Privacy Policy

Effective Date: August 22, 2026
Last Updated: August 22, 2026

Vector Spine and Sport Chiropractic (“Vector Spine and Sport,” “the Clinic,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit https://www.vectorspineandsport.com, use our online services, request information, communicate with us, or follow links to third-party services such as our online scheduling platform.

By using our website, you acknowledge the practices described in this Privacy Policy. If you do not agree with these practices, please discontinue your use of the website.

I. Scope of This Privacy Policy

This Privacy Policy applies to information collected through:

  • The Vector Spine and Sport website
  • Website contact and inquiry forms
  • Appointment-request features
  • Telephone and text-message communications initiated through the website
  • Email communications initiated through the website
  • Cookies, analytics tools, advertising technologies, and similar website technologies
  • Other online services that link directly to this Privacy Policy

This Privacy Policy does not necessarily apply to information collected:

  • During an in-person clinical appointment
  • Through patient intake forms or the Clinic’s electronic health record system
  • Through a third-party scheduling platform after you leave our website
  • Through an insurance company, attorney, healthcare provider, employer, or other independent organization
  • On websites, platforms, or applications operated by third parties

Those activities may be governed by additional privacy notices, contractual terms, or laws.

II. Website Privacy Policy and HIPAA Notice

This Website Privacy Policy is different from Vector Spine and Sport’s HIPAA Notice of Privacy Practices.

The HIPAA Notice of Privacy Practices explains how the Clinic may use and disclose protected health information, the Clinic’s legal duties regarding that information, and the rights patients may have under the Health Insurance Portability and Accountability Act of 1996 and related regulations.

Information does not automatically become protected health information under HIPAA merely because it concerns health or is submitted through a public website. Whether HIPAA applies depends on factors that include who receives the information, why it was created or received, and whether it is maintained by or on behalf of a HIPAA-covered entity in connection with healthcare services.

When information becomes part of a patient’s clinical or billing record, it may also be governed by the Clinic’s HIPAA Notice of Privacy Practices and applicable federal and state healthcare privacy laws.

A current copy of the Clinic’s HIPAA Notice of Privacy Practices should be made available through a clearly labeled link on this website and at the Clinic’s physical location.

III. Information We May Collect

Depending on how you use the website, we may collect the following categories of information.

Information You Provide Directly

You may provide information such as:

  • First and last name
  • Telephone number
  • Email address
  • Preferred method of contact
  • Appointment preferences
  • General reason for contacting the Clinic
  • Service or treatment interests
  • Questions about chiropractic care, auto injury care, shockwave therapy, laser therapy, massage therapy, or DOT physicals
  • Insurance or billing questions
  • Information included in a message, form, email, or text
  • Communication preferences
  • Records of your communications with us

Please do not submit detailed medical records, Social Security numbers, payment-card information, insurance identification numbers, photographs of injuries, diagnostic reports, or other highly sensitive information through a general website contact form unless the form is specifically identified as secure and intended for that purpose.

Appointment and Patient-Portal Information

When you use an online scheduling, intake, payment, or patient-portal service, you may be asked to provide:

  • Contact information
  • Date of birth
  • Appointment details
  • Health-history information
  • Insurance information
  • Billing information
  • Payment information
  • Consent and intake information
  • Account credentials

Online appointment scheduling may be provided by a third-party platform, such as Jane or another practice-management provider. Information submitted directly through that platform is also subject to the provider’s privacy policy, security practices, and applicable agreements with Vector Spine and Sport.

The third-party platform may collect and process information independently from this website. You should review its privacy policy before providing information.

Information Collected Automatically

When you visit the website, we and our service providers may automatically collect information such as:

  • Internet Protocol address
  • Browser type and version
  • Device type
  • Operating system
  • General geographic area
  • Referring website
  • Pages viewed
  • Links clicked
  • Time and date of visits
  • Time spent on a page
  • Navigation paths
  • Approximate location derived from an IP address
  • Device identifiers
  • Cookie identifiers
  • Advertising identifiers
  • Website performance and error information

This information may be collected through server logs, cookies, pixels, tags, scripts, software development kits, local storage, Google Tag Manager, analytics services, or comparable technologies.

Information From Other Sources

We may receive information from:

  • Online scheduling and practice-management providers
  • Analytics and website-hosting providers
  • Advertising platforms
  • Social-media platforms
  • Insurance companies
  • Attorneys or authorized representatives
  • Referring healthcare professionals
  • Service providers acting on our behalf
  • Publicly available sources
  • Other individuals who contact us on your behalf

When another person provides your information, that person is responsible for having appropriate permission or legal authority to do so.

