top of page

Cookie Policy
Last updated: July 30, 2025
1. Purpose of This Policy
Civitas Health Services Inc. (“Civitas,” “we,” “our,” or “us”) uses cookies and similar technologies to operate, secure, and improve our websites and online services (“Site”). This Cookie Policy explains what cookies are, how and why we use them, and the choices you have. It should be read together with our Privacy Policy and our Terms & Conditions.
2. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They allow a site to recognize your device, remember your preferences, and enhance your experience. Cookies can be:

  • First‑party – set by Civitas.

  • Third‑party – set by trusted partners (e.g., analytics providers).

Cookies do not give us direct access to your computer, and we do not store Protected Health Information (“PHI”) inside cookies. All PHI you submit is stored in our encrypted, HIPAA‑compliant systems (see Privacy Policy, Section 13).
3. Cookies We Use & Why
CategoryExamples (Non‑exhaustive)LifespanPurpose & Legal Basis*
Essential / Strictly Necessary__SecureSessionID, XSRF‑TOKENSessionEnable core functionality such as form security, user authentication, load balancing. Legal basis: performance of a contract; legitimate interests.
Analytics & Performance_ga, _gid (Google Analytics – IP anonymized), _hjSessionUser (Hotjar)1 day – 14 monthsUnderstand how visitors use our Site, detect technical issues, and improve content. Legal basis: consent (VCDPA).
PreferenceslangPref, a11yFontSizeUp to 12 monthsRemember choices like language, accessibility, and cookie‑banner status. Legal basis: consent or legitimate interests (where strictly necessary).
Advertising / Measurement_fbp (Facebook Pixel – hashed IDs only), mailchimp_landing_page90 days – 6 monthsMeasure response to Civitas ads; we do not serve behavioral ads based on PHI. Legal basis: consent (TCPA, CAN‑SPAM, VCDPA).
* Where HIPAA applies, cookies never contain PHI and are not used for treatment, payment, or healthcare operations.
4. How We Obtain Consent

  • Cookie Banner – On your first visit, a banner explains our use of cookies and requests your consent for non‑essential cookies.

  • Granular Controls – You can accept all cookies, reject all, or customize categories (except Essential).

  • Continued Browsing – If you continue to browse after clicking “Accept,” you consent to the selected categories.

5. Your Choices & Controls

  1. Banner Settings – Click “Cookie Settings” in the footer to modify or withdraw consent at any time.

  2. Browser Settings – Most browsers let you block or delete cookies (instructions: Chrome, Edge, Firefox, Safari, etc.). Blocking may impair Site functionality.

  3. Do Not Track (“DNT”) & Global Privacy Control (“GPC”) – We honor DNT and GPC signals by disabling Analytics and Advertising cookies automatically.

  4. Third‑Party Opt‑Outs –

6. Use of Other Tracking Technologies
We may employ:

  • Local Storage & Session Storage – Store preference data locally (cleared by browser settings).

  • Web Beacons / Pixels – Confirm email opens or ad conversions (never embedded with PHI).

  • Server Logs – Record IP, user‑agent, and time‑stamps for security and audit (retained 12 months).

All such technologies follow the same consent and security principles outlined in this policy.
7. Data Retention
Cookies remain on your device for the lifespan listed in Section 3 or until you delete them. Aggregated analytics reports without identifiers may be stored up to 25 months for trend analysis.
8. Third‑Party Disclosures
Third‑party partners (e.g., Google, Meta) may process data collected through cookies for their own purposes in accordance with their privacy notices. We contractually prohibit them from linking cookie data to PHI or reselling it.
9. Changes to This Cookie Policy
We may update this Policy to reflect changes in technology, law, or our practices. Material changes will be signaled via the cookie banner or a notice on our homepage with an updated “Last updated” date.
10. Contact Us
Questions or concerns?
Civitas Health Services Inc.
20 West Williamsburg Road, Sandston VA 23150
Phone: (804) 737‑3917
Email: info@civitashealth.com
© 2025 Civitas Health Services Inc. All rights reserved.

bottom of page