Updated as of March 07, 2025
The privacy of your personal information is important to us, and we take steps to protect the privacy and security of your information. This Online Privacy Policy (“Policy”) will tell you what information, including personal information, we may collect from you via the websites, mobile apps and other online services, We maintain information confidentiality and comply with applicable regulatory requirements.
This privacy policy (“Policy”) covers our online privacy practices with respect to use and/or disclosure of information we may collect from you when you access or use our websites (“Site” or “Sites”) and any other websites or applications we may provide that link to this Privacy Policy (collectively, our “Services”).
Information Not Covered by this Privacy Policy
The Services are provided by the subsidiaries of BHP Management Holdings, LLC (“BHP”) which is a holding company that operates through its subsidiaries including Bradford Health Services, LLC. All healthcare and management operations are conducted by subsidiaries of BHP. Any references to “Bradford”, “Bradford facilities”, or “we,” “us,” “our” or “Company” on our sites and in our materials that relate to healthcare or management operations are referring to BHP subsidiaries, including Bradford. (“we,” “us,” or “our”). Unless otherwise expressly stated herein, this Privacy Policy does not apply to information collected through other means, such as by telephone or in person or by other third parties that are not part of our Services. Please review our privacy practices, email our privacy team, or write to us at the address below if you have any questions.
Bradford Health Services, LLC
Attn: Privacy Requests
2101 Magnolia Avenue, Suite 518
Birmingham, Alabama 35205
This Privacy Policy does not apply to information that would be considered “Protected Health Information” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) or “Patient Identifying Information” as defined under 42 C.F.R. Part 2. The use and disclosure of Protected Health Information and/or Patient Identifying Information is set forth in our Notice of Privacy Practices, which can be accessed at the bottom our sites.
Information Collected Through the Website
Our Website may include pages that permit you the opportunity to provide us with Personal Information about yourself. As used in this Privacy Policy, “Personal Information” means any information that may be used, either alone or in combination with other information, to personally identify an individual as defined by applicable state laws as noted below. We collect certain information, including Personal Information, from and about our Website users in three ways:
- Directly from you;
- Directly from our web server logs; or
- Cookies and web beacons.
Information Provided by You
We and our service providers collect Personal Information through online forms to provide certain features of the Services to you. For example, if applying for a job through the Site, we may request you to fill out a form with information such as your name, e-mail address, phone number, and work experience. If you do not provide the information required to submit the forms, we may not be able to provide you with related features and Services. In some cases, you may have the opportunity to enter into our secure forms any content that you choose. You are responsible for such content and we reserve the right to use such content as part of our Services.
Web Server Logs
When you access or use our Services, we may track information to administer our Services and analyze its usage. Examples of information we may track include, without limitation:
- Your internet protocol address;
- The kind of browser or computer you use;
- Number of links you click within our Services;
- State or country from which you accessed our Services;
- Date and time of your visit;
- Name of your internet service provider;
- Third party websites you linked to from our Services; and
- Pages or information you viewed on our Services.
We use this information to analyze and improve our Services, monitor traffic and usage patterns for information security purposes, and to help make our Services more useful.
Cookies and Web Beacons
A “cookie” is a small text file that may be transferred to your computer’s hard drive to personalize our services for you and collect information regarding usage of our Services. Each computer is assigned a different cookie that contains a random, unique identifier. Your browser software can be set to warn you of cookies or reject all cookies. Most browsers offer instructions on how to reset the browser to reject cookies in the “Help” section of the toolbar. If you reject our cookies, this may disable some of the functionality of our Services and you may not be able to use certain services.
Cookies, to the best of our knowledge, cannot be used to run programs or deliver viruses to your computer. One of the primary purposes of cookies is to provide a convenience feature to save you time. For example, if you personalize a web page, or navigate within a website, a cookie helps the website to recall your specific information on subsequent visits. This simplifies the process of delivering relevant content and eases website navigation by providing and saving your preferences and login information as well as providing personalized functionality.