IV. We may use personal information to:

  • Respond to questions and inquiries
  • Schedule, confirm, reschedule, or cancel appointments
  • Provide requested services
  • Communicate appointment instructions
  • Determine the appropriate person or department to respond
  • Provide general information about our services
  • Support patient intake and registration
  • Process authorized transactions
  • Communicate about billing, insurance, or administrative matters
  • Send service-related emails or text messages
  • Maintain and improve the website
  • Understand how visitors use the website
  • Diagnose technical problems
  • Protect the security of our systems
  • Detect and prevent fraud, abuse, or unlawful activity
  • Maintain appropriate business and clinical records
  • Comply with legal, regulatory, insurance, and professional obligations
  • Establish, exercise, or defend legal claims
  • Enforce our website terms and policies
  • Conduct marketing or advertising activities when permitted by law
  • Honor communication and privacy preferences

If we use information for a materially different purpose, we will provide any additional notice or consent required by applicable law.

V. Health Information Submitted Through the Website

A website visitor may reveal health-related information by requesting an appointment or describing symptoms. We treat this information with care, but a public website is not an emergency service or a substitute for direct clinical evaluation.

Do not use the website, email, social media, or a general text-message channel to report a medical emergency.

Call 911 or seek immediate medical care for symptoms such as:

  • Chest pain
  • Difficulty breathing
  • Loss of consciousness
  • Sudden weakness
  • Severe or worsening headache
  • Loss of coordination
  • Uncontrolled bleeding
  • Suspected fracture
  • Loss of bowel or bladder control
  • Other potentially life-threatening symptoms

Submitting information through the website does not establish a doctor-patient relationship. A doctor-patient relationship is established only through an appropriate clinical process and agreement.

VI. Cookies and Similar Technologies

Cookies are small files stored on a browser or device. We may use cookies and comparable technologies to:

  • Keep the website functioning
  • Remember preferences
  • Understand website traffic
  • Measure page performance
  • Identify technical problems
  • Determine how visitors reach and use the website
  • Measure calls, bookings, or other conversions
  • Support advertising and remarketing, if enabled
  • Prevent fraud and improve security

Cookies may be categorized as:

Strictly Necessary Cookies

These cookies support functions required for the website to operate, such as security, network management, accessibility, and form functionality.

Analytics Cookies

These cookies help us understand website traffic and visitor behavior. They may record page views, session duration, referring sources, device information, and similar activity.

Functional Cookies

These cookies remember choices or enable optional website features.

Advertising Cookies

If advertising services are used, these cookies or pixels may help measure campaigns, limit repeated advertisements, create audiences, or deliver advertising based on browsing activity.

You can control cookies through your browser settings and, when available, through the website’s cookie-preference tool. Blocking some cookies may affect website functionality.

The website should not activate nonessential analytics or advertising technologies until any consent required in the visitor’s jurisdiction has been obtained.

VII. Analytics and Advertising Services

We may use third-party services such as Google Analytics, Google Tag Manager, Google Ads, Meta advertising tools, call-tracking platforms, or similar technologies.

These providers may collect information about your browser, device, website activity, approximate location, and interactions with advertisements. Their use of information is governed by their respective terms and privacy policies.

Because this is a healthcare website, Vector Spine and Sport will take reasonable steps to avoid sending identifiable health information, appointment details, patient status, treatment selections, or sensitive form contents to analytics or advertising providers unless the disclosure is legally permitted and supported by an appropriate agreement.

HHS has issued specific guidance concerning tracking technologies used by HIPAA-covered entities and business associates. Healthcare organizations should evaluate tracking tools based on the data transmitted and the context in which it is collected. HHS tracking-technology guidance

VIII. How We May Disclose Information

We may disclose personal information in the following circumstances.

Service Providers

We may provide information to companies that perform services for us, such as:

  • Website hosting and maintenance
  • Online scheduling
  • Electronic health records
  • Patient communications
  • Email delivery
  • Text-message delivery
  • Payment processing
  • Analytics
  • Cybersecurity
  • Data storage and backup
  • Professional consulting
  • Billing or revenue-cycle support
  • Document management
  • Call tracking
  • Marketing support

These providers are permitted to use information only as allowed by their contracts and applicable law. When a provider handles protected health information on our behalf, we will use a Business Associate Agreement when HIPAA requires one.

Healthcare, Insurance, and Administrative Activities

When authorized or legally permitted, information may be disclosed to:

  • Healthcare providers involved in your care
  • Health plans or insurance companies
  • Billing and claims administrators
  • Attorneys or other representatives designated by you
  • Employers in connection with authorized occupational services
  • Government agencies responsible for licensing, certification, or healthcare oversight

Clinical information is handled according to the Clinic’s HIPAA Notice of Privacy Practices and applicable law.

