Privacy Policy

Last Modified: June 1, 2026
Previous Version: March 3, 2026

Introduction

AJAY KUMAR SAWHNEY, CHIROPRACTIC, INC., a California corporation d/b/a Divine Spine, (“We” or “Company”) respects your privacy. This policy (our “Privacy Policy”) describes the types of information we collect from you or that you provide when you visit either https://yorbalinda-chiropractor.com/, https://chiropractor-orangecounty.com/,  (collectively, our “Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information. Our Website and services are provided only in California, but can be accessed worldwide.

Scope of This Policy

This policy applies to information We collect:

• On this Website.
• In email, text, and other electronic messages between you and this Website.
• When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this Privacy Policy.

This policy does not apply to information collected by:

• Us offline, or through any other means, including on any other website operated by any third party; or
• Any third party, including through any application or content (including advertising) that links to or is accessible from or through the Website.

Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this Privacy Policy.

Important Notice Regarding Changes to This Policy

We reserve the right to change this policy from time to time (see Changes to our Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

Categories of Personally Identifiable Information Collected Through Website by COMPANY

We collect several types/categories of Personally Identifiable Information from and about users of our Website. Specifically, we collect (and in the preceding 12 months, have collected) the following:

Information You Provide Directly

• Identifiers: Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or account name, or any other identifier by which you may be contacted online or offline.
• Internet or other electronic network activity information: information regarding a consumer’s past and present interaction with Company’s Website, or advertisements (whether on or off Company’s Website).
• Consumer Preference Information: drawn from any other category of Personally identifiable information identified above, to create a profile about a consumer’s preferences as to Company’s services.
• Communications with Company’s representatives.
• Correspondence records: Records and copies of your correspondence (including email addresses), if you contact us.
• Survey responses: Your responses to surveys that we might ask you to complete for research purposes.
• Search queries: Your search queries on the Website.
• User contributions: Information that you provide to be posted on public areas of the Website or transmitted to other users or third parties (collectively, “User Contributions“). Please be aware that User Contributions are posted at your own risk and may be shared by customers and visitors to the Website. We cannot guarantee that User Contributions will be reviewed for personally-identifiable information or protected from unauthorized access or reverse-engineering to determine your identity. Please be aware that no security measures are perfect or impenetrable. We urge you to refrain from providing personally-identifiable information in your User Contributions.

Information Generated or Collected Automatically

• Internal identifiers: Internal identifiers (like a customer ID) and customer-provided identifiers (like an email address) used to track and manage transactions and account information.

• Usage data: Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Device identifiers: Identifiers that recognize customers or their devices over time, and across third-party partner websites (like browser or device IDs, IP addresses, cookies, or other forms of persistent identifiers).
• Internet or other electronic network activity: Browsing history, search history, and information regarding a consumer’s interaction with Company’s Website or advertisements (whether on or off Company’s Website).
• Inferences: Profiles drawn from any other category of Personally Identifiable Information identified above, to create a profile about a consumer’s preferences as to Company’s services.

Information We Collect from Third Parties

• Third-party service providers: Personally identifiable information available from Google or other third-party advertising partners that help serve and direct our advertising.
• Publicly available sources: Personally identifiable information available from public databases, usually in the form of identifiers like names, postal addresses, email addresses, and telephone numbers.
• Social media platforms: Personally identifiable information from social media platforms like Facebook and Instagram, particularly when potential customers interact with content by social media platforms about us.
• Data aggregators: Aggregated user information that helps us learn more about our customers and users of our Website, and information from fraud prevention companies to help avoid fraud and abuse.

Sensitive Personal Information

We do not intentionally collect Sensitive Personal Information via our Website. Information provided to Company’s Customer Service representatives over the telephone, via email, or via mail, is provided via those mechanisms only. To the extent any customer service communications include protected health information, that information is governed by our HIPAA Notice of Privacy Practices, provided to all patients and available from our office upon request (see Offline Collection, IIHI, and PHI below).

Via our Website, we do not request, accept, or collect any of the following: (i) Any data revealing racial or ethnic origins or background, religious beliefs, mental or physical health conditions or diagnoses, sexual activity or orientation, status as transgender or nonbinary, status as a victim of crime, citizenship, or immigration status; (ii) Genetic or biometric data processed to uniquely identify an individual; (iii) precise present or past geolocation data, or the present or past location of a device that links or is linkable to a consumer (iv) social security number, driver’s license number, passport number, or other government identifier or license; (v) union membership, (vi) or mail, email or text message content unless we are the intended recipient of the communication (collectively “Declined Information”).

