This Privacy Policy describes how Oral Myofunctional Therapy of York (“OMT of York,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website at www.omtofyork.com (the “Site”), submit a form, book a consultation, use our Learning Center tools, or otherwise contact us through online channels. Our primary practice offices are at 1404 E Market St, York, PA 17403, and 3176 Old Philadelphia Pike, Bird in Hand, PA 17505. You can reach us at [email protected] or (717) 309-8802.
Plain-language summary
This summary is for convenience only; the full policy below controls. In short: we collect information you choose to give us through website forms (such as name, email, phone, and your message), plus routine technical and analytics data about how the Site is used. We use that information to respond to inquiries, schedule evaluations, coordinate referrals, and improve the Site. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. If you provide a phone number and opt in, we may call or text you about your inquiry or appointments — reply STOP anytime to stop texts. This Site is not a patient portal and is not designed to collect full medical records. Clinical information you share as a patient in the office or through clinical channels is handled under our separate in-office privacy practices, which are available upon request at either office.
1. Who we are and what this policy covers
Oral Myofunctional Therapy of York is an orofacial myofunctional therapy practice serving children, teens, and adults in York and Lancaster County, Pennsylvania. This policy applies to personal information collected through the Site and related online communications (including evaluation requests, symptom pathway submissions, provider referral forms, and email generated from Site links).
This policy does not govern information collected solely offline during clinical care, in-person evaluations, telephone conversations that are part of ongoing treatment, or any electronic health record / clinical practice management system we may use. Those records are subject to applicable health-privacy rules and our Notice of Privacy Practices (or equivalent office policy), available upon request at our front desk.
2. Important note about health information
The Site is educational and informational. It is not intended to collect protected health information (“PHI”) as defined under HIPAA, and it is not a substitute for clinical evaluation. Please do not submit detailed medical histories, diagnoses, imaging, lab results, or other sensitive clinical documentation through website forms. Brief descriptions of what you are noticing (for example, mouth breathing, oral habits, or sleep concerns) may help us route your inquiry, but they are treated as website inquiry data under this policy — not as a complete medical record.
We do not claim that this website creates a covered-entity relationship for every visitor, and we do not invent Business Associate Agreements for marketing vendors here. If you become a patient, your clinical records are managed through our clinical workflows and separate privacy notices. Questions about clinical records should be directed to our offices using the contact details above.
3. Information we collect
Information you provide
- Contact and evaluation forms. Name, email address, optional phone number, preferred office, who the inquiry is for, and message content.
- Symptom pathway / Learning Center tools. Selections you make about signs you are noticing, optional contact details if you ask us to follow up, and related educational routing context. These tools are educational — not a diagnosis.
- Provider referral forms. Patient name, guardian name (if applicable), date of birth, phone, referring provider details, preferred location, referral awareness, and clinical signs the provider selects.
- Communications. Content of emails, texts, or calls you initiate in response to the Site.
Information collected automatically
- Technical and usage data. IP address, browser type, device type, approximate location derived from IP, referring URLs, pages viewed, and timestamps.
- Cookies and similar technologies. Necessary cookies for security and core functionality; optional analytics cookies if you accept them via our cookie preferences banner. See Section 8.
- Spam protection. Our forms use reCAPTCHA Enterprise (or similar) through our form-relay provider to reduce automated abuse. Google may process device and interaction signals under its own terms when that service runs.
4. How we use information
We use Site information to:
- Respond to evaluation requests, referrals, and general questions;
- Schedule and remind you about appointments when you opt in to phone/SMS contact;
- Route educational self-check results to our team when you ask us to follow up;
- Operate, secure, and improve the Site (including accessibility and performance);
- Measure aggregate traffic and content usefulness when analytics are enabled;
- Comply with law, enforce our Terms of Service, and protect patients, staff, and visitors.
We do not use website form submissions to make automated decisions that produce legal or similarly significant effects about you without human involvement.
5. How we share information
We share personal information only as needed to operate the practice and the Site, for example with:
- Service providers who host the website, deliver form submissions to our inbox/CRM, provide spam protection, analytics (when enabled), email/SMS delivery, or IT support — under contracts that limit use to providing services for us;
- Referring providers when you (or a referring clinician) ask us to coordinate care and keep the referrer informed;
- Legal and safety disclosures when required by law, court order, or to protect rights, safety, or security.
