Privacy Policy

Last Updated: April 30, 2025

1. Introduction

Ohana Behavioral Group ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with our services through the Data Exchange Framework (DxF).

2. Data Collection

We may collect the following types of personal data through the DxF:

• Personal Identification Information: Name, address, email address, phone number, date of birth, and other identifiers.

• Health Information: Medical history, treatment records, medication details, and other health-related information.

• Demographic Information: Age, gender, race, ethnicity, and language preferences.

• Usage Data: Information about how you interact with our services, including access times, pages viewed, and other usage details.

• De-identified Information: Data that has been stripped of personal identifiers so that it cannot be used to identify an individual.

3. Use of Data

We use the collected data for the following purposes:

• Providing Services: To deliver and improve our behavioral health services.

• Coordination of Care: To share relevant health information with other healthcare providers involved in your care.

• Compliance: To comply with legal obligations and regulatory requirements.

• Communication: To contact you with updates, reminders, and other information related to your care.

• Research and Analysis: To conduct research and analyze data to improve our services and health outcomes.

• De-identified Information: To use for research, statistical analysis, and other purposes where individual identification is not necessary.

4. Data Disclosure

We may disclose your personal data under the following circumstances:

• With Your Consent: We may share your data with third parties when we have your explicit consent.

• Healthcare Providers: To other healthcare providers involved in your care for coordination and treatment purposes.

• Legal Requirements: To comply with legal obligations, court orders, or government requests.

• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

• De-identified Information: We may disclose de-identified information to third parties for research, statistical analysis, and other purposes where individual identification is not necessary.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. These measures include encryption, access controls, and regular security assessments.   We need information about how long the data is kept for.  Do we even know how long it is protected for?  Is that something we can figure out?

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can request access to your personal data we hold.

• Correction: You can request corrections to any inaccurate or incomplete data.

• Deletion: You can request the deletion of your personal data under certain conditions.

• Restriction: You can request the restriction of processing your data under certain conditions.

• Objection: You can object to the processing of your data under certain conditions.

• Consent Management: You can re-affirm or withdraw your consent at any time. If you withdraw your consent, we will cease processing your personal data for the purposes you previously agreed to, and we will delete or anonymize your data unless we have a legal obligation to retain it.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance the user experience, provide personalized content, analyze site traffic, and ensure the proper functioning of the website. By using our website, you consent to our use of cookies as outlined below.

Types of Cookies We Use:

1. bSession
   This cookie is used to track a user's session on the website. It helps to remember your interactions with the website during your visit to improve your experience.

2. hs
   This is a session cookie used to ensure the integrity of the website’s security. It helps us verify that the session is valid and secure.

3. server-session-bind
   This cookie binds a session to a specific server. It ensures that a user’s data remains consistent across different server requests during their session.

4. svSession
   This cookie helps us remember your settings and preferences. It can also help track the number of visitors to the site and provide analytics.

5. XSRF-Token
   This cookie is a security feature used to prevent Cross-Site Request Forgery (CSRF) attacks. It helps verify that the request made to the server is from the legitimate user.

How We Use Cookies

• Performance: Cookies like bSession, hs, and server-session-bind help us track how visitors interact with our website, ensuring it works efficiently.

• Security: The hs and XSRF-Token cookies are specifically used to enhance security and prevent unauthorized access or attacks.

• User Preferences: Cookies like svSession allow us to remember your preferences and settings for a personalized experience across sessions.

Managing Your Cookies

You can control the use of cookies through your browser settings. Most browsers allow you to manage or block cookies, but please note that disabling cookies may affect the functionality of our website. For more information on how to manage cookies, please refer to your browser's help section.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website and updating the "Last Updated" date.

7. Your Consent

By using our site, you consent to our website's privacy policy.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Ohana Behavioral Group, Inc.

9901 Paramount Blvd, Suite 222

Downey, CA 90240

Email address: admin@ohanabehavioralgroup.com

562-454-7998