Non-Personally Identifiable Information

We also collect (“Non-Personally Identifiable Information”) that is “Deidentified” (information about you but that does not identify you) or “Aggregated” (information about groups of users without a way to reasonably link the information to any individual consumer or household identity, including via a device). We commit to maintain and use Non-Personally Identifiable Information in its original “Deidentified” or “Aggregated” form, and not attempt to reidentify the information.

Children Under the Age of 18

Our Website is not intended for children under 18 years of age. No one under age 18 is permitted to provide any information to or on the Website. We do not knowingly collect personally identifiable information from children under 18, via our Website. If you are under 18, do not use or provide any information on this Website.

If we learn we have collected or received personally identifiable information from a child under 18, via our Website, we will delete that information, and reserve the right to cancel or terminate any services or transactions in process. If you believe we might have received any information from a child under 18, provided via our Website, please contact us immediately at divinespineusa@gmail.com or call us at (714) 695-0232

Offline Collection, IIHI, and PHI

As health care providers, our offline collection of individually identifiable health information (IIHI) and protected health information (PHI), and medical information under the California Confidentiality of Medical Information Act, Cal. Civ. Code §§ 56 et seq., are governed by applicable law, and by our practice’s separate HIPAA Notice of Privacy Practices, which notice is provided to all patients and available from our office upon request. Our Website Privacy Policy does not govern these types and categories of information.

Purpose for Collection

We collect Personally Identifiable Information to:

• Perform services that you have requested and would reasonably expect.
• Fulfill related service-requests and contacts (such as new business, applications, renewals, requests for reviews, and customer service follow-up).
• Respond to your inquiries and provide customer service prior to, or separate from services provided.
• Monitor and operate our Website.
• Prevent, detect, and investigate security incidents compromising Personally Identifiable Information.
• Combat and resist malicious, deceptive, fraudulent, or illegal actions directed at Company or its customers, and cooperate with law enforcement to prosecute those responsible for such actions.
• Maintain physical safety at physical locations (such as our offices).
• Personalize content on our Website.
• Advertise our services.

We only collect Personally Identifiable Information as reasonably necessary and proportionate to achieve the purposes for which it was collected or processed, or for another disclosed compatible purpose. We do not further process Personally Identifiable Information in a way that is incompatible with these purposes.

Categories of Third Parties with Whom Information May Be Shared

We may share Personally Identifiable Information about name, postal address, email address, telephone numbers, and any other identifier by which you may be contacted online or offline, with the following categories of third parties:

Service Providers and Business Partners.

• Analytics and data services: Analytics service providers.
• Advertising: Partners that serve ads on our behalf targeted to your interests in our services, and based on your activities online or on our Website. These partners, like Google and others may charge us for advertising, and use these cookies and similar technologies in part to both provide us information on the results of their advertising, as well as to track your movement from their websites to our Website. They may also use these cookies and similar technologies for their own marketing in addition to us offering you our services through their websites.

• Fraud prevention: Third-party fraud prevention companies to help avoid fraud and abuse related to our Website and in the performance of our services.
• Hosting and content delivery: Our hosting, content delivery network, and security vendors who monitor activity for fraud, abuse of our terms of service (such as denial of service attacks or attempts to bypass security and privilege restrictions).

Other Permitted Disclosures

• Services: As required to provide the information necessary for our services to you, we may provide your information, with your prior verbal or written consent, to various counterparties, to facilitate providers’ services to you, and billing for those services.
• Subsidiaries and affiliates: To our subsidiaries and affiliates.
• Business successors: To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personally Identifiable Information held by Company about our Website users is among the assets transferred.
• Legal compliance: To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• Enforcement of rights: To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.
• Protection of rights and safety: If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Aggregated and De-identified Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Process for Consumers to Review and Request Changes to PersonalLY IDENTIFIABLE Information

We provide you with the ability to review and request changes to your Personally Identifiable Information.

Access, and Requests to Review, Correct, or Delete Information

You may send us an email at  divinespineusa@gmail.com or call us at (714) 695-0232 to request access to, correct, or delete any Personally Identifiable Information that you have provided to us.

Processing of Deletion Requests

• Requests to delete may be conditioned on receiving confirmation that the request is legitimate, and to avoid unauthorized access or deletion of Personally Identifiable Information.
• Requests to delete are processed within forty-five (45) days from our receipt of confirmation that the request is legitimate. We reserve the right to extend this period as necessary and if consistent with applicable law.
• We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Manual Deletion of User Contributions

We reserve the right to add or remove features to the Website, that allow manual deletion of your User Contributions. In the event manual deletion is unavailable, your option is to request deletion from us as provided above. Even after deletion, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Website users.

