Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information that ImpactDynamics controls in connection with its Website and business operations.

It does not govern:

• Websites, applications, advertising accounts, patient portals, admissions systems, or other platforms operated by our clients;
• Personal information that a client controls and instructs ImpactDynamics to process on its behalf;
• Third-party websites, social networks, scheduling platforms, payment services, or other services that maintain their own privacy policies; or
• Information governed by a separate written agreement, data processing agreement, business associate agreement, confidentiality agreement, or client contract.

When ImpactDynamics processes information on behalf of a client, the client’s privacy policy and our agreement with that client generally control how the information is handled.

2. Important Healthcare and Sensitive-Information Notice

ImpactDynamics is a marketing, consulting, website, search visibility, automation, and business-growth company. The public Website is not a patient portal, clinical intake system, insurance-verification system, emergency service, or healthcare treatment platform.

The Website’s public forms, general email addresses, social-media accounts, and ordinary telephone lines are intended for business inquiries. They are not intended for the submission of protected health information or detailed personal health information.

Please do not submit the following through a public contact form, ordinary email, social-media message, or other unsecured channel:

• Diagnoses, symptoms, treatment histories, medication information, or medical records;
• Mental-health or substance-use treatment information;
• Insurance policy information, member identification numbers, or benefit details;
• Social Security numbers, government-issued identification numbers, or financial account credentials;
• Information about another person’s health, treatment, recovery, or legal circumstances;
• Information protected by HIPAA, 42 CFR Part 2, or another medical-confidentiality law; or
• Any other sensitive information that is not necessary for a business inquiry.

If a prospective or current client engagement requires ImpactDynamics to access protected health information, consumer health data, or another category of regulated information, that information should not be provided until the parties have established an appropriate secure process and executed any required agreement, including a business associate agreement when applicable.

If you submit sensitive information that we did not request, we may delete it, restrict access to it, or contact you to establish a more appropriate method of communication. Submission of information through the Website does not establish a patient-provider relationship, clinical relationship, fiduciary relationship, or duty to provide healthcare.

Do not use the Website to request emergency medical or mental-health assistance.

3. Personal Information We Collect

The information we collect depends on how you interact with ImpactDynamics.

Information You Provide Directly

We may collect information you voluntarily provide, including:

• Your name;
• Business email address or personal email address;
• Telephone number;
• Company, organization, facility, or practice name;
• Job title, role, or professional affiliation;
• Business address;
• Website address or domain name;
• Information about your services, locations, market, organization, or growth objectives;
• Information about your website, search visibility, advertising, admissions, operations, automation, or marketing challenges;
• Information included in a contact form, consultation request, audit request, questionnaire, email, text message, or other communication;
• Files, screenshots, reports, documents, or other materials you choose to provide;
• Meeting availability and scheduling information;
• Communication and marketing preferences;
• Feedback, reviews, survey responses, or testimonials;
• Contract, billing, invoicing, tax, and transaction information; and
• Other information reasonably necessary to respond to your request or provide services.

When payment services are available, payment-card or bank-account information may be collected directly by a third-party payment processor. ImpactDynamics generally does not receive or retain complete payment-card numbers.

Information Collected Automatically

When you visit or interact with the Website, we and our service providers may automatically collect information such as:

• Internet Protocol address;
• Browser type and browser settings;
• Device type, device identifiers, and operating system;
• Language and time-zone settings;
• Internet service provider or network information;
• Approximate geographic location derived from an IP address;
• Referring webpage, search engine, campaign, advertisement, or social-media source;
• Pages, articles, services, or other content viewed;
• Links, buttons, forms, videos, or other Website features used;
• Dates, times, and duration of visits;
• Navigation paths and Website interaction data;
• Form-start, form-completion, call, email-click, or other conversion events;
• Cookie identifiers, advertising identifiers, and similar online identifiers;
• Website performance, diagnostic, security, and error information; and
• Information about suspected automated traffic, fraud, abuse, or security threats.

We may combine automatically collected information with information you provide directly when permitted by law.

