What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience. Some cookies are essential for the website to function, while others require your consent. This policy also covers embedded third-party content (iframes), which is explained in a separate section below.

Types of Cookies We Use

Strictly Necessary Cookies
These cookies are required to provide the website and the features you request, including saving your cookie choices.
Legal basis: Exempt from consent - strictly necessary for the service requested

Analytics Cookies
These cookies help us understand how visitors use our website. They collect data using pseudonymous identifiers to generate aggregated statistics (for example, page views and interactions).
Legal basis: Requires user consent - blocked by default

Marketing Cookies
These cookies are used to measure advertising performance and help deliver ads that are more relevant to you, including conversion tracking and campaign measurement using pseudonymous identifiers.
Legal basis: Requires user consent - blocked by default

Other Cookies
These cookies do not fit neatly into the categories above based on the information available from our scan. They can support advertising, measurement, or other site features and are treated as non-essential unless and until we confirm they are strictly necessary.
Legal basis: Requires user consent - blocked by default

Embedded Content (Iframes)

Our website includes embedded content delivered through iframes (for example, videos, maps, translation tools, and scheduling widgets). When you view or interact with embedded content, the provider of that content can set cookies or collect information about your device and interactions under their own privacy policy. We apply the same consent rules to embedded content as we do to cookies: non-essential embedded content is blocked by default until you consent. If you do not consent, the embedded content can remain unavailable or load in a limited way.

Marketing
These embedded elements can support marketing, advertising measurement, or content delivery that involves tracking technologies.
Legal basis: Requires user consent - blocked by default

Iframe: YouTube | Provider: YouTube | Domain: www.youtube.com | Duration: Session | Source: https://www.youtube.com/embed/gkW7ttSkWrY
Iframe: YouTube | Provider: YouTube | Domain: www.youtube.com | Duration: Session | Source: https://www.youtube.com/embed/0HAu2W7GpIs
Iframe: YouTube | Provider: YouTube | Domain: www.youtube.com | Duration: Session | Source: https://www.youtube.com/embed/e4B8ggj-D_A

Other
These embedded elements support site features (for example, translation, scheduling, tag management, or maps). Where they are not strictly necessary for the service you request, they are treated as non-essential and are blocked by default until you consent.
Legal basis: Requires user consent - blocked by default

Iframe: Not available | Provider: Not available | Domain: translate.google.com | Duration: Session | Source: https://translate.google.com/websitetranslationui
Iframe: Not available | Provider: Not available | Domain: scheduling.go.promptemr.com | Duration: Session | Source: https://scheduling.go.promptemr.com/onlineScheduling
Iframe: Not available | Provider: Not available | Domain: maps.google.com | Duration: Session | Source: https://maps.google.com/maps
Iframe: Not available | Provider: Not available | Domain: www.googletagmanager.com | Duration: Session | Source: https://www.googletagmanager.com/ns.html

Third-Party Services and Data Recipients

We use our own consent management system (Trustwards) to record your cookie preferences. The trustwardsCookie stores which cookie categories you have accepted or rejected, ensuring your choices persist across visits. This cookie is strictly necessary for compliance with applicable privacy regulations and consent requirements. Your consent data is processed securely and is not shared with third parties unless legally required.

Google (Google Analytics, Google Ads, Google Tag Manager, Google Maps, Google Translate) provides analytics, advertising measurement, tag management, mapping, and translation services. When enabled by your consent, these services can process device information and interaction data using pseudonymous identifiers in accordance with Google’s privacy policy. Privacy policy: https://policies.google.com/privacy

Microsoft (analytics) provides measurement and analytics services. When enabled by your consent, Microsoft can process device information and interaction data using pseudonymous identifiers in accordance with Microsoft’s privacy statement. Privacy statement: https://privacy.microsoft.com/privacystatement

Mixpanel (analytics) provides product and website analytics services. When enabled by your consent, Mixpanel can process device information and interaction data using pseudonymous identifiers in accordance with Mixpanel’s privacy policy. Privacy policy: https://mixpanel.com/legal/privacy-policy/

YouTube (embedded video) provides video hosting and playback services. When enabled by your consent, YouTube can set cookies or process information about your viewing and device in accordance with Google’s privacy policy. Privacy policy: https://policies.google.com/privacy

PromptEMR (embedded scheduling) provides online scheduling functionality through an embedded widget. When enabled by your consent, PromptEMR can process device information and interaction data in accordance with its privacy practices. The applicable privacy policy is provided by PromptEMR through its own service interfaces.

