Privacy Policy
Last Updated & Effective Date: September 8, 2026
Table of Contents
Westside Behavioral Care, Inc. (“Westside,” “WBC,” “we,” “us,” or “our”) respects the privacy of people who visit our website and use our online scheduling and inquiry services.
This Privacy Policy explains how information is collected, used, and disclosed through westsidebehavioralcare.com and WBC-owned online services that link to this Policy, including the appointment-scheduling application at appointments.westsidebehavioralcare.com.
We have written this Policy to be specific about our website practices. We do not sell personal data or use personal data collected through the Website for targeted advertising.
Scope of This Privacy Policy
This Privacy Policy applies to information collected through WBC’s Website, online forms, appointment-scheduling application, and related website administration.
It does not replace the privacy notices, informed-consent documents, or other policies of the independent therapists, prescribers, and practices whose services may be listed or scheduled through WBC.
WBC provides administrative services that help people identify potential providers, arrange an initial appointment, and receive limited insurance and billing support. Therapists, prescribers, and other healthcare professionals provide clinical care through their own independent practices or groups and are responsible for their own clinical records and privacy obligations.
WBC does not create or maintain an Independent Provider’s psychotherapy notes or clinical treatment record as the treating provider’s record custodian. WBC may maintain limited administrative, scheduling, insurance, billing, and communications information needed to perform its services and meet applicable legal obligations.
Clinical and treatment information subject to the Health Insurance Portability and Accountability Act (“HIPAA”) is governed by the applicable HIPAA Notice of Privacy Practices and other applicable law.
WBC’s HIPAA Notice of Privacy Practices is available here: https://www.westsidebehavioralcare.com/notice-of-privacy-practices/
This Website Privacy Policy governs the Website. It should not be read as a substitute for a healthcare provider’s Notice of Privacy Practices or other clinical privacy documentation.
Information We Collect Through the Website
The information WBC collects depends on how you use the Website.
Information You Choose to Provide
If you contact WBC, request assistance finding a provider, or request an appointment, we may collect information such as:
– Your name
– Email address
– Telephone number
– Insurance plan or insurer
– Type of provider or specialty you are seeking
– Preferred visit type, such as in-person or telehealth
– Age range
– How you heard about WBC
– Information you choose to enter in an additional-details field
– Appointment preferences and scheduling information
Most matching-related fields are optional. Name and contact information are generally required so that we can respond to the request.
Some optional selections or information you voluntarily provide may reveal information about the type of behavioral healthcare you are seeking. Please provide only the information needed for WBC to assist you.
Please do not include confidential or sensitive health information in a general Website form. Submitting a form does not establish a therapist-client relationship. If you are experiencing a mental health emergency, call 911 or 988.
Appointment-Scheduling Information
WBC owns and operates its appointment-scheduling application at appointments.westsidebehavioralcare.com, historically referred to as “Avalon.”
When you use the scheduling application, WBC may collect the information necessary to identify an appropriate provider, arrange the first appointment, communicate about the appointment, and support related administrative or insurance processes.
Using the scheduling application does not establish a clinical relationship with an Independent Provider. The provider’s own intake and acceptance process governs establishment of that relationship.
Communications
If you contact WBC by email, telephone, or through a Website form, we may retain the information you provide and related communications as reasonably necessary to respond to you, complete the requested administrative service, support scheduling or billing, maintain appropriate business records, and comply with applicable law.
Website and Technical Information
Like most websites, our systems necessarily receive some technical information when your browser communicates with the Website. Depending on the request and system involved, this may include:
– Internet Protocol (IP) address
– Browser and device type
– Operating system
– Date and time of a request
– Pages requested or visited
– Referring website or source
– Basic network and server-log information
– Approximate general geographic information inferred from an IP address
– Security and error information
This information may be generated by our hosting environment, WordPress, security systems, or analytics tools.
WBC does not use Website analytics to determine your precise physical location. Where IP-based location is used for aggregate analytics, WBC masks a portion of the IP address and uses the resulting approximate location to understand Website performance and general usage patterns.
