Effective Date: September 2, 2026
Last Updated: September 2, 2026​

​

Empower Performance respects your privacy and is committed to protecting the personal information and health information entrusted to us.

This Privacy Policy explains how Empower Performance collects, uses, discloses, stores, and protects information obtained through our website, online scheduling systems, electronic forms, communications, and related services.

Empower Performance provides both physical therapy/healthcare services and athletics, performance, strength and conditioning, wellness, and soccer training services. Different privacy laws and requirements may apply depending on the type of service you receive and the information involved.

This Privacy Policy should be read together with Empower Performance's HIPAA Notice of Privacy Practices, when applicable. The HIPAA Notice of Privacy Practices governs protected health information maintained by Empower Performance in its capacity as a HIPAA-covered healthcare provider.

 

Empower Performance PLLC 
Physical Therapy | Athletics

1962 Ohio St
Lisle, Illinois 60532

Phone: (708) 580-7208
Email: info@empowerperform.com
Website: www.empowerperform.com

​

Empower Performance may provide:

• Physical therapy evaluation and treatment

• Performance-based physical therapy

• Return-to-sport rehabilitation and training

• Strength and conditioning

• Sports performance training

• Wellness and fitness performance training

• Individual soccer training

• Small-group soccer training

• Athletic education and performance programming

 

This Privacy Policy applies to information collected through:

• The Empower Performance website

• Website contact forms

• Online appointment scheduling

• Electronic intake and registration forms

• Electronic communications

• Email, telephone, and text communications

• Online payment or administrative systems

• Patient/client portals

• Social media pages operated by Empower Performance

• Other electronic services operated or used by Empower Performance

​

This Policy does not replace or supersede Empower Performance's HIPAA Notice of Privacy Practices for protected health information.

​

When information constitutes protected health information ("PHI") under HIPAA, Empower Performance will handle that information in accordance with applicable HIPAA requirements and the Empower Performance Notice of Privacy Practices.

​

INFORMATION WE COLLECT

Depending upon how you interact with Empower Performance, we may collect the following categories of information:

• Full name

• Preferred name

• Date of birth

• Age

• Mailing address

• Email address

• Telephone number

• Emergency contact information

• Parent or legal guardian information

• Preferred communication method

• Other information reasonably necessary to identify and communicate with you

When you schedule an appointment or training session, we may collect:

• Requested service

• Appointment date and time

• Scheduling preferences

• Appointment history

• Cancellation or rescheduling information

• Information necessary to communicate appointment changes

When you request or receive physical therapy services, we may collect information necessary to provide and document healthcare services, including:

• Medical history

• Current and previous injuries

• Symptoms

• Diagnosis or referral information

• Referring provider information

• Treatment history

• Surgical history

• Medications

• Allergies

• Functional limitations

• Physical examination findings

• Treatment information

• Exercise and rehabilitation information

• Progress and outcome information

• Return-to-sport information

• Other health information relevant to treatment

​

Health information associated with physical therapy services may constitute PHI under HIPAA and will be handled according to applicable HIPAA requirements.

​

For performance, strength and conditioning, wellness, or soccer services, we may collect:

• Sport and position

• Training history

• Performance goals

• Current training schedule

• Athletic history

• Injury history

• Movement or performance information

• Strength, speed, agility, conditioning, and mobility information

• Fitness goals

• Return-to-sport goals

• Training preferences

• Performance assessments

• Exercise history

​

Certain health-related information collected during performance services may be subject to additional legal protections depending on the circumstances.

​

Referral Information: 

• Referring provider name

• Healthcare practice

• Referral date

• Diagnosis or reason for referral

• Restrictions or precautions

• Provider contact information

• Information contained in a referral or other documentation provided to us

Payment Information: 

• Payment status

• Transaction information

• Invoice information

• Service charges

• Payment method

• Limited payment-related information provided through third-party payment processors

​

Empower Performance does not needlessly collect or retain complete payment-card information when that information is processed by a third-party payment processor.

