the "Site." The Site lets parents, guardians, and other visitors learn about our services, contact our team, begin intake, apply for jobs, and access their child's documents.
This Privacy Policy explains what information we collect through the Site, how we use and share it, and the choices you have. "Personal information" means information that identifies you or your child. Information that has been de-identified is not covered.
Health information is also protected by HIPAA. Protected health information about you or your child that we maintain, including information you submit through the Forms or Portal, is also governed by our Notice of Privacy Practices. Where the Notice gives you greater protection, it controls.
The Site is hosted and operated in the United States, and information is processed and stored in the United States.
We use and share health information only to provide services, obtain payment, and run and improve our practice, within the limits of state and federal law. We do not sell or rent personal information about Site visitors, and we do not share it for targeted advertising.
We use safeguards designed to protect information from loss, misuse, and unauthorized access, both in transit and after we receive it. These include encrypted (HTTPS) connections across the Site and HIPAA-compliant systems for the Forms and Portal, operated under a Business Associate Agreement. No transmission over the internet, email, or text is completely secure. If you prefer, you can reach us by phone or mail using the contact information at the end of this policy.
We may update this policy as our Site, services, or the law change. We will post material changes on the Site before they take effect. The revised policy applies to information we already hold and to information we collect afterward. The "Last revised" date at the end shows the current version.
We collect general data about how the Site is used, such as visitor counts, pages viewed, referring sites, and time on site. We review this data in aggregate to improve our content, and we do not share it with other organizations for their own use.
[We honor Global Privacy Control (GPC) browser signals by turning off non-essential analytics.] The Site does not otherwise respond to browser "Do Not Track" signals, because no common standard exists.
We collect personal information through the Site only as described in sections 1–14 below.
We may collect the following about you or your child:
We use this information to:
Like most websites, the Site automatically records standard log data, such as IP address, browser and device type, date and time of visit, pages viewed, and the referring site. Portal logs may also record your account identifier and the features you use. Logs are stored securely, accessed only on a need-to-know basis, and kept no longer than reasonably needed. We use them to maintain the Site, fix problems, and protect security.
This site does not use session cookies to keep visitors signed in. The portal login links to an external site {ABA Engine} which manages its own cookies and sessions.
We do not use advertising or social media tracking pixels on pages about our services, autism, intake, or the Portal.
We may use ABA Engine or another vendor to send appointment reminders and service messages by email, text, or voice. We give these vendors only the contact details needed to reach you, and they may use them only to communicate with you on our behalf. You may opt out of non-essential messages at any time by replying STOP to a text or contacting us. Some messages, such as appointment cancellations, cannot be turned off while you receive services. Message and data rates may apply.
We may ask families to complete satisfaction surveys about the Site or our services. We use survey responses to improve our services and may follow up with you about concerns you raise.
Messages you send through the Forms, email, or the Portal are shared with the G.R.O.W. staff who need them to respond. Please do not include detailed medical information in general contact messages; we collect what we need securely during intake.
You may ask to see, correct, update, or delete personal information collected through the Site, including information a third party provided about you. We will verify your identity and respond within 45 days. Requests about your child's health record are handled under our Notice of Privacy Practices.
The Site is intended for parents, guardians, and job applicants. We collect information about a child only from the child's parent or legal guardian, and we do not knowingly collect personal information directly from children under 13. If we learn we have, we will delete it.
We share personal information with service providers that help us operate, only as needed for their services and under written agreements that limit their use of it. Providers that handle health information sign a HIPAA Business Associate Agreement.
We may also disclose personal information:
California "Shine the Light": We do not share personal information with third parties for their own direct marketing.
You may unsubscribe from newsletters or non-essential messages at any time using the link in the message, by replying STOP to a text, or by contacting us. Service-critical messages, such as cancellations, continue while you receive services.
We keep personal information only as long as needed for the purposes in this policy, to meet legal obligations, and to resolve disputes. Once your child becomes a client, Form and Portal information becomes part of the health record and is retained as required by law.
The Site links to outside resources, such as the CDC and research publishers. Their privacy practices may differ from ours, and their own policies govern any information you give them.
[Include only if applicable.] We may use AI tools to support documentation, quality improvement, and operations. Any AI tool that processes health information is used only under HIPAA protections, including a Business Associate Agreement, and consistent with our Notice of Privacy Practices. Clinical decisions are always made by our credentialed clinicians.
For questions about this policy or to make a request, contact:
G.R.O.W. ABA Attn: Privacy Officer 1342 Coronado Ave., Long Beach, CA 90804 562-766-1199 · [contact@growaba.com]
Last revised: [September 30, 2026]