Your privacy matters
Privacy Policy
How we handle the information you share with us.
Last updated: September 3, 2026
This policy explains what Cedaria ABA Therapy (“Cedaria,” “we,” “us”) does with information you give us through this website. It is written to describe what this site actually does, rather than to cover every practice a website might have.
The short version. This website sets no cookies, runs no analytics, and contains no advertising or tracking of any kind. It does not ask for any health information — not your child’s name, not their age, not a diagnosis. The forms here ask only how to reach you, and we keep what you send for 24 months unless you become a client. Two pages hand off to a specialist provider — job applications on our careers page, and our secure insurance-verification form — and both are named below.
What we collect
When you use the Get Started form, we receive your name, email address, phone number, ZIP code, how you would prefer to be contacted, and optionally how you heard about us. That is the complete list.
When you use the contact form, we receive your name, email address, phone number if you give one, and the topic you selected.
When you apply for a job, you are using our recruiting system,CareerPlug, which appears inside our careers page. What you enter there — your contact details, your work history, and your résumé — goes to CareerPlug and to the people at Cedaria who review applications. It does not pass through the rest of this website. You can also apply by emailing hr@cedaria.org instead, in which case we receive it as an ordinary email. Please do not send health information either way; we do not need it to consider you.
Technical information. Our hosting provider records standard server information, including your IP address, in order to serve the site and protect it from abuse. We use your IP address to limit how many times the forms can be submitted from one connection; that record is discarded within an hour.
What we deliberately do not collect
These are design decisions, not omissions, and they are the reason this policy is short:
- No health information. Neither form asks for a child’s name, a child’s age, a diagnosis, insurance details, or any free-text message. There is deliberately no message box on either form. Anything clinical is discussed with a person, or collected through our separate secure insurance-verification form, which is hosted by MailHippo, Inc.under a signed business associate agreement and does not pass through this website.
- No cookies of our own. This site sets none at all — no analytics cookies, no advertising cookies, no preference cookies. The one exception is not ours: the recruiting widget on our careers page is served by CareerPlug and keeps a session cookie inside its own domain so that a part-filled application is not lost. It does nothing on any other page, and we cannot read it. There is no cookie banner because there is nothing of ours to consent to.
- No analytics or tracking. We do not use Google Analytics or any equivalent. We do not build a profile of you, and we have no advertising partners, trackers, pixels, or social-media buttons that report back.
- No selling or sharing for marketing. We do not sell your personal information, and we never have.
The third parties this site loads
There are two, and they load only on the pages that need them. Everywhere else, this site talks to nobody but itself.
Cloudflare Turnstile, on the Get Started and contact forms, checks that a submission comes from a person rather than an automated script. It runs in a frame served by Cloudflare and may use storage within Cloudflare’s own domain to perform that check. It exists to protect the mailboxes our intake team actually reads.
CareerPlug, on the careers page only, is the recruiting system that lists our openings and takes applications. It runs in a frame served by CareerPlug, and what you type into it goes to CareerPlug rather than through this website. Load the careers page and CareerPlug can see that a browser opened the widget, in the same way any embedded page can; it learns who you are only if you choose to apply.
The map link on our locations page is an ordinary link. Google receives nothing unless you choose to click it. Our insurance-verification form is also an ordinary link, out to MailHippo — nothing from it is embedded here.
How we use what you send
- To contact you about your enquiry, in the way you asked to be contacted;
- To check what your insurance plan covers, if you have asked us to;
- To answer billing, careers, or existing-client questions; and
- To meet our legal and regulatory obligations.
We do not use what you send to market to you beyond answering what you asked about.
Who can see it
Form submissions go to our intake team only. If you go on to become a client, clinical staff see what they need to provide your care and no more. Job applications go to the people who review hiring, and nowhere near a client record.
Four service providers process this information on our behalf. Each acts on our instructions, and each sees only what its own job requires:
- Cloudflare — hosts this website and delivers the form submissions to us.
- Microsoft — provides our email, where those submissions arrive and are kept.
- CareerPlug — runs our recruiting: the openings listed on the careers page and the applications sent through it (CareerPlug’s privacy notice).
- MailHippo, Inc. — hosts our secure insurance-verification form, under a signed business associate agreement (MailHippo’s privacy policy).
Cloudflare and CareerPlug are not business associates of Cedaria, which is exactly why nothing clinical is collected through this website or the careers page. Health information you share with us after first contact lives in our clinical systems and our Microsoft 365 environment, under our clinical privacy practices.
We do not share your information with anyone else except where the law requires it.
How long we keep it
| Enquiries and form submissions | 24 months from our last contact with you, then deleted. |
|---|---|
| If you become a client | Your information moves into your clinical record and is kept for as long as that record is required to be kept. |
| Clinical records | Kept for the period required by Michigan law and applicable professional standards. |
| Job applications and résumés | 12 months, unless you are hired. Applications sent through the careers page are held in CareerPlug; ones emailed to us are held in our email. |
| Server and security logs | Kept briefly by our hosting provider to operate and protect the site. |
Health information and HIPAA
This policy covers the website. It does not cover the health information we hold about people who receive therapy from us — that is protected health information, governed by HIPAA and by Michigan law, and it is handled under our clinical privacy practices rather than this page.
Nothing you send through this website is treated as protected health information, which is exactly why we do not ask for any here.
Children’s privacy
This website is for parents, caregivers, and prospective team members. It is not intended for children, and we do not knowingly collect information from a child through it. The forms on this site do not ask for any information about a child.
Security
This website is served only over an encrypted connection. Form submissions travel encrypted and are delivered into our Microsoft 365 environment. We take reasonable administrative and technical measures to protect what we hold, though no method of transmission over the internet is completely secure.
Your choices
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, and we will respond as the law requires. If you have asked to be contacted and change your mind, tell us and we will stop. Email info@cedaria.org or call (313) 734-1240.
Changes to this policy
If we change this policy we will revise the “Last updated” date above. If a change materially affects how we handle information you have already sent us, we will say so rather than rely on the date alone.
Contact us
Cedaria ABA Therapy
29217 Ford Rd., Suite 112
Garden City, MI 48135
Phone: (313) 734-1240
Email: info@cedaria.org
Please note: privacy and healthcare-information laws are complex and vary by state. This policy describes our actual practices, but it has not yet been reviewed by an attorney, and it is not legal advice.