Privacy Policy
Effective date: November 13, 2026
Sandstone Autism Services (“Sandstone,” “we,” “us”) provides applied behavior analysis (ABA) therapy and special education behavior support in Utah. This policy explains what information we collect through our website, how we use it, and the choices you have.
This policy covers the website only. Information you share with us as a client, such as during intake, assessment, or treatment, is protected under our separate Notice of Privacy Practices and applicable law, including the Health Insurance Portability and Accountability Act (HIPAA).
Information we collect
We collect only the information you choose to send us, plus limited technical information needed to run the website securely.
- Contact forms. Your name and email address, and optionally your phone number, a subject, and your message.
- Autism screener. The screener asks 12 yes-or-no questions about your child. Your answers are sent securely to our website’s server only to calculate a score, which is shown to you on the page. Your individual answers are not saved and are not sent to our staff. If you choose to leave your name, email, or phone number for follow-up, we receive that contact information with your child’s score and whether it was above or below our follow-up threshold. If you leave no contact information, nothing from your screener is sent to our staff or kept.
- Technical information. Our hosting provider automatically records basic technical information, such as your IP address, browser type, pages requested, and the date and time. We also use your IP address briefly to block automated or repeated form submissions (spam).
The screener is an informal tool, not a diagnosis, and completing it does not make you a client of Sandstone.
How we use your information
- To respond to your questions and requests.
- To contact you about our services, scheduling, or insurance, when you have asked us to.
- To follow up on a screener result, when you have left your contact details for that purpose.
- To keep the website secure and prevent spam and misuse.
We do not sell, rent, or trade your personal information, use it for advertising, or share it with third parties for their own marketing.
How information is shared
We share information only with service providers that help us run the website, and only as needed for them to do so:
- Vercel Inc. hosts the website and handles technical information about visits and form submissions as they pass through.
- Resend delivers form submissions to our staff by email.
- Google (Google Workspace) hosts our staff email, where submissions are received.
We may also disclose information if required by law, to protect the safety of a child or another person, or to protect our legal rights.
Our website links to our Facebook and Instagram pages and may show embedded videos from YouTube. Those services are operated by Meta and Google and have their own privacy policies. We do not control the information they collect when you visit them or play a video.
Cookies, retention, and security
Cookies. Our website does not use analytics, advertising, or tracking cookies. If we add analytics or similar tools, we will update this policy first.
Retention. The website itself does not store form submissions. They arrive as emails in our staff inbox, where we keep them only as long as needed to respond to you and to meet our business and legal obligations. Our hosting provider keeps technical logs for a limited period under its own policies.
Security. All pages and form submissions use encrypted connections (HTTPS). Access to submissions is limited to Sandstone staff who need them to respond. No method of transmission over the internet is completely secure, so please do not include detailed medical information in the contact form. To discuss your child’s health or care, please call us.
Children’s privacy
Our website is intended for parents, guardians, educators, and other adults. It is not directed to children under 13, and we do not knowingly collect personal information from them. The screener is designed to be completed by a parent or guardian about their child. If you believe a child has sent us personal information, contact us and we will delete it.
Your choices
Sharing information through our website is voluntary. You may complete the screener without giving any contact details. You may ask us what information we have from your website submissions, to correct it, or to delete it, by contacting us below. We will respond within a reasonable time, subject to records we are legally required to keep.
Changes and contact
We may update this policy when our website or practices change. We will post the updated version here with a new effective date. See also our Terms & Conditions.
Sandstone Autism Services
Phone: (801) 696-9779
Email: info@sandstoneaba.org