Privacy Policy

HIPAA compliance

As a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA) for the privacy and security of protected health information. Our Notice of Privacy Practices, provided to every patient before their first visit, governs how your medical information is used and disclosed in the course of treatment. This policy covers information collected through the website itself, which is separate from your clinical record.

California privacy rights

As a California practice serving California residents, we comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA). You have the right to know what personal information we collect and why, to request deletion of your personal information, to request correction of inaccurate information, and to opt out of the sale or sharing of your personal information. We do not sell or share personal information for cross-context behavioral advertising.

Do not sell or share. We do not sell or share your personal information. California residents can manage cookie preferences at any time through the Do Not Sell or Share My Personal Information link in our footer, or by selecting Cookie Settings at the bottom of any page. To exercise other CCPA or CPRA rights, contact us using the details at the end of this page.

Information we collect

Information you provide directly. When you use our contact form, referral form, booking flow, or other interactive features, we collect what you submit, such as your name, email address, phone number, insurance details, and any message you write. If you apply for a role, we collect your resume and cover letter. We do not collect clinical or diagnostic information through this website.

Information collected automatically. When you visit, we may collect device information such as browser type and operating system, an approximate location derived from your IP address, the pages you visit, and referring URLs. This is collected only after you give explicit consent through our cookie banner.

How we use your information

We use the information we collect to:

• Respond to inquiries from our contact and referral forms
• Schedule and manage appointments
• Verify insurance eligibility
• Communicate with you about your care or your inquiry
• Process job applications
• Improve our website based on aggregate usage patterns
• Meet our legal and regulatory obligations

Third-party services

We use a small number of third-party services to run our website and practice:

• Resend for transactional email such as form confirmations and referral notifications
• PostHog for website analytics, loaded only with your consent
• Cloudflare for website security and performance, including DDoS protection and bot mitigation
• Google Cloud Platform for website hosting infrastructure

We do not sell your personal information to any third party. We share information only as needed to provide our services, to meet legal obligations, or with your explicit consent.

Cookies and tracking

We use cookies and similar technologies to run our website and understand how visitors use it. You control which categories are active through our cookie banner, which appears on your first visit. You can change your preferences at any time by selecting Cookie Settings in the footer.

Cookie categories

Managing cookies. Select Cookie Settings at the bottom of any page to open the preference panel. You can also clear cookies through your browser. For visitors in the EU and EEA, non-essential cookies are blocked by default until you opt in. For California visitors, a Do Not Sell or Share My Personal Information link is provided in the footer.

Health information and tracking

On pages where you may share health-related information, such as our booking flow and contact form, we apply extra protection. Analytics on these pages runs in anonymous mode only, regardless of your cookie preferences, and no user-level data is collected. A separate HIPAA authorization notice appears before you submit any health information, distinct from cookie consent.

Data security

We use technical and administrative safeguards to protect your information, including encrypted connections (HTTPS and TLS), access controls, and secure hosting. Form submissions travel over encrypted connections and are not stored on the website; they are forwarded directly to our care team by secure email. No system is perfectly secure, but we take measures appropriate for the sensitivity of the information we handle.

Data retention

Website analytics data is kept for 12 months and then deleted automatically. Contact form submissions and referral data are kept as part of our operational records for as long as needed to serve the purpose for which they were collected. Clinical records are retained under California law, a minimum of 7 years for adult patients, and are governed by our Notice of Privacy Practices rather than this policy.

Children's privacy

Our website and services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a minor, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. Changes take effect when posted here with an updated effective date. We encourage you to review this page periodically.

Contact us

If you have questions about this policy, wish to exercise your CCPA or CPRA rights, or have a concern about how your information is handled, reach us at: