Privacy Policy

Last Updated: 12/5/2025

Little Steps ABA Therapy LLC (“Little Steps ABA,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal and health information in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act (“HIPAA”), where it applies.

This Privacy Policy (“Policy”) describes:

  • The types of information we collect from you or that you may provide when you visit or interact with:

    • our website at www.littlestepsaba.org and any other websites directly owned and/or operated by Little Steps ABA Therapy (collectively, the “Website”); and

    • our official social media pages and profiles (including, but not limited to, Facebook, Instagram, TikTok, LinkedIn, Google Business, and any other social media accounts we control) (collectively, the “Social Media Platforms”).

  • Our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect:

  • On or through our Website.

  • Through forms, messages, and other electronic communications between you and us.

  • When you interact with our content, advertisements, or profiles on Social Media Platforms, to the extent that we control the collection and use of your information there.

This Policy does not apply to:

  • Information collected by us offline in paper form or during in-person sessions, to the extent that such information is instead governed by our HIPAA Notice of Privacy Practices provided to clients and families at the start of services.

  • Information collected by any third party, including through any website, application, or content (including advertising) that may link to or be accessible from our Website or Social Media Platforms.

By using our Website or interacting with our Social Media Platforms, you agree to the terms of this Policy. If you do not agree with our practices, please do not use our Website or social media pages.

This Policy may change from time to time (see “Changes to This Policy” below). Your continued use of the Website or Social Media Platforms after we make changes is deemed acceptance of those changes, so please check this page periodically for updates.

1. Information We Collect and How We Collect It

Our Website and Social Media Platforms may collect both personal information and technical information from you, your device, or your browser. For purposes of this Policy, “Personal Information” generally means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual or household.

We may collect the following categories of Personal Information:

a. Identifiers and Contact Information

Examples include:

  • Name and alias

  • Email address

  • Telephone number

  • Mailing or physical address

  • City/region or general location information

  • Any other identifier you choose to provide in a form or message

b. Customer / Service Information

Examples include:

  • Information about the services you are interested in (e.g., ABA therapy, parent training, consultation)

  • Records of inquiries, appointments requested, or communications about services

  • Preferences related to scheduling or communication

c. Health-Related Information (Limited, Non-Clinical)

Through our Website or Social Media, we may collect limited information about your child’s developmental needs or your interest in services only if you voluntarily provide it (for example, in a contact form or message).
Any detailed clinical information gathered in the course of treatment is subject to our HIPAA Notice of Privacy Practices and is maintained in secure clinical systems, not through the public Website.

d. Internet / Device / Usage Information

When you visit the Website, we, or third-party tools acting on our behalf, may automatically collect:

  • IP address

  • Browser type and version

  • Device type and operating system

  • Pages visited, links clicked, and time spent on pages

  • Referring/exit pages and date/time stamps

  • General location derived from IP address

We may use cookies, pixels, log files, analytics tools (such as Google Analytics), and similar technologies to collect this information.

e. Social Media Information

When you interact with our Social Media Platforms, we may receive information such as:

  • Your public profile name/handle and any information you make public

  • Comments, messages, likes, shares, or other interactions with our posts

  • Content of direct messages you send to us

  • Any additional information you voluntarily provide via social media (e.g., “My child is 4 and we’re looking for in-home ABA”).

Your use of Social Media Platforms is also governed by the privacy policies and terms of those platforms.

f. Job Applicant Information

If you submit a job application or employment inquiry through our Website or a linked platform, we may collect:

  • Contact information

  • Education and work history

  • Credentials or licenses

  • Other information contained in a resume, CV, or application materials

2. How We Use Your Information

We may use Personal Information we collect for one or more of the following purposes:

  • Providing and managing services

    • Responding to inquiries about ABA services

    • Scheduling or confirming assessments, intake calls, or consultations

    • Coordinating care and communicating regarding services you request

  • Communicating with you

    • Responding to questions or requests submitted via forms, email, phone, or social media

    • Sending administrative information, such as confirmations, updates, or policy changes

  • Improving our Website and services

    • Monitoring and analyzing Website usage and performance

    • Troubleshooting, testing, and enhancing features

    • Understanding which content, pages, or resources are most helpful

  • Marketing and outreach (limited)

    • Providing information about services, resources, events, or updates that may be relevant to you, consistent with your communication preferences and applicable laws

    • Managing our online presence, including Social Media Platforms

  • Compliance, safety, and legal purposes

    • Complying with applicable laws, regulations, and professional requirements

    • Responding to valid legal requests, subpoenas, or court orders

    • Protecting the rights, property, or safety of Little Steps ABA Therapy, our clients and families, or others

    • Preventing, investigating, or responding to potential fraud, security incidents, or misuse of our Website

We do not sell your Personal Information and we do not share your Personal Information with third parties for their own independent marketing purposes.

3. How We Share or Disclose Your Information

We may share Personal Information in the following circumstances:

a. Service Providers and Business Partners

We may share information with trusted third parties who perform services on our behalf, such as:

  • Website hosting and maintenance providers

  • Email and communication tools

  • Data backup and storage providers

  • Analytics and performance monitoring tools

  • Scheduling or form-management platforms

These third parties are permitted to use your Personal Information only as necessary to provide services to us and are required to maintain appropriate safeguards.

b. Clinical and Administrative Purposes

For clients and families receiving services, Personal Information and health information may be shared internally among Little Steps ABA Therapy staff and contractors who are involved in your child’s care or in billing/administrative support, in accordance with HIPAA and applicable state law. Such clinical sharing is primarily governed by our separate HIPAA Notice of Privacy Practices.

c. Legal and Safety Purposes

We may disclose Personal Information if we believe in good faith that such disclosure is necessary to:

  • Comply with a legal obligation, court order, law, or legal process

  • Respond to requests from regulators, law enforcement, or governmental authorities

  • Protect the rights, property, or safety of Little Steps ABA Therapy, our clients, our staff, or the public

  • Detect, prevent, or respond to fraud, security incidents, or misuse of our Website or systems

d. Business Transfers

In the event of a merger, acquisition, reorganization, or other transfer of some or all of our business or assets, Personal Information may be transferred as part of that transaction, subject to continued protection consistent with this Policy.

We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising.

4. Cookies, Analytics, and Tracking Technologies

Our Website may use cookies and similar technologies to enhance your experience and understand how the site is used.

  • Cookies are small text files placed on your device that help the Website remember your preferences and activities.

  • Analytics tools (such as Google Analytics) help us understand how visitors find and use the Website, and may collect information such as IP address, browser, pages viewed, and time on site.

You can typically set your browser to refuse cookies or to alert you when cookies are being sent. If you disable cookies, some features of the Website may not function as intended.

To learn more about how Google uses data from websites that use its services, you can review Google’s privacy information directly on Google’s own site.

5. Text / SMS Communications

If you choose to provide a mobile phone number and opt in to text or SMS reminders or updates, we may use text messages to:

  • Confirm or remind you of appointments

  • Notify you of schedule changes or cancellations

  • Provide brief administrative updates related to your child’s services

Message frequency may vary. Message and data rates may apply depending on your carrier and plan.

You can opt out of text messages at any time by replying STOP to a text you receive from us, or by contacting us using the information in the “Contact Us” section below. Opting out of text messages will not affect our ability to contact you by phone or email for necessary service-related communication.

6. Social Media Platforms

Little Steps ABA Therapy maintains accounts on various Social Media Platforms (for example, Facebook, Instagram, TikTok, LinkedIn, and others). When you interact with us on those platforms:

  • Information you post or share may be publicly visible, depending on your own privacy settings.

  • We may see and store information such as your username, profile, comments, messages, or other content you choose to share with us.

  • We do not control how Social Media Platforms themselves collect or use your data; your use of those platforms is governed by their own terms and privacy policies.

We recommend avoiding sharing detailed health or sensitive personal information through public comments or messages on social media. If you need to discuss your child’s care or protected health information, please contact us directly through more private and secure channels.

7. Data Security

We use reasonable physical, technical, and administrative safeguards designed to protect Personal Information from unauthorized access, use, disclosure, alteration, or destruction. These measures may include:

  • Secure hosting and encrypted connections where appropriate

  • Access controls and role-based permissions for staff

  • Internal policies and procedures for handling confidential information

Despite our efforts, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to continuously evaluating and improving our practices.

8. Children’s Privacy

Our clients are primarily children, but our Website and Social Media Platforms are intended for use by adults, such as parents, guardians, and caregivers.

  • We do not knowingly collect Personal Information directly from children under 13 through the public Website.

  • Any health or identifying information about a child that is collected as part of clinical services is handled in accordance with HIPAA and applicable state law, and is maintained in secure clinical systems, not public web forms.

If you believe that a child has provided Personal Information through our Website without parental consent, please contact us so we can take appropriate steps.

9. Your Privacy Choices and Rights

Depending on your location and applicable law, you may have certain rights regarding your Personal Information, which can include:

  • Access and review – To request information about the Personal Information we have about you.

  • Correction – To request that we correct inaccurate or incomplete information about you.

  • Deletion – To request that we delete certain Personal Information, subject to legal and clinical record-keeping requirements.

  • Opt-out of marketing emails – You may opt out of non-essential marketing emails by following the “unsubscribe” link in those emails or contacting us directly. Service-related emails (e.g., appointment information, notices about changes to this Policy) may still be sent.

To exercise any of these rights (where applicable), please contact us using the information in the “Contact Us” section below. We may need to verify your identity before fulfilling certain requests.

Please note: clinical records and information maintained as part of your child’s treatment are also subject to separate rights under HIPAA, which are described in our HIPAA Notice of Privacy Practices.

10. Retention of Information

We retain Personal Information only for as long as reasonably necessary to:

  • Provide the services you request

  • Maintain appropriate business and clinical records

  • Comply with legal, regulatory, and professional obligations

  • Resolve disputes and enforce our agreements

The specific retention period may vary depending on the type of information, applicable law, and our business needs. Clinical records are retained in accordance with federal and state requirements and professional standards.

11. Links to Third-Party Websites

Our Website or social media content may include links to third-party websites or services that are not operated by Little Steps ABA Therapy. We are not responsible for the privacy practices of those third parties.

We encourage you to review the privacy policies of any third-party sites or services you visit or use.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements.

If we make material changes, we will post the updated Policy on this page and update the “Last Updated” date at the top. Your continued use of the Website or Social Media Platforms after such changes indicates your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

Little Steps ABA Therapy LLC
Website: www.littlestepsaba.org
Email: katie@littlestepsaba.org
Phone: ‪(614) 259-8147‬
Mailing Address:
PO Box 644
Dublin, OH 43017