Privacy Policy | Protecting Your Personal Information
Effective Date: January 1, 2024 Last Updated: June 2026
Allay Health and Wellness is committed to protecting the privacy of every person who visits, interacts with, or receives care. This Privacy Policy explains what information we collect when you use our website, how we use it, how long we keep it, who we share it with, and what rights you have over your own data.
This Privacy Policy governs general website data collection and usage. If you are a current or prospective patient, your protected health information (PHI) is governed separately by our HIPAA Privacy Policy, which provides additional protections required by federal and Florida state law. Where both policies apply, the stricter standard governs.
Please read this Privacy Policy carefully before submitting any information through our website. Continued use of our website constitutes acceptance of the terms described here.
1. Who We Are
Allay Health and Wellness is a licensed clinical practice specializing in ketamine infusion therapy and Spravato (esketamine) treatment, serving patients across Palm Beach County, Broward County, and South Florida. Our clinic is located at:
Allay Health and Wellness 11000 Prosperity Farms Rd, Suite 101 Palm Beach Gardens, FL 33410
Phone: (561) 421-6444
Email: [email protected]
Website: https://allayhealthwellness.com
For any questions about this Privacy Policy or your data, you may reach us by calling our office directly.
2. What Information We Collect
We collect information in several ways depending on how you interact with our website.
Information You Provide Directly
When you fill out a contact form, request a consultation, submit an inquiry, or interact with any intake tool on our website, you may provide us with personal information including your name, email address, phone number, and any details you choose to include in your message. If your message contains health-related information, it is treated with the same confidentiality standards that govern our clinical records, consistent with our HIPAA Privacy Policy.
Comments
If you leave a comment on any content published on our website, we collect the information shown in the comment form, including your name, email address, and website URL if provided. We also collect your IP address and browser user agent string, which help us detect and filter spam.
An anonymized string derived from your email address, also called a hash, may be sent to the Gravatar service to check whether you use a profile image with that service. The Gravatar service has its own privacy policy. If your comment is approved and published, your profile picture may appear publicly alongside your comment if you have a Gravatar account associated with your email address.
Media Uploads
If you upload images or other media files to our website, those files may contain embedded metadata such as GPS location data (known as EXIF data). Visitors to our website may be able to download those files and extract any location or device information embedded within them. We recommend removing location data from any images before uploading them to our site.
Automatically Collected Information
When you visit our website, certain information is collected automatically by our website platform and analytics tools. This may include your IP address, browser type and version, operating system, referring URLs, pages visited, time spent on each page, and other standard web analytics data. This information is collected in aggregate and is generally not linked to your identity unless you have also submitted a contact form or other identifying information during the same session.
3. Cookies
Our website uses cookies, which are small text files stored in your browser that help our site function correctly and allow us to understand how visitors use our content. Below is a description of the cookies our website sets and how long each lasts.
Comment Cookies
If you leave a comment on our website and opt in to saving your details, your name, email address, and website URL will be saved in cookies stored in your browser. These cookies exist for your convenience so that you do not need to re-enter your information the next time you leave a comment. Comment convenience cookies last for one year.
Login Cookies
If our website has a login area and you access it, a temporary cookie will be set to determine whether your browser accepts cookies at all. This cookie contains no personal data and is discarded when you close your browser.
When you log in to an account on our website, several cookies are set to save your login session and display preferences. Login session cookies last for two days. Screen display preference cookies last for one year. If you select the “Remember Me” option at login, your session will remain active for two weeks. Logging out of your account removes all login cookies from your browser.
Content Editing Cookies
If you edit or publish content on our website, an additional cookie is saved in your browser. This cookie contains no personal data and records only the ID of the content item you most recently edited. It expires after one day.
Managing Cookies
Most browsers allow you to view, manage, and delete cookies through your browser settings. Disabling cookies may affect the functionality of certain features on our website, including comment forms and login areas. Our website does not currently respond to browser-level Do Not Track signals, but we will update this Privacy Policy if that changes.
4. Embedded Content from Other Websites
Content published on our website may include embedded material from third-party sources, such as videos, maps, social media posts, or other media. Embedded content from other websites behaves in exactly the same way as if you had visited those websites directly.
When you interact with embedded content, the third-party website that hosts that content may collect data about you, set its own cookies, use additional tracking technologies, and monitor your interaction with the embedded content. If you are logged in to an account on the third-party platform while viewing embedded content from that platform on our site, your interaction may be linked to your account on that platform. We do not control the data practices of third-party platforms whose content is embedded on our site and encourage you to review their individual privacy policies.
5. How We Use the Information We Collect
Allay Health and Wellness uses the information collected through this website for the following purposes:
To respond to inquiries and consultation requests. When you contact us through our website, we use the information you provide to respond to your question, schedule consultations, and follow up as appropriate.
To operate and improve our website. Automatically collected data such as page visit statistics and browser information helps us understand how our website is used and where improvements can be made.
To detect and prevent spam and abuse. Comment data including IP addresses and browser user agent strings is used to identify and filter spam submissions.
To maintain our website. Login and session cookies allow authorized users and administrators to manage website content securely.
To communicate with prospective and current patients. If you have requested information about our clinical services, we may use your contact details to follow up with relevant information. You may opt out of any non-clinical email communications at any time by contacting our office or using any unsubscribe mechanism included in our emails.