​

When you visit our website, certain technical information may automatically be collected.

This may include:

• Internet Protocol (IP) address

• Browser type

• Browser version

• Device type

• Operating system

• Date and time of access

• Pages visited

• Time spent on pages

• Referring website

• General website usage information

• Diagnostic and security information

This information may be used to:

• Maintain website functionality

• Improve website performance

• Understand general website usage

• Troubleshoot technical problems

• Detect fraud or abuse

• Maintain website security

• Analyze website traffic

​

We do not use automatically collected technical information to intentionally identify an individual unless reasonably necessary for security, fraud prevention, legal compliance, or another legitimate business purpose.

 

Our website may use cookies, pixels, tags, scripts, analytics technologies, and similar technologies.

These technologies may be used to:

• Operate essential website functions

• Remember preferences

• Understand website traffic

• Improve website performance

• Analyze how visitors use our website

• Maintain website security

• Measure marketing effectiveness, where applicable

​

Session Cookies: These generally remain only while you are using your browser and may be deleted when you close your browser.

Persistent Cookies: These may remain on your device for a specified period of time.

​

You may be able to control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. Because website technologies and third-party services can change, the specific cookies or tracking technologies used by the website may change over time.

Empower Performance will take reasonable steps to avoid using tracking technologies in a manner inconsistent with applicable privacy laws.

 

Empower Performance may use information for legitimate business, administrative, healthcare, and service-related purposes, including:

• Evaluate and treat patients

• Develop treatment plans

• Monitor progress

• Coordinate care

• Communicate with healthcare providers

• Document services

• Provide referrals

• Support return-to-sport decisions

• Maintain required healthcare records

​

HIPAA-permitted uses and disclosures of PHI are described in the Empower Performance Notice of Privacy Practices.

​

Scheduling and Communication Use of Information: 

• Schedule appointments

• Confirm appointments

• Reschedule or cancel appointments

• Respond to questions

• Communicate administrative information

• Communicate about services requested by you

• Provide appointment reminders

Performance and Training Use of Information: 

• Develop individualized training programs

• Track athletic progress

• Assess performance

• Modify training programs

• Establish performance goals

• Provide education

• Improve training services

• Coordinate return-to-sport training

Payment and Administration Use of Information: 

• Process payments

• Prepare invoices

• Maintain financial records

• Manage accounts

• Respond to billing questions

• Maintain business records

We may use website information to:

• Improve website functionality

• Analyze website usage

• Troubleshoot technical issues

• Improve user experience

• Maintain security

​

Marketing

We may use contact information to send promotional or educational communications when legally permitted.

You may opt out of non-essential marketing communications at any time by following the unsubscribe instructions provided in the communication or contacting:

info@empowerperform.com

​

Opting out of marketing communications will not prevent us from sending communications necessary for treatment, scheduling, payment, safety, legal compliance, or other legitimate administrative purposes.

 

Empower Performance does not sell, rent, or lease your personally identifiable information to advertisers or unrelated third parties.

We may disclose information when reasonably necessary for the purposes described in this Privacy Policy or as permitted or required by law.

​

Depending on the circumstances, information may be shared with:

For physical therapy services, information may be shared with physicians, therapists, specialists, or other healthcare professionals involved in your care when permitted or required by law.

​

We may use third-party companies to help operate our business, including providers supporting:

• Electronic medical records

• Scheduling

• Secure forms

• Website hosting

• Email

• Text messaging

• Payment processing

• Information technology

• Data storage

• Administrative services

​

Where HIPAA applies, Empower Performance will use appropriate agreements and safeguards as required for applicable business associates.

​

Information may be disclosed when required or permitted by law, including in response to:

• Court orders

• Subpoenas

• Law-enforcement requests

• Regulatory requirements

• Government investigations

• Other lawful legal processes

Information may be disclosed when reasonably necessary to:

• Prevent fraud

• Protect the safety of individuals

• Investigate suspected unlawful activity

• Protect Empower Performance's rights or property

• Respond to security incidents

​

If Empower Performance is involved in a merger, acquisition, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable legal requirements.

 

When Empower Performance provides physical therapy services as a HIPAA-covered healthcare provider, certain individually identifiable health information constitutes Protected Health Information (PHI).

​

PHI is protected under the HIPAA Privacy, Security, and Breach Notification Rules.

​

Empower Performance will use and disclose PHI as permitted or required by applicable law.

​

HIPAA generally permits certain uses and disclosures for purposes including:

• Treatment

• Payment

• Healthcare operations

• Public health activities

• Required reporting

• Law enforcement in circumstances permitted by law

• Judicial and administrative proceedings

• Serious threats to health or safety

• Other circumstances permitted by HIPAA

​

HIPAA also provides patients with rights concerning their PHI.

​

The complete HIPAA Notice of Privacy Practices provided by Empower Performance should be reviewed for detailed information regarding:

• Patient rights

• Permitted uses and disclosures

• Restrictions

• Confidential communications

• Access to records

• Amendments

• Accounting of disclosures

• Complaints

• Empower Performance's legal duties

​

HIPAA generally requires covered healthcare providers to make their Notice of Privacy Practices available and prominently post it on a qualifying website.

​

When the HIPAA minimum-necessary standard applies, Empower Performance will make reasonable efforts to limit uses, disclosures, and requests for PHI to the minimum necessary to accomplish the intended purpose, as required by applicable law.

 

Information that you voluntarily post in a public area of a website or social-media platform may be visible to other individuals.

You should not post confidential medical information, personal identifying information, or other sensitive information in a public comment, social-media post, or other publicly accessible area.

​

Empower Performance cannot guarantee the privacy of information that you voluntarily make publicly available.

 

Our website may contain links to websites, scheduling platforms, payment services, social-media platforms, or other third-party services.

Those third parties may have their own privacy policies and terms.

​

Empower Performance does not control the privacy practices of third-party websites.

You should review the privacy policy of any third-party service before submitting personal information.

Examples may include third-party services used for:

• Appointment scheduling

• Electronic forms

• Patient portals

• Payments

• Social media

• Website analytics

• Communications

​

The presence of a third-party link does not necessarily mean Empower Performance endorses that company's privacy practices.

 

Empower Performance may maintain social-media accounts or pages.

Information that you voluntarily provide through public social-media interactions may be visible to others.

​

Empower Performance will not intentionally disclose a patient's protected health information through social media without appropriate authorization, except as permitted or required by law.

​

Patient photographs, videos, testimonials, names, or other identifying information may only be used for promotional purposes when appropriate authorization has been obtained.

​

A patient's participation in physical therapy or other services will not be publicly disclosed merely because the individual follows, likes, comments on, or interacts with an Empower Performance social-media account.

 

Empower Performance may request permission to use photographs, videos, testimonials, or other content for educational or promotional purposes.

When an authorization is required, Empower Performance will obtain the appropriate authorization before using identifiable patient information for the authorized purpose.

Examples include:

• Website photographs

• Social-media posts

• Marketing materials

• Educational materials

• Testimonials

• Promotional videos

• Athletic-performance demonstrations

​

A patient may decline promotional use without affecting eligibility for treatment or other services.

​

Healthcare documentation photographs or videos used as part of treatment or clinical documentation may be handled differently from promotional photographs and may be subject to HIPAA and applicable healthcare requirements.

 

Empower Performance provides services to children and adolescents, including youth athletes.

For minors, Empower Performance may collect information from or about:

• The minor

• Parent or legal guardian

• Emergency contacts

• Healthcare providers

• Coaches or organizations when appropriately authorized

Parents or legal guardians may be required to provide consent for services and may exercise applicable rights on behalf of a minor, subject to applicable law.

Empower Performance does not intentionally use its website to solicit personal information from children without appropriate involvement of a parent or legal guardian.

Where applicable, additional federal and state requirements concerning children's privacy will be followed.

