At Zentrum Care LLC ("Zentrum Care," "we," or "us"), we are committed to protecting your privacy. We take care with the personal information we gather when you access or use zentrumcare.com and the related websites, applications, and services that we own and operate and that link to this Privacy Policy (collectively, the "Services").
Zentrum Care operates an online marketplace that helps parents and legal guardians find, review, and book appointments with independent healthcare providers — including speech-language pathologists (SLPs), occupational therapists (OTs), and other allied health professionals — for the care of their minor patients.
This Privacy Policy is meant to help consumers who use our Services ("you" or "your") understand how we treat your Personal Data. For purposes of this Privacy Policy:
- "User" means an individual who creates a Zentrum Care account to use the Services.
- "Visitor" means an individual who engages with our Services but does not have a Zentrum Care account (for example, if you visit our website or download our mobile application without creating an account). Please note that some of our Services, including the ability to book an appointment, are limited to Users with a Zentrum Care account.
- "Personal Data" means any information that identifies or relates to a particular individual, and includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations.
- "Healthcare Provider" means an independent provider, practice, or professional that lists or offers services through the marketplace.
BY USING OR ACCESSING THE SERVICES IN ANY MANNER, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS PRIVACY POLICY AND AGREE TO THE PRACTICES AND POLICIES OUTLINED IN THIS PRIVACY POLICY. YOU FURTHER CONSENT TO OUR COLLECTION, USE, AND SHARING OF YOUR INFORMATION AS SET FORTH IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU MAY NOT USE THE SERVICES. IF YOU USE THE SERVICES ON BEHALF OF SOMEONE ELSE (SUCH AS YOUR CHILD), YOU REPRESENT THAT YOU ARE AUTHORIZED TO ACCEPT THIS PRIVACY POLICY ON THAT INDIVIDUAL'S BEHALF.
Any use of the Services is subject to our Terms of Use, which incorporates this Privacy Policy.
Table of Contents
- HIPAA and PHI
- Notice at Collection
- Categories of Personal Data We Collect
- Categories of Sources of Personal Data
- Business Purposes for Collecting Personal Data
- Other Permitted Purposes for Processing Personal Data
- Data Retention
- Data That Is Not Personal Data or PHI
- How We Disclose Your Personal Data
- AI and Tracking Tools, Advertising, and Opt-Out
- Data Security
- Children's Privacy
- Controlling Your Personal Data and Notifications
- Your Privacy Rights
- Exercising Your Rights
- Changes to This Privacy Policy
- Contact Information
1. HIPAA and PHI
Certain demographic, health, and health-related information that Zentrum Care collects about Users on behalf of our Healthcare Providers as part of providing the Services may be "protected health information" ("PHI") governed by the Health Insurance Portability and Accountability Act ("HIPAA"). Specifically, this may be true when (i) Zentrum Care is providing administrative, operational, or other services to a Healthcare Provider that is a "Covered Entity" (as defined by HIPAA); (ii) in order to provide those services, Zentrum Care receives identifiable information about a User or their minor patient on behalf of the Healthcare Provider, where Zentrum Care is acting as a "Business Associate" (as defined by HIPAA); and (iii) this identifiable information is regulated as PHI.
This Privacy Policy does not apply to PHI, which is instead regulated by HIPAA. HIPAA provides specific protections for the privacy and security of PHI and restricts how PHI is used and disclosed. Please read the Notice of Privacy Practices of your Healthcare Provider to understand how PHI can be used and disclosed.
Personal Data that a User provides to Zentrum Care when Zentrum Care is not acting as a Business Associate is not PHI, and Zentrum Care's use of that information is therefore covered by this Privacy Policy. For example, we are collecting Personal Data governed by this Privacy Policy when you: (i) create an account; (ii) search for Healthcare Providers or available appointments; (iii) post reviews; or (iv) provide device/IP information or web analytics information by browsing our websites (see below).
2. Notice at Collection
The tables below describe the categories of Personal Data we may collect and may have collected about you over the past twelve (12) months, depending on your relationship with Zentrum Care. What Personal Data we collect depends on how you interact with the Services and which products you choose to use. For instance, we collect limited data if you are a Visitor and do not have an account.
For each category of Personal Data, the tables below also describe our purposes for collection and certain disclosures to third parties.
