Privacy Policy
Last updated: April 10, 2026
Compass Neuro, LLC and its affiliate, Compass NeuroSpine, PLLC ("Company", "we",
"our", or "us") respect your privacy and are committed to protecting it through our compliance
with this policy. This policy describes how we collect, process, retain, and disclose personal data
about you when providing services to you through our websites, and services that link to this
policy (our "Services") and our practices for using, maintaining, protecting, and disclosing that
information.
This policy applies only to information we collect:
-
Through the Services.
-
In communications, including email, text, chat, and other electronic messages, between
you and the Services.
It does not apply to information collected by:
-
Us offline or through any other means, including on any other website operated by
Company or any third party that does not link to this policy; or -
Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Services.
We have separate and different policies that apply to our telehealth services offered through Elation. That service is governed by its own privacy policy and you should read it carefully before providing any sensitive private information into that system or service. We also have a separate website for keeping sensitive health information once you are a customer of our company. Please do not provide any sensitive health information to this website.
Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. This policy may change from time to time (see How We Retain Your Personal Data). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.
Children's and Minors' Data
Our Services are not intended for, and we do not knowingly collect any personal data
from, children under the age of 18. If we learn we have collected or received personal data from
a child under 18 years old without verification of parental consent, we will delete that
information.
The Personal Data That We Collect or Process
"Personal data" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, home address, or payment information (for example, account information such as name, postal address, and email address, credit card number, or social security number).
The types and categories of personal data we collect or process include:
-
Account and contact information, including name, address, email address, phone number, and other contact information you provide us.
-
Payment information, including credit card or debit card information and information
about the payment methods and services (such as PayPal or Venmo) you use in connection with the Services. -
Account history, including information about your subscription, account, transactions,
purchases, order history, or discounts. -
Demographic information, including your age, gender, or family or marital status, if you have consented to such information collection.
-
Device information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other device information.
-
Content and information you elect to provide as part of your profile.
-
Identity document information, such as Social Security and driver's license numbers, if you have consented to such information collection.
Some of the information identified above may be considered sensitive data under certain laws. If required under applicable law, we will collect and process sensitive personal data only with your consent. If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information.
We also collect:
-
Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Services feature.
-
Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.
If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal information.
How We Collect Your Personal and Other Data
You Provide Information to Us
We collect information about you when you interact with our Services, such as when you
create or update an account, place an order, subscribe, make a request, or create, upload, or post
content to the Services, including reviews, media such as photos, videos, or audio recordings.
Compass Neuro is ultimately intended to help you navigate the health care system and Compass NeuroSpine provides direct care. While we can’t control what information you choose to enter into this website, we ask that you don’t include sensitive health information in our website. Instead we have an electronic medical record where you can store sensitive heath information and communicate with us about health related or health insurance questions. The services covered by this policy relate only to our website: www.DrAndreaDouglas.com. Our Electronic Medical Record site (Elation EMR) and our telehealth services (Elation Telehealth - through integrated Zoom) have their own separate privacy policies and you should review them carefully before deciding to enter any sensitive information into those sites. For Elation, their privacy policy can be found here: https://www.elationhealth.com/privacy-policy/. For Elation Telehealth, you can review the Zoom privacy statement here: https://www.zoom.com/en/trust/privacy/privacy-statement/.
Automatically Through Our Services
As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, including details of your interactions with our Services, such as traffic data, location data, logs, and other communication data, and which resources and Services features that you access and use.
Using automatic collection technologies helps us to improve our Services and to deliver a better and more personalized experience.
The technologies we use for this automatic data collection may include:
-
Cookies. A cookie is a small file placed on your device when you interact with the Services. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services.
-
Web Beacons. Some parts of the Services may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those parts or/and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity).
To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt out from use of these automated technologies for such uses by emailing us at hello@compassneuro.com. Please note that some Services features may be unavailable as a result.
When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about your or your device. These third parties include:
-
Analytics companies.
These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal data or they may collect information, including personal data, about your online activities over time and across different websites, apps, platforms, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
Google Analytics. We share your information with Google Analytics to track and analyze the use of our Services. The Google Analytics Advertising Features that we may use include: Remarketing with Google Analytics. Google Display Network Impressions Reporting and Google Analytics Demographics and Interests Reporting. Google offers a browser tool that lets its service know you don’t wish to be tracked across platforms. You can download and install that tool here: https://tools.google.com/dlpage/gaoptout. Google has a tremendous amount of information about how they use information generally. To review their privacy policy please go to this site: https://policies.google.com/privacy?hl=en-US.
