Privacy Policy

Last updated: September 19, 2026

Dr. Divya DPT ("we," "us," "our"), owned and operated by Dr. Divya Buckles PT DPT CSCS, respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights you have.

This Policy applies to www.drdivyadpt.com, our emails, our digital products, our community spaces, and our Rehab Coaching service. It should be read together with our [Disclaimers] and [Terms & Conditions].

This is a starting draft and not legal advice. Because your business touches health information, please have a licensed attorney review this Policy — especially Sections 2, 5, 6, and 11 — before publishing.

1. The Two Kinds of Information We Handle

We treat information differently depending on how it reaches us, and it matters which category you are in.

(a) Website, marketing, and Digital Product information. If you browse our site, join our email list, download a free resource, or buy a self-guided Digital Product, you are a customer, not a patient. Information you give us in that context is not protected health information and is handled under this Policy and applicable consumer privacy law.

(b) Rehab Coaching information. If you enroll in our 1:1 Rehab Coaching service and we provide licensed physical therapy care, the clinical information you share with us in that relationship is treated as confidential health information and is protected by this Policy, by our professional and ethical obligations as a licensed physical therapist, by Texas law, and — where we operate as a HIPAA-covered entity — by the Health Insurance Portability and Accountability Act (HIPAA). Where HIPAA applies, you will receive a separate Notice of Privacy Practices, and that Notice controls over this Policy for your clinical records.

Please do not send us health details you want protected through Instagram DMs, comments, social media, or general email. Those channels are not secure and are not clinical channels. Health information you volunteer there is not part of a clinical record and cannot be protected the same way. For anything clinical, use the intake forms and secure platform we provide.

2. Information We Collect

Information you give us

  • Contact and identity information — name, email address, and where you provide it, phone number, mailing or billing address, and social media handle.

  • Purchase information — what you bought, when, order amount, and billing details. We do not receive or store your full payment card number; that is handled by our payment processor.

  • Account information — username and password for our course or member platform.

  • Email and content preferences — the topics, lead magnets, or lists you opted into and any tags applied based on links you clicked or forms you completed.

  • Communications — the content of emails, form submissions, survey and quiz responses, community posts, and messages you send us.

  • Testimonials and submitted media — anything you voluntarily send us, including photos or video, along with consent records for their use.

  • Rehab Coaching intake and clinical information — health history, current symptoms, pregnancy and postpartum history, pelvic health history, surgical history, medications, goals, functional and movement assessment findings, any photos or video you submit for form review, session notes, and your plan of care. We collect this only for enrolled Rehab Coaching clients and only what is reasonably necessary to provide care.

  • State or location of residence for Rehab Coaching, because our licensure and telehealth obligations depend on where you are physically located during a session.

Information collected automatically

  • Device and usage data — IP address, approximate (city or region level) location derived from IP, browser and device type, operating system, referring page, pages viewed, time on page, and links clicked.

  • Cookies and similar technologies — see Section 6.

  • Email engagement data — whether an email was opened and which links were clicked.

  • Course platform activity — which lessons or modules you accessed and your progress.

Information from third parties

  • Payment processors confirm transactions and provide limited billing details.

  • Our email, course, scheduling, and analytics providers report activity on their platforms.

  • Social media platforms provide aggregate, non-identifying audience and engagement metrics.

Sensitive information

Health information, and information about sexual or reproductive health, is sensitive. Where required by law — including the Texas Data Privacy and Security Act, which requires opt-in consent before processing sensitive data such as health-diagnosis information (Texas Attorney General) — we ask for your affirmative consent before collecting or processing it, and we collect it only where it is necessary for a service you requested.

Children

Our offerings are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at dabrahamfit@gmail.com and we will delete it.

3. Why We Use Your Information

We use personal information to:

  • Deliver what you purchased — grant access to Digital Products, provide Rehab Coaching, schedule sessions, and provide customer support;

  • Process payments, prevent fraud, and keep financial and tax records;

  • Send transactional messages such as receipts, access links, appointment reminders, and important service notices;

  • Send marketing emails, educational content, and offers where you have opted in;

  • Personalize which educational content or offers you receive, based on the topics and tags you engaged with;

  • Understand and improve our website, content, and programs using aggregate analytics;

  • Provide, document, and coordinate clinical care for Rehab Coaching clients, including maintaining the records our license and applicable law require us to keep;

  • Comply with our legal, professional, licensure, and recordkeeping obligations, and to establish or defend legal claims;

  • Protect the safety, rights, and property of our clients, our community members, and us.

We rely on your consent for marketing emails and for processing sensitive health information; on contractual necessity to deliver what you bought; on legal obligation for clinical recordkeeping and tax records; and on legitimate interests for security, fraud prevention, and basic analytics.

4. What We Do Not Do

To be direct about the things people most often worry about:

  • We do not sell your personal information. We do not sell, rent, or trade your name, email, health information, or any other personal data to anyone, for any price.

  • We do not share your health information with advertisers, data brokers, or social media platforms.

  • We have no affiliate relationships, sponsorships, or paid partnerships, and we use no affiliate or referral links — so we are not passing your clicks or data to a partner for commission. See our [Disclaimers].

  • We do not use your clinical information, intake forms, session notes, or submitted photos or video to train artificial intelligence systems.

  • We do not publish your name, photo, results, or story in marketing without your separate, express written consent, which you may withdraw for future use at any time.

  • We do not use Rehab Coaching clinical information for marketing. Being a coaching client does not put your health details into any marketing segment.