We do not sell, rent, or trade your personal information to any third party for marketing purposes. Clinical health information submitted through this website is not used for advertising, marketing segmentation, or any commercial purpose.
6. Who We Share Your Data With
Allay Health and Wellness shares data collected through this website only in the limited circumstances described below.
Website service providers and business associates. We work with third-party vendors who provide website hosting, electronic health record management, scheduling platforms, email communications, and analytics services. These vendors may have access to certain website data as part of performing their services on our behalf. Vendors who handle protected health information are required to sign business associate agreements as required by HIPAA.
Spam detection services. Comments submitted on our website may be checked through an automated spam detection service. Data transmitted to these services is used only for spam filtering purposes.
Password reset requests. If you request a password reset for a website account, your IP address will be included in the reset email as part of the standard authentication process.
Legal requirements. We may disclose information when required to do so by law, court order, or valid legal process, or when we believe in good faith that disclosure is necessary to protect the safety of any person or to prevent fraud or abuse.
We do not disclose personal data to third parties for their own marketing purposes and do not sell personal information under any circumstances.
7. How Long We Retain Your Data
Comment data: If you leave a comment on our website, the comment and its associated metadata are retained indefinitely. This allows us to recognize and automatically approve follow-up comments from the same individual without holding them in a moderation queue. If you wish to have your comment removed, please contact us.
Contact form submissions: Inquiries submitted through our website contact forms are retained for a period consistent with our administrative and legal recordkeeping obligations. If your inquiry was connected to a clinical consultation, the relevant information becomes part of your patient record and is governed by our HIPAA Privacy Policy and applicable medical records retention laws.
User account data: If you register for an account on our website, the personal information in your user profile is retained for as long as your account remains active. All registered users may view, edit, or delete their own personal information at any time through their account settings, except that usernames may not be changed. Website administrators may also view and edit account information as necessary for site administration.
Analytics and automated data: Aggregate and anonymized analytics data is retained in accordance with the data retention policies of our analytics service provider.
8. Your Rights Over Your Data
You have the following rights with respect to personal data we hold about you through this website:
Right to access. You may request a copy of the personal data we hold about you, including any information you have provided through forms, comments, or account registration.
Right to deletion. You may request that we delete personal data we hold about you. If you have an account on our website or have left comments, you can request that this data be erased. Please note that we cannot erase data we are legally required to retain for administrative, legal, security, or clinical recordkeeping purposes.
Right to correction. If personal data we hold about you is inaccurate or incomplete, you may request that we correct it.
Right to data portability. If you have an account on our website or have submitted data through our website, you may request an exported file of the personal data we hold about you in a commonly used format.
Right to restrict processing. You may request that we limit how we use your personal data in certain circumstances.
Right to object. You may object to certain uses of your personal data, including any use for direct marketing purposes.
To exercise any of these rights, please contact our Privacy Officer at (561) 421-6444. We will respond to all requests within a reasonable timeframe and no later than 30 days.
If you are a Florida resident, you may also have additional rights under applicable Florida privacy law. Please contact us for more information about your specific rights under Florida law.
9. Where Your Data Is Sent
Data submitted through our website may be processed and stored on servers located in the United States. Visitor comments may be transmitted to and processed by automated spam detection services. Contact form submissions and scheduling requests may be transmitted to our customer relationship management platform and electronic health record system, both of which operate within the United States under contractual data security obligations.
We do not transfer personal data to recipients outside the United States in the ordinary course of our operations. If this changes, we will update this Privacy Policy accordingly.
10. Third-Party Links
Our website may contain links to third-party websites, including insurance provider portals, research databases, and external scheduling platforms. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party site you visit through a link on our website, as their data practices are independent of ours.
11. Children’s Privacy
Our website and clinical services are intended for adults. We do not knowingly collect personal information from individuals under the age of 18 through our website. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.
12. Security
We take reasonable administrative, technical, and physical measures to protect personal information collected through our website from unauthorized access, use, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. If you are submitting sensitive health information, we recommend calling our office directly at (561) 421-6444 rather than using standard web forms or email, which are not encrypted communication channels.
In the event of a data breach affecting personal information collected through this website, we will notify affected individuals and relevant authorities as required by applicable law.
13. Changes to This Privacy Policy
Allay Health and Wellness reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this document and post the revised Privacy Policy on our website. We encourage you to review this Privacy Policy periodically. Continued use of our website after any changes are posted constitutes your acceptance of the updated Privacy Policy.
Medical Disclaimer: The content published on this website is for educational and informational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. IV ketamine infusion therapy for depression, anxiety, PTSD, and chronic pain is an off-label use of ketamine and has not been specifically approved by the FDA for these conditions. Spravato (esketamine) is FDA-approved only for treatment-resistant depression, used with an oral antidepressant, and for depressive symptoms in adults with major depressive disorder with acute suicidal ideation or behavior. All clinical services at Allay Health and Wellness are provided only after evaluation and approval by a licensed clinician. Viewing this website or submitting a contact form does not establish a provider-patient relationship.
This Privacy Policy was last reviewed and updated in June 2026. If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your data, please contact us at (561) 421-6444 or [email protected].
