Privacy Policy

Plain language summary

This public website provides general information about the practice. We do not use advertising cookies, cross-site profiles, session recording, or visitor analytics on the public website. We process a limited amount of technical information to deliver, protect, and maintain the site. The Google Map stays off until you allow it.

Necessary technical information

When your browser requests a page, hosting, security, and content delivery providers may process technical information such as the IP address, browser and device type, requested page, date and time, and security signals. This information is used to deliver the site, prevent abuse, diagnose failures, and maintain security. We do not use it for targeted advertising or to create a marketing profile.

Cookies and browser storage

We use required storage for security, to remember your privacy choice, to retain the language you select, and to keep accessibility settings you request. The language preference stores only English or Spanish in your browser and contains no patient information. The site may also store yes/no flags to remember that you explicitly chose a language or closed the language suggestion; those flags also contain no patient information. Authentication cookies are used only for the private administrator area. Optional technologies stay off until you allow them. Read the Cookie and Storage Policy for names, purposes, and durations.

Optional Google Map

The office address, phone number, and hours appear without loading Google Maps. The embedded map is not created and the browser does not connect to Google Maps until you select Allow and load map or enable external media in Privacy Choices. After you allow it, Google may receive technical information and use its own cookies. You can withdraw this choice at any time.

The Get Directions link opens Google only after you select it. That visit is governed by Google’s policies.

Optional forms

Online appointment requests and testimonial submissions are locked by default. Each route requires separate server approvals before it is available; appointment requests also require the Admin feature to be on. When a feature is locked, the site responds before reading the form body. If a feature is approved, bot verification must succeed before the submission is accepted or stored.

An appointment request may include your name, phone number, optional email, general reason, preferred time, and optional notes. Submitting a request does not confirm an appointment. A testimonial may include the authorized display name, rating, and text you provide. Do not include sensitive medical details in a general website form.

Chat assistant

The assistant allows free-text educational questions. Before submission, the browser performs a local high-confidence check for obvious identifying information. The Send control stays disabled until that information is removed. The server repeats the same check before creating chat metadata or matching the knowledge base. These automated checks reduce risk but cannot recognize every possible identifier. Text that passes the checks is sent transiently to the website server for safety checks and matching only against the practice-approved knowledge base. The typed message is not stored verbatim in Supabase and is not sent to an external artificial intelligence model. Only limited operational metadata is retained, such as a random session identifier, message length, matched knowledge-base article, match score, and whether a safety control was triggered. Do not include your name, date of birth, contact information, medical record number, or other identifying details.

Security and error monitoring

When approved forms are active, the browser connects to Cloudflare Turnstile, which may receive the IP address and other technical signals to detect automated traffic. The application does not add the IP address to the verification message or send the form content to Turnstile. Sentry remains locked even if a key exists unless a separate monitoring approval is also enabled. If approved, session recording and default personal-data capture remain off, sensitive routes are excluded, and events are filtered before sending.

How information is used and shared

We use information to operate and protect the site, provide a feature you request, respond to an approved submission, and meet legal obligations. Service providers may process information only to provide their services to the practice, subject to their configuration and contracts. We do not sell visitor information or share it with advertisers.

Categories and service providers

We may process network and security information, your privacy choice, accessibility settings you select, and technical information sent to Google after you allow the map. If a feature is approved and you use it, we may also process the information you submit through that form. Recipients may include hosting, security, content-delivery, and abuse-prevention providers; Google after your choice; approved database or email providers for an authorized feature; and authorities when required by law. The distributed abuse counter receives a pseudonymous HMAC identifier, not the untransformed IP address.

Privacy rights and appeals

Where applicable privacy law gives you these rights, you may request confirmation, access, correction, deletion, or a copy of personal data we control about you. You may also appeal a decision concerning a privacy request. We do not sell personal data or process it for targeted advertising or profiling that produces legal or similarly significant decisions. We may verify your identity and retain information when permitted or required by law.

To submit a privacy request or appeal, call the office at (915) 995-1650.

Retention and security

We retain information only as reasonably necessary for the applicable purpose, security, troubleshooting, and legal obligations. We use technical and access controls designed to protect information. No system connected to the Internet can guarantee absolute security.

This site and medical information

This site is primarily informational. It is not a patient portal, does not provide secure clinical messaging, and does not confirm appointments. To discuss your care, test results, medications, or other sensitive medical information, call the office directly. This website policy does not replace the practice’s Notice of Privacy Practices.

For rights concerning records maintained by the practice, read the Notice of Privacy Practices.

Your choices and contact

You may change the map choice through Privacy Choices, clear cookies and storage through your browser, or ask about a submission you made. Some records may be subject to legal retention requirements.