Privacy Policy
Last updated: January 26, 2026 | Effective: January 26, 2026
Your Privacy Rights at a Glance
1. Introduction
United Rehabs ("we," "us," or "our") operates unitedrehabs.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website, regardless of where you are located.
We are committed to complying with applicable data protection laws worldwide, including but not limited to:
- GDPR (General Data Protection Regulation) - European Union
- UK GDPR - United Kingdom
- CCPA/CPRA (California Consumer Privacy Act) - California, USA
- LGPD (Lei Geral de Proteรงรฃo de Dados) - Brazil
- PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada
- Privacy Act 1988 - Australia
- POPIA (Protection of Personal Information Act) - South Africa
2. Data Controller
United Rehabs is the data controller responsible for your personal data. For data protection inquiries:
Data Protection Contact
Email: privacy@unitedrehabs.com
Address: United Rehabs, Data Protection Office
3. Information We Collect
3.1 Information You Provide
- Contact Information: Name, email address, phone number when submitting inquiries
- Search Queries: Treatment types, locations, and preferences you search for
- Communications: Messages you send through our contact forms
3.2 Automatically Collected Information
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, navigation patterns
- Location Data: Country/region based on IP address (not precise location)
- Cookies & Tracking: See Section 7 for details
3.3 Special Categories of Data
We do NOT intentionally collect: Health information, medical records, treatment history, or any Protected Health Information (PHI). Please do not submit sensitive health information through our website.
4. Legal Basis for Processing (GDPR)
For users in the EEA, UK, and similar jurisdictions, we process your data based on:
- Consent: For marketing communications and non-essential cookies
- Legitimate Interests: To operate our website, prevent fraud, and improve services
- Contractual Necessity: To respond to your inquiries
- Legal Obligation: To comply with applicable laws
5. How We Use Your Information
- Provide, maintain, and improve our services
- Respond to your inquiries and support requests
- Connect you with treatment facilities (only with your consent)
- Analyze usage patterns to improve user experience
- Detect and prevent fraud or abuse
- Comply with legal obligations
- Send service-related communications
6. Data Sharing & Disclosure
6.1 We Do NOT Sell Your Personal Data
United Rehabs does not sell, rent, or trade your personal information to third parties for monetary consideration.
6.2 Service Providers
We may share data with trusted service providers who assist in operating our website, including:
- Hosting providers
- Analytics services (with anonymization where possible)
- Customer support tools
6.3 Legal Requirements
We may disclose information if required by law, court order, or governmental regulation, or to protect our rights and safety.
7. Cookies & Tracking Technologies
We use cookies and similar technologies. You can manage preferences through our cookie banner or browser settings.
| Type | Purpose | Duration |
|---|---|---|
| Essential | Site functionality, security | Session |
| Analytics | Usage statistics (anonymized) | Up to 2 years |
| Preferences | Remember your settings | 1 year |
8. Your Rights
Depending on your location, you may have the following rights:
๐ช๐บ GDPR Rights (EEA/UK)
- โข Right to access
- โข Right to rectification
- โข Right to erasure ("right to be forgotten")
- โข Right to restrict processing
- โข Right to data portability
- โข Right to object
- โข Right to withdraw consent
- โข Right to lodge complaint with supervisory authority
๐บ๐ธ CCPA/CPRA Rights (California)
- โข Right to know what data is collected
- โข Right to delete personal information
- โข Right to opt-out of sale/sharing
- โข Right to non-discrimination
- โข Right to correct inaccurate information
- โข Right to limit use of sensitive data
๐ง๐ท LGPD Rights (Brazil)
- โข Right to confirmation and access
- โข Right to correction
- โข Right to anonymization or deletion
- โข Right to data portability
- โข Right to information about sharing
- โข Right to revoke consent
๐ Other Jurisdictions
- โข Canada (PIPEDA): Access, correction
- โข Australia: Access, correction
- โข South Africa (POPIA): Access, correction, deletion
- โข Contact us for jurisdiction-specific rights
To exercise any of these rights, contact us at privacy@unitedrehabs.com. We will respond within the timeframe required by applicable law (typically 30 days for GDPR, 45 days for CCPA).
9. International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Binding Corporate Rules where relevant
10. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law. Typically:
- Contact inquiries: 2 years after last contact
- Analytics data: 26 months (anonymized)
- Legal compliance records: As required by applicable law
11. Security
We implement appropriate technical and organizational measures to protect your data, including:
- SSL/TLS encryption for data in transit
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
12. Children's Privacy
Our Website is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.
13. HIPAA Notice
United Rehabs is NOT a covered entity under HIPAA. We are an informational directory and do not provide medical services. We do not collect, store, or process Protected Health Information (PHI). Please do not submit sensitive medical information through our website.
14. Do Not Track
We honor Do Not Track (DNT) signals. When DNT is enabled, we limit data collection to essential functions only.
15. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may provide additional notice.
16. Contact Us
For privacy-related inquiries:
For EU residents: You have the right to lodge a complaint with your local Data Protection Authority.