PRIVACY POLICY

Key Essentials to Behavior Management, Corp.

Last Updated: 2/2/2026
Effective Date: 2/2/2026

Welcome to Key Essentials to Behavior Management, Corp!

Key Essentials to Behavior Management, Corp values your privacy. This notice describes what information we collect, how we use it, and, if necessary, those with whom we share it.

By using the websites, you are accepting the practices described in this Privacy Policy. Use of the websites and services is also subject to our Terms and Conditions.

This Privacy Policy may change from time to time. Your continued use of the websites and services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates. This Privacy Policy has been developed and is maintained in accordance with all applicable federal and international laws and regulations and specifically with the California Online Privacy Protection Act (CalOPPA – U.S regulation).

1. GENERAL INFORMATION

The personal data of the users that are collected and processed through:

  • https://www.keyessentialsbm.com

  • https://www.kebmcorp.com

Will be under responsibility and in charge of:

Key Essentials to Behavior Management, Corp.
KEBM The Sensory Spot

Address: 9333 Baseline Rd, Suite 290, Rancho Cucamonga, CA 91730
Phone: (909) 755-5220
Email: admin@keyessentialsbm.com

(Hereinafter referred to as Key Essentials to Behavior Management, Corp or KEBM).

2. TYPES OF INFORMATION GATHERED

The information we learn from customers helps personalize and continually improve your experience at Key Essentials to Behavior Management, Corp. Here are the types of information we gather:

Information You Give Us

You provide information when you search, read and view content, register as a user, access services, purchase a course, opt-in to SMS communications, and/or communicate with us through our contact information or through our contact forms. As a result of those actions, you might supply us with the following information:

  • First and last name

  • Gender

  • Birth date and age

  • Email address

  • Phone number (includes mobile number for SMS/text communications)

  • Address

  • Payment information

  • ZIP/Postal code

  • IP address

  • Any additional information relating to you that you provide to us directly through our websites or indirectly through our websites or online presence such as 'cookies'

Key Essentials to Behavior Management, Corp will not collect any personally identifiable information about you, unless you provide it.

Payment Information

Your credit card information or payment information will be processed by "PayPal" and "Stripe" (payment platforms) which will treat and safeguard your data with total security and with the exclusive purpose of processing the purchase of the products and services. Key Essentials to Behavior Management, Corp reserves the right to contract any payment platform available in the market, which treats your data for the exclusive purpose of processing the purchase of the products and services.

Please consult "PayPal" and "Stripe" privacy policy here:

  • https://www.paypal.com/us/webapps/mpp/ua/privacy-full

  • https://stripe.com/gb/privacy

Google Analytics

We use Google Analytics provided by Google, Inc., USA ("Google"). These tool and technologies collect and analyze certain types of information, including IP addresses, device and software identifiers, referring and exit URLs, feature use metrics and statistics, usage and purchase history, media access control address (MAC Address), mobile unique device identifiers, and other similar information via the use of cookies. The information generated by Google Analytics (including your IP address) may be transmitted to and stored by Google on servers in the United States. We use the GOOGLE Analytics collection of data to enhance the websites and improve our service.

Please consult Google's privacy policy here:
https://policies.google.com/privacy

Facebook Pixel

Our websites use Facebook pixels that enable us, our advertisers and service providers:

  • Collect statistics on our websites and social networks (for example, number of users who visited a page)

  • Collect information about how you interact with our websites and social networks (e.g., whether you opened or followed links contained within)

  • Personalize online services and marketing communications

  • Match ads to users and optimize advertising campaigns

Please consult Facebook's privacy policy here:
https://www.facebook.com/privacy/explanation

Automatic Information

Like many websites, we use "cookies." We obtain certain types of anonymous information which is not personally identifiable when your web browser accesses Key Essentials to Behavior Management, Corp or third-party content served by or on behalf of Key Essentials to Behavior Management, Corp on other websites. Some of the information we collect and analyze includes the Internet protocol (IP) address; computer and connection information such as browser type, version, and connection speed; purchase history; and the products you searched for, viewed, and possibly purchased.

3. HOW LONG WE KEEP YOUR DATA

Personal data will be kept for the time necessary for the provision of the services and products. The owner may be allowed to retain personal data for a longer period whenever the user has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the owner may be obliged to retain personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

SMS/Text Message Data: Records of SMS consent, message delivery, and opt-in/opt-out preferences will be retained for a minimum of four (4) years to comply with telecommunications regulations.

Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

4. HOW WE USE YOUR INFORMATION

In general, we use the information we collect primarily to provide, maintain, protect and improve our current websites and services. We use personal information collected through our site as described below and described elsewhere in this Policy to:

  • Identify you as a user in our system

  • User registration

  • Provide the sessions and consultations

  • Provide the courses

  • Process payments

  • Subscribe to our newsletter

  • Send SMS/text message communications (with your consent)

  • Improve our services, websites, and how we operate our business

  • Understand and enhance your experience using our websites and services

  • Respond to your comments or questions through our support team

  • Send you related information, including confirmations, invoices, technical notices, updates, security alerts and support and administrative messages

  • Communicate with you about upcoming events, offers and news about services offered by Key Essentials to Behavior Management, Corp and our selected partners

  • Marketing purposes of Key Essentials to Behavior Management, Corp

  • Link or combine your information with other information we get from third parties to help understand your needs and provide you with better service

  • Protect, investigate and deter against fraudulent, unauthorized or illegal activity

5. SMS/TEXT MESSAGE COMMUNICATIONS

5.1 Consent to Receive Text Messages

By providing your mobile phone number and checking the SMS consent box on our forms, you expressly consent to receive SMS text messages from Key Essentials to Behavior Management, Corp (KEBM) and KEBM The Sensory Spot.

Your consent is not a condition of purchasing any goods or services. You may opt out at any time without affecting your ability to receive services from KEBM.

5.2 Types of Text Messages You May Receive

We may send you text messages in the following categories:

Account Notifications:

  • New account creation confirmations

  • Password reset notifications

  • Account security alerts

  • Login verification codes

Customer Care:

  • Response to customer inquiries

  • Service-related questions and answers

  • Support ticket updates

Delivery Notifications:

  • Service delivery updates

  • Appointment confirmations

  • Session reminders

Marketing:

  • Promotional offers and discounts

  • New service announcements

  • Educational content and tips

  • Special events and workshops

Events:

  • Event reminders

  • Registration confirmations

  • Event updates or changes

  • Post-event follow-ups

5.3 Message Frequency and Costs

Message frequency varies depending on the categories you've opted into and your service needs. You may receive:

  • Account Notifications: As needed for security and account management

  • Customer Care: In response to your inquiries

  • Delivery Notifications: Based on your scheduled appointments (typically 1-3 per appointment)

  • Marketing: Approximately 4-8 messages per month

  • Events: Based on events you've registered for or shown interest in

Standard message and data rates may apply as determined by your mobile carrier. KEBM is not responsible for any charges incurred from your carrier for receiving text messages.

5.4 Opt-Out Instructions

You may opt out of receiving text messages at any time by:

  • Texting "STOP" to any message you receive from us

  • Texting "STOP" to +1 (833) 381-3168

  • Contacting us directly using the information in Section 14

  • Unchecking SMS consent preferences in your account settings (if applicable)

After you opt out, you will receive one final confirmation message, and then no further messages will be sent unless you re-opt-in. Please note that opting out of marketing messages will not prevent you from receiving critical service-related notifications (such as appointment reminders you've specifically requested).

5.5 Help and Support

For help or questions about text messages, you can:

  • Text "HELP" to +1 (833) 381-3168

  • Call us at (909) 755-5220

  • Email us at admin@keyessentialsbm.com

5.6 Supported Carriers

Our SMS service is available on major U.S. carriers including AT&T, Verizon, T-Mobile, Sprint, and most regional carriers. Service may not be available on all carriers or in all areas.

5.7 Mobile Number Updates

You are responsible for notifying us if your mobile phone number changes. Please contact us immediately if you change your number to ensure we update our records and prevent messages from being sent to the wrong recipient.

5.8 Information We Collect Through SMS

When you opt in to receive text messages, we collect and store:

  • Your mobile phone number

  • The date and time of your consent

  • The use case categories you've opted into

  • Message delivery status and timestamps

  • Your opt-in/opt-out preferences

  • Any information you provide in response to our messages

This information is used solely to provide you with the text message services you've requested and to comply with applicable telecommunications laws. We do not sell or share your mobile phone number with third parties for their marketing purposes.

5.9 SMS Data Security

We implement appropriate technical and organizational measures to protect your mobile phone number and text message data against unauthorized access, alteration, or disclosure. However, no electronic transmission is 100% secure, and we cannot guarantee absolute security.

5.10 Third-Party SMS Service Providers

We may use third-party SMS platform providers to deliver text messages. These providers are contractually obligated to maintain the confidentiality of your information and use it only to provide services on our behalf. They are prohibited from using your information for their own purposes.