We use Google Analytics, a web analytics service provided by Google LLC, on some of our Sites to help us analyze the traffic and user activity on our Site. Please see Google’s Privacy and Terms for more information on how Google Analytics processes Personal Information. By using a browser plugin provided by Google, you can opt out of Google Analytics for the web. You can opt out of Google Analytics through the Cookie Preferences link found in the footer of our websites.
We may display content from third-party platforms or services that allow you to view their hosted content directly from the pages of our Site and interact with them. For example, we use YouTube, a video sharing and social media platform provided by Google LLC, to embed video content on our Site. Google’s Privacy Policy explains how YouTube/Google treat your personal data and protect your privacy when you provide your personal data in connection with your access and use of their services.
Some of features of our Services (such as social media widgets that allow you to share content) may use cookies or other methods to gather information regarding your use of the Services and may combine the information in these cookies with any of Personal Information about you that they may have. The use of such information by a third-party depends on the privacy policy of that third-party.
A “web beacon,” “clear GIF,” “web bug,” or “pixel tag” is a tiny graphic file with a unique identifier that is similar in function to a cookie, but would allow us to count the number of users that have visited certain pages or screens of our websites, and to help determine the effectiveness of promotional or advertising campaigns. When used in HTML-formatted email messages, web beacons can tell the sender whether and when the email has been opened. In contrast to cookies, which may be stored on your computer’s hard drive, web beacons are typically embedded invisibly on pages or screens. We may use web beacons in providing the Services.
We reserve the right to share aggregated site statistics monitored by cookies and web beacons with our affiliates and partner companies. We treat the information of everyone who comes to our Services in accordance with this Privacy Policy.
Control of Cookies
You can manage your cookie preferences with us by clicking the Cookie Preferences link on our Site and customizing your cookie choices where applicable. The Cookie Preferences tool will record when you have consented to cookies and may ask for consent periodically to ensure users stay up to date with changes to our cookie and privacy practices. The Cookie Preferences tool controls the advertising, analytics, and performance cookies set by using the Site. Essential cookies cannot be disabled.
Most browsers are set to accept cookies by default. However, you can remove or reject cookies in your browser’s settings. Please be aware that such action could affect the availability and functionality of the Site. For more information on how to control cookies, check your browser or device’s settings for how you can control or reject cookies, or visit the following links:
- Apple Safari
- Google Chrome
- Microsoft Edge
- Microsoft Internet Explorer
- Mozilla Firefox
- Android (Chrome)
- iPhone or iPad (Chrome)
- iPhone or iPad (Safari)
Geolocation data
We do not collect precise information (e.g., GPS data; latitude and longitude) concerning the location from which you access our Services, but we collect information on your region or postal code to help us gather information useful for improving the relevance of our content and securing our Services.
Third-party Advertising
We may allow third-party advertising companies to serve ads when you access or use our Services. These companies use non-personally identifiable information regarding your access and use of our Services and other websites, such as pages viewed, date and time of your visit, and number of times you have viewed an ad (but not your name, address, or other personal information), to serve ads to you on our Services and other websites that may be of interest to you. In the course of serving advertisements to our Services, our third-party advertiser may place or recognize a unique cookie on your browser. In addition, we or other third-party advertiser, may use web beacons to help manage our online advertising. This allows us or a third-party advertiser to learn which banner ads bring users to our Services.
We use Google Ads, the Google Marketing Platform and related marketing and advertising services provided by Google, LLC in connection with our Site and general corporate advertising and marketing operations for purposes of, among other things, online advertising, which includes remarketing, re-engagement, or similar audience and advertising and marketing features. You can control the information Google uses to show you ads by changing your Google Ad Personalization Settings. Additionally, you can learn more about Google ad personalization and additional controls available to you by visiting Google Ad Help.
We use X Ads, an advertising and analytics service provided by X Corp., in connection with our Site to run advertising and marketing campaigns on X (formerly known as Twitter). You can opt out of X’s interest-based advertising through an applicable opt-out mechanism specified by X.