Information From Third Parties

We may receive information from:

• Analytics, advertising, hosting, security, and website-service providers;
• Social-media platforms when you follow, message, comment on, or otherwise interact with us;
• Scheduling, email, customer-relationship-management, payment, telephone, or communication providers;
• Referral partners and professional contacts;
• Existing clients, prospective clients, vendors, or contractors;
• Public business websites, professional directories, government records, and other publicly available sources; and
• Data providers or business-information services, where permitted by law.

Client-Service Information

When providing services, ImpactDynamics may be authorized to access client-controlled systems such as:

• Websites and content-management systems;
• Analytics and search-performance platforms;
• Advertising accounts;
• Customer-relationship-management systems;
• Call-tracking and lead-attribution systems;
• Reporting platforms;
• Business directories and location listings;
• Marketing automation tools; and
• Operational, lead, conversion, admissions, reimbursement, or revenue-reporting systems.

The information available through those systems depends on the client engagement. ImpactDynamics accesses client systems only as authorized and subject to applicable agreements, access controls, and confidentiality obligations.

Clients should not provide access to protected health information or other regulated data unless the need has been reviewed and appropriate contractual and technical safeguards are in place.

Meeting Recordings and Transcriptions

We may use meeting-recording, transcription, or note-taking tools for consultations, client meetings, training, or project documentation. When required, we will provide notice or obtain consent before recording.

You may ask that a meeting not be recorded. Written notes may still be created as part of ordinary business operations.

4. How We Use Personal Information

ImpactDynamics may use personal information to:

• Operate, maintain, secure, and improve the Website;
• Respond to questions, forms, emails, telephone calls, and consultation requests;
• Conduct requested audits, assessments, reviews, research, or competitive analyses;
• Prepare proposals, recommendations, scopes of work, contracts, and project plans;
• Provide SEO, GEO, AEO, LLMO, website, content, automation, consulting, advertising, analytics, and related services;
• Communicate with clients, prospects, vendors, contractors, and professional partners;
• Schedule and conduct meetings;
• Administer client relationships and projects;
• Process payments, invoices, accounting records, and tax documentation;
• Deliver newsletters, educational content, announcements, and other communications;
• Understand how visitors find and use the Website;
• Measure website performance, campaign effectiveness, lead sources, and conversions;
• Personalize Website content or business communications;
• Diagnose technical problems and prevent fraud, spam, abuse, and security incidents;
• Protect our rights, systems, clients, personnel, and property;
• Maintain records and enforce contracts;
• Comply with legal, regulatory, tax, accounting, or reporting obligations;
• Establish, exercise, or defend legal claims;
• Conduct due diligence relating to a potential business transaction;
• Create aggregated, statistical, or deidentified information; and
• Carry out another purpose disclosed when the information is collected or authorized by you.

We may use aggregated or deidentified information for research, reporting, benchmarking, service improvement, or business analysis, provided that we do not attempt to reidentify the information except as permitted by law.

5. Artificial Intelligence and Automated Tools

ImpactDynamics may use artificial-intelligence-assisted software, proprietary models, workflow automations, and other automated tools to support business operations.

These tools may assist with tasks such as:

• Organizing or routing inquiries;
• Summarizing communications or documents;
• Preparing drafts;
• Conducting research or analysis;
• Classifying business information;
• Identifying website or marketing issues;
• Quality assurance;
• Reporting;
• Project administration; and
• Reducing repetitive administrative work.

Artificial-intelligence and automation tools support our personnel and processes. They do not eliminate ImpactDynamics’ responsibility to follow applicable contracts, confidentiality requirements, and privacy obligations.

We do not intentionally submit protected health information or other sensitive personal information collected through the Website’s public forms to publicly accessible generative-AI services. We do not use public contact-form submissions to train a public-facing AI model unless we provide separate notice and obtain any permission required by law.

When AI or automation tools are used in connection with client-controlled information, the client agreement, client instructions, vendor terms, security requirements, data processing agreement, and any applicable business associate agreement govern that use.

We do not use personal information collected through the public Website to make solely automated decisions that produce legal or similarly significant effects concerning employment, insurance, housing, credit, healthcare eligibility, or access to essential services.