How We Use Information
WBC uses information collected through the Website for purposes such as:
– Responding to questions and requests
– Helping visitors identify potential providers
– Scheduling an initial appointment
– Communicating about appointment requests
– Supporting insurance eligibility, billing, or related administrative functions where applicable
– Operating, maintaining, and improving Website functionality
– Understanding aggregate Website traffic and how people find and use the Website
– Maintaining Website and information security
– Detecting spam, abuse, fraud, or technical problems
– Troubleshooting errors and providing technical support
– Maintaining necessary administrative and business records
– Complying with applicable legal and regulatory obligations
– Establishing, exercising, or defending legal rights when necessary
WBC does not use personal information submitted for scheduling or provider matching for unrelated advertising purposes.
We do not sell personal data.
We do not use personal data collected through the Website for targeted advertising based on activity across unrelated websites or services.
Artificial Intelligence and Automated Tools
WBC may use artificial-intelligence-assisted tools to support staff with limited administrative, technical, research, drafting, coding, Website, and search-engine-optimization activities.
These tools are used as staff-assistive resources. They do not independently make decisions or take actions on WBC’s behalf, and staff remain responsible for reviewing and approving work produced with their assistance.
WBC does not use artificial intelligence to determine whether a person may receive healthcare services, select or rank providers for an individual, make clinical or treatment decisions, determine insurance coverage or benefits, make hiring decisions, or make other decisions that produce legal or similarly significant effects concerning an individual.
Provider matching and appointment scheduling are conducted through human review and rule-based processes rather than artificial-intelligence decision-making.
WBC’s policy is not to intentionally submit patient-identifying information or protected health information to general-purpose artificial-intelligence services used for drafting, research, coding, Website, or similar administrative work.
Some business productivity systems used by WBC may include integrated artificial-intelligence features. When those features are enabled, their use remains subject to WBC’s applicable privacy, security, contractual, and healthcare-data protections.
The Website also uses artificial-intelligence-assisted technology as part of its accessibility functionality, as described in our Accessibility Statement. Accessibility technology is not used to make healthcare, scheduling, insurance, or other consequential decisions about Website visitors.
Analytics
WBC uses a privacy-focused, self-hosted analytics system to understand Website traffic and improve Website performance and usability.
Our analytics configuration is intended to collect aggregate usage information rather than create advertising profiles of Website visitors. WBC does not use analytics data for targeted advertising, cross-site behavioral advertising, or advertising personalization.
IP addresses used for analytics are partially masked before being used for location enrichment. This allows WBC to understand approximate geographic usage, such as whether Website traffic is generally coming from Colorado, without using analytics to determine a visitor’s precise location.
Analytics information is configured for automatic deletion using WBC’s minimum retention setting, currently approximately two months.
WBC periodically reviews its analytics configuration and retention settings to reduce collection and retention where information is not needed.
For additional information about analytics cookies and similar technologies, see our Cookie Policy at https://www.westsidebehavioralcare.com/cookie-policy/.
HHS has specifically cautioned healthcare organizations that tracking technologies can implicate HIPAA when they receive identifiable information connected with healthcare-related actions such as appointment scheduling. WBC therefore limits Website tracking and does not use advertising pixels or cross-site behavioral advertising technologies for these purposes.
Cookies and Similar Technologies
WBC uses a limited number of cookies and similar technologies for Website security, consent preferences, and privacy-respecting aggregate analytics.
We do not use advertising cookies for targeted advertising or cross-site behavioral tracking.
Our Cookie Policy provides more detail about the specific technologies currently in use, their purposes, and how you can manage your preferences: https://www.westsidebehavioralcare.com/cookie-policy/
A persistent Cookie Settings control is also available on the Website so that you can review or change applicable consent choices.
WBC honors applicable browser-based Global Privacy Control signals as described below.
Services and Technology Providers
WBC uses a limited number of services and technologies to operate the Website and provide administrative services. The information available to each service depends on the function it performs.
AccessiBe
WBC uses AccessiBe’s accessWidget on westsidebehavioralcare.com to provide accessibility controls and support Website accessibility.
