Legal
Privacy policy
In short
- This website uses no cookies and no advertising pixels. We do not sell your information.
- Your answers in the First Light guide stay in your browser until you ask us to call you.
- When you ask for a call, your answers, first name and phone number go to our care team over an encrypted connection, and nowhere else.
- To see which ads work, we count visits and tell Google only that an ad click led to a request or a call. Never your name, number or answers.
Who we are and what this covers
Nationwide IOP Center [VERIFY: full legal entity name and type, e.g. LLC or Inc.] ("we", "us") runs an outpatient mental health program at 1544 Canada Blvd, Glendale, CA 91208. This policy covers this website, the First Light guide on it, and the calls and texts that follow a request you make here.
Once you become a patient, your health information is also protected by federal and California law. Our Notice of Privacy Practices explains how we use and share it and your rights.
What we collect
When you ask us to call you
When you send the callback form at the end of the First Light guide, we receive:
- your first name, phone number and the best time to call;
- your answers in the guide: who the care is for, what has been hardest lately, the format and time that fit, your US state if you chose online care, and your insurance carrier and plan type;
- your agreement that we may call or text you about the request;
- a short code for the page you used (for example "g1"), and, if you came from an ad, the campaign code and the ad's click ID (a random string the ad platform adds to the link).
When you browse
Our pages send a small count to our own server when a page loads, when someone starts the guide, moves through a step, taps our phone number, or sends a request. Each count holds only the event's name, the page code, a campaign code and, if present, an ad click ID. It holds no IP address, no device or browser details, no page address, and no answers.
When you call or text us
Our phone system records the number you call from and the time of the call, like any phone line.
What our web host sees
Like every website, our pages are delivered by a hosting company, which processes basic technical data (such as IP address and browser type) to send the page to you and to keep the service secure. Your guide answers and the callback form never pass through the host: they go straight from your browser to our secure server.
What we do not collect
- No cookies, and no advertising or social media pixels, tags or tracking scripts.
- No Google Analytics, no Meta Pixel and no session recording.
- No guide answers in the page address, in browser storage or in our counts.
- No insurance member ID, date of birth, email address or diagnosis.
To remember which ad brought you here while you move between pages, your browser keeps the ad click ID and campaign code in session storage, which is cleared when you close the tab. The thank-you page also reads the call time you picked from there. Nothing else is stored on your device.
How we use it
- To call or text you back, answer your questions and check your insurance benefits, if you ask us to.
- To prepare for your first conversation, so you don't have to repeat yourself.
- To know which pages and ads lead to requests, so we spend less on ads that don't help people find us.
- To keep the site and our systems secure, stop spam and meet our legal duties.
We do not use your information to build advertising profiles, and we do not sell it or share it for targeted advertising.
Who we share it with
Only service providers that help us run the program, each under a contract that limits what they may do with your information:
| Provider | What they do | What they receive |
|---|---|---|
| Google Cloud | Receives callback requests, stores them and sends them to our care team, under a Business Associate Agreement | Your request and the counts described above |
| Google Workspace | Our email, where the care team reads requests, under a Business Associate Agreement | Your request |
| Our web host | Delivers the pages | Basic technical data, never your answers or contact details |
| Google Ads | Shows our ads and reports which ones work | Only an ad click ID, the word "Lead" or "Call click" and the time (see the next section) |
We may also share information when the law requires it, to protect someone's safety, or as part of a sale or merger of our practice, under the same promises made here.
Ads and measurement
If you reach us from a Google ad and then send a request or tap our phone number, we tell Google Ads only the ad's click ID, the type of action ("Lead" or "Call click") and when it happened. This lets Google show our ads to fewer people who are not looking for this kind of care. We never send Google your name, phone number, email, answers, or the pages you read, and we do not use Google's "enhanced conversions" or customer lists.
We send nothing back to Meta (Facebook and Instagram). If you came from one of our Meta ads, the ad's click ID travels only with your request to our care team, so we know where you found us.
We do not use remarketing: you will not be followed around the web with our ads because you visited this site.
How long we keep it
- Callback requests on our server are deleted automatically after 90 days.
- Counts are kept as daily totals that cannot be linked to a person.
- Ad click IDs for measurement are deleted after 90 days.
- If you become a patient, your records are kept as long as the law requires for medical records.
How we protect it
Requests travel over an encrypted connection (HTTPS) and are stored encrypted. Only our care team can read them. Our server keeps no IP addresses with your request and its logs hold no names, numbers or answers. No system is perfectly secure, but we follow the safeguards the HIPAA Security Rule asks of health care providers.
Your choices and rights
- You never have to use the guide or the form. You can always just call us.
- You can ask us to stop calling or texting you at any time. Reply STOP to a text or tell us on the phone.
- You can ask what we hold about you, ask us to correct it, or ask us to delete it, by calling (747) 599-0059 or writing to us (see Contact us). We may need to confirm it is you, and the law may require us to keep patient records.
California residents
California law, including the Confidentiality of Medical Information Act, protects medical information you share with us. Where the California Consumer Privacy Act applies, you have the right to know what personal information we collect, use and disclose, to have it deleted or corrected, and to not be treated differently for using these rights. We do not sell or share personal information as those terms are defined in that law, and we do not use sensitive personal information to infer characteristics about you. You can make a request yourself or through an authorized agent.
Washington, Nevada and other states
Some states give extra protection to health-related information. Read our Consumer Health Data Privacy Policy for how we handle it and how to use your rights.
Adults only
Our program serves adults 18 and over. This site is not meant for children under 13 and we do not knowingly collect their information. If you contact us about a teenager, we use the information only to help you find teen care elsewhere.
Changes to this policy
If we change how we handle information, we will update this page and the effective date at the top before the change takes effect.
Contact us
[VERIFY: Privacy Officer name or title]
Nationwide IOP Center [VERIFY: full legal entity name and type, e.g. LLC or Inc.]
1544 Canada Blvd, Glendale, CA 91208
Phone: (747) 599-0059
Email: [VERIFY: privacy contact email]