​

Data Security 

Empower Performance takes reasonable administrative, technical, and physical measures designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction.

Security measures may include:

• Access controls

• Password protection

• Secure electronic systems

• Restricted access to records

• Secure transmission methods when available

• Administrative safeguards

• Physical safeguards

• Workforce privacy and security practices

​

However, no method of transmitting information over the internet or storing electronic information can be guaranteed to be completely secure.

Accordingly, Empower Performance cannot guarantee absolute security of information transmitted electronically.

 

Data Breaches and Security Incidents 

If Empower Performance experiences a breach involving protected health information or other personal information that triggers a legal notification requirement, Empower Performance will provide notifications as required by applicable federal and state law.

For HIPAA-covered information, applicable HIPAA breach-notification requirements will be followed.

Federal agencies recognize that health-related information may be subject to multiple privacy and breach-notification requirements depending on how the information is collected and maintained.

 

Empower Performance retains information for as long as reasonably necessary to:

• Provide services

• Maintain business and healthcare records

• Meet legal and regulatory requirements

• Comply with record-retention requirements

• Resolve disputes

• Protect legal rights

• Prevent fraud or abuse

• Maintain appropriate business records

​

Healthcare records may be retained for periods required by applicable federal and Illinois law and professional requirements.

Information may therefore remain in our systems after you stop using our services.

We do not promise that all information can be immediately deleted upon request when legal or regulatory retention requirements apply.

 

Your Privacy Policy & Rights 

Depending on the type of information and the law that applies, you may have rights including:

• Requesting access to personal information

• Requesting correction of inaccurate information

• Requesting access to your healthcare records

• Requesting an amendment to certain health information

• Requesting confidential communications

• Requesting restrictions on certain uses or disclosures

• Requesting an accounting of certain disclosures of PHI

• Requesting information regarding our privacy practices

• Opting out of marketing communications

• Withdrawing consent where processing is based on consent

• Requesting deletion of information when legally available

​

Some requests may be denied or limited when applicable law requires or permits Empower Performance to retain or disclose the information.

​

For HIPAA rights specifically, please refer to the Empower Performance Notice of Privacy Practices.

HIPAA recognizes rights including access, amendment, confidential communications, certain restrictions, accounting of certain disclosures, and the right to file a complaint.

 

To submit a privacy-related request, contact:

Phone: (708) 580-7208
Email: info@empowerperform.com

​

Please identify yourself and describe the information or privacy action you are requesting.

For certain requests, Empower Performance may need to verify your identity before releasing, correcting, or deleting information.

We may request reasonable documentation necessary to verify identity or authority to make a request on behalf of another person.

 

If you are legally authorized to act on behalf of another individual, Empower Performance may require documentation establishing your authority before providing access to information.

Examples may include:

• Parent or legal guardian documentation

• Healthcare power of attorney

• Court-appointed authority

• Other legally recognized authorization

​

Empower Performance will follow applicable laws concerning personal representatives and minors.

 

Empower Performance may occasionally send information about:

• Services

• Training programs

• Educational materials

• Events

• Programs

• Business announcements

• Promotions

​

Where required, appropriate consent will be obtained.

​

You may unsubscribe from non-essential marketing emails by using the unsubscribe mechanism included in the message or by contacting:

info@empowerperform.com

​

Unsubscribing from marketing communications does not prevent necessary administrative, scheduling, treatment, payment, safety, or legally required communications.

 

Communication 

If you provide a telephone number or email address, Empower Performance may use that information to communicate regarding services, scheduling, appointments, administrative matters, and other communications permitted by law.

Depending on the communication method, electronic communications may carry privacy or security risks.

Patients may request alternative communication methods where reasonably available.

For HIPAA-covered communications, Empower Performance will follow applicable HIPAA requirements and the communication preferences documented in the patient's records.

 

Health Information and Website Forms

Information submitted through a website contact form should be limited to the information necessary to respond to your inquiry.