AccessWidget uses automated and artificial-intelligence-assisted technology to analyze aspects of Website content and provide accessibility-related functionality.
According to AccessiBe, accessWidget processes a visitor’s IP address and the Website page URL in real time as necessary to provide its accessibility functionality and does not retain that information as an identifiable end-user profile. AccessiBe also uses local browser storage to remember accessibility preferences selected by the visitor.
WBC does not provide appointment inquiries, insurance information, treatment records, or other clinical information to AccessiBe for advertising or behavioral profiling.
WBC’s current accessWidget implementation does not provide a conversational AI assistant.
ALTCHA
WBC uses a self-hosted implementation of ALTCHA to help prevent automated spam and abuse on Website forms.
ALTCHA performs a verification when a form is submitted. It is used as a Website-security measure rather than for advertising or visitor profiling.
WBC does not use ALTCHA to track visitors across unrelated websites.
Avalon / WBC Appointment Scheduling Application
The appointment application at appointments.westsidebehavioralcare.com is owned and operated by WBC.
It receives information you provide when requesting or scheduling an appointment, including contact information and the matching or scheduling information necessary to process the request.
This information is used for appointment scheduling, provider matching, related communications, and applicable administrative, insurance, or billing activities.
CookieYes
WBC uses CookieYes to provide Website consent controls and maintain visitors’ applicable cookie preferences.
CookieYes may process information necessary to record or apply a consent choice, along with standard technical information necessary for the consent system to operate.
WBC does not provide appointment form contents to CookieYes for advertising purposes.
Egress / KnowBe4
WBC uses Egress, now part of KnowBe4, as part of its email security and privacy environment.
Where applicable, these systems may process email content, sender and recipient information, technical message information, and security-related information as necessary to provide secure email, threat detection, and related security functions.
Google Workspace With HIPAA License
WBC uses Google Workspace configured for its healthcare operations to receive and manage certain administrative communications and form submissions.
Information transmitted into this environment may include the information contained in a Website inquiry or scheduling communication. Access is limited according to WBC’s administrative needs and applicable privacy and security requirements.
WBC does not use this information for unrelated marketing or advertising.
Gravity Forms
WBC uses Gravity Forms within WordPress to provide Website inquiry and scheduling-related forms.
Information entered into these forms is received by WBC. Depending on the form, this may include your name, contact information, insurance information, care preferences, age range, referral source, and information you voluntarily provide in an additional-details field.
Gravity Forms entries are not intended to serve as clinical treatment records.
WBC’s current process removes form entries from the Website within approximately 24 hours, or after WBC confirms that the submission has been received in its HIPAA-licensed Google Workspace email environment.
Hosting, Security, and Infrastructure Providers
The Website also relies on hosting, network, security, backup, and infrastructure services necessary to make the Website available and secure.
Those systems may process standard technical information such as IP addresses, server requests, error logs, security events, and information necessary to host or protect Website content.
WBC limits use of these services to legitimate Website operations and periodically reviews its technology environment.
Matomo Analytics
WBC uses self-hosted Matomo analytics to measure aggregate Website activity.
Matomo may process information such as page visits, referring sources, browser or device characteristics, and partially masked IP information. WBC uses this information to understand Website performance and visitor patterns, not for targeted advertising.
Analytics information is configured for automatic deletion after approximately two months.
OpenStreetMap and Leaflet
WBC uses Leaflet with map information provided through OpenStreetMap-related services to display office locations and related map information.
When external map resources are requested, the service providing those resources may receive standard technical information needed to deliver them, such as an IP address and browser request information.
WBC does not use these maps to determine a visitor’s precise location for clinical or emergency purposes.
Trustindex
WBC uses Trustindex to display review-related content on portions of the Website.
When your browser loads a third-party widget or resource, the provider of that resource may receive standard technical request information, such as an IP address, browser or device information, and the page requesting the resource.
WBC does not provide appointment form responses or provider-matching information to Trustindex for targeted advertising.