We do not sell personal information. We do not share mobile numbers or SMS consent with third parties or affiliates for their own marketing. Phone numbers collected for text messaging are used only to deliver the communications you requested (and by messaging vendors acting on our behalf).
6. Your Privacy Choices — California & U.S. rights
Your California Privacy Rights — Do Not Sell or Share My Personal Information
Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California residents have rights regarding personal information. Categories of information we may collect through the Site include identifiers (name, email, phone, IP address), internet / network activity (pages viewed, cookie identifiers), and inquiry content you submit. Measurement and security tools actually used on this Site include Google Analytics 4 (via Google Tag Manager) and Google reCAPTCHA Enterprise on forms. We do not currently use a third-party call-tracking provider on this Site; if that changes, we will update this section. Sources include you directly and automated Site technologies. Business purposes include responding to requests, security, analytics, and service-provider operations described above.
Sale / sharing. We do not sell personal information for money. We also do not “share” personal information for cross-context behavioral advertising as those terms are defined under California law. If that practice changes, we will update this policy and provide a clear opt-out mechanism.
California residents may request to:
- Know / access the personal information we collected about you;
- Delete personal information, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of sale or sharing (not applicable to our current practices, but honored if requested);
- Limit use of sensitive personal information where applicable;
- Not be discriminated against for exercising privacy rights.
How to opt out or exercise rights. Use our cookie banner to reject optional analytics cookies; enable Global Privacy Control (GPC) in a supporting browser (we treat a GPC signal as an opt-out of sale/sharing for advertising cookies where applicable); or email [email protected] with the subject line “Privacy Request” and describe your request. You may also call (717) 309-8802 or write to us at 1404 E Market St, York, PA 17403. We will verify requests as required by law and respond within applicable timelines. Authorized agents may submit requests with proof of authorization.
Residents of other U.S. states may have similar rights under state privacy laws. Contact us using the same channels and we will honor applicable requests.
7. Text messaging (SMS)
If you provide a mobile number and check the SMS consent box on a Site form, you agree that Oral Myofunctional Therapy of York may contact you by call, voicemail, and text (SMS/MMS) about your inquiry, evaluation scheduling, appointment reminders, and related care coordination. Message frequency varies. Message and data rates may apply. Reply STOP to opt out; reply HELP for help. Consent is not a condition of purchasing goods or services. See also our Terms of Service.
8. Cookies, analytics, and preferences
We use a lightweight cookie notice on the Site with Accept and Decline choices. Necessary cookies support security, accessibility, and core functionality. Optional analytics and advertising measurement cookies help us understand traffic; you may accept or decline. Declining optional cookies does not block you from using the Site. We honor Global Privacy Control (GPC) signals for advertising-related storage where applicable. Consent preferences are stored in your browser and re-applied on return visits.
Tools used for measurement and form protection on this Site: Google Tag Manager, Google Analytics 4, and Google reCAPTCHA Enterprise. We do not currently operate third-party call tracking on the Site. If call tracking is added later, it will be named here.
9. Payment Security
We do not collect, process, or store raw payment card data (card number, CVV, or full magnetic-stripe data) on this Site. Any product purchases from our shop use PayPal’s hosted checkout widgets and PayPal’s payment pages. Card entry, if any, occurs on the payment processor’s secure environment under that processor’s PCI DSS obligations — not on pages we host. Financing or other payment arrangements, if offered offline, are handled outside this Site.
10. Retention and security
We retain website inquiry data as long as needed to respond, maintain business records, resolve disputes, and meet legal obligations, then delete or de-identify it when appropriate. We use reasonable administrative, technical, and physical safeguards. No internet transmission is completely secure; please avoid sending highly sensitive clinical documents through website forms.
11. Children
The Site is intended for adults seeking information for themselves or a child in their care. We do not knowingly collect personal information online from children under 13 without a parent or guardian. Parents and guardians may contact us to review or delete a child’s inquiry data submitted through the Site.
12. Third-party links and shop
The Site may link to third-party resources (for example, maps, social profiles, or shop checkout). Those sites have their own privacy practices. We are not responsible for their content or policies. See also Payment Security above regarding PayPal-hosted checkout.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Site after an update means you acknowledge the revised policy for future collection.
14. Contact for privacy requests
For privacy questions, access/deletion/correction requests, or accommodations related to this policy, contact:
Oral Myofunctional Therapy of York
1404 E Market St, York, PA 17403
Email: [email protected]
Phone: (717) 309-8802
Also see: Accessibility Statement · Terms of Service · Contact