Privacy Policy
Effective date: January 1, 2026 | Last updated: January 1, 2026
Advanced Chiropractic Rehabilitation (“ACR,” “we,” “us,” or “our”) operates the website located at nickbrockdc.com. This privacy policy explains what information we collect, how we use it, who we may share it with, and what rights you have — including the rights available to California residents under the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA).
If you have questions or requests related to your privacy, contact us at:
Advanced Chiropractic Rehabilitation1625 E Thousand Oaks Blvd, Suite E
Thousand Oaks, CA 91362
Phone: (805) 496-4469
Email: [email protected]
1. Information we collect
Information you give us directly
When you fill out a contact form, request an appointment, or submit any form on this site, we may collect your name, email address, phone number, and any message or health concern you voluntarily include. If you describe a health condition or symptom in a free-text field, that information may constitute protected health information (PHI) — see the HIPAA-aware notice in section 7.
Booking and appointment data
If you book through an online scheduling tool integrated with this website, that tool collects your name, contact information, and appointment details. See “Third-party processors” below for the relevant service.
Automatically collected data
Like virtually every website, this site automatically logs certain technical data when you visit: IP address, browser type, operating system, referring URL, pages visited, and time on site. This data is collected through cookies, pixels, and analytics scripts described in the next section. It does not by itself identify you by name.
2. Cookies and tracking technologies
This site uses the following tracking technologies. You may opt out as described in section 5.
Google Tag Manager and Google Analytics 4 (GA4)
We use Google Tag Manager to manage analytics and marketing tags. GA4 collects aggregated, anonymized data about how visitors use the site — pages viewed, traffic sources, session duration, and similar metrics. Google may use this data in accordance with Google’s privacy policy. We do not send personally identifiable information to Google Analytics.
Meta (Facebook) Pixel
We may use the Meta Pixel to measure the effectiveness of advertising on Facebook and Instagram, and to build audiences for those platforms. The Pixel collects standard events (e.g., page views, contact form initiations). Meta’s use of data collected through its Pixel is governed by Meta’s data policy.
Essential cookies
Our website platform (WordPress, hosted on WP Engine) sets functional cookies required for the site to operate — for example, to maintain form sessions and prevent duplicate submissions. These cookies do not track you across other sites and are not used for advertising.
3. How we use your information
We use the information collected for the following purposes:
- To respond to inquiries and appointment requests — when you contact us, we use your name and contact details to reply.
- To schedule and confirm appointments — appointment data is used to manage your visit and send appointment reminders.
- To improve the website — aggregated analytics data helps us understand which content is useful and where the site can be improved.
- To measure advertising effectiveness — conversion data from the Meta Pixel and Google Ads tags tells us whether our advertising reaches people who later contact the practice.
- To comply with legal obligations — we retain records as required by applicable law, including healthcare recordkeeping regulations.
We do not sell your personal information. We do not use automated profiling or automated decision-making that produces legal or similarly significant effects about you.
4. How we share your information
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share information in the following limited circumstances:
Service providers (processors)
We work with third-party companies that process data on our behalf under appropriate data-processing agreements:
- WP Engine — website hosting and infrastructure. Data is stored on WP Engine’s U.S.-based servers. See WP Engine’s privacy policy.
- Review Wave — patient review and reputation management platform. May send appointment follow-up messages. See Review Wave’s privacy policy for how they handle contact data.
- Google LLC — analytics (GA4), advertising (Google Ads), and tag management (Google Tag Manager).
- Meta Platforms, Inc. — advertising measurement via the Meta Pixel (Facebook/Instagram).
- Review Wave — the online scheduling and patient-forms platform integrated with this site. Appointment requests and new-patient intake forms are submitted through Review Wave and processed on their systems.
Legal requirements
We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of ACR, our patients, or others.
Business transfers
In the event of a sale, merger, or transfer of the practice, patient and contact records may transfer to the successor entity, subject to applicable healthcare privacy law.
5. Your choices and opt-out rights
Cookies and analytics
Most web browsers allow you to refuse or delete cookies through browser settings. Opting out of cookies may affect the functionality of some site features. You can also opt out of Google Analytics data collection by installing the Google Analytics opt-out browser add-on.
Meta Pixel
To opt out of interest-based advertising from Meta, visit Facebook Ad Preferences or use the Digital Advertising Alliance’s opt-out tool at optout.aboutads.info.
Marketing emails and text messages
If you receive appointment reminders or follow-up communications from us or our service providers, you may opt out by replying STOP (for texts) or by clicking the unsubscribe link (for emails).
6. California resident rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the following rights:
- Right to know — you may request a disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purpose, and the categories of third parties with whom we share it.
- Right to delete — you may request that we delete personal information we have collected, subject to certain exceptions (e.g., information needed to complete a transaction or comply with a legal obligation).
- Right to correct — you may request that we correct inaccurate personal information we hold about you.
- Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising as defined under CPRA.
- Right to limit use of sensitive personal information — to the extent we collect sensitive personal information (which may include health information you voluntarily submit), you may request that we limit its use to what is necessary to perform the services you requested.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
To submit a CCPA/CPRA request, contact us at [email protected] or call (805) 496-4469. We will verify your identity before processing the request and respond within 45 days as required by law.
7. HIPAA-aware notice
Advanced Chiropractic Rehabilitation is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). If you submit health information through a contact form or online booking tool on this site, that information may constitute protected health information (PHI) and will be handled in accordance with our HIPAA Notice of Privacy Practices, which is provided to patients at the time of care. Our Notice of Privacy Practices governs how we use and disclose PHI for treatment, payment, and healthcare operations purposes.
This website privacy policy covers the collection of data through this website as a marketing and scheduling channel; it does not replace or supersede the practice’s HIPAA Notice of Privacy Practices.
To receive a copy of our Notice of Privacy Practices, please contact our office or ask at your visit.
8. Data retention
We retain contact form submissions and inquiry records for a reasonable period necessary to respond to your request and maintain a record of communications. Patient health records are retained in accordance with California law and applicable healthcare regulations. Analytics data is retained according to the default retention settings of each analytics platform (typically 14 months for GA4).
9. Data security
We implement reasonable technical and organizational measures to protect information collected through this site — including SSL/TLS encryption, managed hosting through WP Engine, and access controls on data systems. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security.
10. Children’s privacy
This website is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information through this site, please contact us and we will delete it promptly.
11. Links to third-party sites
This site may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any site you visit.
12. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the “last updated” date at the top of this page. Material changes will be communicated by a notice on the site homepage or via direct communication where appropriate. Your continued use of this website after a posted change constitutes acceptance of the updated policy.
13. Contact for privacy requests
For any privacy question, request, or complaint, contact us directly:
Advanced Chiropractic RehabilitationAttn: Privacy
1625 E Thousand Oaks Blvd, Suite E
Thousand Oaks, CA 91362
Phone: (805) 496-4469
Email: [email protected]