Information Stored by Third-Parties

As a reminder, we do not control information stored with Third-Parties, such as Facebook, LinkedIn, Twitter/X, Pinterest, Reddit, YouTube, and Google. In the event you click on a link to one of these third party sites, your information is governed by your relationship with those Third-Parties, and their respective privacy policies.

Text Messages

If you provide us with your mobile number, we may use it to send you business and, with your consent, marketing text messages. You can opt out of marketing text messages at any time by following the instructions in those messages, or by replying STOP. We may also provide other ways to opt out of marketing communications (for example, through deletion of your information as provided above, or by contacting us as indicated in the Contact Information section of this Privacy Policy).

Notification of Material Changes to Privacy Policy

The date the Privacy Policy was last revised is identified at the top of the page.

It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our users’ Personally Identifiable Information, we will notify you through a notice on the Website home page. We may also contact you via email, at the primary email address provided to us. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting this Privacy Policy to check for any changes as part of your visits to our Website.

WEBSITE TREATMENT OF “Do Not Track” Signals; OTHER OPTIONS.

We reserve the right to make changes, including to “Do Not Track” signals or related mechanisms, in future updates. At this time, our webhosting platform does not see “Do Not Track” browser signals.

To the extent it is permissible by applicable law, we reserve the right to collect information about users’ online activities for the purposes described in this Privacy Policy, including serving targeted advertisements, including online activities over time, and across third-party Web sites or online services. However, there are a number of mechanisms to prevent collection of such information.

Other Tools for Consumer Choice and Limiting Tracking

Customers presently can use a variety of widely-available tools for free or low cost, such as privacy add-ins that block tracking cookies by domain or class, or VPN services that render access anonymous. For example, see linked instructions for: Chrome, Firefox, and Safari. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.

Customers can also use tools to block email web beacons (also known as tracking images), such as: (i) selecting “PlainText” email format in your email client and preventing the automatic loading of images or links; (ii) use a Mail application that blocks such beacons (like Thunderbird, or Apple Mail with Privacy Protection configured); or (iii) use a web-based email service with a browser-based tracking blocker, such as the DuckDuckGo add-in.

Limitations On Our Use

Finally, if you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can contact us at  divinespineusa@gmail.com or call us at (714) 695-0232.

COLLECTION BY THIRD PARTIES OF Personally Identifiable Information

Third-Party Tracking

Due to the partnerships we have with various advertising, diagnostics, and marketing providers, certain third parties may collect Personally Identifiable Information about your online activities over time and across our Website and to different websites (known as cross-site tracking). Specifically:

• Ad network partners: Advertising partners, such as Google and others, may collect information about your online activities across different websites and may track your movement from their websites to our Website and from our Website to their websites.
• Analytics partners: Analytics service providers may collect information about your online activities on our Website for measurement and reporting purposes.
• Ad serving: Advertising partners may use the information they collect to provide us with information on the results of their advertising, and to track your interactions with advertisements and our Website.
• Cross-site and Cross-platform tracking: Advertising partners, like Google, may track your clicks and interests (sometimes called “behavior”) onto other websites and on multiple devices for purposes of serving you targeted advertisements.

What Information May Be Collected

The types of tracking information that other parties may collect include:

• Identifiers that recognize customers or their devices over time and across third-party partner websites (like browser or device IDs, IP addresses, cookies, or other forms of persistent identifiers).
• Browsing history and search history.
• Information regarding a consumer’s interaction with Company’s Website or advertisements.
• Inferences drawn to create a profile about a consumer’s preferences.

However, there are a number of tools, which limit the collection of information and support customer choice. See the section Other Tools for Consumer Choice and Limiting Tracking above for more information.

