Effective Date: 12/01/2025
Break the Cycle (“we,” “our,” or “us”) is committed to protecting privacy, confidentiality, and transparency in alignment with applicable privacy laws, ethical standards, and CARF Behavioral Health principles. This Privacy Policy explains how information is handled in connection with the use of our website only.
This policy does not replace or override any clinical Notice of Privacy Practices, informed consent forms, or program-specific confidentiality policies provided to clients receiving services.
1. Scope of This Policy
This Privacy Policy applies solely to the Break the Cycle website and website traffic.
- It does not govern clinical services
- It does not apply to telehealth platforms
- It does not apply to third-party service providers’ systems
Clinical privacy practices are addressed separately through program documentation.
2. Information We Do Not Collect
Break the Cycle’s website does not request, collect, store, or process personal information or protected health information (PHI).
Specifically:
- No personally identifiable information (PII) is requested to browse the site
- No PHI is collected, transmitted, or stored through the website
- No contact forms request personal or health information
- No website data is stored on internal servers or cloud storage platforms
3. Website Traffic Monitoring & Analytics
The website may use basic, non-identifiable analytics tools to understand general traffic patterns.
Examples include:
- Page visits and navigation behavior
- Browser or device type
- General geographic region (non-specific)
This information:
- Is collected in aggregate and anonymous form only
- Does not identify individual users
- Does not include names, email addresses, or health data
- Is used solely to improve website functionality and performance
4. Cookie Policy
The Break the Cycle website uses basic cookies for standard website functionality and traffic analysis.
Cookies may be used to:
- Measure website traffic and usage trends
- Improve site usability
Cookies do not collect personal or health information, are not used for behavioral profiling, and are not used for targeted advertising. Users may disable cookies through their browser settings.
5. Payments & External Payment Processing (Square)
Break the Cycle does not process, transmit, or store payment information on its website.
- Payments are completed through external links to Square, our payment processor
- Any financial or personal information entered is handled entirely by Square
Users should review Square’s Privacy Policy for details on data handling and security:
and does not retain financial data.
Break the Cycle uses Constant Contact to manage voluntary email subscriptions and campaign communications.
- Subscription is opt-in only
- Users may unsubscribe at any time via email links
- Email data is managed by Constant Contact and not stored on internal Break the Cycle servers
Users are encouraged to review Constant Contact’s Privacy Policy:
7. Telehealth & Website Security Disclaimer
The Break the Cycle website is not a telehealth platform.
- No clinical or telehealth sessions occur through the website
- The website does not provide encryption, recording, monitoring, or security for telehealth sessions
- Break the Cycle does not store, secure, or transmit telehealth communications via the website
Telehealth services, when provided, occur through separate third-party platforms governed by their own privacy and security policies.
8. Third-Party Virtual Laboratory & Telehealth Providers
Break the Cycle may coordinate services with independent third-party providers for virtual or remote laboratory screening.
- These providers operate outside of the Break the Cycle website
- Virtual or telehealth sessions conducted by these providers may be recorded in accordance with the provider’s own policies
- Recording, storage, security, and retention of those sessions are governed solely by the third-party provider and their telehealth or virtual platform
Break the Cycle does not record, store, control, or manage recordings made by third-party vendors. Users and clients should review the privacy policies and consent forms of those providers directly.
9. HIPAA-Adjacent & CARF-Aligned Privacy Principles
Although the website does not collect PHI, Break the Cycle adheres to privacy practices consistent with:
- HIPAA confidentiality principles
- CARF Behavioral Health Standards related to client rights, transparency, and data protection
Clinical information privacy is governed by separate policies, including:
- Notices of Privacy Practices
- Informed consent and authorization forms
- Program-specific confidentiality policies
10. Data Sharing
Break the Cycle does not sell, rent, trade, or share website data with third parties.
- No website data is shared with marketing brokers or data aggregators
- No personal or health data is retained by the website
- No website data is stored on internal servers or cloud platforms
11. Children’s Privacy
The Break the Cycle website is not intended for use by individuals under the age of 18.
- The website does not knowingly collect information from minors
- No website features solicit personal, identifying, or health-related information from individuals under 18
Clinical services for minors, when applicable, are governed by separate parental consent, authorization, and privacy documentation, and are not managed through the website.
12. Policy Updates
Break the Cycle may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date.
13. Contact Information
For questions regarding this Privacy Policy or website privacy practices, please contact:
Break the Cycle
[Jon Forbis | 386-333-9622 Compliance Officer]