Privacy Policy

Thank you for visiting our website. This privacy policy tells you how Castle Rock Regenerative Healthcare (SJF Castle Rock Cryo Care, LLC, doing business as Castle Rock Regenerative Healthcare, "we", "us", "our") uses personal information collected at this site. Please read this privacy policy before using the site or submitting any personal information. These practices may be changed, but any changes will be posted and changes will only apply to activities and information on a going forward, not retroactive basis. Where the law requires your consent before we do something with your information, we ask for it separately and we do not treat your use of this site as consent. You are encouraged to review the privacy policy whenever you visit the site to make sure that you understand how any personal information you provide will be used.

Note: the privacy practices set forth in this privacy policy are for this website only. If you link to other websites, please review the privacy policies posted at those sites.

Collection of Information

We collect personally identifiable information, like names, postal addresses, email addresses, etc., when voluntarily submitted by our visitors. The information you provide is used to fulfill your specific request. This information is only used to fulfill your specific request, unless you give us permission to use it in another manner, for example to add you to one of our mailing lists.

Commitment to Data Security

Only staff and contractors who need your information to do their job can reach it, and each of them is under a written obligation to keep it confidential. This site is served over an encrypted connection.

No website is perfectly secure, and we are not going to tell you otherwise. If your information is ever involved in a breach, we will notify you. Colorado law sets a shorter deadline for that notice than federal law does, and we follow the shorter one.

Every marketing email we send has an unsubscribe link in it.

SMS and Text Message Communications

If you give us your mobile number and agree to receive texts, we may send you text messages. These may include appointment reminders, booking and scheduling confirmations, account or service notifications, and, where you have separately opted in, promotional or marketing messages.

Message frequency varies. Message and data rates may apply. You can opt out of text messages at any time by replying STOP to any message from us, or by telling us another reasonable way, such as a call or an email; reply HELP for help. Opting out of texts will not affect your ability to receive care.

Your consent to receive text messages is not a condition of purchasing any goods or services. No mobile information, opt-in data, or consent will be sold, rented, or shared with any third parties or affiliates for marketing or promotional purposes. Mobile information will only be shared with service providers that help us deliver our messaging (for example, our SMS platform), and only as needed to provide the service.

For more information, see our SMS Terms and Conditions.

Email Communications

If you provide your email address, we may send you transactional emails (such as appointment and account information) and, where you have opted in, newsletters and promotional emails. Every marketing email includes an unsubscribe link, and we honor opt-out requests promptly. You may also opt out by contacting us at staff@castlerockregenerativehealth.com. Opting out of marketing email will not affect transactional messages related to your care or appointments.

Protected Health Information (HIPAA)

Castle Rock Regenerative Healthcare is a healthcare provider. Your protected health information (PHI) is governed by our Notice of Privacy Practices and applicable law, including HIPAA, not by this website privacy policy. This privacy policy applies only to information collected through this website. Please review our HIPAA Statement for details on how your health information is handled.

How We Share Information

We do not sell your personal information. We share personal information only in the following circumstances: with trusted service providers who perform functions on our behalf (such as appointment booking, hosting, analytics, email and text messaging, and payment processing) under obligations of confidentiality and only as needed to provide their services; when permitted or required by law; to prevent, detect, or investigate fraud or unauthorized transactions; or to protect the rights, safety, or property of our patients, our practice, or others. We do not provide your information to third parties for their own marketing purposes.

What This Site Collects, and Why

Here is everything this website collects, in plain terms.

• Things you type and send us. Your name, phone number, email address, and anything you write in an email or text. We use it to answer you and to arrange care. Please keep clinical detail for the phone.
• Page analytics, with no identifier. If we use an analytics tool, it records which pages are read, how visitors arrived, and from which broad region. It sets no cookie, stores no advertising identifier, and does not keep your IP address. It cannot build a profile of you and it cannot follow you to another website.
• Phone call records. If we use a call tracking service, it may note which ad or page showed the number you called, and calls may be recorded for quality and training. We turn on a service like this only after it signs a business associate agreement with us, and clinical detail is redacted from its recordings and transcripts.
• Server logs. Our web server keeps the ordinary record every web server keeps, including IP addresses, for security and troubleshooting.