How We Use Your Information
We use information that we collect about you or that you provide to us, including any personal data, to:
-
Provide you with the Services and any contents, features, information, products, or services that we make available through the Services.
-
Fulfill and manage subscriptions, orders, and payments.
-
Fulfill any other purpose for which you provide it.
-
Provide you with notices about your subscription, including expiration and renewal notices.
-
Improve our Services, including by analyzing your information and creating aggregated data derived from your information) to develop, maintain, analyze, improve, optimize, measure, and report on our Services and their features and how users interact with them.
-
Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
-
Notify you when Services updates are available and about changes to any products or services we offer or provide though them.
-
In any other way we may describe when you provide the information.
-
For any other purpose with your consent.
The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to:
-
Estimate our audience sizes and usage patterns.
-
Store information about your preferences, allowing us to customize the Services according to your individual needs and interests.
-
Speed up your searches.
-
Recognize you when you return to our Services.
Who We Disclose Your Information To
We may disclose aggregated information about our users without restriction.
We may also disclose personal data that we collect or you provide as described in this privacy policy:
-
To our subsidiaries and affiliates.
-
To contractors, service providers, and other third parties we use to support our organization and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
-
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Compass Neuro, LLC's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by Compass Neuro, LLC is among the assets transferred.
-
To fulfill the purpose for which you provide it.
-
For any other purpose disclosed by us when you provide the information.
-
With your consent.
We may also disclose your personal data:
-
To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
-
To enforce or apply our terms of use and other agreements, including for billing and collection purposes.
-
If we believe disclosure is necessary or appropriate to protect the rights, property, or
safety of our organization, our members, or others.
Your Rights and Choices About Your Information
This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.
Advertising, marketing, cookies, and other tracking technologies choices:
-
Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly. Some browsers include a "Do Not Track" (DNT) setting that can send a signal to the online services you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our Services may not respond to all browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described in this policy.
-
Promotions by the Company If you do not wish us to use your information to promote
our own or third parties' products or services, you can opt out by emailing us at hello@compassneuro.com..
Your State Privacy Rights
Depending on your state of residency, you may have certain rights related to your personal data, including:
-
Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible, data will be provided in a portable format. Depending on your state, you may have the right to received additional information and it will be included in the response to your access request.
-
Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose.
-
Deletion. You may request that we delete personal data about you that we maintain, subject to certain exception under applicable law.
-
Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal data for these purposes.
Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.
To exercise any of these rights, please email us at hello@compassneuro.com. To appeal a decision regarding a consumer rights request email us at hello@compassneuro.com.
Some browsers and browser extensions support the Global Privacy Control ("GPC") that can send a signal to process your request to opt out from certain types of data processing, including data "sales" as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.
How We Protect Your Personal Data
We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.
The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.
How We Retain Your Personal Data
We keep the categories of personal data described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.
Changes to Our Privacy Policy
We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the "last updated" date and posting the updated policy on the Services. We may email or otherwise communicate reminders about this policy, but you should check our Services periodically to see the current policy and any changes we have made to it.
Contact Information
To exercise your rights or ask questions or comment about this privacy policy or our
privacy practices, contact us at:
COMPASS NEURO — NOTICE OF PRIVACY PRACTICES
Effective Date: April 1, 2026
Your Information. Your Rights. Our Responsibilities.
This notice describes how medical information about you may be used and disclosed
and how you can get access to this information. Please review it carefully.
Your Rights
You have the right to:
-
Get a copy of your paper or electronic medical record
-
Correct your paper or electronic medical record
-
Request confidential communication
-
Ask us to limit the information we share
-
Get a list of those with whom we’ve shared your information
-
Get a copy of this privacy notice
-
Choose someone to act for you
-
File a complaint if you believe your privacy rights have been violated
Your Choices
You have some choices in the way that we use and share information as we:
-
Tell family and friends about your condition
-
Provide disaster relief
-
Include you in a hospital directory
-
Provide mental health care
-
Market our services and sell your information
-
Raise funds
Our Uses and Disclosures
We may use and share your information as we:
-
Treat you
-
Run our organization
-
Bill for your services
-
Help with public health and safety issues
-
Do research
-
Comply with the law
-
Respond to organ and tissue donation requests
-
Work with a medical examiner or funeral director
-
Address workers’ compensation, law enforcement, and other government request
-
Respond to lawsuits and legal actions
To the extent that we have your substance use disorder patient records, subject to 42 CFR
part 2, we will not share that information for investigations or legal proceedings against
you without (1) your written consent or (2) a court order and a subpoena.
