Effective date: 31 August 2026
Last updated: 31 August 2026

1. What this policy covers

This Privacy Policy explains how Foundations Pediatrics Assessment and Treatment Center, LLC (“we,” “us,” “our,” or “the Practice”) handles information in connection with foundationspediatrics.com (the “Site”).

This policy does not govern protected health information created or received in the course of providing care. That information is governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and by our Notice of Privacy Practices. If you are a patient, or the parent or guardian of a patient, that notice — not this policy — describes your rights and how health information is used and disclosed.

This policy also does not govern the SimplePractice client portal, which we use for appointment requests, intake paperwork, clinical documentation, and payment. SimplePractice, LLC operates that platform under a business associate agreement with us and under its own privacy terms.

Where this policy and our Notice of Privacy Practices differ as applied to health information, the Notice of Privacy Practices controls.

2. Who we are

Foundations Pediatrics Assessment and Treatment Center, LLC
495 Prosperity Lake Drive, Suite 101, Saint Augustine, FL 32092
245 Land Grant Street, Suite 3, Saint Augustine, FL 32092
(904) 370-3420 · info@foundationspediatrics.com

Privacy Officer: Dr. Jill Driest, 495 Prosperity Lake Drive, Suite 101, Saint Augustine, FL 32092

3. What the Site collects

The Site collects very little. It hosts no forms of its own, processes no payments, and runs no analytics.

  • Appointment requests. The “Request an Appointment” button opens a form provided by SimplePractice, LLC, which operates under a business associate agreement with us. Anything you enter there is submitted to SimplePractice, not to this website, and is treated as protected health information under our Notice of Privacy Practices. See Section 4 for what that button loads.
  • Email and telephone. If you email or call us, we receive whatever you choose to tell us. Email reaches an inbox operated under a business associate agreement with Google. Please see Section 8 before sending health information by email.
  • Employment enquiries. Our “Join Our Team” page lists an email address. If you write to us about employment, we receive the information you send.
  • Server logs. Our hosting provider records the internet address, date and time, page requested, and browser type for each visit. These logs are used for security, troubleshooting, and abuse prevention.

4. Cookies and tracking

The Site runs no analytics, no advertising or social media tracking, and no session recording. There are no marketing cookies, and nothing on the Site profiles you or follows you to other websites. Fonts and maps are served from our own server. Every page except the one described below sets no cookies at all and loads no content from any outside company.

The appointment page carries one exception. Our “Request an Appointment” button is provided by SimplePractice, LLC, the platform that holds our client records, and it operates under a business associate agreement with us. The button loads a small program from SimplePractice when that page opens, so that the request form can open without sending you to another website.

Simply opening that page sets no cookies. If you click the button to open the request form, SimplePractice sets a session cookie named simplepractice-session on its own web address (spwidget-drdriest.clientsecure.me). A session cookie holds your place while the form is open and is deleted when you close your browser. It is not used for advertising or tracking. Anything you enter in that form is submitted to SimplePractice and handled under our Notice of Privacy Practices, not under this policy.

Because nothing optional runs anywhere on the Site, there is nothing for you to consent to and no cookie banner. This was verified by independent audit in August 2026. If we ever introduce a technology that tracks visitors or contacts a company we do not have an agreement with, we will update this policy and, where consent is required, ask for it before that technology runs.

Following a link from the Site to another website — including our Facebook or LinkedIn pages — takes you to a service with its own practices, described in Section 11.

5. How we use information

  • To respond to your enquiry and, where you ask, to help you arrange an appointment
  • To operate, secure, and maintain the Site
  • To consider employment enquiries
  • To comply with legal obligations and to establish or defend legal claims

We do not use information from the Site for advertising, and we do not make automated decisions about you.