We use Facebook Ads, Instagram Ads and related services provided by Meta Platforms, Inc. (“Meta”) in connection with our Site to run advertising and marketing campaigns on Facebook, Instagram, and related services provided by Meta. Meta’s Cookie Policy explains how Meta uses data to show you ads and how you can control usage.
We use LinkedIn Ads and related services provided by LinkedIn Corporation to run advertising and marketing campaigns on LinkedIn. LinkedIn’s Cookie Policy explains how LinkedIn uses LinkedIn Members data to show you ads and how you can control usage.
You can learn about additional steps that you may take to opt out of interest-based advertising when browsing the web by visiting National Advertising Initiative (NAI) Consumer Opt Out.
Collection and/or Use of Personal Information of Children
We do not collect, sell, or share any personal information, whether or not such information is voluntarily provided, from any person we actually know is under the age of 13. If we are made aware that we have collected information about a person under the age of 13, we will remove that information from our records in a timely fashion.
California Consumer Privacy Policy
This policy explains the rights of California residents regarding the collection, use, sale, and sharing of their personal information under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA). Bradford may update and make changes to this policy, so we encourage you to review it periodically.
Personal Information We Collect About You.
In the preceding 12 months, we have and/or may have collected the following categories and specific types of consumer personal information:
| Category | Examples | Disclosed for a Business Purpose | Sold or Shared |
|---|---|---|---|
| Identifiers | Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. | Yes | No |
| Personal Information categories described in Cal. Civ. Code § 1798.80(e) | Name, address, telephone number, insurance policy number, employment history, medical information, health insurance information. | Yes | No |
| Characteristics of protected classifications under California or federal law | Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | Yes | No |
| Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes | No |
| Biometric information | Voice Recognition, Fingerprint and Palm Print Scanning, Facial Recognition, Iris Recognition, Keystroke, Gait, or other physical patterns, and Sleep, Health, or Exercise Data. | Yes | No |
| Internet or Electronic Network Activity Information | Browsing history, search history, Internet protocol address, type of browser, number of links clicked within our Services, state or country from which you accessed our Services, date and time of visit, name of Internet service provider, third party websites you linked to from our Services, pages or information you viewed on our Services, number of times you have viewed an ad. | Yes | No |
| Geolocation data | Region or postal code. | Yes | No |
| Audio, electronic, visual, thermal, olfactory, or similar information | Photographs, video recordings and voice/call recordings. | Yes | No |
| Professional or employment-related information | Work experience, name, phone number, email address, performance evaluations. | Yes | No |
| Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99) | Educational records such as transcripts, class lists, student course schedules, health records, student financial information, and student disciplinary records. | Yes | No |
| Inferences drawn from any Personal Information identified to create a profile about a consumer | A profile created about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Yes | No |
| Sensitive Personal Information | Examples | Disclosed for a Business Purpose | Sold or Shared |
|---|---|---|---|
| Personal information that reveals: | Social security, driver’s license, state identification card, or passport number. | No | No |
| Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. | No | No | |
| A consumer’s precise geolocation | No | No | |
| A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership. | No | No | |
| The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication. | No | No | |
| A consumer’s Genetic Data. | No | No | |
| The processing of biometric information for the purpose of uniquely identifying a consumer. | No | No | |
| Personal information collected and analyzed concerning a consumer’s health. | Yes | No | |
| Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation. | No | No |
Why We Use Your Personal Information.
