Privacy Policy
Last updated: May 29, 2026
1. Introduction
Xpo Rehab Group ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
2. Information We Collect
We may collect the following types of information:
- Personal Information: Name, phone number, email address, mailing address, and other contact details you provide through our contact forms or during service intake.
- Health Information: Medical history, diagnoses, treatment plans, and other protected health information (PHI) necessary to provide rehabilitation services. This information is subject to HIPAA protections.
- Usage Data: Information about how you interact with our website, including IP address, browser type, pages visited, and time spent on the site.
3. How We Use Your Information
We use your information to:
- Provide and coordinate rehabilitation services
- Communicate with you about appointments, care plans, and follow-ups
- Process insurance claims and billing
- Respond to your inquiries submitted through our website
- Improve our website and services
- Comply with legal and regulatory requirements
4. HIPAA Compliance
As a healthcare provider, Xpo Rehab Group is required to comply with the Health Insurance Portability and Accountability Act (HIPAA). We implement administrative, physical, and technical safeguards to protect your protected health information (PHI). All staff members are trained on HIPAA privacy and security requirements.
5. Information Sharing
We do not sell your personal information. We may share your information with:
- Your physicians and care team (with your authorization)
- Insurance providers for claims processing
- Service providers who assist in our operations (under strict confidentiality agreements)
- Regulatory agencies when required by law
6. Data Security
We employ industry-standard security measures to protect your information, including encrypted data transmission, secure servers, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
You have the right to:
- Access and request copies of your personal and health information
- Request corrections to inaccurate information
- Request restrictions on how we use or share your information
- File a complaint if you believe your privacy rights have been violated
8. SMS Messaging Privacy
If you opt in to receive SMS messages from Xpo Rehab Group, we may collect your mobile phone number, SMS delivery and interaction data, and consent records such as the time and method of opt-in. We use this information to send appointment reminders, service updates, care coordination messages, and related notifications based on your consent.
We do not sell your mobile information. Your mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We may share limited SMS data with service providers, such as messaging carriers or technology vendors, only as needed to deliver messages, maintain records, support compliance, and operate the SMS program.
SMS consent applies only to Xpo Rehab Group. We retain opt-in and opt-out records, including timestamps and consent methods, to document compliance and honor your messaging preferences.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Xpo Rehab Group
Serving Riverside County, San Bernardino County, and Orange County
Phone: (951) 376-3231
Email: Admin@xporehab.com