Privacy Policy

Originally published October 3, 2025. Updated April 2026 to reflect permanent practice closure. Applies to citizens and legal permanent residents of the United States.

In this privacy statement, we explain what we do with the data we obtained about you via https://backinaflashnow.com and through the course of providing chiropractic, massage, and related wellness services. We recommend you carefully read this statement.

In our processing we comply with the requirements of applicable privacy legislation. That means, among other things, that:

• We clearly state the purposes for which we process personal data, as described in this privacy statement.
• We aim to limit our collection of personal data to only the personal data required for legitimate purposes.
• We first request your explicit consent to process your personal data in cases requiring your consent.
• We take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf.
• We respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us using the information in Section 11 below.

1. Purpose, Categories of Data & Retention

During the operation of our practice, we collected or received personal information for the purposes described below. Since the practice is now permanently closed, no new data is being collected for these purposes.

1.1 Categories of Data Collected

Across the purposes listed below, the following categories of personal data were collected:

• First and last name
• Account name or alias
• Email address
• Telephone number
• Home or other physical address, including street name and name of a city or town
• Date of birth
• IP address
• Geolocation data
• Internet activity information, including browsing history, search history, and information regarding interaction with our website

1.2 Purposes

Data was collected and processed for the following business purposes:

• Contact & communication — through phone, mail, email, and web forms
• Payments & billing — processing transactions for services rendered
• Account registration — creating and managing patient accounts
• Newsletters & marketing — sending practice updates and promotional communications
• Service support — supporting services that a patient purchased or inquired about
• Legal compliance — complying with applicable legal obligations
• Website analytics — compiling and analyzing statistics for website improvement

1.3 Data Retention

2. Sharing with Other Parties

We do not sell personal data to third parties. During active operations, data may have been shared with the following categories of service providers solely to support the purposes described in Section 1:

• Payment processors (FortisPay) for billing and transaction processing
• Electronic health records provider (ChiroHD) for patient record management
• Email and marketing platforms (Constant Contact, GoHighLevel) for patient communications
• Website hosting and analytics services for website operation and improvement

These service providers were contractually obligated to use your data only for the purposes for which it was shared and to maintain appropriate security measures.

3. Disclosure Practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organization is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisors and any prospective purchasers and will be passed on to the new owners.

4. Do Not Track & Global Privacy Control

Our website does not respond to and does not support the Do Not Track (DNT) header request field.

5. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.

6. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

7. Third-Party Websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of them.

8. Amendments to This Privacy Statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes.

9. Accessing & Modifying Your Data

If you have any questions or want to know which personal data we have about you, please contact us. Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person. We shall provide the requested information only upon receipt of a verifiable consumer request. You can contact us using the information in Section 11 below.

9.1 Your Rights

You have the following rights with respect to your personal data:

1. You may submit a request for access to the data we process about you.
2. You may object to the processing.
3. You may request an overview, in a commonly used format, of the data we process about you.
4. You may request correction or deletion of the data if it is incorrect or not or no longer relevant, or to ask to restrict the processing of the data.
5. You may appeal our decision whenever we refuse to take action on a request and submit a complaint with the competent authority if your appeal is denied.

9.2 Colorado Privacy Act (CPA) Supplement

This subsection applies to citizens and legal permanent residents of Colorado.

Right to Data Portability

When exercising the right to access personal data, you have the right to obtain the personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. You may exercise this right no more than two times per calendar year.

Right to Opt-Out

You may submit a request directing us not to make certain disclosures of personal information we maintain about you. Under Colorado law this concerns the following purposes:

1. Targeted advertising
2. The sale of personal data
3. Profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer

As of our closure date, we are no longer conducting targeted advertising, selling personal data, or engaging in profiling activities.

10. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

11. Contact Details

Back In A Flash Chiropractic & Massage

1940 Pennsylvania St., Denver, CO 80203
United States

Email: [email protected]

Phone: 720-702-4727

Website: https://backinaflashnow.com

Back In A Flash Chiropractic & Massage  |  1940 Pennsylvania St., Denver, CO 80203  |  Established 2011  |  Permanently closed March 20, 2026  |  Privacy Policy originally published October 3, 2025. Updated April 2026 to reflect practice closure, consolidate data categories, and correct contact information.  |  Patient medical records governed separately by HIPAA and Colorado Board of Chiropractic Examiners regulations (3 CCR 707-1).  |  Last updated: April 2026