We do not run an advertising pixel on this site. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it to build an advertising audience.

If we advertise, we measure whether an ad worked by matching a completed inquiry in our own records back to the click that started it. We do not send the advertising platform any information about which service you were reading about.

Who Else Receives Information From This Site

We use a small number of outside companies to run the practice. Each one receives only what it needs.

• Our website host, which serves these pages.
• An analytics provider, if we use one, which receives page addresses and no identifier.
• A call tracking provider, if we use one, which receives phone numbers and call recordings only after it has signed a business associate agreement with us.
• Our booking and practice management system, which receives what you enter when you book.
• Our email and text messaging providers, which receive what you send us.
• Our payment processor, which receives card details directly. We never see or store your full card number.

Where one of these companies handles health information on our behalf, we put a business associate agreement in place before it does so, as HIPAA requires.

We also share information when the law requires it, to prevent or investigate fraud, or to protect the safety of our patients, our staff, or others.

Cookies and Browser Privacy Signals

This site sets two cookies of its own, only on our booking, consultation and advertising landing pages. One remembers which link brought you here, for example a Google listing. The other keeps the click code Google adds when you arrive from one of our Google ads. Both stay in your browser for 30 days. None of them records your name, your health information, or which pages you read.

You can delete or block cookies in your browser settings, and the site works without them.

If your browser sends a Global Privacy Control signal, we honor it. When we see that signal we record no attribution at all for your visit, and the page tells you so. Global Privacy Control is the universal opt-out mechanism recognized by the Colorado Attorney General. We also honor the older Do Not Track setting the same way.

A Note About the Chat Window and What Not To Send Us

If a chat window appears on this site, it is supplied by an outside company. When it loads, that company and the services inside its software can receive the address of the page you are on, your IP address, your browser, and anything you type into the chat. Some of our page addresses name a service, so the page address alone can suggest what you were reading about.

Please do not type health details, medication names, or your medical history into a chat window or a web form. Use them for scheduling, directions, hours, and cost questions. To discuss anything clinical, call us at 303.663.6990 and we will take it from there. Email and web forms are not secure, and we cannot promise a message you send us that way stays private in transit.

Your Privacy Rights (Colorado Residents)

Depending on applicable law, including the Colorado Privacy Act, you may have the right to access the personal data we hold about you, correct inaccuracies, request deletion, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and certain profiling. To exercise these rights, contact us at staff@castlerockregenerativehealth.com or 303.663.6990. We will respond as required by law. If we decline your request, you may appeal by replying to our response, and we will explain the outcome of the appeal.

One limit worth knowing: your medical record is governed by HIPAA and by Colorado medical records law, not by the Colorado Privacy Act, and we are required to retain it for a set period. So a request to delete personal data does not delete your clinical record. Your rights in that record, including the right to see it, get a copy, and ask us to correct it, are described in our Notice of Privacy Practices.

We do not sell personal data and we do not process it for targeted advertising or profiling, so there is nothing for you to opt out of on this site. If that ever changes, this policy will change first and we will offer a clear way to opt out.

Data Retention

We retain personal information only as long as needed to fulfill the purposes described in this policy, to provide our services, and to comply with our legal, tax, and recordkeeping obligations, after which it is deleted or de-identified.

Children's Privacy

This site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can remove it.

Privacy Contact Information

If you have questions, concerns, or comments about this privacy policy, contact us:

This privacy policy was last updated on September 16, 2026. We reserve the right to make changes to this policy. Any changes will be posted on this page with an updated date.

Related: Privacy Policy, Terms of Use, HIPAA Statement, SMS Terms and Conditions.