What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember your preferences, and improve your experience. Some cookies are essential for the website to work and are exempt from consent requirements, while others require your consent before they are used. We also use embedded content (iframes) from third-party services, which is described in a separate section below.

Types of Cookies We Use

Strictly Necessary Cookies
These cookies are required for core website functionality and security, including protecting the site from automated abuse and ensuring the service you request is delivered reliably.
Legal basis: Exempt from consent - strictly necessary for the service requested

Functional Cookies
These cookies enable optional features and help the website remember choices you make (such as settings that improve your experience).
Legal basis: Requires user consent - blocked by default

Analytics Cookies
These cookies help us understand how visitors use our website (for example, which pages are visited and how users navigate), so we can improve performance and user experience. They may process information such as device details and online identifiers (including pseudonymous identifiers).
Legal basis: Requires user consent - blocked by default

Marketing Cookies
These cookies are used to measure the effectiveness of advertising and to help deliver more relevant ads. They may involve tracking across websites and processing online identifiers (including pseudonymous identifiers).
Legal basis: Requires user consent - blocked by default

Other Cookies
These cookies do not clearly fall into the categories above based on the information available from our scan. Where they are not strictly necessary, they require your consent and are blocked by default until you choose to enable them.
Legal basis: Requires user consent - blocked by default (unless strictly necessary for the service requested)

Our website embeds content from third-party services using iframes. Iframes allow us to display external content (such as videos, maps, social media widgets, or payment forms) directly on our pages. When you interact with this embedded content, the third-party provider may set cookies or collect data according to their own privacy policies. These embedded elements are subject to the same consent requirements as cookies.

Analytics Embedded Content
These embedded elements support analytics and tag management delivered through third-party infrastructure.
Legal basis: Requires user consent - blocked by default

Marketing Embedded Content
These embedded elements support marketing content delivery and may enable tracking depending on your consent choices.
Legal basis: Requires user consent - blocked by default

Other Embedded Content
These embedded elements do not clearly fall into the categories above based on the information available from our scan. Where they are not strictly necessary, they require your consent and are blocked by default until you choose to enable them.
Legal basis: Requires user consent - blocked by default (unless strictly necessary for the service requested)

Third-Party Services and Data Recipients

Google (Google Analytics / Google Tag Manager / Google Ads / Google Translate / YouTube)
We use Google services to support analytics, tag management, advertising measurement, and website translation functionality. These services may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices. Processing is carried out according to Google’s privacy information: https://policies.google.com/privacy

Microsoft (Clarity)
We use Microsoft Clarity to help us understand how users interact with our website (for example, navigation patterns and usability). Clarity may process device information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices. Processing is carried out according to Microsoft’s privacy statement: https://privacy.microsoft.com/privacystatement

Mixpanel
We use Mixpanel to support analytics and product/website usage measurement. Mixpanel may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices. Processing is carried out according to Mixpanel’s privacy information (as made available by the provider).

Hotjar
We use Hotjar to support optional website functionality and user experience features. Hotjar may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices. Processing is carried out according to Hotjar’s privacy information (as made available by the provider).

Crazy Egg
We use Crazy Egg to help us understand how visitors use our website (for example, which pages are visited and how users navigate) so we can improve performance and user experience. Crazy Egg may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices. Processing is carried out according to Crazy Egg’s privacy information (as made available by the provider).

Meta (Facebook)
We use Meta technologies to measure advertising effectiveness and support marketing activities. Meta may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices. Processing is carried out according to Meta’s privacy policy: https://www.facebook.com/privacy/policy/

YouTube
We embed videos delivered via YouTube. When enabled, YouTube may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices. Processing is carried out according to Google’s privacy information: https://policies.google.com/privacy

Stripe
We use Stripe to support payment-related functionality. Stripe may process device and network information and online identifiers (including pseudonymous identifiers) for fraud prevention and security and may set cookies that are necessary to provide secure payment services. Processing is carried out according to Stripe’s privacy policy: https://stripe.com/privacy

Klaviyo
We use Klaviyo for marketing communications and related measurement. Klaviyo may process online identifiers (including pseudonymous identifiers) and interaction data depending on your consent choices. Processing is carried out according to Klaviyo’s privacy policy: https://www.klaviyo.com/legal/privacy

WooCommerce / WordPress / Jetpack
Our website uses WooCommerce and WordPress features (and related Jetpack functionality) that may set cookies to support site features and measurement depending on your consent choices. Processing is carried out according to Automattic’s privacy policy: https://automattic.com/privacy/

Neustar
We use Neustar-related functionality for marketing measurement and/or advertising support depending on your consent choices. Neustar may process online identifiers (including pseudonymous identifiers). Processing is carried out according to Neustar’s privacy information (as made available by the provider).

CookieYes
We use CookieYes to support cookie consent functionality. CookieYes may set a consent-related cookie to store your preferences. Processing is carried out according to CookieYes’ privacy policy: https://www.cookieyes.com/privacy-policy/

Userway
We use Userway to provide accessibility-related functionality. Userway may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices and configuration. Processing is carried out according to Userway’s privacy information (as made available by the provider).