5.11 Compliance with Laws

Our SMS communications comply with:

  • The Telephone Consumer Protection Act (TCPA)

  • The Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM)

  • Federal Communications Commission (FCC) regulations

  • California Consumer Privacy Act (CCPA) and other applicable state privacy laws

  • CTIA Messaging Principles and Best Practices

5.12 Changes to SMS Services

We reserve the right to modify, suspend, or terminate our SMS services at any time. We will provide reasonable notice of any material changes that affect your SMS preferences or the types of messages you receive.

6. HOW DO YOU GET MY CONSENT?

By accessing a service, buying a course, opting in to SMS communications, communicating with us through the contact forms or our contact information, accepting the use of cookies by our websites and providing us with personal information to communicate with you; you consent to our collection, storage and use of your information on the terms contained in this privacy policy. You may withdraw your consent by sending us your request via the contact information or the contact page.

For SMS communications specifically, you provide explicit consent by:

  • Checking the SMS consent checkbox on our forms

  • Texting a keyword to opt-in (if applicable)

  • Verbally providing consent through phone communication (documented by our staff)

7. SOCIAL MEDIA

On our websites you will find links and functions linked to different social networks, in which you can share your information.

It is advisable to consult the privacy policy and data protection of each social network used on our websites.

  • Facebook: https://www.facebook.com/privacy/explanation

  • Instagram: http://instagram.com/about/legal/privacy/

  • Twitter: https://twitter.com/privacy

  • YouTube: https://policies.google.com/privacy

8. HOW WE SHARE INFORMATION

Information about our customers is an important part of our business, and we are not in the business of selling it to others. We share customer information only as described below.

Third-Party Service Providers

We employ other companies and individuals to perform functions on our behalf. Examples include: process payments (PayPal, Stripe), create the platform and host the websites, deliver SMS/text messages, sending email, analyzing data (Google Analytics), create ads (Facebook, Google), providing marketing assistance, providing search results and links. They have access to personal information needed to perform their functions, but may not use it for other purposes.

These third-party services and tools may have access to personal information needed to perform their functions, but may not use that information for other purposes. Information shared with these third party services will be treated and stored in accordance with their respective privacy policies and our privacy policy.

Business Transfers

In the event that Key Essentials to Behavior Management, Corp creates, merges with, or is acquired by another entity, your information will most likely be transferred. Key Essentials to Behavior Management, Corp will email you or place a prominent notice on our websites before your information becomes subject to another privacy policy.

Protection of Key Essentials to Behavior Management, Corp and Others

We release personal information when we believe release is appropriate to comply with the law, enforce or apply our Terms and conditions and other agreements, or protect the rights, property, or safety of Key Essentials to Behavior Management, Corp, our users or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

With Your Consent

Other than as set out above, you will receive notice when personally identifiable information about you might go to third parties, and you will have an opportunity to choose not to share the information.

Anonymous Information

Key Essentials to Behavior Management, Corp uses the anonymous browsing information collected automatically by our servers primarily to help us administer and improve the websites. We may also use aggregated anonymous information to provide information about the websites to potential business partners and other unaffiliated entities. This information is not personally identifiable.

Email Address and Phone Number

The email address and mobile phone number that you supply to us for purposes of receiving our communications will never be rented or sold to a third party.

9. PROTECTING YOUR INFORMATION

We work to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input. If transactions are processed on the websites, transaction information is transmitted to and from the websites in encrypted form using industry-standard SSL connections to help protect such information from interception. We restrict authorized access to your personal information to those persons who have a legitimate purpose to know that information to provide products or services to you and those persons you have authorized to have access to such information.

Key Essentials to Behavior Management, Corp follows generally accepted industry standards to protect the personal information submitted to us, both during transmission and once Key Essentials to Behavior Management, Corp receives it. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while Key Essentials to Behavior Management, Corp strives to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.

10. CALIFORNIA ONLINE PRIVACY PROTECTION ACT COMPLIANCE (CalOPPA)

CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared.

Because we value your privacy, we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act (CalOPPA).

According to the California Online Privacy act, you have the following rights:

Access and Portability

To access and know what information is stored in our servers, you can send us your request through our contact information.

Rectify, Restrict, Limit, Delete

You can also rectify, restrict, limit or delete much of your information, including your SMS opt-in preferences.

Object

When we process your information based on our legitimate interests as explained above, or in the public interest, you may object to this processing in certain circumstances. In such cases, we will stop processing your information unless we have compelling legitimate reasons to continue processing it or where it is necessary for legal reasons.