Legal and Safety Purposes

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with a law, regulation, subpoena, court order, or other legal process
  • Respond to a lawful government request
  • Protect the rights, safety, or property of the Clinic, our patients, website users, or others
  • Investigate fraud, abuse, security incidents, or unlawful activity
  • Establish or defend a legal claim
  • Fulfill professional, insurance, or regulatory obligations

Business Transactions

If the Clinic is involved in a merger, sale, restructuring, financing, acquisition, or transfer of assets, information may be disclosed as part of that transaction, subject to applicable privacy and healthcare laws.

With Your Direction or Consent

We may disclose information when you direct us to do so or provide valid authorization.

IX. Sale, Sharing, and Targeted Advertising

Vector Spine and Sport does not sell personal information for money.

Some state privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain disclosures involving advertising cookies, pixels, or cross-site behavioral advertising.

If the Clinic uses technology that constitutes a sale, sharing, or use for targeted advertising under applicable law, we will provide the required notice and method for opting out.

Where required, we will also recognize legally valid browser-based opt-out signals, such as Global Privacy Control.

We do not knowingly sell protected health information. Uses and disclosures of protected health information are governed by HIPAA, other healthcare privacy laws, and the Clinic’s Notice of Privacy Practices.

X. Text Messages and Telephone Communications

If you provide a mobile number or ask us to contact you by text, we may send messages concerning:

  • Appointment scheduling
  • Appointment confirmations
  • Rescheduling or cancellation
  • Intake reminders
  • Requested information
  • Administrative or billing matters
  • Service updates
  • Marketing communications, when you have provided any consent required by law

Message and data rates may apply. Message frequency may vary.

You may opt out of nonessential text messages by replying STOP. You may request assistance by replying HELP or contacting the Clinic.

Opting out of marketing texts does not prevent us from sending communications that are necessary for healthcare, safety, billing, legal, or administrative purposes when permitted by law.

Standard text messaging may not be fully secure. Avoid sending detailed medical information by ordinary text unless the Clinic has instructed you to use a secure method.

Consent to receive marketing text messages is not a condition of receiving healthcare services.

XI. Email Communications

Email transmitted over ordinary networks may not be secure. If you choose to communicate with us by email, you acknowledge that information could potentially be intercepted or accessed by others.

We may respond by email when you initiate email communication or request an email response. For sensitive information, we may direct you to a secure portal, telephone call, or another approved communication method.

You may unsubscribe from promotional email by using the unsubscribe link in the message or contacting us. Administrative and service-related communications may continue when permitted by law.

XII. Online Scheduling and External Platforms

Our website may link to an online scheduling service, patient portal, map, social-media account, payment processor, review platform, or other external service.

When you follow one of these links:

  • You may leave the Vector Spine and Sport website.
  • The third party may collect information directly from you.
  • Its privacy policy and terms may apply.
  • Its cookies and tracking technologies may operate independently from ours.
  • Vector Spine and Sport does not control every aspect of the third party’s website or privacy practices.

A link does not mean that we accept responsibility for the third party’s independent practices. Review the privacy policy of each service before submitting information.

XIII. Data Security

We use reasonable administrative, physical, and technical safeguards intended to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

Safeguards may include:

  • Access controls
  • Password protections
  • Multi-factor authentication
  • Encryption where appropriate
  • Secure hosting
  • Vendor-management procedures
  • Employee confidentiality requirements
  • Security monitoring
  • Data backup
  • Incident-response procedures
  • HIPAA-required safeguards where applicable

No website, electronic transmission, or storage system can be guaranteed completely secure. You provide information electronically at your own risk.

If we discover a security incident involving personal information, we will investigate and provide any notices required by applicable law.

XIV. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Providing requested services
  • Maintaining clinical or business records
  • Meeting legal and regulatory obligations
  • Supporting insurance and billing activities
  • Resolving disputes
  • Enforcing agreements
  • Preventing fraud
  • Protecting legal rights

Retention periods vary according to the type of information, the reason it was collected, and applicable healthcare, tax, insurance, employment, professional, and legal requirements.

When information is no longer required, we may delete, destroy, anonymize, or aggregate it in accordance with applicable policies and law.

XV. De-Identified and Aggregated Information

We may create information that has been aggregated or de-identified so that it cannot reasonably be associated with a particular person.

We may use de-identified or aggregated information for:

  • Website analysis
  • Service improvement
  • Operational planning
  • Security monitoring
  • Statistical reporting
  • Business research
  • Other lawful purposes

We will not attempt to re-identify information that is maintained as de-identified except where permitted by law for security, verification, or compliance purposes.

XVI. Children’s Privacy

The website is intended for a general audience and is not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 through the public website without verifiable permission from a parent or legal guardian. If we learn that such information was submitted without appropriate authorization, we will take reasonable steps to delete it.

Parents and guardians may contact the Clinic concerning information submitted by or about a child.