When Information May Be Disclosed
WBC may disclose information when reasonably necessary to:
– Process a request or arrange an initial appointment
– Communicate with the Independent Provider relevant to a requested appointment
– Perform appropriate insurance, billing, or administrative functions
– Allow a service provider to perform a function for WBC subject to applicable privacy and security requirements
– Protect the security and integrity of the Website or WBC systems
– Investigate fraud, abuse, or unlawful activity
– Comply with a subpoena, court order, legal process, or other legal obligation
– Protect WBC’s legal rights or the rights and safety of others
– Complete an organizational transaction, such as a merger or acquisition, subject to applicable legal requirements
Where information is protected by HIPAA or another healthcare privacy law, WBC handles disclosures according to the applicable legal requirements and privacy notice.
WBC does not sell personal data to data brokers or advertisers.
How Long We Keep Information
WBC seeks to retain information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, regulatory, administrative, security, billing, and recordkeeping requirements.
Different categories of information have different retention needs.
Website analytics information is configured for automatic deletion after approximately two months.
Gravity Forms submissions are ordinarily removed from the Website within approximately 24 hours or after WBC confirms that the information has been received in its HIPAA-licensed Google Workspace email environment.
Administrative communications and information maintained in WBC’s email and appointment-scheduling systems may be retained longer when necessary for scheduling, billing, insurance, legal, regulatory, security, or other legitimate administrative obligations.
WBC periodically reviews its retention practices and will establish or update retention schedules based on applicable legal requirements and the operational need for the information.
Information maintained by an Independent Provider as part of the provider’s clinical record is subject to that provider’s own record-retention obligations and policies.
Information Security
WBC uses administrative, technical, and organizational safeguards intended to protect the information in its custody against unauthorized access, disclosure, alteration, loss, or misuse.
Those safeguards may include access restrictions, secure communications tools, security monitoring, anti-spam controls, data minimization, and systems configured for healthcare-related privacy and security requirements where applicable.
No website, email system, or electronic transmission method can be guaranteed to be completely secure. For that reason, please do not send detailed clinical information through a general Website form. You may request a secure, encrypted, HIPAA-compliant Egress email or other appropriate communication channel by contacting us using the details at the bottom of the page.
If you have already established care with an Independent Provider, contact that provider regarding the appropriate method for communicating clinical information.
Colorado Privacy Rights
Colorado residents may have rights regarding their personal data under the Colorado Privacy Act (“CPA”). These rights apply subject to the scope, exceptions, and limitations of applicable law.
Where the CPA applies to particular personal data, you may have the right to:
– Confirm whether WBC is processing your personal data and access that data
– Correct inaccuracies in your personal data
– Request deletion of certain personal data
– Obtain a portable copy of certain personal data
– Opt out of the sale of personal data
– Opt out of the use of personal data for targeted advertising
– Opt out of certain profiling used to make decisions that produce legal or similarly significant effects
The Colorado Attorney General describes these as core consumer rights under the CPA.
WBC Does Not Sell Personal Data or Use It for Targeted Advertising
WBC does not sell personal data.
WBC does not process personal data collected through the Website for targeted advertising based on activity across unrelated websites or services.
WBC does not use Website data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning Website visitors.
Because these activities are not part of WBC’s Website practices, there ordinarily should be nothing for a visitor to opt out of in these categories. We nevertheless recognize applicable opt-out requests and browser privacy signals as required by law.
Global Privacy Control
WBC honors Global Privacy Control (“GPC”) signals where they constitute a legally recognized universal opt-out request.
Colorado currently recognizes GPC as a universal opt-out mechanism for the sale of personal data and targeted advertising.
Because WBC does not sell personal data or use it for targeted advertising, receiving a GPC signal does not ordinarily require us to stop an otherwise active sale or targeted-advertising practice. We nevertheless recognize and process the signal as an applicable opt-out preference.
Cookie choices that do not involve sale or targeted advertising can also be managed through the Website’s Cookie Settings control.
How to Exercise a Privacy Right
To submit a Colorado privacy request, contact:
Westside Behavioral Care, Inc.