Revoke Consent

Where you have previously given your consent, such as to allow us to process and store your personal information or send you SMS messages, you have the right to revoke your consent to the processing and storage of your information at any time. For example, you may withdraw your consent by updating your settings or texting STOP to opt out of SMS messages. In certain cases, we may continue to process your information after you have withdrawn consent if we have a legal basis for doing so or if your withdrawal of consent was limited to certain processing activities.

Complaint

If you wish to file a complaint about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority. Users can exercise all these rights by contacting us through the contact information or the contact page.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe.

You can see more about these rights at:
https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en

11. CHILDREN'S ONLINE PRIVACY PROTECTION

We are in compliance with the requirements of the California Online Privacy Protection Act (CalOPPA – U.S regulation) regarding the protection of the personal data of minors. We only collect personal information from minors with the respective written permission of their parents or legal guardians and for the sole and exclusive purpose of providing the services described on the websites. If we become aware that a minor has provided us with personal information without the consent and authorization of his or her parent or legal guardian, we will take steps to delete that personal information and restrict access to that person.

SMS Communications and Minors: We do not knowingly collect mobile phone numbers from or send SMS messages to individuals under 18 years of age without verified parental consent.

12. HIPAA COMPLIANCE AND PROTECTED HEALTH INFORMATION

12.1 HIPAA Overview

Key Essentials to Behavior Management, Corp (KEBM) and KEBM The Sensory Spot are covered entities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and comply with all applicable HIPAA Privacy and Security Rules. As a provider of Applied Behavior Analysis (ABA) therapy and healthcare services, we are committed to protecting the privacy and security of your Protected Health Information (PHI).

12.2 What is Protected Health Information (PHI)

Protected Health Information includes any information about your health status, provision of healthcare, or payment for healthcare that can be linked to you. This includes, but is not limited to:

  • Patient/client demographic information (name, address, date of birth, Social Security number)

  • Medical history and clinical records

  • ABA therapy treatment plans and progress notes

  • Assessment results and behavioral data

  • Diagnoses and treatment information

  • Insurance and billing information

  • Appointment schedules and attendance records

  • Photographs, videos, or audio recordings used for clinical purposes

  • Email, text messages, or other communications about your care

  • Any other individually identifiable health information

12.3 Notice of Privacy Practices

KEBM maintains a detailed Notice of Privacy Practices (NPP) that describes how we may use and disclose your PHI, your rights regarding your PHI, our obligations to protect your PHI, and how to file a complaint. You will receive a copy of our Notice of Privacy Practices at your first service appointment, upon request at any time, or when there are material changes to our privacy practices. Our current Notice of Privacy Practices is available on our website and at all clinic locations.

12.4 How We Use and Disclose Your PHI

Uses and Disclosures WITH Your Authorization: We will obtain your written authorization before using or disclosing your PHI for purposes other than treatment, payment, healthcare operations, or as otherwise permitted by law.

Uses and Disclosures WITHOUT Your Authorization (As Permitted by HIPAA):

  • For Treatment: Coordinating care among clinical team, consulting with other healthcare providers, referring to specialists, ensuring continuity of care

  • For Payment: Billing insurance companies, obtaining payment authorization, processing claims, determining eligibility and coverage

  • For Healthcare Operations: Quality improvement, staff training and supervision, business planning, compliance activities, legal and auditing functions

  • Other Permitted Disclosures: When required by law, to public health authorities, to report abuse/neglect when required, for law enforcement purposes when legally required, to avert serious threat to health or safety, for workers' compensation

12.5 Your HIPAA Rights

You have the following rights regarding your Protected Health Information:

  • Right to Access: Inspect and obtain copies of your PHI (written request required)

  • Right to Request Amendment: Request corrections to incorrect or incomplete PHI

  • Right to an Accounting of Disclosures: Request list of certain disclosures we have made

  • Right to Request Restrictions: Request limits on how we use or disclose your PHI

  • Right to Request Confidential Communications: Request we communicate in a certain way or location

  • Right to a Paper Copy: Request paper copy of our Notice of Privacy Practices

  • Right to Notification of a Breach: Be notified if there is a breach of your unsecured PHI

  • Right to File a Complaint: File complaint with us or HHS Office for Civil Rights without retaliation

12.6 Security of PHI

Physical Safeguards: Secure facilities with controlled access, locked filing cabinets, secure disposal, staff access controls

Technical Safeguards: Encrypted electronic health records, secure data transmission (SSL/TLS), password-protected systems, automatic logoff, regular security audits, firewall and anti-virus protection

Administrative Safeguards: HIPAA training for all staff, Business Associate Agreements with vendors, privacy and security policies, sanctions for violations, designated Privacy and Security Officers, risk assessments

12.7 PHI and Electronic Communications

Email and Text Messages: When communicating about your care via email or text message, we use secure, encrypted systems when possible. You acknowledge that standard email and SMS may not be completely secure. We will obtain your consent before sending PHI via unsecured channels. You may opt out of electronic communications at any time. We limit PHI in electronic communications to what is necessary.

