Privacy Policy

This Privacy Policy explains how Right Care Marketplace LLC, doing business as RightPT (“RightPT,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use our website, mobile applications, and related services (the “Services”). It also describes your privacy rights, including rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”). RightPT is a technology marketplace connecting patients with independent physical therapy providers; it is not a healthcare provider.

HEALTH INFORMATION & HIPAA. For some providers who are HIPAA-covered, certain information RightPT handles may be Protected Health Information (“PHI”) governed by a Business Associate Agreement and the provider’s HIPAA notice — not this Policy. This Policy governs all other personal information. See Section 12 and our separate Consumer Health Data Notice.

1. Scope and Who This Applies To

This Policy applies to patients and other website/app visitors (“users”) and to providers who use the Services. Where a specific section applies only to one group, we say so. By using the Services, you agree to this Policy. If you do not agree, do not use the Services.

2. Information We Collect

We collect the following categories of personal information. “Disclosed to” refers to the types of recipients described in Section 5.

3. Sources of Personal Information

• Directly from you — when you create an account, search, book, pay, message, post a review, or contact support.
• From providers — e.g., appointment updates or notes shared through the Platform.
• Automatically — from your device and browser through cookies and similar technologies (see our Cookie Policy).
• From service providers and verification vendors — e.g., payment, identity, license-verification, and analytics partners.

4. How We Use Personal Information

• Provide, operate, and improve the Services, including search, matching, scheduling, messaging, and booking.
• Facilitate payments and payouts through Stripe, and handle refunds, chargebacks, and related accounting.
• Verify provider credentials and run identity, license, and sanctions/exclusion screening.
• Communicate with you — confirmations, reminders, service and security notices, and, with your consent or as permitted, marketing (which you can opt out of).
• Protect users, providers, and the Platform — fraud prevention, trust & safety, and dispute handling.
• Analyze usage and measure and improve performance and features.
• Comply with law, respond to lawful requests, and enforce our Terms and policies.

We use personal information only for purposes compatible with those described here or as otherwise permitted by law.

5. How We Disclose Personal Information

5.1 Providers. When you book or message a provider, we share the information needed to facilitate that interaction with the independent provider you select.

5.2 Service Providers. We share information with vendors that perform services for us under contract — including payment processing (Stripe), cloud hosting, analytics, communications/SMS, identity and license verification, and customer support — and who are restricted from using it for their own purposes.

5.3 Legal, Safety, and Compliance. We may disclose information to comply with law, respond to lawful requests or legal process, enforce our agreements, or protect the rights, safety, or property of users, providers, RightPT, or the public.

5.4 Business Transfers. If RightPT is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

5.5 With Your Direction or Consent. We share information at your direction or with your consent.

5.6 No Sale of Personal Information. We do not sell your personal information for money. We do not knowingly sell or share the personal information of anyone under 16.

5.7 “Sharing” for Cross-Context Behavioral Advertising. We may use cookies and analytics that could be considered “sharing” under the CCPA/CPRA for cross-context behavioral advertising. You can opt out using the “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” link on our site, and we honor Global Privacy Control (GPC) browser signals as opt-out requests. See our Cookie Policy.

6. Sensitive Personal Information

Some information we collect is “sensitive personal information” under the CPRA — for example, account log-in credentials, health-related information, precise geolocation (if you enable it), and, for providers, certain government identifiers collected for verification and payouts. We use and disclose sensitive personal information only as necessary to provide the Services you request, to verify providers, to process payments, for security and fraud prevention, and as otherwise permitted by law — not to infer characteristics about you. You may ask us to limit our use of your sensitive personal information as described in Section 8.

7. Data Retention and Security

7.1 Retention. We keep personal information for as long as needed to provide the Services and for legitimate business and legal purposes — for example, to maintain your account, complete transactions, resolve disputes, meet tax and recordkeeping obligations, and enforce our agreements. Retention periods vary by data type and legal requirement; when no longer needed, we delete or de-identify it.

7.2 Security. We use administrative, technical, and physical safeguards designed to protect personal information, including access controls and encryption in transit where appropriate. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights, subject to verification and legal exceptions:

• Know / Access — request the categories and specific pieces of personal information we collected, the sources, purposes, and the categories of recipients.
• Delete — request deletion of personal information we collected, subject to exceptions.
• Correct — request correction of inaccurate personal information.
• Opt out of Sale/Sharing — opt out of any “selling” or “sharing” (cross-context behavioral advertising), including via GPC and our “Your Privacy Choices” link.
• Limit Sensitive Personal Information — ask us to limit use of your sensitive personal information to what is necessary to provide the Services.
• Non-Discrimination — we will not discriminate against you for exercising your rights.

