Website Privacy Policy

1. Introduction and Scope

Thunderbird Vein ("Clinic," "we," "us," or "our") respects your privacy. This Website Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit www.thunderbirdvein.com (the "Site").

This policy applies strictly to information collected through our public-facing website, online forms, and digital analytics. It does not alter or replace our obligations under federal or state healthcare privacy laws regarding your Protected Health Information (PHI).

2. Relationship to Our HIPAA Notice of Privacy Practices

We maintain a strict distinction between general website user data and HIPAA-protected health records:

• General Website Visitor Data: Technical details such as IP addresses, browser types, and general page views are governed by this Website Privacy Policy.
• Protected Health Information (PHI): Any health-related data collected when you become a patient, access our Patient Portal, or submit clinical intake information is governed by our separate HIPAA Notice of Privacy Practices (NPP).

3. Information We Collect

A. Information You Voluntarily Provide

We collect personal information that you voluntarily submit when filling out forms on our Site (such as appointment scheduling requests, contact forms, or newsletter signups). This may include:

• First and last name
• Email address and telephone number
• Preferred clinic location and preferred callback times
• General non-clinical inquiries or scheduling preferences

B. Automatically Collected Technical Data

When you visit our Site, our servers and analytics providers may automatically collect standard internet log data, including:

• Your IP address and general geographic location (city/state level)
• Browser type, operating system, and device type
• Referring URLs, pages viewed, time spent on pages, and website navigation paths

4. Cookies and Web Analytics

We use essential and performance cookies to enhance your browsing experience and analyze site traffic.

Tracking Pixel Notice: Our clinic does not install third-party advertising tracking pixels (such as the Meta/Facebook Pixel) on any appointment booking pages or clinical form pages on our Site.

5. How We Use Your Information

We use non-medical website data for the following legitimate business purposes:

• To respond to your inquiries and schedule requested consultations
• To operate, maintain, and improve our website functionality and user experience
• To monitor website security and prevent fraud or spam submissions
• To send administrative emails or optional educational updates (if you opted in)

We will never sell, rent, or trade your personal information to third parties.

6. Sharing Information with Service Providers

We may share website data with trusted third-party service providers who perform operations on our behalf, such as website hosting, IT security, and web form processing. These providers are bound by strict contractual obligations to keep your information confidential and secure.

Where required by law, web vendors handling patient form submissions sign a Business Associate Agreement (BAA) with our clinic to uphold HIPAA compliance standards.

7. Data Security Measures

We implement industry-standard administrative, technical, and physical security measures to safeguard your personal data. All website traffic is encrypted in transit using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology (HTTPS).

While we take every precaution to protect your data, no method of transmission over the internet is 100% secure. For acute clinical matters or confidential health records, please use our secure Patient Portal or phone our clinic directly.

8. Your Privacy Rights

Depending on your state of residence, you may hold specific consumer privacy rights regarding your personal website data, including:

• Right to Know / Access: Request details about personal data we have collected about you.
• Right to Delete: Request deletion of your personal data collected through website forms.
• Opt-Out: Unsubscribe from marketing or educational email lists at any time using the "Unsubscribe" link in our emails.

To exercise any non-medical web privacy rights, please contact us using the details below.

9. Children's Online Privacy

Our Site is intended for adult audiences and is not directed at children under the age of 13 (or under 18 without parental supervision). We do not knowingly collect personal data from children under 13 through our public website.