3. Categories of Personal Data We Collect
Visitor Data
This is the data we collect for all Visitors of our website, which may include Users with Zentrum Care accounts.
| Category and Examples of Personal Data | Source of Data | Business Purpose(s) for Collection |
|---|---|---|
| Online Identifiers such as IP address, IP-address-based location data, device ID, domain server, and type of device / operating system / browser used to access the Services | You; Third Parties | Providing, customizing, and improving the Services; marketing the Services |
| Web Analytics such as webpage interactions, referring webpage or source through which you access the Services, non-identifiable request IDs, and statistics associated with the interaction between your device or browser and the Services | You; Third Parties | Providing, customizing, and improving the Services; marketing the Services |
| Location Data, including IP-address-based location information and ZIP code or city | You | Providing, customizing, and improving the Services; marketing the Services |
| Other Identifying Information That You Voluntarily Choose to Provide such as in emails, chats, or other communications you send us | You | Providing, customizing, and improving the Services; corresponding with you |
User Data
The table below includes the categories of data we may collect if you have created an account and used our Services.
| Category of Personal Data | Source of Data | Business Purpose(s) for Collection |
|---|---|---|
| Personal Identifiers such as first and last name, email address, mailing address, ZIP code | You; Healthcare Providers | Providing, customizing, and improving the Services; corresponding with you |
| Phone number and SMS preferences | You | Corresponding with you; providing the Services in accordance with your preferences |
| Commercial Information such as your payment card type, the last four digits of your payment card, and billing contact information | You | Providing, customizing, and improving the Services; corresponding with you |
| Account Credentials, including information transmitted when you sign in through a third-party sign-in service (such as Google) | You; Third-Party Sign-In Services | Providing, customizing, and improving the Services; account authentication and security |
| Other Identifying Information That You Voluntarily Choose to Provide such as in emails, chats, reviews, or other communications | You | Providing, customizing, and improving the Services; corresponding with you |
Sensitive Personal Data
The following categories of Personal Data may be deemed "sensitive" depending on your state of residence. We do not collect any of the following categories of Personal Data for the purpose of inferring characteristics about you, and we process Sensitive Personal Data only as reasonably necessary to provide the requested Services and in accordance with applicable law.
| Category of Sensitive Personal Data | Source of Data | Business Purpose(s) for Collection |
|---|---|---|
| Booking Appointment Data such as appointment date/time, provider information, visit reason, and whether the patient is a new patient of a particular provider | You; Healthcare Providers | Providing, customizing, and improving the Services; corresponding with you |
| Health Information such as the minor patient's health conditions, Healthcare Providers visited, dates of visit, and other health information you provide us | You; Healthcare Providers | Providing, customizing, and improving the Services; corresponding with you |
| Health Insurance Information, such as insurance plan, member ID, group ID, and payer ID | You; Healthcare Providers | Determining eligibility and cost-sharing; providing, customizing, and improving the Services |
| Sensitive Demographic Data, such as gender identity, race, or ethnicity, where you choose to provide it | You; Healthcare Providers | Providing, customizing, and improving the Services; corresponding with you |
Because our Services are used by parents and legal guardians to arrange care for minor patients, much of the health and appointment information described above relates to a minor. Please see the Children's Privacy section below for how we handle that information.
4. Categories of Sources of Personal Data
From You
- When you create an account or use our interactive tools and services, such as searching for Healthcare Providers or available appointments.
- When you provide information by booking an appointment with a Healthcare Provider.
- When you provide information in free-form text boxes, through responses to surveys and questionnaires, or by posting reviews.
- When you send us an email or otherwise contact us.
Automatically Collected When You Use the Services
- Through automated technologies when you navigate the Services, including Cookies (as defined below).
- If you download and use our mobile application or a location-enabled browser, we may receive information about your device and, where applicable, your approximate location.
From Other Sources
- Service Providers. We may use service providers to analyze how you interact with the Services or to help us provide customer support.
- Analytics Partners. We may work with analytics partners to provide us analytics on website traffic and usage of the Services.
- Healthcare Providers. We may receive certain data from Healthcare Providers to facilitate booking appointments and to provide you with information at your request.
- Third-Party Sign-In Services. If you sign in to the Services through a third-party service such as Google, some information from that account may be transmitted into your Zentrum Care account, depending on your permissions with that service.