PO Box 461570
Aurora, CO 80046-1570
info@westsidebehavioralcare.com
Please indicate that your message concerns a privacy request and describe the right you would like to exercise.
WBC may need to verify your identity before fulfilling a request. We will request only information reasonably necessary for verification and processing of the request.
An authorized agent may submit a request where permitted by law. WBC may take reasonable steps permitted by law to verify the agent’s authority and the identity of the person on whose behalf the request is being made.
WBC will respond within the period required by applicable law.
A request may be denied or limited when applicable law permits or requires WBC to retain information, when the request cannot reasonably be authenticated, when an applicable legal exception applies, or when WBC is otherwise legally permitted not to fulfill the request.
Appeals
If WBC denies a request that is subject to a right of appeal under the Colorado Privacy Act, you may appeal the decision by replying to WBC’s response or emailing info@westsidebehavioralcare.com with the subject line “Privacy Request Appeal.”
Please describe the decision you are appealing and any additional information you would like WBC to consider.
WBC will review and respond to the appeal as required by applicable law. Where required, WBC’s response will provide information about how to contact the Colorado Attorney General regarding an unresolved concern.
Healthcare Information and Other Legal Requirements
Some information associated with healthcare, treatment, insurance, billing, or other regulated activities may be governed by HIPAA or other laws rather than, or in addition to, the Colorado Privacy Act.
A privacy request does not require WBC or an Independent Provider to delete information that applicable law requires or permits to be retained.
If your request concerns an Independent Provider’s clinical treatment record, you should contact that provider directly.
Information About Children and Minors
WBC’s Website is intended primarily for adults arranging behavioral healthcare for themselves or, where legally authorized, for a minor.
WBC does not intend the general Website to be used by children under 13 to independently submit personal information.
Parents, legal guardians, or other persons with lawful authority may provide information needed to seek services for a minor.
Behavioral healthcare for minors can involve special rules concerning consent, confidentiality, parental access, communication, and medical records. Those matters are governed by applicable law and the policies of the Independent Provider providing care.
Nothing in this Privacy Policy is intended to reduce a minor’s privacy or confidentiality rights under applicable law.
If WBC learns that information has been submitted by a child in circumstances where parental authorization or another legal basis is required, WBC will address the information in accordance with applicable law.
Independent Providers
The therapists, prescribers, and other healthcare professionals available through WBC operate independently in private practice or independent groups.
Once you begin communicating or receiving care directly from an Independent Provider, that provider may collect information under the provider’s own Notice of Privacy Practices, informed-consent documents, electronic health record policies, telehealth policies, and other privacy practices.
WBC does not control an Independent Provider’s clinical judgment, clinical documentation, treatment record, or decisions about how healthcare information is handled within the provider’s own practice.
Questions concerning your treatment record, psychotherapy notes, clinical communications, prescriptions, diagnosis, treatment, or healthcare privacy rights relating to the provider’s records should ordinarily be directed to that Independent Provider.
Third-Party Links
The Website may link to websites or services that WBC does not own or control.
When you leave a WBC-controlled Website, the privacy practices of the other website or service may apply. WBC is not responsible for the privacy practices of an unrelated third party.
An Independent Provider may also direct you to an electronic health record, telehealth service, payment service, or other technology selected by that provider. Those services are not necessarily WBC systems and may have their own privacy notices.
Changes to This Privacy Policy
WBC may update this Privacy Policy as its Website, technology, legal obligations, or privacy practices change.
When the Policy is updated, WBC will revise the effective date at the top of the page. We will provide additional notice when required by law.
We encourage visitors to review this page periodically for current information about WBC’s Website privacy practices.
Contact Us
Questions about this Privacy Policy or WBC’s Website privacy practices may be directed to:
Westside Behavioral Care, Inc.
PO Box 461570
Aurora, CO 80046-1570
info@westsidebehavioralcare.com
For questions about clinical care, treatment records, diagnoses, medications, ongoing appointments, or an Independent Provider’s privacy practices, please contact that provider directly.