6. Cookies and Similar Technologies

The Website may use cookies, pixels, tags, scripts, local storage, software-development tools, and similar technologies.

These technologies may include:

Essential Technologies

These are used to operate core Website functions, maintain security, prevent abuse, remember privacy choices, balance traffic, and provide requested features.

Functional Technologies

These may remember preferences, support embedded content, maintain form functionality, or improve the Website experience.

Analytics and Performance Technologies

These may help us understand Website traffic, page performance, navigation, referral sources, visitor interactions, and technical issues.

Advertising and Measurement Technologies

These may help measure advertising effectiveness, attribute inquiries or conversions, prevent duplicate reporting, limit repeated advertising, or support audience measurement. Depending on the technology and applicable law, some disclosures associated with advertising cookies may be considered “sharing,” “targeted advertising,” or a “sale” even when no money is exchanged for personal information.

Embedded Content and Social-Media Technologies

Articles or pages may include embedded videos, social-media feeds, scheduling tools, maps, forms, or other third-party content. Those providers may collect information about your browser, device, interaction, and the page you visited.

7. Health-Related Browsing Information

Some ImpactDynamics content discusses healthcare marketing, mental health, substance use, addiction treatment, recovery, medical services, and related topics.

A page address, article title, search term, referral source, or browsing history may sometimes suggest that a visitor is interested in a particular health-related subject. We recognize that such information may be sensitive even when a visitor has not directly disclosed a diagnosis or treatment history.

ImpactDynamics does not use Website page views to diagnose an individual, determine an individual’s treatment status, make healthcare eligibility decisions, or create a clinical record. We do not knowingly sell health-related browsing information for monetary consideration.

Service providers that support Website hosting, security, analytics, embedded content, or measurement may receive limited device, usage, and page information. We seek to limit the collection and use of health-related browsing information and do not authorize service providers to use information submitted to us for their own independent healthcare eligibility, employment, insurance, credit, or housing decisions.

Visitors should nevertheless avoid entering personal health information into search fields, public forms, chat functions, or ordinary email communications.

8. Cookie and Tracking Choices

You may be able to control cookies through:

• Your browser settings;
• Device privacy settings;
• Any cookie preference tool made available on the Website;
• Advertising-platform preference settings; and
• Legally recognized browser-based opt-out preference signals.

Blocking all cookies may prevent some Website features from functioning correctly.

Some browsers provide a “Do Not Track” signal. Because there is not a uniform industry standard for interpreting ordinary Do Not Track signals, the Website does not currently respond to every Do Not Track signal.

Where applicable law requires recognition of a legally valid opt-out preference signal, such as Global Privacy Control, we will process the signal as required by that law.

You may also contact us at john@impactdynamics.io with the subject line Privacy Opt-Out to request information about available opt-out methods.

9. How We Disclose Personal Information

ImpactDynamics may disclose personal information to the following categories of recipients.

Service Providers and Contractors

We may engage providers that support:

• Website hosting and content delivery;
• Website development and maintenance;
• Data backup and storage;
• Cybersecurity and fraud prevention;
• Forms and lead routing;
• Analytics and reporting;
• Search, advertising, and campaign measurement;
• Customer-relationship management;
• Email and text-message delivery;
• Scheduling and video conferencing;
• Telephone and call-management services;
• Payment processing, billing, and accounting;
• Document management and electronic signatures;
• Artificial-intelligence and automation tools;
• Project management; and
• Professional consulting services.

These parties may process personal information to provide services to ImpactDynamics.

Analytics, Advertising, and Social-Media Providers

We may disclose device identifiers, cookie identifiers, approximate location, referral information, Website interactions, and conversion events to analytics, advertising, search, or social-media providers.

Depending on applicable law and how a technology is configured, these disclosures may be considered targeted advertising, sharing, or a sale of personal information.

Clients and Client-Directed Recipients

When you ask us to connect you with a client, provider, referral partner, or other organization, we may disclose information at your direction.

When acting as a service provider or processor for a client, we may disclose client-controlled information as directed or authorized by that client.

Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers when reasonably necessary.