We collect and/or share consumer personal information for the following business purposes:
- Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
- Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes;
- Debugging to identify and repair errors that impair existing intended functionality;
- Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business;
- Performing services on behalf of the business, including coordinating treatment services or communicating information about appointments or our services, providing customer service, verifying customer information, processing and/or collecting payments, providing analytic services or measure outcomes or statistics related to our treatment services;
- Providing advertising and marketing services, except for cross-context behavioral advertising, to the client or prospective clients;
- Undertaking internal research for technological development and demonstration;
- Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business;
- To comply with our legal and regulatory obligations;
- For the performance of our services you’ve requested and/or agreed to receive;
- For our legitimate interests or those of a third party; or
- Where you have given consent.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. The table below explains what we use (process) your personal information for and our reasons for doing so:
| What we use your personal information for | Our reasons |
| To provide services to you | For the performance of our contract with you or to take steps at your request before entering into a contract |
| To prevent and detect fraud against you or us | For our legitimate interests or those of a third party, i.e., to minimize fraud that could be damaging for us and for you |
| Conducting checks to identify our clients or prospective clients and verify their identity |
|
| Gathering and providing information required by or relating to audits, inquiries, or investigations by regulatory bodies | To comply with our legal and regulatory obligations |
| Ensuring business policies are adhered to, e.g., policies covering security and internet use | For our legitimate interests or those of a third party, i.e., to make sure we are following our own internal procedures so we can deliver the best service to you |
| Operational reasons, such as improving efficiency, training, and quality control | For our legitimate interests or those of a third party, i.e., to be as efficient as we can so we can deliver the best service for you at the best price |
| Ensuring the confidentiality of commercially sensitive information |
|
| Statistical analysis to help us manage our business | For our legitimate interests or those of a third party, i.e., to be as efficient as we can so we can deliver the best service for you at the best price |
| Preventing unauthorized access and modifications to systems |
|
| Creating and/or updating client records |
|
| Statutory returns | To comply with our legal and regulatory obligations |
| Ensuring safe working practices, staff administration and assessments |
|
| Marketing our services to existing and former clients; third parties who have previously expressed an interest in our services; third parties with whom we have had no previous dealings | For our legitimate interests or those of a third party, i.e., to promote our business to existing and former customers |
| Credit reference checks via external credit reference agencies | For our legitimate interests or those of a third party, i.e., to ensure our customers are likely to be able to pay for our products and services |
| External audits and quality checks, e.g., for accreditations and the audit of our accounts |
|
How Your Personal Information is Collected.
We may collect personal information through online forms or through compiling tracking information generated when your access our Services or Sites. We also collect personal information directly from you—in person, by telephone, text, email, and/or via our website. We may also collect information from the following categories of sources:
- Publicly accessible sources (e.g., property records);
- Third party (e.g., sanctions screening providers, credit reporting agencies, customer due diligence providers, advertising networks, internet service providers, social networks, data analytics providers, government entities, and data brokers);
- Third party with your consent (e.g., your bank);
- Cookies on our website;
- Automated information collection;
- Our Information Technology systems (as applicable), including automated monitoring of our websites and other technical systems, such as our computer networks and connections, surveillance footage and access control systems, communications systems, email and instant messaging systems.
Who We Share Your Personal Information With.
In the preceding 12 months, we have or may have collected or shared consumers’ personal information with:
- Our affiliates, including other companies owned and/or operated by us or our parent companies or their other subsidiaries;
- Service providers we use to help deliver our services to you, such as payment service providers, warehouses, telecommunication companies and internet service providers, and/or vendors involved in operating our organization;
- Operating systems and platforms;
- Credit reporting agencies;
- Our insurers and brokers and your insurance plan(s) or their plan administrators or subcontractors;
- Our banks;
- Government entities;
- External auditors, legal and/or financial advisors, and/or consultants used to further our legitimate business interests;
- Licensing, accreditation, regulatory and/or other oversight agencies;
- Third parties approved by you, including social media sites or third-party payment providers you choose to link your account to, visit, and/or otherwise use; and/or
- Other third parties we use to help us run our business, such as marketing agencies or website hosts;
We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers, contractors, and third parties to ensure they can only use your personal information to provide services to us and to you.
We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations. We may also need to share some personal information with other parties for legal, contractual, administrative, and/or fiscal purposes, such as attorneys, accountants, or consultants. We will typically anonymize information, but this may not always be possible. The recipient of the information will be bound by confidentiality obligations. We will not intentionally share your personal information with any other third party absent a legitimate business interest or need to do so.
Categories of Personal Information We Disclose for a Business Purpose.