6. When we share information

We share information only as described here:

  • Service providers. SiteGround (website hosting), Google Workspace (email, under a business associate agreement), and SimplePractice (appointment requests, records, and payments, under a business associate agreement).
  • Legal requirements. Where required by law, subpoena, court order, or Florida’s mandatory reporting laws.
  • Safety. Where we believe in good faith that disclosure is necessary to prevent serious harm.
  • Business transfer. In connection with a transfer of the Practice, subject to HIPAA’s restrictions on transferring health information.

We do not sell, rent, or trade personal information, and we do not share it for advertising.

7. Children’s privacy

The Site is written for parents, guardians, caregivers, and professionals. It is not directed to children, and we do not knowingly collect personal information from a child under 13 through the Site. If you believe a child under 13 has sent us information through the Site, contact us at info@foundationspediatrics.com and we will delete it.

Adults may of course tell us about a child when asking about services. Information about a minor that we receive in connection with a request for care is protected health information and is handled under our Notice of Privacy Practices.

8. Please use secure channels for health information

We cannot ensure the confidentiality of any form of communication through electronic media, including email and text messages.

Please do not use email or text to send details about a child’s diagnosis, symptoms, treatment, or records. To share health information with us, use the SimplePractice client portal or call us at (904) 370-3420. If you choose to send health information by unsecured email, you accept the risk that it may be intercepted, and we will respond through a secure channel where we can.

Do not use email for emergencies. See Section 2 of our Terms of Use.

9. How long we keep information

Email correspondence. We do not operate a routine deletion schedule for email. Correspondence with clients, and enquiries from people who do not become clients, are generally archived and retained rather than deleted. We cannot guarantee that any particular message will be preserved, and individual messages may be deleted in the ordinary course of managing a mailbox.

Clinical records. Clinical records are retained for seven years from the date of last contact. Where the client is a minor, records are retained at least until the client reaches the age of eighteen, and for a minimum of seven years after that. Our Notice of Privacy Practices describes how clinical records are handled.

Server logs. Our hosting provider retains server logs for a rolling thirty-day period, after which they are overwritten.

You may ask us to delete correspondence you have sent us; see Section 12. We may need to retain material that has become part of a clinical record, or where the law requires.

10. Security

The Site is served over an encrypted connection, and we maintain administrative, technical, and physical safeguards appropriate to the information we hold. No system is perfectly secure, and we cannot guarantee that a transmission to us will never be intercepted.

If a breach of personal information occurs, we will notify affected individuals and any required authorities within the timeframes set by Florida law and, where health information is involved, the HIPAA Breach Notification Rule.

11. Other websites

The Site links to services we do not control, including our Facebook and LinkedIn pages and the SimplePractice client portal. Those services have their own privacy practices, and this policy does not cover them. A link is not an endorsement.

12. Your choices and rights

Because the Site collects so little, most requests concern correspondence we hold by email. You may ask us what we hold, ask us to correct it, or ask us to delete it, by writing to our Privacy Officer at the address in Section 2 or by emailing info@foundationspediatrics.com. We may need to verify your identity, and we may need to retain information where the law requires.

Correspondence that has become part of a clinical record is handled under our Notice of Privacy Practices rather than under this policy.

Your rights in health information — including the right to inspect and obtain a copy of records, to request an amendment, to receive an accounting of disclosures, to request restrictions and confidential communications, to be notified of a breach, and to complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights — are described in our Notice of Privacy Practices. We will not retaliate against anyone for exercising those rights.

13. Where we operate

We provide services in Florida, and the Site is intended for visitors in the United States. Information we hold is stored and processed in the United States.

14. Changes to this policy

We may update this policy. When we do, we will change the “Last updated” date above and post the revised version here. If a change materially affects how we handle information already collected from you, we will provide notice on the Site.

15. Contact

Dr. Jill Driest, Privacy Officer
Foundations Pediatrics Assessment and Treatment Center, LLC
495 Prosperity Lake Drive, Suite 101, Saint Augustine, FL 32092
info@foundationspediatrics.com · (904) 370-3420