5. Business Purposes for Collecting Personal Data
Providing, Customizing, and Improving the Services
- Creating and managing your account.
- Providing you with the products, services, and information you request.
- Facilitating appointment search and booking with Healthcare Providers.
- Processing booking-related payments through our payment processor.
- Providing support and assistance for the Services.
- Improving the Services, including testing, research, internal analytics, and product development.
- Personalizing the Services, website content, and communications based on your preferences.
- Fraud protection, security, and debugging.
Marketing the Services
- Marketing our own Services.
- Where available, showing you advertisements, including interest-based advertising, as further described in the AI and Tracking Tools, Advertising, and Opt-Out section below.
Corresponding With You
- Responding to correspondence we receive from you, contacting you when necessary or requested (including to remind you of an upcoming appointment), and sending you information about Zentrum Care or the Services.
- Sending communications, according to your preferences, about resources, Healthcare Providers, or Services we think will interest you.
6. Other Permitted Purposes for Processing Personal Data
Each of the categories of Personal Data above may also be collected, used, and disclosed to government entities (including law enforcement) or other parties to meet certain legal requirements and enforce legal terms, including: fulfilling our legal obligations under applicable law, regulation, court order, or other legal process, such as preventing, detecting, and investigating security incidents and potentially illegal or prohibited activity; protecting the rights, property, or safety of you, Zentrum Care, or another party; enforcing any agreements with you; responding to claims that any posting or content violates third-party rights; and resolving disputes.
7. Data Retention
We retain Personal Data about you as necessary to provide our Services or to perform the business purposes for which we collected it. When establishing a retention period for a category of data, we consider who we collected the data from, our need for the data, why we collected it, and its sensitivity. In some cases, we retain Personal Data longer where necessary to comply with our legal obligations, resolve disputes, collect fees owed, provide our Services, or as otherwise permitted or required by applicable law. We may retain information in de-identified and/or aggregated form where that information would not identify you personally.
For example, we retain your account information and credentials for as long as you have an account with us, and we retain device/IP data for as long as we need it to keep our systems working appropriately.
8. Data That Is Not Personal Data or PHI
We may de-identify or aggregate Personal Data so that it will no longer be considered Personal Data, and we may disclose such information to other parties for purposes consistent with this Privacy Policy. We will protect de-identified information in accordance with applicable law, will not attempt to re-identify it, and will require recipients not to do so.
9. How We Disclose Your Personal Data
We may disclose your Personal Data to the following categories of service providers and other third parties for the purposes indicated. How we disclose your Personal Data depends on how you use our Services.
Service Providers
- Payment Processors. Our payment processing partner (currently Stripe) collects the payment card information you provide in order to process your payment. Please see Stripe's terms of service and privacy policy for information on its use and storage of your data.
- Security and Fraud Prevention Providers. For detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity.
- Hosting, Technology, Data Storage, and Analytics Providers. To perform operational services such as hosting, data storage, security, and web analytics, and to make certain features available to our Users.
- Insurance Eligibility Verification Providers. To determine eligibility and cost-sharing obligations and to otherwise obtain benefit plan information on your behalf when you provide insurance information through the Services.
Healthcare Providers
- Healthcare Providers with whom you choose to schedule an appointment through the Services, in order to facilitate that appointment.
Mobile Information and Text Messages
- We do not sell your mobile phone number, and we do not share your mobile phone number — or the text-messaging consent you give us — with any third party or affiliate for that party's marketing or promotional purposes. Two disclosures are necessary in order to deliver the messages you asked us to send, and neither is a marketing disclosure: (i) the communications provider that transmits them on our behalf (currently Twilio), which may use your number only to deliver our messages; and (ii) the Healthcare Provider with whom you booked an appointment, who receives your contact details in order to provide and coordinate that appointment. Neither may use your mobile number to market to you.
- Message frequency. A sign-in passcode is sent only when you ask to sign in, one message per request. Appointment messages depend on your bookings: for each appointment you book, one confirmation and one reminder before the visit, and a further message only if the Healthcare Provider changes or cancels that appointment, if your insurer reports a problem with the coverage on file, or if your family profile is still incomplete shortly before a first visit.
- Message and data rates may apply. Reply STOP to any message to stop receiving text messages, or HELP for help. Our SMS Terms describe both programs in full; appointment text messages are optional, and declining them does not prevent you from booking.