LeadConnector (LeadConnectorHQ)
We embed a form/widget delivered via LeadConnectorHQ infrastructure. This embedded content may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices and configuration. Processing is carried out according to the provider’s privacy information (as made available by the provider).

PromptEMR (Online Scheduling)
We embed an online scheduling interface delivered via PromptEMR infrastructure. This embedded content may process device and network information and online identifiers (including pseudonymous identifiers) and may set or read cookies and similar technologies depending on your consent choices and configuration. Processing is carried out according to the provider’s privacy information (as made available by the provider).

Datadome
We use Datadome to help protect our website from automated abuse and fraudulent traffic. Datadome may process device and network information and online identifiers (including pseudonymous identifiers) and may set cookies that are strictly necessary for security and fraud prevention. Processing is carried out according to Datadome’s privacy information (as made available by the provider).

We use our own consent management system (Trustwards) to record your cookie preferences. The 'trustwardsCookie' stores which cookie categories you have accepted or rejected, ensuring your choices persist across visits. This cookie is strictly necessary for compliance with applicable privacy regulations and consent requirements. Your consent data is processed securely and is not shared with third parties unless legally required.

International Data Transfers

Some of our service providers may be located outside the EU/EEA (or may process data from locations outside the EU/EEA), including in the United States. Where required under GDPR and related regimes, we rely on appropriate safeguards for such transfers, which may include the EU-U.S. Data Privacy Framework (DPF) where the provider is certified, and/or Standard Contractual Clauses (SCCs) approved by the European Commission (together with supplementary measures where appropriate).

Based on the services detected in our scan, providers that may involve transfers to the United States include: Google (Google Analytics / Google Tag Manager / Google Ads / Google Translate / YouTube), Microsoft (Clarity), Mixpanel, Hotjar, Crazy Egg, Meta (Facebook), Stripe, Klaviyo, WooCommerce / WordPress / Jetpack (Automattic), Neustar, CookieYes, Userway, LeadConnector (LeadConnectorHQ), PromptEMR (Online Scheduling), and Datadome.

We recommend reviewing each provider's privacy policy for detailed information about their data protection measures.

Legal Basis for Processing

Strictly Necessary cookies are exempt from the consent requirement because they are strictly necessary for the service you request and cannot be disabled through our cookie settings. All other cookie categories and embedded content require your consent; they are blocked by default and only activated after you provide explicit consent through our cookie settings.

Managing Your Cookie Preferences

You can accept or reject cookie categories at any time, and non-essential cookies remain blocked until you provide consent. You can also withdraw your consent at any time, and we will apply your updated choices going forward. You can manage your cookie preferences through the cookies settings link in our website footer.

How to Control Cookies in Your Browser

In addition to our cookie settings tool, you can control cookies through your browser settings.
Chrome: Settings > Privacy and security > Third-party cookies (or Cookies and other site data) to view, delete, and block cookies and manage first-party and third-party cookie settings.
Firefox: Settings > Privacy & Security > Cookies and Site Data to view, delete, and manage cookie blocking and enhanced tracking protection settings.
Safari (macOS): Safari > Settings (or Preferences) > Privacy to manage website data, block cookies, and control cross-site tracking.
Edge: Settings > Cookies and site permissions > Cookies and site data to view, delete, block cookies, and manage third-party cookie settings.
Blocking cookies can affect website functionality. Strictly necessary cookies are required for the site to operate and deliver the service you request.

Similar Technologies

Local Storage: A browser feature that allows websites to store data persistently on your device. Unlike cookies, this data does not expire automatically and remains until manually cleared. We use Local Storage strictly for essential website functionality, such as remembering your preferences and settings to provide a consistent browsing experience. This usage is strictly necessary for the service you have requested and is therefore exempt from consent requirements under applicable law.

Session Storage: A browser feature that temporarily stores data only for the duration of your browser session. This data is automatically deleted when you close your browser tab or window. We use Session Storage strictly for essential functionality during your visit, such as maintaining your navigation state and form data. This usage is strictly necessary for the service you have requested and is therefore exempt from consent requirements under applicable law.

Cookie Retention Periods

Session cookies: deleted when you close your browser.

Persistent cookies: We currently use session-duration cookies as identified in the tables above.

Your Rights

You have the right to withdraw your consent at any time by changing your cookie preferences through the cookies settings link in our website footer. You also have the right to access information about the cookies we use (provided in this policy), to request deletion of cookie data, and to lodge a complaint with the data protection authority in your country if you believe your rights have been violated. To exercise your rights, contact us at hello@highbarhealth.com.

Updates to This Policy

We review this policy periodically and update it when our cookie practices change. The “Last updated” date at the top indicates when changes were last made. For significant changes, we will notify users through the cookie banner and request new consent where required. Changes take effect from the date indicated at the top of this policy.

Contact Us

Highbar Physical Therapy
Email: hello@highbarhealth.com
Address: 4 Richmond Square Suite 400
Providence, RI 02906