Privacy Rights of Residents of Other States

Residents of certain states also may have rights under the Colorado Privacy Act, (CPA) (Colo. Rev. Stat. Ann. §§ 6-1-1301 et seq.; 4 Colo. Code Regs. §§ 904-3:1.01 et seq.), the Connecticut Personal Data Privacy and Online Monitoring Act (CTDPA) (Conn. Gen. Stat. Ann. §§ 42-515 et seq.), the Delaware Personal Data Privacy Act (DPDPA), (6 Del. C. §§ 12D-101 et seq.), the Florida Digital Bill of Rights (FDBR), (Fla. Stat. §§ 501.701 et seq.), the Indiana Consumer Data Protection Act (INCDPA), (Ind. Code §§ 24-15-1-1 et seq.), the Iowa Consumer Data Protection Act (ICDPA), (Iowa Code §§ 715D.1, et seq.), the Kentucky Consumer Data Protection Act (KCDPA), (Ky. Rev. Stat. Ann. §§ 367.3611 et seq.), the Maryland Online Data Privacy Act (MODPA) (Md. Code Ann., Com. Law §§ 14-4601 et seq._, the Minnesota Consumer Data Privacy Act (MCDPA) (Minn. Stat. §§ 325M.10–.21); the Montana Consumer Data Privacy Act (MCDPA), (Mont. Code Ann. §§ 30-14-2801  et seq.), the Nebraska Data Privacy Act (Neb. Rev. Stat. §§ 87-1101 et seq.),  the Nevada Online Privacy Law (NRS §§ 603A.300 et seq.), the New Hampshire Consumer Data Privacy Act (NHDPA), (N.H. RSA §§ 507-H:1 et seq.),  the New Jersey Consumer Data Privacy Act (NJDPA), (N.J. Stat. Ann. §§ 56:8-166.10 et seq.), the Oregon Consumer Privacy Act (ORS §§ 646A.570 et seq.), the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA) (R.I. Gen. Laws §§ 6-48.1-1 et seq), the Tennessee Information Protection Act (TIPA),  (T.C.A. §§ 47-18-3301 et seq.), the Texas Data Privacy and Security Act (TDPSA), (Tex. Bus. & Com. Code Ann. §§ 541.001 et seq.), the Utah Consumer Privacy Act (UCPA), (Utah Code §§ 13-61-101 et seq.), and the Virginia Consumer Data Protection Act (VCDPA), (Va. Code Ann. §§ 59.1-575 et seq.). These statutes may provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personally identifiable information.
• Request certain information regarding our disclosure of personally identifiable information to third parties for their direct marketing purposes.
• Access and delete certain personally identifiable information.
• Correct inaccuracies in their personally identifiable information, taking into account the information’s nature and the purposes of processing (excluding Iowa and Utah).
• Data portability.
• Opt-out of personal data processing for:
  • targeted advertising (excluding Iowa);
  • sales; or
  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
• Either limit (opt-out of) or require consent to process sensitive personal data.
• Prevent the processing of data in violation of anti-discrimination laws.
• Prevent the obtaining of consent through confusing or misleading processes (commonly known as “dark patterns”).
• Provide the opportunity for an appeals process for denial of consumer rights request.
• Require automatic deletion or return of personal data at the end of services.

The exact scope of these rights vary by state, and the laws of these states may only apply to Company if certain thresholds are met (such as in terms of number of users from a state, or a volume of transactions. By this privacy policy, Company does not voluntarily consent to the jurisdiction of the above states, and reserves the right to determine whether such thresholds have been met, prior to accepting and processing any requests (other than under the California Online Privacy Protection Act, Cal. Bus. and Prof. Code §§ 22575 et seq., as amended).

To exercise any of these rights please send a demand via email to  divinespineusa@gmail.com or call us at (714) 695-0232 or write us at 4973 Yorba Ranch Road, Suite D, Yorba Linda, CA 92887. Company reserves the right to refuse to process a demand under the laws of a state other than California, based on the reasonable belief that Company is not subject to the jurisdiction of that state. Company will provide notice of such a refusal. 

As to the Right to Opt-Out of Sharing or Sale of Information, you may send us an email to  divinespineusa@gmail.com or call us at (714) 695-0232 to opt out of any sale or sharing of information, in the same fashion where you may access, correct, or delete any Personally Identifiable Information that you have provided to us.

Nevada provides its residents with a limited right to opt-out of certain personally identifiable information sales. Residents who wish to exercise this sale opt-out rights may submit a request to this designated address: to divinespineusa@gmail.com or call us at (714) 695-0232.

As a reminder, Third Party sites are not covered by this Privacy Policy.

Data Security

We have implemented measures to protect Personally Identifiable Information we store from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on servers with industry-standard security, including firewalls and access control.

Your Responsibility

The safety and security of your information depends on you. If you have chosen a password for access to services or portals we provide, or certain parts of our Website: (i) keep it confidential, (ii) do not reuse it for other websites, (iii) do not share it with anyone, (iv) do not leave it in printed form where it could be accessed by someone else, and (v) check passwords with services like Google Password Manager.

Be careful about sharing information in public areas like message boards, as it may be viewed by any user.

Limits of Security

Unfortunately, internet transmission of information is not entirely secure. We protect your Personally Identifiable Information, but can’t guarantee the security of information transmitted to our Website. Any transmission is at your own risk. We aren’t responsible for circumventing privacy settings or security measures on the Website.

Contact Information

Contact us for questions, comments, privacy rights, or accessibility issues regarding our Privacy Policy:

Email: divinespineusa@gmail.com

Telephone: (714) 695-0232

Mail: 4973 Yorba Ranch Road, Suite D, Yorba Linda, CA 92887 Attn: Privacy Requests

We maintain our primary business location in California, USA. We do not have a physical presence in any other state or foreign country.