Your Rights
When it comes to your health information, you have certain rights. This section
explains your rights and some of our responsibilities to help you.
Get an electronic or paper copy of your medical record
-
You can ask to see or get an electronic or paper copy of your medical record and
other health information we have about you. Ask us how to do this. -
We will provide a copy or a summary of your health information, usually within
30 days of your request. We may charge a reasonable, cost-based fee.
Ask us to correct your medical record
-
You can ask us to correct health information about you that you think is incorrect
or incomplete. Ask us how to do this. -
We may say “no” to your request, but we’ll tell you why in writing within 60 days.
Request confidential communications
-
You can ask us to contact you in a specific way (for example, home, office, or cell
phone) or to send mail to a different address. -
We will say “yes” to all reasonable requests.
Ask us to limit what we use or share
-
You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no,” for example, if it could affect your care. If we agree to your request, we may still share this information in the event that you need emergency treatment.
-
If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.
Get a list of those with whom we’ve shared information
-
You can ask for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why.
-
We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
Get a copy of this privacy notice
You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.
Choose someone to act for you
-
If someone has authority to act as your personal representative, such as if someone has your medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
-
We will make sure the person has this authority and can act for you before we take any action.
File a complaint if you feel your rights are violated
-
You can complain if you feel we have violated your rights by contacting us using the information on page 1.
-
You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting https://www.hhs.gov/hipaa/filing-a-complaint/index.html.
-
We will not retaliate against you for filing a complaint.
Your Choices
For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.
In these cases, you have both the right and choice to tell us to:
-
Share information with your family, close friends, or others involved in your care or payment for your care
-
Share information in a disaster relief situation
-
Include your information in a hospital directory
If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
In these cases we never share your information unless you give us written permission:
-
Marketing purposes
-
Sale of your information
-
Most sharing of psychotherapy notes
In the case of fundraising:
-
We may contact you for fundraising efforts, but you can tell us not to contact you again.
If we have your substance use disorder patient records, subject to 42 CFR part 2, we will give you clear and obvious notice in advance and a choice about whether to receive fundraising communications that use your Part 2 information.
Our Uses and Disclosures
How do we typically use or share your health information?
We typically use or share your health information in the following ways.
Treat you
We can use your health information and share it with other professionals who are treating you.
Example: A doctor treating you for an injury asks another doctor about your overall health condition.
Run our organization
We can use and share your health information to run our practice, improve your care, and contact you when necessary.
Example: We use health information about you to manage your treatment and services.
Bill for your services
We can use and share your health information to facilitate billing and payment from health plans or other entities required for your care.
Example: We give information about you to your health insurance plan so it will pay for services you obtain for your care.
How else can we use or share your health information?
We are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. We have to
meet many conditions in the law before we can share your information for these purposes.
In all cases, including those listed below, if we have substance use disorder patient records about you, subject to 42 CFR part 2, we cannot use or share information in those records in civil, criminal, administrative, or legislative investigations or proceedings against you without (1) your consent or (2) a court order and a subpoena.
Help with public health and safety issues
We can share health information about you for certain situations such as:
-
Preventing disease
-
Helping with product recalls
-
Reporting adverse reactions to medications
-
Reporting suspected abuse, neglect, or domestic violence
-
Preventing or reducing a serious threat to anyone’s health or safety
Do research
We can use or share your information for health research.
Comply with the law
We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.
Respond to organ and tissue donation requests
We can share health information about you with organ procurement organizations.
Work with a medical examiner or funeral director
We can share health information with a coroner, medical examiner, or funeral
director when an individual dies.
Address workers’ compensation, law enforcement, and other government requests
We can use or share health information about you:
-
For workers’ compensation claims
-
For law enforcement purposes or with a law enforcement official
-
With health oversight agencies for activities authorized by law
-
For special government functions such as military, national security, and
presidential protective services
Respond to lawsuits and legal actions
-
We can share health information about you in response to a court or administrative order, or in response to a subpoena.
Our Responsibilities
-
We are required by law to maintain the privacy and security of your protected health information.
-
We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
-
We must follow the duties and privacy practices described in this notice and give you a copy of it.
-
We will not use or share your information other than as described in this notice unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.
For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/
noticepp.html
Changes to the Terms of this Notice
We can change the terms of this notice, and the changes will apply to all information we
have about you. The new notice will be available upon request, in our office, and on our
web site.
Compass NeuroSpine, PLLC
hello@compassneuro.com