8.1 How to Exercise. Submit a request by emailing admin@rightpt.com or via the “Your Privacy Choices” link on our site. (You can also correct much of your profile information directly in your account.) We will verify your identity before fulfilling access, deletion, or correction requests, which may require confirming information associated with your account.

8.2 Authorized Agents. You may use an authorized agent to submit a request; we may require proof of authorization and verification of your identity.

8.3 Timing. We generally respond within 45 days and may extend by an additional 45 days where permitted, with notice. There is normally no charge unless a request is excessive or repetitive.

9. Other U.S. State Privacy Rights

Residents of other states may have similar rights to access, correct, delete, and opt out of certain processing under their state laws. To exercise any such right, contact us at admin@rightpt.com, and we will honor applicable rights based on your state of residence.

9.1 California “Shine the Light” (Civil Code §1798.83). California residents may request information about disclosures of personal information to third parties for their direct-marketing purposes. We do not share personal information with third parties for their own direct marketing. You may direct such requests to admin@rightpt.com.

10. Children’s Privacy

The Services are intended for adults 18 and older and are not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us personal information, contact us at admin@rightpt.com and we will take appropriate steps to delete it. Where a parent or guardian books care for a minor, the adult is responsible for the minor’s information provided through the account.

11. Consumer Health Data

Because using RightPT can reveal that you are seeking physical therapy, some information may be “consumer health data.” Our separate Consumer Health Data Notice describes how we collect, use, and share such data and the choices you have. To the extent the federal FTC Health Breach Notification Rule or state consumer-health-data laws apply, we comply with them.

12. Relationship to HIPAA

RightPT is not itself a healthcare provider. For providers who are HIPAA-covered entities, RightPT may act as a “Business Associate” as to PHI it processes on their behalf; that PHI is governed by the applicable Business Associate Agreement and the provider’s own Notice of Privacy Practices, not by this Policy. This Policy governs personal information that is not PHI under HIPAA, and we remain subject to the California Confidentiality of Medical Information Act, CCPA/CPRA, and other applicable privacy laws.

13. Third-Party Services and Links

The Services rely on and may link to third-party services (such as Stripe, calendars, and analytics) and websites we do not control. Their handling of your information is governed by their own privacy policies. We encourage you to review them.

14. Cookies, Tracking Technologies, and Google Maps

14.1 Cookies and Similar Technologies. We and our service providers use cookies, pixels, SDKs, local storage, and similar technologies to operate the Services, remember your settings, keep you signed in, measure and analyze usage, and support security and fraud prevention. These fall into broad groups: strictly necessary, functional, analytics/performance, and (where applicable) advertising technologies.

14.2 Your Choices. You can control cookies through your browser settings, and you can use the “Your Privacy Choices” / “Do Not Sell or Share My Personal Information” link on our site to opt out of any “sharing” for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals as opt-out requests. Disabling some cookies may affect how the Services function. A separate Cookie Policy provides additional detail.

14.3 Do Not Track. Because there is no common industry standard for responding to browser “Do Not Track” (DNT) signals, we do not respond to DNT signals at this time; however, we do respond to GPC opt-out signals as described above.

14.4 Google Maps. The Services use Google Maps Platform APIs (which may include the Maps JavaScript API and Places API) to provide mapping, location search, and related features. By using these features, you are also subject to the Google Maps/Google Earth Additional Terms of Service and to the Google Privacy Policy, which is incorporated into this Policy by reference and is available at https://policies.google.com/privacy. Google’s collection and use of information through these APIs is governed by Google’s own policies.

15. Where We Operate

The Services are intended for users in the United States, and information is processed in the United States. We do not offer the Services to individuals outside the United States.

16. Changes to This Policy

We may update this Policy. If we make material changes, we will post the updated Policy with a new “Last Updated” date and, where required, provide additional notice. Your continued use of the Services after the effective date means you accept the updated Policy.

17. Contact Us

For privacy questions or to exercise your rights, contact us at:

RightPT (Right Care Marketplace LLC)
Email: admin@rightpt.com
Mailing address: 750 Garden St Unit 30, Milpitas, CA 95035