Please do not submit highly sensitive medical information through an ordinary website contact form unless the form or communication method is specifically designed and designated for secure healthcare information.

If you need to provide detailed medical information, Empower Performance may direct you to a secure patient portal or other appropriate method.

 

Illinois Privacy 

Empower Performance operates in Illinois and will comply with applicable Illinois privacy, healthcare, consumer-protection, and data-security requirements.

Illinois law may provide protections beyond federal law depending upon the type of information involved and the circumstances in which information is collected or used.

Where Illinois law provides greater privacy protection than federal requirements, Empower Performance will comply with the applicable legal requirement.

Nothing in this Privacy Policy is intended to waive any rights provided to individuals under applicable Illinois law.

​

Individuals visiting the website from other states or countries may be subject to privacy laws applicable to their location when those laws apply to Empower Performance.

This Privacy Policy is primarily designed for Empower Performance's operations in Illinois and the United States.

If you access our website from outside the United States, information submitted through the website may be processed or stored in the United States.

 

Legal Disclosures 

Empower Performance may disclose personal information when reasonably necessary to:

• Comply with applicable law

• Respond to lawful legal process

• Respond to government authorities

• Protect the rights or property of Empower Performance

• Protect the safety of individuals

• Investigate suspected fraud or unlawful activity

• Enforce agreements

• Defend legal claims

• Meet professional or regulatory obligations

​

Where HIPAA applies, disclosures of PHI will be made according to HIPAA and applicable law.

 

Business Transfers 

If Empower Performance undergoes a merger, acquisition, sale, restructuring, financing, or transfer of assets, personal information may be transferred as part of the transaction.

Any transfer will be handled in accordance with applicable privacy and legal requirements.

If required, affected individuals will receive appropriate notice.

​

Your Responsibility 

You are responsible for providing accurate information and for maintaining the security of any account credentials, passwords, or login information provided to you.

You should not share passwords or secure portal credentials with unauthorized individuals.

If you believe your account or information has been accessed without authorization, please notify Empower Performance promptly.

 

Empower Performance may update this Privacy Policy periodically.

Changes may be made to reflect:

• Changes in our services

• Changes in technology

• Changes in privacy practices

• Changes in applicable law

• Regulatory requirements

• Improvements to our privacy procedures

​

When the Policy is updated, the revised version will be posted on the website with an updated "Last Updated" date.

Material changes will be communicated in a manner appropriate to the circumstances and as required by law.

​

The current version of this Privacy Policy applies to information collected and processed under the applicable terms of the Policy.

 

This Website Privacy Policy is not intended to replace Empower Performance's HIPAA Notice of Privacy Practices.

​

Patients receiving physical therapy services should review the separate HIPAA Notice of Privacy Practices.

The HIPAA Notice explains:

• How protected health information may be used

• How protected health information may be disclosed

• Patient privacy rights

• Patient access rights

• Amendment rights

• Confidential communication rights

• Restrictions

• Accounting of disclosures

• Complaint procedures

• Empower Performance's legal obligations

• Contact information for privacy questions and complaints

​

HIPAA requires covered healthcare providers to make the Notice available and post it prominently on applicable websites.

 

If you believe Empower Performance has violated your privacy rights, you may contact us directly. Or if you have additional questions and concerns. 

​

Empower Performance
1962 Ohio St
Lisle, IL 60532

Phone: (708) 580-7208
Email: info@empowerperform.com

​

You will not be retaliated against for submitting a good-faith privacy complaint.

For HIPAA-related complaints, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

HIPAA expressly provides individuals with the right to file a complaint with the covered entity and with HHS when they believe their privacy rights have been violated.

 

ACKNOWLEDGMENT

By using the Empower Performance website, you acknowledge that you have had the opportunity to review this Privacy Policy.

Use of the website does not constitute authorization for Empower Performance to use or disclose protected health information beyond what is permitted by applicable law.

Where a separate authorization or consent is legally required, Empower Performance will obtain the appropriate authorization or consent.

​

Last Updated: September 2, 2026