Some cookies in the “Other” category are marked with provider information that is not available from our scan. We treat these cookies as non-essential and block them by default until you consent. If you would like additional information about these cookies and their recipients, contact us at hello@highbarhealth.com.

International Data Transfers

Some of our service providers are located outside EU/EEA:

- Google (Google Analytics, Google Ads, Google Tag Manager, Google Maps, Google Translate, YouTube): Headquartered in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).
- Microsoft: Headquartered in the United States. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework (DPF).
- Mixpanel: Headquartered in the United States. We have entered into Standard Contractual Clauses (SCCs) approved by the European Commission.
- PromptEMR: Headquartered in the United States. We have entered into Standard Contractual Clauses (SCCs) approved by the European Commission.

We recommend reviewing each provider's privacy policy for detailed information about their data protection measures.

Legal Basis for Processing

Strictly Necessary cookies are exempt from the consent requirement because they are strictly necessary for the service you request and cannot be disabled through our cookie settings tool.

All other cookie categories (including Analytics, Marketing, and Other) require your consent. These cookies are blocked by default and are only activated after you provide explicit consent through our cookie banner or cookie settings.

Managing Your Cookie Preferences

You can accept or reject cookie categories at any time, and you can withdraw your consent at any time.

Non-essential cookies are blocked by default until you choose to enable them.

You can adjust or withdraw your cookie preferences at any time via the cookie settings link in our website footer, managed through our consent management platform (Trustwards).

How to Control Cookies in Your Browser

You can also manage cookies through your browser settings, including viewing cookies, deleting cookies, blocking cookies, and controlling first-party versus third-party cookies.

Google Chrome: Settings > Privacy and security > Third-party cookies (and Site data).
Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data.
Apple Safari (macOS): Safari > Settings > Privacy > Manage Website Data.
Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data.

If you block cookies, some website features can stop working. Strictly Necessary cookies are required for the site to function and remain enabled.

Similar Technologies

Local Storage is a browser feature that allows websites to store data persistently on your device. Unlike cookies, this data does not expire automatically and remains until manually cleared. We use Local Storage strictly for essential website functionality, such as remembering your preferences and settings to provide a consistent browsing experience. This usage is strictly necessary for the service you have requested and is therefore exempt from consent requirements under applicable law.

Session Storage is a browser feature that temporarily stores data only for the duration of your browser session. This data is automatically deleted when you close your browser tab or window. We use Session Storage strictly for essential functionality during your visit, such as maintaining your navigation state and form data. This usage is strictly necessary for the service you have requested and is therefore exempt from consent requirements under applicable law.

Cookie Retention Periods

Session cookies: The cookies listed in this policy have a duration of Session, meaning they are deleted when you close your browser.

Your Rights

You can withdraw your consent at any time by changing your cookie preferences using the cookie settings link in our website footer. You have the right to access information about the cookies we use (provided in this policy), and you can request deletion of cookie data to the extent it is associated with you and we can reasonably act on the request. You also have the right to lodge a complaint with the data protection authority in your country if you believe your rights have been violated; please refer to our Privacy Policy for specific supervisory authority contact details. To exercise your rights, contact us at hello@highbarhealth.com.

Updates to This Policy

We review this policy periodically and update it when our cookie practices change. The “Last updated” date at the top indicates when changes were last made. For significant changes, we will notify users through the cookie banner and request new consent where required. Changes take effect from the date indicated at the top of this policy.

Contact Us

Highbar Physical Therapy
Email: hello@highbarhealth.com
Address: 4 Richmond Square Suite 400, Providence, RI 02906