5. When We Share Information

We share personal information only in these circumstances:

(a) Service providers acting on our behalf. We use trusted vendors to run the business, and they may access only what they need to perform their function for us. These typically include categories such as: website hosting; email marketing and automation; course, membership, or app hosting; payment processing; scheduling; video conferencing; secure document or form collection; electronic medical record or practice-management software; cloud storage; and website analytics. [Name your actual vendors here — e.g., Squarespace, ConvertKit/Flodesk, Kajabi/Teachable, Trainerize, Stripe, Zoom, Google Workspace, your EMR — and link their privacy policies. Naming them is better practice and is expected in some jurisdictions.] Where they handle protected health information and HIPAA applies, we put a Business Associate Agreement in place.

(b) With your direction or consent. For example, if you ask us to coordinate with your physician, midwife, surgeon, or another provider, or if you approve use of a testimonial.

(c) Legal and safety reasons. When required by law, subpoena, court order, licensing board inquiry, or valid government request; to comply with mandatory reporting obligations; or where we believe in good faith that disclosure is necessary to prevent serious harm to you or another person.

(d) Business transfer. If our business is sold, merged, or reorganized, information may transfer as part of that transaction. Clinical records would transfer only in a manner permitted by applicable health privacy law, and we would notify affected clients.

(e) Aggregate or de-identified data. We may share information that cannot reasonably be used to identify you, such as overall program completion rates or audience statistics.

6. Cookies, Analytics, and Advertising Technology

Our website uses cookies and similar technologies for:

  • Strictly necessary functions — logging you in, keeping your cart, and security;

  • Analytics — understanding aggregate traffic and which content is useful;

  • Marketing and advertising — only where described below and where you consent, if consent is required in your location.

You can control cookies through your browser settings and through any cookie banner we display. Blocking strictly necessary cookies may break parts of the site. We honor Global Privacy Control (GPC) browser signals as an opt-out of sale and targeted advertising where applicable law requires.

7. How We Protect Information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including access controls and unique credentials, encryption in transit, encrypted or access-restricted storage for clinical records, limiting access to those who need it, vendor due diligence, and periodic review of our practices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send sensitive health information through social media DMs, comments, or unencrypted email. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by applicable law.

8. How Long We Keep Information

  • Marketing and email list data — while you remain subscribed and for a reasonable period afterward to honor your unsubscribe and suppression preferences.

  • Purchase and financial records — as long as required by tax, accounting, and recordkeeping law (commonly at least seven years).

  • Digital Product account data — while your access is active and for a reasonable period afterward.

  • Website analytics data — typically in aggregate or short retention windows set by our analytics provider.

When information is no longer needed and no retention obligation applies, we delete or de-identify it.

9. Your Choices

  • Marketing emails. Every marketing email includes an unsubscribe link, effective immediately upon processing. You may also email [privacy email]. We will still send transactional messages about purchases, access, or appointments.

  • Cookies. Manage through your browser or our cookie controls.

  • Your account. Update your details in your account settings or ask us to correct them.

  • Testimonials and media. Withdraw consent for future use at any time by emailing us.

  • Withdraw consent for sensitive data processing. You may withdraw consent at any time, though doing so may mean we can no longer provide Rehab Coaching.

10. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

  • Know / access — confirm whether we process your personal data and obtain a copy;

  • Correct — fix inaccuracies;

  • Delete — request deletion of personal data we hold about you;

  • Portability — receive a copy in a portable, readable format where technically feasible;

  • Opt out — of the sale of personal data, targeted advertising, and certain profiling. We do not sell personal data or engage in cross-context behavioral advertising profiling as those terms are defined under state law;

  • Non-discrimination — we will not deny service, charge different prices, or reduce quality because you exercised a privacy right;

  • Appeal — if we decline your request, you may appeal our decision, and we will respond in writing.

Texas residents have these rights under the Texas Data Privacy and Security Act, which took effect July 1, 2024 (Texas Attorney General). Residents of California, Colorado, Virginia, Connecticut, Washington, and other states with comprehensive privacy laws have comparable rights, and we extend these rights to all of our customers regardless of where they live.

How to exercise a right. Email us with your request and enough information for us to locate your records. We will verify your identity before acting, respond within 45 days where required by law, and may extend once with notice. An authorized agent may submit a request on your behalf with proof of authorization.

Limits. Some rights do not apply to clinical records. Health information that is protected under HIPAA or that we are professionally required to retain is exempt from general consumer deletion rights, and separate access and amendment rights apply under HIPAA instead. If HIPAA applies to your records, see our Notice of Privacy Practices.

11. Telehealth and Interstate Care

Rehab Coaching delivered by video or audio uses a third-party conferencing platform. We select platforms that support appropriate security and, where required, execute a Business Associate Agreement. Sessions are not recorded unless you give separate written consent. Your physical location during a session affects which state's licensure and privacy rules apply, which is why we ask you to confirm it.

12. Where Your Information Is Processed

We operate in the United States, and our service providers generally store and process information in the United States. If you access our offerings from outside the U.S., you understand your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country. Where required, we use appropriate safeguards for international transfers.

13. Third-Party Links

Our website and materials may link to third-party sites, studies, or tools for educational purposes. We do not control those sites, and this Policy does not apply to them. Please review their own privacy policies. As stated in our [Disclaimers], these are not affiliate or referral links and we receive nothing of value from them.

14. Changes to This Policy

We may update this Policy. The "Last updated" date above will change, and we will notify you of material changes by posting a notice on this page, in the member area, or by email where we have your address. Where a change materially affects how we handle sensitive information, we will obtain fresh consent if required.