Legal
Privacy Policy
Last updated September 25, 2026
Draft pending legal review. [Have a qualified attorney review this policy for U.S. federal and state privacy laws (including California) and Mexico’s federal personal data protection law before launch.]
Who we are
This website is operated by Family-First Treatment Navigation (“we”, “us”). Questions about this policy can be sent to info@bajarehabfamilies.com.
Information we collect
- Contact form: your name, email address, optional phone number, country, the service you’re interested in, your preferred contact method and any message you choose to send. We also record the first page you visited on our site during that visit (including any campaign parameters in its web address) and the website that referred you, so we understand how families find us.
- Bookings: when you schedule a call, our scheduling provider (Cal.com) collects your name, email, time zone and answers to booking questions.
- Payments: our payment processor (Stripe) collects your payment details. We receive confirmation of payment, not your full card number.
- Client services: if you engage us, you or people you authorize may share information needed to provide our services, which may include sensitive health information. We collect it only when genuinely necessary, through a secure process, with a privacy notice and your written authorization.
- Technical data: our hosting provider (Hostinger) keeps standard server logs (such as IP address and browser type) for security and reliability.
Please don’t send diagnoses, medical records or details about substance use through our website forms or by ordinary email.
How we use information
We use information to respond to inquiries, schedule and provide our services, process payments, keep records required by law, protect our website, and understand, in aggregate, how families find us.
Third parties that handle your information
Information about addiction and mental health is sensitive, so we keep the number of companies involved as small as possible. These are all the third parties that can see information you share with us, whether through this website or by email, phone, text, WhatsApp or video. Each one handles it only to provide its service to us, under its own privacy and security terms.
| Company | What it does for us | What it can see | Where |
|---|---|---|---|
| Hostinger (Hostinger International Ltd.) | Hosts this website and our email inbox, and runs the network and security layer every visit passes through. | Everything sent through our contact form (emailed to us and kept as a backup on its servers), emails you send us, and technical data from every visit, such as IP address and browser details. | Servers in Boston, Massachusetts, USA, plus its worldwide delivery network |
| Anthropic (Claude) | AI assistant we use to build and maintain this website. | Our website files and hosting account while working on the site, which can include inquiry data stored there. | United States |
| Cal.com | Online scheduling, when you book a call. | Your name, email, time zone and answers to booking questions. | United States |
| Stripe | Card payments for consultations and invoices. | Your payment card details, billing name and email. We only receive a payment confirmation. | United States |
| Zoom | Video consultations and family meetings. | Participants’ names, email addresses and meeting details, and the live audio, video and chat of our sessions. | United States |
| DocuSign | Signing client service agreements. | Signers’ names, email addresses and IP addresses, and the signed agreement. | United States |
| WhatsApp (Meta) | Messages, only if you choose WhatsApp as your contact method. | Your phone number and account information. Message content is end-to-end encrypted. | United States and other countries |
| Phone and text-message carriers | Calls and text messages with us. | Phone numbers, call and message records, and the content of text messages. | Your carrier’s and ours |
Our contact form is delivered to us by email. Email is not end-to-end encrypted, which is one more reason to leave health details out of it.
Only with your written authorization: treatment facilities and intervention professionals involved in your family’s care receive the information needed for that purpose, and nothing more.
When the law requires it: we may disclose information to authorities when legally required, or to protect someone’s safety in an emergency.
We do not sell or rent personal information, share it for advertising, or use analytics, advertising or social-media tracking services.
Cookies and tracking
Our pages set no cookies and load no third-party scripts, fonts or trackers. The site stores the first page of your visit in your browser’s session storage so your inquiry can include it; it is cleared when you close the tab. Cal.com and Stripe may set their own cookies when you use them to book or pay.
Retention
We keep inquiries for 12 months unless you become a client. Client records are kept for as long as your agreement and applicable law require.
Security
We use reasonable administrative, technical and physical safeguards. No method of transmission or storage is completely secure.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or limit certain uses, and to withdraw consent. Residents of Mexico may exercise their rights of access, rectification, cancellation and opposition (ARCO rights). To make a request, email info@bajarehabfamilies.com. We will respond within the time required by applicable law.
Children
Our services are for families and adults. Our website is not directed to children under 13, and we do not knowingly collect their information online.
International processing
We serve families in the United States and Mexico, and information may be processed in either country by us or our service providers.
Changes
We will post updates to this policy on this page and change the date above.