Privacy Policy

The RiverValley Behavioral Health website (rvbh.com) is operated by RiverValley Consulting Services, Inc., 1100 Walnut Street, Owensboro, Kentucky 42301, which provides services under the RiverValley Behavioral Health name and the other names listed in our Notice of Privacy Practices. In this policy, “RiverValley,” “we” and “us” mean RiverValley Consulting Services, Inc.

This policy covers the website only.

Health information we create or receive while caring for you, such as your medical record, billing records and conversations with your care team, is protected by HIPAA and, for substance use treatment records, by federal confidentiality rules (42 CFR Part 2). How we use and share that information is explained in our Notice of Privacy Practices. If this policy and the Notice ever disagree about your health information, the Notice applies.

Some pages have forms, such as our contact form, appointment request form, community training registration and accessibility feedback form. Depending on the form, we ask for your name, email address, phone number and a message. You decide what to include.

Website forms are not the right place for medical details. Give us only what we need to reach you, and save the rest for a phone call or your appointment.

Who sees your submission

• Contact messages and appointment requests are read by RiverValley staff and treated as confidential.
• Accessibility reports go to Tanner+West, the agency that maintains our website, so they can fix the problem.
• Community training registrations are added to our email list provider so we can send you details about the training.

We store each submission in our website’s database and email a copy to the people who respond to it.

Server and security logs

Like most websites, our servers record basic technical information about each request: your IP address, browser type, the page requested and the date and time. Our hosting and security providers use these records to keep the site running and protect it from attacks. They are kept for a short time and are not used to identify visitors.

Cookies

We use a small number of cookies. Some are needed for the site to work; others are optional and stay off until you allow them. Our Cookie Policy lists each one.

Document downloads

When you download a document, such as a form or brochure, we record the download to count downloads and prevent abuse. The record includes a shortened version of your IP address, with the last part removed so it no longer points to a single connection. These records are deleted after one year.

Site search

Your search terms are sent to Algolia, our search provider, to return results. If you have turned on search improvement in Cookie settings, Algolia also records which results you click, linked to a random identifier rather than your name.

We use Google Analytics to learn which pages people use and where they have trouble, so we can improve the site. Because the pages you view can suggest an interest in a particular service, we run it without cookies, for every visitor. It stores nothing in your browser and uses no ID that links one page or visit to the next, so it cannot recognize you when you come back.

What Google receives

Each time you open a page, your browser sends Google the page address, the website you came from, and your device and browser type. We remove anything after the “?” in the address, such as search terms, except the campaign tags on links we share. Like any connection to Google, the request also carries your IP address. Google says Google Analytics does not log or store IP addresses: it uses them only to estimate your general location (city or region).

How we limit it

• Google Signals and all advertising features are off, and Analytics is not linked to any advertising account.
• We never send names, email addresses, phone numbers, form contents or site search terms to Google.
• Detailed Analytics data is deleted after two months. Only totals, such as how many times a page was viewed, are kept longer.
• Analytics runs only on this public website, not on any patient portal or site where you sign in.

Google is not RiverValley’s HIPAA business associate, which is why we run Analytics without cookies and limit what it receives. If you would rather it not count your visits at all, use Google’s opt-out browser add-on, or a browser setting or extension that blocks tracking scripts. Google explains how it handles this data on its How Google uses information from sites that use our services page.

Some features of our site are provided by other companies. When you use them, your browser connects to that company, which receives your IP address and the page you are on.

• Translation: The language menu uses Google Translate. Google’s translation tool only loads when you open the language menu or have already chosen a language, so most visits never contact Google for translation. When it loads, Google receives your IP address and the page you are on, and if you translate a page, its text is sent to Google. You can turn translation off in Cookie settings.
• Maps: Location pages show maps from Google Maps.
• Video: Videos are hosted by YouTube, Vimeo or Bunny.net and load from those services when you play them.
• Spam protection: Our forms use Cloudflare Turnstile to check that a person is sending them.

Each company has its own privacy policy. We choose them carefully, but we do not control how they handle data.

We use information to

• Answer your questions, respond to appointment requests and register you for events.
• Run, secure and fix our website.
• Understand how the site is used and improve it.
• Meet our legal obligations.

We share it only with

Companies that help us run the website, and only as needed for that work: our website host, our email delivery service (Postmark), the providers listed above and Tanner+West, our web development agency. We may also share information when the law requires it, to protect someone’s health or safety or to protect our rights and systems.

We do not sell your information, share it for advertising or use it to build a profile of you. We will not use information from this website for marketing without your permission.

• Form submissions: until we no longer need them to respond to you or for our records.
• Google Analytics data: two months for detail; totals are kept longer.
• Document download records: one year.
• Server logs: a short time, set by our hosting provider.

• Change your cookie choices at any time with the “Cookie settings” link at the bottom of any page.
• Block or delete cookies in your browser settings. The site still works, though the language menu may not.
• Ask what information you have sent us through our website forms, or ask us to correct or delete it, by emailing [email protected].
• To see, correct or get a copy of your health records, follow the steps in our Notice of Privacy Practices.

Do Not Track

Some browsers send a “Do Not Track” signal. There is no common standard for responding to it, so our site does not change its behavior when it receives one. Google Analytics already runs without cookies for every visitor.

Security

We protect the information we collect with reasonable safeguards, including encrypted connections (HTTPS), limited staff access and spam protection on forms. No website or email system is completely secure, which is why we ask you not to send sensitive health information through our forms or by email.

Children

Our website is meant for adults, including parents and caregivers. We provide services to children and teens, but we do not knowingly collect information online from children under 13. If you believe a child under 13 has sent us information through our website, contact us and we will delete it.

Links to other websites

Our site links to other organizations, such as insurers, community partners and job listings. Their privacy practices are their own, so please review their policies when you visit them.

Changes to this policy

We may update this policy as our website or the law changes. We will post the new version here and change the date at the top. If we make a significant change in how we use information you have given us, we will tell you before the change applies to that information.