Legal and Safety Disclosures

We may disclose information when we believe disclosure is reasonably necessary to:

• Comply with a subpoena, court order, legal process, or regulatory requirement;
• Respond to a lawful government request;
• Investigate fraud, abuse, security incidents, or unlawful conduct;
• Enforce an agreement;
• Protect the rights, safety, systems, or property of ImpactDynamics, our clients, our personnel, or another person; or
• Establish, exercise, or defend legal claims.

Business Transactions

If ImpactDynamics is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be disclosed as part of the evaluation or completion of that transaction, subject to appropriate confidentiality protections where required.

With Your Direction or Consent

We may disclose information for another purpose when you direct us to do so or provide consent.

10. Sale, Sharing, and Targeted Advertising

ImpactDynamics does not sell personal information to third parties in exchange for money.

However, certain disclosures involving analytics cookies, advertising pixels, social-media tools, or similar technologies may be treated as a “sale,” “sharing,” or processing for targeted advertising under some state privacy laws even when no money is exchanged.

Where applicable, you may opt out by:

• Using any cookie preference tool provided on the Website;
• Enabling a legally recognized opt-out preference signal;
• Emailing john@impactdynamics.io with the subject line Do Not Sell or Share My Personal Information; or
• Contacting us using the information at the end of this Privacy Policy.

We do not knowingly sell or share the personal information of individuals under 16 years old.

We do not disclose mobile-phone opt-in information or text-message consent records to unaffiliated third parties for those parties’ own marketing purposes.

11. Email, Telephone, and Text Communications

Email Communications

When you request information, become a client, subscribe to updates, or otherwise provide an email address, we may send business communications related to your request or relationship with ImpactDynamics.

Marketing emails will include an unsubscribe method where required. You may also ask to stop marketing emails by replying with “unsubscribe” or contacting us.

Even after you unsubscribe from marketing emails, we may continue sending nonmarketing communications concerning active projects, contracts, payments, security matters, privacy requests, or other business transactions.

Telephone Communications

We may call a telephone number you provide in response to an inquiry, consultation request, client matter, or other business communication.

Calls may be monitored, transcribed, or recorded when notice or consent is provided as required.

Text Messages

If you expressly agree to receive text messages, we may use your number to communicate about consultations, appointments, projects, or other requested services.

Consent to receive marketing text messages is not a condition of purchasing services. Message and data rates may apply. Message frequency may vary.

You may reply:

• STOP to end text messages; or
• HELP for assistance.

Text-message consent records and mobile information will not be sold or shared with unaffiliated third parties for their own marketing. They may be provided to vendors that help deliver or administer the messaging service.

12. Client Data, HIPAA, and Business Associate Relationships

ImpactDynamics may process personal information on behalf of clients as a service provider, contractor, or data processor. In those situations:

• The client generally determines the purpose and means of processing;
• The client is responsible for its own privacy notices, collection practices, and legal authority;
• ImpactDynamics processes the information according to the client’s instructions and the applicable agreement; and
• Individuals may need to direct privacy requests to the client that controls the information.

Some ImpactDynamics clients may be healthcare providers, treatment organizations, healthcare businesses, or entities regulated by HIPAA or other healthcare privacy laws. Working with a healthcare client does not automatically make every ImpactDynamics system, communication, or Website feature a HIPAA-regulated system.

When an engagement requires ImpactDynamics to create, receive, maintain, or transmit protected health information as a business associate, the parties will address the arrangement through a separate business associate agreement and appropriate safeguards.

This Privacy Policy is not a HIPAA Notice of Privacy Practices and is not a business associate agreement.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:

• Respond to an inquiry or maintain a business relationship;
• Perform services or administer a contract;
• Maintain project and communication records;
• Complete billing, accounting, and tax obligations;
• Honor marketing opt-outs and privacy preferences;
• Prevent fraud and maintain security;
• Resolve disputes;
• Enforce agreements; and
• Comply with applicable law.

Retention periods vary based on the nature of the information.

For example:

• Inquiry information may be retained while an opportunity remains active and for a reasonable follow-up period;
• Client, contract, billing, and payment records may be retained for the applicable legal, tax, accounting, or limitation period;
• Website analytics information may be retained according to the settings of the relevant analytics platform and our operational needs;
• Meeting recordings or transcripts may be deleted after the business purpose has been completed, unless continued retention is reasonably necessary;
• Marketing-suppression records may be retained to ensure that an opt-out continues to be honored; and
• Client-controlled information may be retained according to the client agreement and client instructions.

We may retain aggregated or deidentified information for a longer period when it can no longer reasonably be linked to an individual.

14. Information Security

ImpactDynamics uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, misuse, alteration, disclosure, or destruction.

Depending on the information and system, safeguards may include:

• Access controls;
• Authentication requirements;
• Encryption in transit;
• Vendor review;
• Confidentiality obligations;
• Software updates;
• Data minimization;
• Backup and recovery procedures;
• Security monitoring; and
• Employee or contractor access restrictions.

No internet transmission, email system, storage platform, or security measure can be guaranteed to be completely secure. You should not send sensitive information through an unsecured channel.

If you believe information you provided to ImpactDynamics has been compromised, contact us promptly.

15. Your Privacy Rights and Choices

Depending on where you reside and subject to applicable exceptions, you may have the right to:

• Confirm whether we process your personal information;
• Request access to personal information we maintain about you;
• Request correction of inaccurate personal information;
• Request deletion of personal information;
• Obtain a portable copy of certain personal information;
• Withdraw consent where processing is based on consent;
• Opt out of targeted advertising;
• Opt out of the sale or sharing of personal information;
• Opt out of certain profiling activities;
• Limit certain uses of sensitive personal information;
• Request information about categories of information collected, sources, purposes, and recipients;
• Appeal a decision concerning a privacy request; and
• Receive equal service and pricing without unlawful discrimination for exercising a privacy right.

Not every right applies in every jurisdiction or to every type of information. We may deny or limit a request when permitted by law, including when we cannot verify the request, an exception applies, or the information is controlled by one of our clients.

Submitting a Privacy Request

You may submit a request by contacting:

Email: john@impactdynamics.io

Subject line: Privacy Request

Please describe the right you wish to exercise and provide enough information for us to identify the relevant records.

We may need to verify your identity before completing a request. Verification may require confirmation through an email address, telephone number, business relationship, or other information already associated with our records.

Do not send a Social Security number, complete government identification document, medical record, or financial account password to verify a privacy request.

Authorized Agents

Where permitted, you may use an authorized agent to submit a request. We may ask for evidence that the agent is authorized to act for you and may still need to verify your identity directly.

Appeals

If applicable law gives you the right to appeal a decision, email john@impactdynamics.io with the subject line Privacy Request Appeal and explain why you believe the decision should be reconsidered.

16. California and Other State Privacy Disclosures

This section applies only to the extent that an applicable state privacy law governs ImpactDynamics’ processing of your personal information.

Categories of Personal Information

Depending on your interaction with ImpactDynamics, we may have collected the following categories during the preceding 12 months:

• Identifiers: Name, email address, telephone number, business address, IP address, cookie identifier, device identifier, and online identifier.
• Customer-record information: Contact information, billing information, business records, and information contained in correspondence.
• Commercial information: Services requested, proposals, transactions, contracts, client history, and business interests.
• Internet or electronic activity: Browsing history, Website activity, referral sources, page views, interaction data, and advertising or conversion information.
• Approximate geolocation information: General location derived from an IP address.
• Audio, visual, or electronic information: Meeting recordings, call recordings, video-meeting content, messages, emails, and electronic documents.
• Professional information: Employer, organization, job title, role, professional background, and business affiliations.
• Inferences: Likely service interests, inquiry status, organizational needs, or marketing preferences inferred from business interactions.
• Sensitive personal information: Information voluntarily submitted that may qualify as sensitive under applicable law. ImpactDynamics does not intend to collect sensitive personal information through its public Website and asks visitors not to submit it.

We do not use sensitive personal information collected through the Website to infer characteristics about individuals for eligibility, employment, housing, insurance, credit, or healthcare decisions.

Sources

We collect these categories from:

• You;
• Your browser or device;
• Cookies and Website technologies;
• Clients and business partners;
• Vendors and service providers;
• Social-media platforms;
• Referral sources; and
• Publicly available business information.

Purposes

We use these categories for the business and commercial purposes described in the How We Use Personal Information section.

Recipients

We may disclose these categories to the recipients described in the How We Disclose Personal Information section.

We do not sell personal information for monetary consideration. Cookie-based disclosures involving identifiers and internet activity may be considered sharing, targeted advertising, or a sale under some state laws.

California Direct-Marketing Disclosure

ImpactDynamics does not disclose personal information to unaffiliated third parties for those parties’ own direct-marketing purposes.

Financial Incentives

ImpactDynamics does not currently offer a financial incentive, loyalty program, or price difference in exchange for personal information.

Non-Discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right.

17. Consumer Health Data

ImpactDynamics does not intend to collect consumer health data through the Website and does not operate the Website as a consumer health-data product.

Because the Website publishes content relating to healthcare, addiction, mental health, recovery, medical services, and treatment marketing, certain browsing activity could potentially be interpreted as relating to a health interest.

ImpactDynamics does not use such browsing activity to infer a diagnosis, treatment history, medication use, clinical condition, reproductive status, or healthcare eligibility.

To the extent applicable law treats information handled by ImpactDynamics as consumer health data:

• We collect it only for the purpose disclosed at or before collection;
• We do not sell consumer health data;
• We do not use it for targeted healthcare eligibility decisions;
• We share it only with processors needed to operate, secure, or measure the Website, at the individual’s direction, or as otherwise permitted by law;
• You may request confirmation, access, deletion, or withdrawal of consent by contacting john@impactdynamics.io; and
• We will not collect or use additional categories of consumer health data for materially different purposes without providing any notice or consent required by law.

Visitors should not submit medical, mental-health, substance-use, treatment, insurance, or other consumer health information through the Website’s public forms.

18. Children’s Privacy

The Website and ImpactDynamics’ services are intended for businesses, professionals, and general adult audiences. They are not directed to children under 13 years old.

ImpactDynamics does not knowingly collect personal information online from children under 13. If we learn that a child under 13 submitted personal information without legally valid authorization, we will take reasonable steps to delete it.

A parent or legal guardian who believes a child submitted information may contact john@impactdynamics.io.

We do not knowingly sell or share the personal information of individuals under 16.

19. Third-Party Websites and Embedded Services

The Website may link to or display content from third parties, including:

• Social-media networks;
• Video-hosting platforms;
• Search engines;
• Scheduling services;
• Maps;
• Industry directories;
• Professional associations;
• Partner websites;
• Client websites; and
• Other external resources.

Third-party services may collect information independently and apply their own privacy policies. ImpactDynamics is not responsible for the privacy, security, accuracy, or content of a third-party service.

A link does not necessarily mean ImpactDynamics controls or endorses the third party’s privacy practices.

20. International Visitors

ImpactDynamics is based in the United States, and personal information may be processed and stored in the United States or another country where our vendors operate.

The privacy and data-protection laws of those locations may differ from the laws where you reside.

Where required, we will rely on an appropriate legal basis for processing and an appropriate transfer mechanism. Depending on applicable law, legal bases may include:

• Your consent;
• Performance of a contract or steps requested before entering a contract;
• Compliance with a legal obligation;
• Protection of legal rights; and
• Legitimate business interests that are not overridden by your rights and interests.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our Website;
• Our services;
• Our vendors or technologies;
• Our information-handling practices;
• Legal requirements; or
• Business operations.

The revised policy will be posted with an updated “Last Updated” date.

When required, we may provide additional notice of a material change, such as through a Website notice, email, or consent request.

Your continued use of the Website after an update is subject to the revised Privacy Policy, except where applicable law requires additional consent.

22. Contact ImpactDynamics

Questions, concerns, or privacy requests may be directed to:

ImpactDynamics Digital Marketing LLC

Attn: Privacy

906 Parker Road

Sparta, Tennessee 38583

Email: john@impactdynamics.io

Telephone: (512) 993-8938

Website: impactdynamics.io