Website Privacy Policy

Last updated: November 29, 2025

Effective Date: November 29, 2025 | Last Updated: November 29, 2025

Important: This Policy Does NOT Cover Patient Health Information

This Website Privacy Policy applies ONLY to personal information collected through our website from visitors, prospective clients, and newsletter subscribers.

If you are a patient or become a patient: Your Protected Health Information (PHI) is governed separately by our HIPAA Notice of Privacy Practices. That document explains how we protect your health information and your rights under federal law. Please review it carefully.

Table of Contents

1. Introduction and Scope
2. Information We Collect
3. How We Use Your Information
4. How We Share Your Information
5. Data Retention
6. Your Privacy Rights
7. Sale of Data and Targeted Advertising
8. Sensitive Data Processing
9. Cookies and Tracking Technologies
10. Data Security
11. Children's Privacy
12. Third-Party Links
13. International Data Transfers
14. Changes to This Policy
15. Contact Us

1. Introduction and Scope

Complete Health Wellness Group LLC ("we," "us," "our," or the "Practice") is committed to protecting your privacy. This Website Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.chwellnessgroup.com (the "Website").

As the "controller" of your personal data, we determine how and why your information is processed. We are a mental health therapy practice located in Maryland, serving clients in Maryland, Virginia, and the District of Columbia.

What This Policy Covers

This Privacy Policy applies to:

• Personal information you provide when using contact forms, consultation request forms, or newsletter sign-ups
• Technical data collected automatically when you browse our website
• Information collected through cookies and similar tracking technologies
• Any other personal information you submit through our website

What This Policy Does NOT Cover

This Policy does NOT apply to Protected Health Information (PHI) of our patients. If you are or become a patient, your health information is protected by the Health Insurance Portability and Accountability Act (HIPAA) and governed by our separate Notice of Privacy Practices.

By using our Website, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with our practices, please do not use our Website.

2. Information We Collect

A. Information You Provide Directly

When you interact with our Website, you may choose to provide us with personal information, including:

B. Information Collected Automatically

When you visit our Website, we automatically collect certain technical information, including:

• IP address (which may indicate your approximate geographic location)
• Browser type and version
• Device information (device type, screen size)
• Operating system
• Pages visited and time spent on each page
• Referring website (how you found us)
• Clickstream data (your navigation path through our site)
• Date and time of your visit

C. Information from Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our Website. These may include:

• Essential cookies: Required for the Website to function properly
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how visitors use our Website

Third-party services that may place cookies include Google Analytics and Usercentrics (our consent management platform). For detailed information about our cookie practices, please see our Cookie Policy.

D. Sensitive Personal Information

Under the Maryland Online Data Privacy Act (MODPA), "sensitive data" includes information revealing mental or physical health status, precise geolocation, racial or ethnic origin, religious beliefs, sexual orientation, citizenship or immigration status, and other protected categories.

What we may inadvertently collect: When you browse pages about specific mental health conditions or therapy types, this browsing behavior could be considered "consumer health data" under Maryland law.

Our commitment: We do NOT use this browsing behavior for targeted advertising, profiling, or sale to third parties. We only use analytics data in aggregate form to improve our Website.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Primary Purposes

• Responding to inquiries: To reply to your contact form submissions and questions about our services
• Consultation requests: To schedule and prepare for initial consultations you request
• Newsletter communications: To send newsletters and updates you have subscribed to (with your consent)
• Website improvement: To analyze how visitors use our Website and improve its content and functionality

Secondary Purposes

• Security and fraud prevention: To protect our Website and users from unauthorized access or malicious activity
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Internal operations: For business administration and record-keeping

Legal Bases for Processing (For EU/EEA Visitors)

If you are visiting from the European Economic Area, we process your data based on:

• Consent: For newsletters and non-essential cookies (you may withdraw consent at any time)
• Legitimate interests: For analytics, security, and responding to your inquiries
• Legal obligation: To comply with applicable laws
• Contract performance: To provide information or services you request

4. How We Share Your Information

We do NOT sell your personal data. We do NOT share your personal data for cross-context behavioral advertising. We do NOT use your personal data for targeted advertising.

We may share your information with the following categories of third parties, solely for the purposes described:

We may also share information when required by law, to protect our rights, or in connection with a business transaction (such as a merger or acquisition).

5. Data Retention

We retain your personal information only as long as necessary for the purposes described in this Policy or as required by law.

We may retain information longer if required for legal compliance, to resolve disputes, or to enforce our agreements.

6. Your Privacy Rights

A. Rights for All Website Visitors

All visitors to our Website have the right to:

• Contact us with questions about our privacy practices
• Opt out of newsletter communications at any time
• Manage your cookie preferences through our consent banner

B. Maryland Residents: Your MODPA Rights

Effective October 1, 2025

Under the Maryland Online Data Privacy Act (MODPA), Maryland residents have the following rights:

• Right to Confirm: Know whether we process your personal data
• Right to Access: Obtain a copy of your personal data
• Right to Correct: Request correction of inaccurate personal data
• Right to Delete: Request deletion of your personal data
• Right to Data Portability: Receive your data in a portable, readily usable format
• Right to Opt-Out of: Targeted advertising, sale of personal data, profiling
• Right to Withdraw Consent: Withdraw your consent at any time
• Right to Appeal: Appeal our decision if we deny your request
• Right to Non-Discrimination: Exercise these rights without penalty

Response Timeline: We will respond to your request within 45 days.