In the preceding 12 months, we have or may have disclosed the following categories of personal information for a business purpose (see the “Personal Information We Collect About You” section of this Privacy Policy for examples of each categories included below):
- Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers);
- Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, their name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information;
- Characteristics of protected classifications under California or federal law;
- Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);
- Biometric information;
- Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an Internet Website, application, or advertisement);
- Geolocation data;
- Audio, electronic, visual, thermal, olfactory, or similar information;
- Professional or employment-related information;
- Education information, defined as information that is not publicly available personally identifiable information as defined in the FERPA; and
- Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
- Sensitive personal information
How Long Your Personal Information Will Be Kept.
We keep information related to cookies for up to 30 days and geolocation information for up to 26 months. We keep information related to your treatment services or payment services for at least 7 years or as otherwise required by law. Unless otherwise specified, we will keep your personal information while we are providing services to you and/or while you have a remaining balance for payment with us or. Thereafter, we will keep your personal information for as long as is necessary:
- To respond to any questions, complaints or claims made by you or on your behalf;
- To show that we provided you services appropriately;
- To provide the highest quality of care to our clients;
- To perform fiscal, legal, contractual, and/or other administrative tasks necessary to operate our business;
- To keep records required by law.
We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information. When it is no longer necessary to retain your personal information, we will delete or anonymize it.
Collection and/or Use of Personal Information of Children (California-specific)
We do not collect, sell, or share any personal information, whether or not such information is voluntarily provided, from any person we actually know is under the age of 16. If we are made aware that we have collected information about a person under the age of 16, we will remove that information from our records in a timely fashion.
Your Rights Under the CCPA/CPRA.
You have the right under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and certain other privacy and data protection laws, as applicable, to exercise free of charge:
- Right to Know What Personal Information is Being Collected. Right to Access Personal Information. You may have the right to request that we disclose the following information to you:
- The categories of Personal Information that we collected about you;
- The categories of sources from which the Personal Information is collected;
- The business or commercial purpose for collecting, selling or sharing Personal Information;
- The categories of third parties to whom we disclosed Personal Information;
- The specific pieces of Personal Information that we have collected about you;
- The categories of Personal Information that we disclosed about you for a business purpose;
- The categories of Personal Information that we sold or shared about you; and
- For each category of Personal Information identified, the categories of third parties to whom the information was disclosed or sold.
- Right of Deletion. You may have the right to delete any Personal Information about you which we have collected from you.
- Right to Correct Inaccurate Personal Information. You may have the right to correct inaccurate Personal Information maintained by us.
- Right to Limit Use or Disclosure of Sensitive Personal Information. You may have the right to limit the use and disclosure of your Sensitive Personal Information. We do not sell or share sensitive personal information, except to perform or provide our goods or services, to perform services on behalf of our business, and/or the other purposes permitted under California law.
- Right to Opt-Out of Sale or Sharing. You may have the right to opt-out of the sale of personal Information or the sharing of personal Information we have collected from you.
- Right of No Retaliation Following Opt-Out or Exercise of Other Rights. We may not discriminate against you because you exercise any of your rights under the CPRA, including, but not limited to:
- Denying goods or services to you;
- Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
- Providing a different level or quality of goods or services to you;
- Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services; or
- Retaliating against an employee, applicant for employment, or independent contractor.
How to Exercise Your Rights.
If you would like to exercise any of your rights as described in this Privacy Policy, email our privacy team, or write to us at the address below:
Bradford Health Services, LLC
Attn: Privacy Requests
2101 Magnolia Avenue, Suite 518
Birmingham, Alabama 35205
Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period. If you choose to contact us directly, whether via email or by letter, you will need to provide us with:
- Enough information to identify you (e.g., your full name, address and customer or matter reference number);
- Proof of your identity and address (e.g., a copy of your photographic identification such as a driver license or passport, and a recent utility or credit card bill); and
- A description of what right you want to exercise and the information to which your request relates.
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf. Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification. Under California law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. As permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent.