Privacy & Cookies Policy

Effective Date

12/15/2025

Prepared For

Bay Injury & Rehab
contact@bayinjury.com
727-528-1133

Introduction

At Bay Injury & Rehab (“we,” “us,” “our”), we value your privacy and accessibility. This policy describes how we collect, use, protect, and store your data in compliance with the GDPR, CCPA/CPRA, and other global privacy laws.

Information We Collect

We may collect personal data (e.g., name, email, phone number) and technical data (e.g., IP address, browser type, usage data). Cookies and tracking tools help us improve performance and personalize experiences.

How We Use Information

We process data to deliver and improve services, process payments, communicate updates, and comply with legal obligations. We never sell your personal data.

Legal Bases for Processing (EU)

We process data based on consent, contractual necessity, legitimate interest, or legal obligation. You may withdraw consent at any time by contacting contact@bayinjury.com.

Sharing Information

We share limited data with trusted partners such as hosting providers, payment processors, and analytics platforms. Disclosure to authorities occurs only when required by law.

International Data Transfers

For E.U. residents, data transferred outside the E.U./E.E.A. is protected by Standard Contractual Clauses (SCCs) or other approved safeguards.

Data Retention

We retain personal data only as long as necessary for the purposes described—typically 2 years unless a longer period is required by law.

Data Security

We implement administrative, technical, and physical safeguards, including encryption and access controls. While no system is 100% secure, we strive to maintain confidentiality and integrity.

Cookies Policy

We use Essential, Performance, Analytics, and Marketing Cookies. You can manage cookie preferences via the consent banner displayed upon first visit or by adjusting browser settings.

Data Protection Contact for EU Residents

We currently operate as a U.S.-based business without an appointed Data Protection Officer (DPO) or formal EU representative. However, we take privacy inquiries from E.U. and U.K. residents seriously and respond in accordance with the General Data Protection Regulation (GDPR). If you are located in the E.U. or U.K. and wish to exercise your data rights or inquire about our data practices, please contact us directly at: contact@bayinjury.com 4800 4th Street North, St. Petersburg, Florida 33703. If our operations expand to include an E.U.-based presence or processing activities requiring formal representation under GDPR Article 27, we will designate an E.U. representative and update this policy accordingly.

Your Rights

Depending on your jurisdiction, you may access, correct, or delete your data; request restriction or portability; object to processing or withdraw consent; and file a complaint with your data-protection authority.

Children’s Privacy

We do not knowingly collect data from children under 13 (U.S.) or 16 (E.U.). Identified data will be deleted immediately.

Do Not Track and Automated Decision-Making

Our site does not respond to browser DNT signals. Automated decisions are not made without human review.

ADA Accessibility

We design our website in accordance with WCAG 2.1 AA guidelines. If you encounter accessibility barriers, contact contact@bayinjury.com.

Policy Updates

We may revise this policy periodically to reflect legal or technological changes. Continued use constitutes acceptance of updates.