C. California Residents: Your CCPA/CPRA Rights

Under the California Consumer Privacy Act and California Privacy Rights Act, California residents have the following rights:

• Right to Know: Request the categories and specific pieces of personal information we collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share your data
• Right to Limit Use of Sensitive Personal Information
• Right to Non-Discrimination: Exercise these rights without penalty

Response Timeline: We will respond within 45 days.

D. European Economic Area (EEA) Residents: Your GDPR Rights

Under the General Data Protection Regulation (GDPR), EEA residents have the following rights:

• Right to Access: Obtain confirmation of processing and a copy of your data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with a supervisory authority

Response Timeline: We will respond within 1 month.

How to Exercise Your Rights

To exercise any of your privacy rights, please contact us:

• Email: contact@chwellnessgroup.com
• Phone: (443) 367-1333
• Mail: Complete Health Wellness Group LLC, 815 Ritchie Hwy Ste 205, Severna Park, MD 21146

7. Sale of Personal Data and Targeted Advertising

We Do NOT Sell Your Personal Data

We want to be clear about our practices:

• We do NOT sell personal data as defined under Maryland, California, or other state privacy laws
• We do NOT sell personal data of consumers under 18 years of age
• We do NOT process personal data of consumers under 18 for targeted advertising
• We do NOT use your personal data for targeted advertising
• We do NOT engage in profiling that produces legal or similarly significant effects
• We do NOT share your personal data for cross-context behavioral advertising

8. Sensitive Data Processing (MODPA Compliance)

Maryland's "Strictly Necessary" Standard: Maryland has the strictest standard in the United States for processing sensitive data. Under MODPA, we may only process sensitive personal information when it is strictly necessary to provide a service you have explicitly requested.

Categories of Sensitive Data Under Maryland Law

MODPA defines "sensitive data" to include:

• Mental or physical health condition, treatment, or diagnosis
• Precise geolocation (within 1,750 feet)
• Racial or ethnic origin
• Religious beliefs
• Sexual orientation
• Citizenship or immigration status
• Genetic or biometric data
• Data from or about known children

Our Sensitive Data Practices

• We only process sensitive personal information when strictly necessary
• We do NOT sell sensitive personal data under any circumstances
• We do NOT collect precise geolocation data
• Employees with access to sensitive data are bound by confidentiality obligations

Consumer Health Data

We acknowledge that browsing our pages about mental health conditions may constitute "consumer health data" under MODPA. This browsing data is:

• NOT used for advertising or marketing
• NOT used for profiling
• NOT sold to any third party
• Only used in aggregate form for website analytics

Geofencing Prohibition

We do NOT use geofencing technology within 1,750 feet of any mental health facility, healthcare facility, or similar location.

9. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

Managing Your Preferences

When you first visit our Website, you will see a cookie consent banner. You can:

• Accept all cookies
• Reject non-essential cookies
• Customize your preferences by category
• Change your preferences at any time

Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a valid opt-out request.

For detailed information about our cookie practices, please refer to our Cookie Policy.

10. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/SSL)
• Access controls limiting who can view your information
• Secure hosting through our website platform
• Regular security assessments
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure.

11. Children's Privacy

Our Website is not directed to children under 18 years of age, and we do not knowingly collect personal information from children under 18.

In compliance with MODPA:

• We do NOT sell the personal data of consumers under 18
• We do NOT process personal data of consumers under 18 for targeted advertising

If we learn that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly.

Parents and Guardians: If you believe we have collected information from your child, please contact us immediately.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party websites you visit.

13. International Data Transfers

Our practice is located in Maryland, United States. If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

For EU/EEA Visitors: When we transfer your personal data to the United States, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

How we will notify you:

• We will post the updated policy on this page with a new "Last Updated" date
• For material changes, we will provide at least 30 days' notice (as required by MODPA)
• If we have your email address, we may also notify you directly

Your continued use of our Website after any changes indicates your acceptance of the updated Privacy Policy.

We maintain prior versions of this policy for at least 3 years.

15. Contact Us

For Privacy Questions or to Exercise Your Rights

Complete Health Wellness Group LLC

• Email: contact@chwellnessgroup.com
• Phone: (443) 367-1333
• Mail: 815 Ritchie Hwy Ste 205, Severna Park, MD 21146

Regulatory Contacts for Complaints

Maryland Residents

Office of the Attorney General, Consumer Protection Division
200 St. Paul Place, Baltimore, MD 21202
Phone: (410) 576-6300
Website: www.marylandattorneygeneral.gov

California Residents

Office of the Attorney General, California Department of Justice
P.O. Box 944255, Sacramento, CA 94244-2550
Phone: (916) 210-6276
Website: oag.ca.gov/privacy

European Residents

You have the right to lodge a complaint with the data protection supervisory authority in your country of residence. A list of EU Data Protection Authorities is available at edpb.europa.eu.

Related Policies

For a complete understanding of your rights and our practices, please also review:

• HIPAA Notice of Privacy Practices
• Your Privacy Choices
• Cookie Policy
• Terms of Use
• Communications Consent
• View All Legal Notices