Effective Date: May 22, 2026
Genesis Back & Neck, LLC
Introduction
Genesis Back & Neck, LLC (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use our services (“Services”), including when you visit our website at https://genesisback.com, or any website of ours that links to this Privacy Policy, or engage with us in other related ways, including any sales, marketing, or events. Please read this Privacy Policy carefully to understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at privacy@genesisback.com.
Information We Collect
Personal Information Provided by You. When provided voluntarily by individuals, we may collect personal information such as names, addresses, email addresses, mailing addresses, and phone numbers. The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.
Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: health data. As a healthcare provider, we may collect health-related information that is subject to additional protections under the Health Insurance Portability and Accountability Act (“HIPAA”). HIPAA sets standards for the privacy and security of protected health information held by covered entities and their business associates, and is enforced by the Department of Health and Human Services (“HHS”). Please note that this Privacy Policy governs information collected through our website and online Services and does not replace or modify our HIPAA Notice of Privacy Practices, which governs the use and disclosure of your protected health information (“PHI”) for treatment, payment, and health care operations purposes. A separate Notice of Privacy Practices is available upon request or at our office locations.
Non-Personal Information. For statistical and analytical purposes, we may also collect non-personal information such as browser type, operating system, and IP address. We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.
The information we automatically collect includes:
Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. This log data may include your IP address, device information, browser type, and settings and information about your activity in the Services, such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take.
Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Third-Party Information. We do not receive personal information from third parties.
How We Use Your Information
We process your personal information for a variety of purposes, including but not limited to:
- Providing and personalizing our services, including to deliver and facilitate delivery of services to you.
- Processing transactions and delivering products.
- Enabling user-to-user communications, if you choose to use any of our offerings that allow for communication with another user.
- Sending periodic emails related to your orders, inquiries, or our marketing and promotional communications, if in accordance with your marketing preferences. You can opt out of our marketing emails at any time (see “Your Choices” below).
- Requesting feedback and contacting you about your use of our Services.
- Delivering targeted advertising tailored to your interests, location, and more.
- Posting testimonials on our Services that may contain personal information.
- Evaluating and improving our Services, products, marketing, and your experience, including identifying usage trends and determining the effectiveness of our promotional campaigns.
- Complying with our legal obligations, responding to legal requests, and exercising, establishing, or defending our legal rights.
We process your information only when we have a valid legal reason to do so.
Disclosure of Information
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as set forth in this Privacy Policy.
Third-Party Service Providers. We may share information with third-party vendors, service providers, contractors, or agents (“third parties”) who assist us in operating our website, conducting our business, or servicing you, and who require access to such information to do that work. We have contracts in place with our third parties that are designed to help safeguard your personal information, meaning they cannot do anything with your personal information unless we have instructed them to do so. They will not share your personal information with any organization apart from us and commit to protect the data they hold on our behalf and to retain it for the period we instruct. The categories of third parties we may share personal information with include: Ad Networks, Cloud Computing Services, Data Analytics Services, Payment Processors, Performance Monitoring Tools, Sales & Marketing Tools, Social Networks, Affiliate Marketing Programs, Communication & Collaboration Tools, and Data Storage Service Providers.
Mobile Information: “Your personal information may be shared with third parties to deliver healthcare-related messages and services. Your personal information will not be shared with third parties for marketing or promotional purposes without your express consent.”
Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Legal Compliance. We may disclose information when required by law or in response to lawful requests by public authorities. Data disclosure laws vary between countries, and even within countries, they can be subject to federal, state/provincial, and local regulations.
Google Analytics. We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include Remarketing with Google Analytics, Google Display Network Impressions Reporting, and Google Analytics Demographics and Interests Reporting. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can also opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. For more information on Google’s privacy practices, please visit the Google Privacy & Terms page.
Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g., Google Maps API, Places API).
Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
HIPAA Compliance. To the extent that any information collected through this website constitutes protected health information (“PHI”) under HIPAA, we will handle, use, and disclose such information in accordance with HIPAA and our Notice of Privacy Practices. We will not use or disclose your PHI for marketing purposes or sell your PHI without your prior written authorization, as required by HIPAA.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies (like web beacons and pixels) to enhance your experience on our website and to access or store information. You can control cookies through your browser settings. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove or reject cookies, this could affect certain features or services of our Services. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.
Your Choices
You have the right to access, correct, or delete your personal information. To exercise these rights, please contact us at privacy@genesisback.com.
Withdrawing Your Consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the contact details provided in the “Contact Us” section below. Please note that withdrawal of consent will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Opting Out of Marketing and Promotional Communications. You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us at privacy@genesisback.com. You will then be removed from the marketing lists. However, we may still communicate with you for service-related messages necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.
Data Retention
We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Security
We implement reasonable security measures to protect your information, including appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no method of transmission over the Internet or electronic storage is completely secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk, and you should only access the Services within a secure environment.
Children’s Privacy
We do not knowingly solicit data from or market to children under 18 years of age. Under the Children’s Online Privacy Protection Act (“COPPA”), the online collection of personal information from children under 13 requires obtaining parental consent, and is enforced by the Federal Trade Commission. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@genesisback.com.
Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.
United States Residents — Specific Privacy Rights
If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you are granted specific rights regarding access to your personal information.
Categories of Personal Information Collected. We have collected the following categories of personal information in the past twelve (12) months: Identifiers (e.g., contact details, real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, IP address, email address, and account name); Personal information as defined in the California Customer Records statute (e.g., name, contact information, education, employment, employment history, and financial information); Protected classification characteristics under state or federal law (e.g., gender and date of birth); Internet or other similar network activity (e.g., browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements); Inferences drawn from collected personal information (e.g., preferences and characteristics); and Sensitive personal information (e.g., health data).