Patient Portal: If available, our secure patient portal provides encrypted access to your health information, secure messaging with your care team, protected document sharing, and appointment scheduling.

12.8 PHI and Third Parties

Business Associates: We may share your PHI with third-party vendors who sign HIPAA-compliant Business Associate Agreements, such as billing companies, electronic health record vendors, insurance verification services, IT support providers, and legal/accounting services.

Family Members and Caregivers: We may disclose your PHI to family members or persons involved in your care when you provide authorization, you are present and do not object, or we determine it is in your best interest. For minors receiving ABA services, we generally share information with parents/legal guardians as personal representatives under HIPAA.

12.9 Minimum Necessary Standard

We follow the "minimum necessary" standard, limiting use, disclosure, and requests of PHI to the minimum necessary to accomplish the intended purpose, except for treatment purposes where full access may be needed.

12.10 PHI Retention and Disposal

Retention Periods: Clinical records maintained per state law (typically 7 years from last service or until minor reaches adulthood plus additional years); billing records maintained per federal and state requirements (typically 7 years)

Secure Disposal: Paper records through shredding; electronic records through secure deletion or media destruction; devices wiped or physically destroyed before disposal

12.11 Breach Notification

In the event of a breach of your unsecured PHI, we will conduct investigation, notify affected individuals without unreasonable delay (within 60 days), describe the breach and steps being taken, notify HHS as required, and for large breaches, notify prominent media outlets as required.

12.12 Minors and Personal Representatives

For minors receiving ABA services, parents/legal guardians generally have the right to access their child's PHI as personal representatives under HIPAA. State law may provide additional privacy protections for minors in certain circumstances. We comply with applicable state laws regarding minors' consent and privacy rights.

12.13 Changes to Privacy Practices

We reserve the right to change our privacy practices and Notice of Privacy Practices at any time, as permitted by law. Changes apply to PHI we already have as well as new information. When we make material changes, we will update our Notice of Privacy Practices, make it available on our website and at clinic locations, and notify you.

12.14 Contact for HIPAA Matters

Privacy Officer:
Key Essentials to Behavior Management, Corp
9333 Baseline Rd, Suite 290
Rancho Cucamonga, CA 91730
Phone: (909) 755-5220
Email: admin@keyessentialsbm.com

To File a Complaint:

  • Contact our Privacy Officer at the information above

  • File with U.S. Department of Health and Human Services, Office for Civil Rights: https://www.hhs.gov/ocr/privacy/hipaa/complaints/ or 1-877-696-6775

You will not be penalized or retaliated against for filing a complaint.

13. EDITING AND DELETING INFORMATION

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect. You can change, modify, rectify and delete your information at any time, including your SMS preferences and mobile phone number, please contact us through the contact information. To opt-out of Key Essentials to Behavior Management, Corp email or SMS communications, follow the instructions included in the email or text message. Your request should be processed within 48 hours.

14. SUPPLIERS AND OTHER THIRD PARTIES

Except as otherwise expressly included in this Privacy Policy, this document addresses only the use and disclosure of information Key Essentials to Behavior Management, Corp collects from you. If you disclose your information to others, whether other users or suppliers on Key Essentials to Behavior Management, Corp, different rules may apply to their use or disclosure of the information you disclose to them. Key Essentials to Behavior Management, Corp does not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. Key Essentials to Behavior Management, Corp is not responsible for the privacy or security practices of other websites on the Internet, even those linked to or from the Key Essentials to Behavior Management, Corp websites. Key Essentials to Behavior Management, Corp encourages you to ask questions before you disclose your personal information to others.

15. CONTACT US

If you have questions or concerns about this Privacy Policy, including our SMS/text messaging practices, and the handling and security of your data, please contact us:

Key Essentials to Behavior Management, Corp.
KEBM The Sensory Spot

Address:
9333 Baseline Rd, Suite 290
Rancho Cucamonga, CA 91730

Phone: (909) 755-5220
SMS Help Line: Text HELP to +1 (833) 381-3168
Email: admin@keyessentialsbm.com

Website Contact Pages:

  • https://www.keyessentialsbm.com/contact

  • https://www.kebmcorp.com/contact

For SMS-specific inquiries (opt-out requests, help, technical issues), you may also text STOP or HELP to the number above.

Last Updated: 2/2/2026
Effective Date: 2/2/2026