Insurance Providers
- To determine eligibility and cost-sharing obligations and to otherwise obtain benefit plan information on your behalf.
Other Uses That You Authorize
- Reviews. Any information you reveal in a review is intentionally public and is not private. We recommend that you carefully consider whether to disclose any Personal Data in any public review.
- Third-Party Sign-In Services. We will disclose certain Personal Data if you choose to sign in to the Services using a third-party service such as Google.
Legal Obligations and Business Transfers
- We may disclose Personal Data in conjunction with any of the activities set forth in this section.
- All Personal Data may be transferred to a third party in connection with a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business (in whole or in part). Should this occur, we will make reasonable efforts to notify you before your information becomes subject to a different privacy policy.
10. AI and Tracking Tools, Advertising, and Opt-Out
The following sections provide additional information about how we may collect your Personal Data through automated means.
AI Tools
We may use artificial intelligence ("AI") tools to enhance or operate certain functions of the Services, such as customer support and navigation features. When you interact with our AI tools, we or the service providers we engage may process your information automatically. Our AI tools are intended to support and assist you; they do not direct, steer, rank, or match you to any particular Healthcare Provider.
Cookies
The Services use cookies and similar technologies such as pixel tags, web beacons, and mobile identifiers (collectively, "Cookies") to enable our servers to recognize your device and browser and tell us how and when you visit and use our Services. Cookies are small pieces of data placed on your device when you use it to visit our Services.
We or the providers we engage may deploy the following types of Cookies:
- Essential Cookies. Required to provide you with features or services you have requested, such as logging into secure areas of the Services. Disabling these may make certain features unavailable.
- Functional Cookies. Used to record your choices and settings, maintain your preferences over time, and recognize you when you return — for example, your choice of language (English or Spanish).
- Performance / Analytical Cookies. Allow us to understand how visitors use the Services, such as the number of visitors, which pages are viewed, and how long visitors spend on them. For example, we use Google Analytics. Google's ability to use and share information collected by Google Analytics is subject to the Google Analytics Terms of Use and the Google Privacy Policy. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
- Retargeting / Advertising Cookies. Where we offer advertising-supported features, we may use these Cookies to collect data about your online activity in order to provide advertising, on and off the Services, that we believe is relevant to you. See "Information About Interest-Based Advertisements" below.
You can decide whether to accept Cookies through your browser's settings. Most browsers allow you to turn off the Cookie feature or reject individual Cookies. You may also be able to reject mobile device identifiers through your device settings. If you block, reject, or delete Cookies, some functionality may not work and you may have to adjust some preferences each time you access the Services.
Information About Interest-Based Advertisements
Where available, we may serve advertisements and allow third-party ad networks to collect data on the Services and serve advertisements on and off the Services. These advertisements may be targeted to users who fit certain general profile categories or display certain preferences or behaviors ("Interest-Based Ads"). Information used for Interest-Based Ads may include IP address, mobile device ID, operating system, browser, webpage interactions, geographic location, and general demographic information. This information helps us understand our Users' demographics and internet behaviors and market our Services.
Even after opting out of Interest-Based Ads, you may still see Zentrum Care advertisements that are not interest-based.
To opt out of Interest-Based Ads or the use of advertising Cookies, please contact us at support@zentrumcare.com. We also honor recognized browser-based opt-out preference signals, such as the Global Privacy Control (GPC), where technically feasible.
We do not knowingly sell or share Personal Data about persons under the age of 18, and we do not use the health information of minor patients for advertising purposes.
11. Data Security
The security of your Personal Data is important to us. We seek to protect your Personal Data from unauthorized access, use, and disclosure using appropriate physical, technical, organizational, and administrative security measures based on the type of Personal Data and how we process it. We endeavor to follow generally accepted industry standards to protect Personal Data both during transmission and in storage.
However, because no transmission of information over the internet is completely secure, we cannot and do not guarantee the complete security of any data you share with us, and except as expressly required by law, we are not responsible for the theft, destruction, loss, or inadvertent disclosure of your information or content.
12. Children's Privacy
Our Services are designed to help parents and legal guardians find, review, and book pediatric healthcare — including speech-language pathology, occupational therapy, and related allied health services — for their minor patients.