Use and Sharing of Personal Information. We collect and share your personal information through targeting cookies/marketing cookies, social media cookies, and beacons/pixels/tags. We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration, which is not considered to be “selling” of your personal information.
We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months: Identifiers; Personal information as defined in the California Customer Records law; Characteristics of protected classifications under state or federal law; Internet or other electronic network activity information; Inferences drawn from collected personal information; and Sensitive personal information.
California Residents
California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California.
CCPA Privacy Notice. Under the California Consumer Privacy Act (“CCPA”), you have the following rights with respect to your personal data: the right to request deletion of the data; the right to be informed and to know what personal information we collect, the categories of personal information, the purposes for which the collected personal information is used, whether we sell or share personal information, and the specific pieces of personal information we collected about you; the right to non-discrimination for the exercise of your privacy rights; and the right to limit use and disclosure of sensitive personal information. The CCPA is enforced by the California Attorney General.
To exercise your right to limit use and disclosure of sensitive personal information, please email privacy@genesisback.com or submit a data subject access request. You can opt out from the selling or sharing of your personal information by disabling cookies in Cookie Preference Settings and clicking on the Do Not Sell or Share My Personal Information link on our homepage.
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.
You may also object to the processing of your personal information, request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information. You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
Colorado Residents
Under the Colorado Privacy Act (“CPA”), you have the following rights: the right to be informed whether or not we are processing your personal data; the right to access your personal data; the right to correct inaccuracies in your personal data; the right to request deletion of your personal data; the right to obtain a copy of the personal data you previously shared with us; and the right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. You can opt out from the selling of your personal data, targeted advertising, or profiling by disabling cookies in Cookie Preference Settings. To submit a request to exercise any of the other rights described above, please email privacy@genesisback.com or submit a data subject access request.
If we decline to take action regarding your request and you wish to appeal our decision, please email us at privacy@genesisback.com. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
Connecticut Residents
Under the Connecticut Data Privacy Act (“CTDPA”), you have the following rights: the right to be informed whether or not we are processing your personal data; the right to access your personal data; the right to correct inaccuracies in your personal data; the right to request deletion of your personal data; the right to obtain a copy of the personal data you previously shared with us; and the right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling. You can opt out from the selling of your personal data, targeted advertising, or profiling by disabling cookies in Cookie Preference Settings. To submit a request to exercise any of the other rights described above, please email privacy@genesisback.com or submit a data subject access request.
If we decline to take action regarding your request and you wish to appeal our decision, please email us at privacy@genesisback.com. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
Utah Residents
Under the Utah Consumer Privacy Act (“UCPA”), you have the following rights: the right to be informed whether or not we are processing your personal data; the right to access your personal data; the right to request deletion of your personal data; the right to obtain a copy of the personal data you previously shared with us; and the right to opt out of the processing of your personal data if it is used for targeted advertising or the sale of personal data. You can opt out from the selling of your personal data or targeted advertising by disabling cookies in Cookie Preference Settings. To submit a request to exercise any of the other rights described above, please email privacy@genesisback.com or submit a data subject access request.
Virginia Residents
Under the Virginia Consumer Data Protection Act (“VCDPA”), “consumer” means a natural person who is a resident of the Commonwealth acting only in an individual or household context and does not include a natural person acting in a commercial or employment context. You have the following rights with respect to your personal data: the right to be informed whether or not we are processing your personal data; the right to access your personal data; the right to correct inaccuracies in your personal data; the right to request deletion of your personal data; the right to obtain a copy of the personal data you previously shared with us; and the right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling.
You can opt out from the selling of your personal data, targeted advertising, or profiling by disabling cookies in Cookie Preference Settings. You may also contact us by email at privacy@genesisback.com or submit a data subject access request. If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.
Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary, and we will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.
If we decline to take action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at privacy@genesisback.com. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint.
Applicable Laws and Regulatory Framework
This Privacy Policy is designed to comply with applicable federal and state laws governing data privacy. The following laws may apply to our collection and processing of your information:
Federal Trade Commission Act (“FTC Act”). The FTC Act broadly prohibits unfair and deceptive practices in commerce, including the unauthorized disclosure of personal information, and is enforced by the Federal Trade Commission.
Health Insurance Portability and Accountability Act (“HIPAA”). As a healthcare provider, Genesis Back & Neck, LLC may be subject to HIPAA, which applies to protected health information held by covered entities and their business associates. HIPAA sets standards for the privacy and security of health information and is enforced by the Department of Health and Human Services (“HHS”). To the extent HIPAA applies, this Privacy Policy supplements but does not replace our HIPAA Notice of Privacy Practices.
Children’s Online Privacy Protection Act (“COPPA”). COPPA regulates the online collection of personal information from children under 13 and requires obtaining parental consent. It is enforced by the FTC.
California Consumer Privacy Act (“CCPA”). The CCPA grants California residents specific privacy rights and imposes obligations on businesses handling their personal information. It is enforced by the California Attorney General.
Gramm-Leach-Bliley Act (“GLBA”). To the extent applicable, GLBA requires financial institutions to protect the privacy and security of consumer financial information.
Please be advised these laws are subject to change, and new regulations may be introduced. We are committed to complying with applicable data privacy laws and will update this Privacy Policy as necessary to reflect changes in law or our practices.
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. The updated version will be indicated by an updated “Effective Date” and will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.
Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Genesis Back & Neck, LLC
Privacy Officer: Tammy Gaona, 3721 S. Stonebridge Dr., Ste 604, McKinney, TX 75070. Phone: (817) 328-1922
You may also reach us at privacy@genesisback.com.
How Can You Review, Update, or Delete the Data We Collect from You?
Based on the applicable laws of your country or state, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please fill out and submit a data subject access request or contact us using the information provided in the “Contact Us” section above.