Privacy Policy

How This Website Handles Your Information

This policy covers the website. Health information held by the practice is covered separately by the Notice of Privacy Practices.

Effective date: 8 October 2026

What This Policy Covers

This policy explains what happens to information connected with your use of this website, at strengthworkspt.com.

It is not the same document as the practice's Notice of Privacy Practices. That notice covers protected health information — the records created when you receive care — and is required by federal law to contain particular things. If your question is about your health records, read the Notice of Privacy Practices instead.

Two different documents. A website privacy policy covers site data. A Notice of Privacy Practices covers protected health information. Read the Notice of Privacy Practices →

Information You Give Us

There are three ways to reach the practice from this website: the contact form, the telephone number, and the email address. All three are published on every page.

The contact form asks for your name, your telephone number, your email address, the town you are in, and a message describing what you are getting in touch about. Only the contact details are needed for us to call you back.

Please do not put medical details in the message box. Describe what you want in general terms — “knee, after surgery” is plenty. We do not need a history before we speak to you, and a form is a poor place to put one.

If you do include health information, we treat that submission as protected health information from the moment it arrives, and it is handled under the Notice of Privacy Practices rather than under this policy.

When you call or email we receive whatever you choose to tell us. Email is not a secure channel, so the same request applies: keep it general until we are speaking.

Information you give us any of these ways is used to respond to you and, if you become a patient, to arrange and provide your care. It is not used for advertising, and it is not sold.

Information Collected Automatically

The website is hosted by a third-party hosting provider. Like almost all web hosts, it keeps server logs of requests made to the site. A log entry typically records the IP address the request came from, the date and time, the page or file requested, the referring page if there is one, and the browser and operating system reported by your device.

These logs exist so the site can be operated and kept secure. We do not use them to identify individual visitors, and we do not combine them with any patient record.

The site loads its typefaces from Google Fonts. That means your browser makes a request to Google's servers, and Google receives your IP address as part of that request. Nothing else about your visit is sent to Google by this site.

Cookies and Similar Technologies

This site uses one cookie, and it is worth being specific about what that means.

Group	What it is for	Set without asking?
Analytics	Counting visits and seeing which pages are read, so we know what is useful. Google Analytics sets a cookie holding a random identifier. It is not linked to your name and we cannot use it to work out who you are.	Yes.
Advertising	None. This site runs no advertising tags, no remarketing pixels, no call tracking and no session recording.	There are none to set.

There is no cookie banner on this site, because there is only one cookie and nothing is being decided on your behalf that a banner would help with. You can block or delete it in your browser at any time and the site will work exactly as before.

The Third Parties This Site Loads

Three outside companies receive something when you use this site. That is the complete list.

Google Analytics: Tells us how many people read each page and how they arrived. Run by Google. It receives a random cookie identifier, the page addresses you viewed, and an approximate location worked out from your IP address and then discarded.
The review panel: Shows our Google rating on the home, About and Contact pages. Supplied by Local Marketing Manager, and loaded from their servers when the page opens, so they receive your IP address and the page you are on.
The patient interview video: On a patient story page, the video is a still picture until you press play. Nothing is requested from YouTube before then. Once you press play, Google receives your IP address and which video you are watching, but not which page you are reading.

No one is told your name, your diagnosis, whether you booked, or anything you said on the telephone. Nothing you tell Dr. Haschemi ever reaches an analytics tool.

We would rather be plain about the one thing that is not perfect. Some addresses on this site do name a condition, because a page about orthopedic physical therapy has to be called something, and a patient has given permission for their story to be published. When you read one of those pages, Google Analytics receives that address. We cannot avoid that and still have pages people can find.

What we have done instead is limit what can be done with it. Two settings are switched off in our Google Analytics configuration: Google Signals, which would otherwise connect your visit to your signed-in Google account across devices, and advertising personalisation, which would otherwise let that visit be used to build advertising audiences. With both off, the page address is counted and nothing more.

There are no advertising tags on this site, from Google, Meta or anyone else. No call tracking. No session recording or heatmap tool. No contact form, so there is no form data to collect.

Your Choices About Tracking

Your browser. Every browser can block or delete cookies, and most can block third-party requests entirely. Nothing on this site breaks if you do. There is no form to submit and no account to stay signed in to.
Google's own opt-out. Google publishes a browser add-on that stops Google Analytics collecting anything, on this site and every other one.
Private browsing. The analytics cookie is discarded when you close the window.
Or skip the website. The telephone number works without any of this. Call and nothing about your visit is recorded anywhere.

How Information Is Shared

We do not sell information, and we do not rent, trade or share it for anyone else's marketing.

Information is shared only in these situations:

Service providers. The companies that host the website, handle contact form submissions, carry our email and carry our telephone service necessarily handle information in the course of providing those services. They are permitted to use it only to provide the service.
Google Analytics, as described above. There are no advertising providers.
When the law requires it. If we are legally compelled to produce information — by subpoena, court order or another legal requirement — we will comply, and will limit what is produced to what is required.
To protect people. Where disclosure is necessary to prevent serious harm to someone.

Any vendor that handles protected health information on the practice's behalf — including whoever receives contact form submissions — is required to sign a business associate agreement before doing so.

Security

The website is served over HTTPS, so traffic between your browser and the site is encrypted in transit. Contact form submissions travel over the same encrypted connection.

Access to submissions is limited to the people at the practice who need it in order to respond.

No method of transmitting information over the internet is completely secure, and we cannot guarantee absolute security. This is the reason we ask that medical detail be kept out of the form and out of email.

How Long Information Is Kept

Server logs are kept by the hosting provider for a limited period and then discarded in the ordinary course.

Contact form submissions, emails and voicemail messages are kept only as long as there is a reason to keep them. If you got in touch and did not become a patient, tell us and we will delete what you sent.

Analytics and advertising data is kept for the retention period set in each provider's own settings, and is not linked to a patient record.

Patient records are a different matter. They are retained for the period required by New York law and by the terms of any plan that paid for care, and their handling is described in the Notice of Privacy Practices.

Your Choices

You can browse this site without giving us any information about yourself, and without accepting analytics or advertising cookies.
You can use the telephone instead of the form.
You can ask us to delete a form submission, email or voicemail you sent, if you did not become a patient.
You can ask what we hold. Call or email and we will tell you.
If you are a patient, your rights over your health record are set out in the Notice of Privacy Practices and are broader than anything on this page.

Children

The practice treats patients of all ages, and a parent or guardian arranges care for a child. This website, however, is written for adults and is not directed at children.

We do not knowingly collect information online from a child under 13. If you believe a child has sent us information through this site, contact us and we will delete it.

Changes to This Policy

We may update this policy. When we do, the revision date shown at the top of the page changes, and material changes will be described rather than made silently.

Continuing to use the site after a change means the revised policy applies to your use of it.

How to Reach Us About Privacy

If you have a question about this policy, or about information you believe the practice holds about you, contact us:

Telephone: (516) 357-4247
Email: info@strengthworkspt.com
Practice: Strength Works PT · Hicksville, New York