Healthcare information concerning minors may be subject to different access, consent, and confidentiality rules. Those matters are addressed through the clinical intake process and the Clinic’s Notice of Privacy Practices.

XVII. Consumer Privacy Rights

Depending on where you live and which privacy laws apply to Vector Spine and Sport, you may have the right to:

  • Confirm whether we process your personal information
  • Access certain personal information
  • Correct inaccurate information
  • Request deletion
  • Obtain a portable copy of information you provided
  • Opt out of the sale of personal information
  • Opt out of targeted advertising
  • Opt out of certain profiling
  • Withdraw consent where processing is based on consent
  • Appeal the denial of a privacy request
  • Receive equal service without unlawful discrimination for exercising a privacy right

These rights are not absolute. Exceptions may apply when information must be retained for healthcare, legal, security, billing, insurance, recordkeeping, or other lawful purposes.

Some healthcare information may be exempt from state consumer privacy laws because it is governed by HIPAA or other healthcare-specific laws.

Utah Residents

The Utah Consumer Privacy Act provides qualifying Utah consumers with rights that may include confirmation, access, deletion, portability, and the ability to opt out of the sale of personal data or targeted advertising.

The UCPA applies only to businesses meeting specific statutory thresholds, including revenue and data-processing requirements. Vector Spine and Sport will honor rights that apply to its operations and may voluntarily respond to reasonable privacy requests even when a particular statute does not apply. Utah Division of Consumer Protection

XVIII. How to Submit a Privacy Request

To submit a website privacy request, contact Vector Spine and Sport using one of the following methods:

Telephone: 801-456-0352

Mail:
Vector Spine and Sport Chiropractic
Attn: Privacy Request
5882 S 900 E, Suite 201
Murray, Utah 84107

Please clearly state:

  • Your name
  • Your preferred contact method
  • Your relationship with the Clinic
  • The privacy right you wish to exercise
  • The information or service involved
  • Any details reasonably needed to locate the information

To protect your information, we may need to verify your identity before completing a request. We will use information provided for verification only to evaluate and respond to the request.

An authorized agent may submit a request when permitted by law. We may ask for proof of the agent’s authority and may verify the request directly with you.

We will respond within the period required by applicable law. If additional time is legally permitted and reasonably necessary, we will notify you.

XIX. Requests Concerning Medical Records

Requests for medical records, amendments to medical records, confidential communications, restrictions on disclosure, or an accounting of certain disclosures should be made through the process described in the Clinic’s HIPAA Notice of Privacy Practices.

A request made under this Website Privacy Policy does not replace a formal HIPAA request.

For privacy or security concerns involving protected health information, contact the Clinic’s designated Privacy Officer at the telephone number or mailing address listed above.

If you believe a HIPAA-covered entity or business associate violated applicable HIPAA Privacy, Security, or Breach Notification Rules, you may also submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights. HHS OCR Complaint Portal

Vector Spine and Sport will not retaliate against a person for filing a good-faith privacy complaint or exercising a lawful privacy right.

XX. Do Not Track and Global Privacy Control

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted standard for responding to Do Not Track signals, the website may not respond to every such signal.

Where required by applicable law, we will process recognized universal opt-out mechanisms, such as Global Privacy Control, as a request to opt out of qualifying sales, sharing, or targeted advertising associated with that browser or device.

XXI. International Visitors

Vector Spine and Sport is located in Utah and primarily serves patients in the United States.

If you access the website from outside the United States, you understand that information may be processed and stored in the United States, where privacy laws may differ from those in your country.

The website is not specifically directed to residents outside the United States, and it is not intended to establish that Vector Spine and Sport offers services or is subject to regulation in every jurisdiction from which the website may be accessed.

XXII. Third-Party Links

The website may contain links to:

  • Online scheduling platforms
  • Social-media services
  • Maps and navigation services
  • Review websites
  • Medical research
  • Government resources
  • Professional organizations
  • Other websites

We are not responsible for the content, availability, accessibility, security, or privacy practices of an independently operated website. A link does not constitute an endorsement of every statement, service, or privacy practice found on that website.

XXIII. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technologies, vendors, legal obligations, or privacy practices change.

The revised policy will be posted on this page with an updated “Last Updated” date. If a change materially affects how we use previously collected information, we will provide any additional notice or obtain any consent required by law.

You should review this page periodically.

XXIV. Contact Vector Spine and Sport

For questions about this Privacy Policy or the Clinic’s website privacy practices, contact:

Vector Spine and Sport Chiropractic
Attn: Privacy Officer
5882 S 900 E, Suite 201
Murray, Utah 84107

Telephone: 801-456-0352
Website: https://www.vectorspineandsport.com

For questions involving protected health information, medical records, or HIPAA rights, request a copy of the Clinic’s current Notice of Privacy Practices or ask to speak with the Privacy Officer.