Draft — this policy is awaiting legal review and may change.
What we collect
When you request an appointment we collect your first and last name, phone number, email address, the appointment type, your insurance provider and any message you choose to write. Please do not include detailed medical information in the message.
With each request we also record the page you sent it from, the time, your IP address and your browser's user-agent string, to protect the form from abuse.
We do not ask for, and the form does not accept, file uploads or payment details.
How we use it
To contact you about your appointment request, and to send you one email confirming that we received it.
To detect and block automated or abusive submissions.
We do not sell your information and we do not use it for advertising.
Who we share it with
Our website host, which stores the request in our database; our email provider, which delivers the notification to our staff and the confirmation to you; and Google reCAPTCHA, which checks that the form was sent by a person. [[TODO: legal review — name the hosting and email providers]]
If analytics is enabled, Google Analytics receives which pages were viewed and that a form was submitted — never what was typed into it.
The chat window on our pages is provided by LeadConnector; anything you type into it is handled under their terms as well as ours.
How long we keep it
Appointment requests are kept for [[TODO: retention period]] and then deleted. Records created once you become a patient are kept as the law requires and are covered by our Notice of Privacy Practices.
How we protect it
The site is served only over HTTPS. Requests are stored in a database that only named staff can reach, through an admin panel that requires a personal sign-in.
Your choices and requests
You can ask to see, correct or delete the information you sent us through the website by emailing info@sevamedcare.com or calling the clinic nearest you. We will confirm your identity before acting on the request and respond within [[TODO: response period]].
Related
Last updated: [[TODO: effective date after legal review]]