Account holders must be at least 18 years of age. A parent or legal guardian creates and controls the Zentrum Care account and uses the Services on behalf of their minor patient. Children may not create their own accounts, book appointments, or use the Services directly.
When a parent or legal guardian uses the Services on behalf of a minor, the information they provide about that minor — which may include the minor's name, date of birth, health conditions, appointment details, and insurance information — is handled as Personal Data under this Privacy Policy, or as PHI under HIPAA where applicable (see the HIPAA and PHI section above). By providing information about a minor, you represent that you are the parent or legal guardian of that minor, or are otherwise authorized to provide the information and to accept this Privacy Policy on the minor's behalf.
We do not knowingly permit children to create accounts or to provide Personal Data to us directly, outside of the parent- or guardian-controlled account relationship. If we learn that a child has provided Personal Data to us directly and outside of that relationship, we will use that information only to respond to the child (or their parent or legal guardian) and will then delete it. We do not use the information of minor patients for advertising or sell or share it for cross-context behavioral advertising.
If you are a parent or legal guardian and you believe a child has provided us Personal Data outside of the account relationship, or you have questions about how we handle a minor's information, please contact us at privacy@zentrumcare.com.
Other Users. If you use the Services on behalf of another person, you agree that Zentrum Care may contact you for any communication made in connection with providing the Services or any legally required communication, and you agree to forward or share any such communication with the person on whose behalf you are using the Services.
13. Controlling Your Personal Data and Notifications
If you are a registered User, you can modify certain Personal Data or account information by logging in and accessing your account. If you wish to close your account, please email us at privacy@zentrumcare.com. We will use reasonable efforts to delete your account as soon as reasonably possible. Please note that we reserve the right to retain information from closed accounts consistent with our internal data retention policies and applicable law.
You must promptly notify us if any of your account data is lost, stolen, or used without permission.
14. Your Privacy Rights
Depending on where you live, applicable state privacy laws may give you certain rights regarding your Personal Data. Where those laws apply to us, we provide the rights described below. These rights are subject to conditions and exceptions under applicable law, which may permit or require us to deny a request. Please note that HIPAA governs your rights with respect to PHI, and requests regarding PHI should be directed to your Healthcare Provider (see the HIPAA and PHI section above).
- Access / Portability. You may have the right to request information about the Personal Data we have collected about you, including the categories of Personal Data, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we have shared it — and, where technically feasible, a copy of your Personal Data in a portable format.
- Deletion. You may have the right to request that we delete the Personal Data we have collected from you, subject to certain exceptions (for example, where we need it to provide the Services or to comply with a legal obligation).
- Correction. You may have the right to request that we correct inaccuracies in your Personal Data.
- Opt-Out of Sale / Sharing. To the extent we "sell" or "share" Personal Data for targeted advertising as those terms are defined under applicable law, you may have the right to opt out. See the AI and Tracking Tools, Advertising, and Opt-Out section above, and contact us at support@zentrumcare.com. We also honor recognized browser-based opt-out preference signals such as the GPC where technically feasible.
We will not discriminate against you for exercising your rights. We will not deny you our Services or provide a lower quality of Services because you exercised your rights, although if you delete your Personal Data or restrict our use of it, we may not be able to provide the same Services to you.
15. Exercising Your Rights
To exercise any of the rights described above, please contact us at privacy@zentrumcare.com. To help us respond, please submit a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in enough detail to allow us to understand, evaluate, and respond to it. We will use Personal Data provided in a request only to verify your identity and complete your request.
We will respond within the time period required by applicable law, and we will not charge you a fee for making a valid request. We will not ask you to verify your identity in connection with a request to opt out of sale or sharing.
If you are a registered User, you can also review and update certain Personal Data directly through your account settings.
16. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time by posting a revised version on our website. If we make material changes, we will notify you by including a notice on our website or by communicating with you via email or through your account. Your continued use of the Services following a revision constitutes your agreement that information collected from or about you after the revised policy is posted will be subject to the terms of the revised policy. The date listed at the top of this Privacy Policy indicates its most recent update.
17. Contact Information
If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data, or your choices and rights regarding that use, please contact us at:
Zentrum Care LLC 7901 Hispanola Ave, Apt 1605 North Bay Village, FL 33141
General inquiries: support@zentrumcare.com Privacy inquiries: privacy@zentrumcare.com