Website Privacy Policy

About this policy

This policy describes the website of Huntsman Spinal Clinic Inc.. It explains the information involved in browsing the site, using its request form, and contacting the clinic. For how the clinic handles protected health information and your patient rights, see the HIPAA Notice of Privacy Practices.

This website is not a patient portal, medical-record system, or emergency communication service. For an emergency, call 911.

Information you choose to provide

The request form asks for your full name, email address, and phone number. Optional fields ask whether you want an appointment or more information, insurance status, insurance provider and plan type, whether you have a recent MRI, and a message. Insurance details appear only when you select “Yes.” Date of birth is not requested.

When you submit the form, your entries are sent over HTTPS through the website’s Vercel-hosted submission service to the clinic’s GoHighLevel system, operated through LeadConnector. The submission includes the page it came from, the time received, and a request identifier so the team can process your inquiry. A successful submission is a request for follow-up, not a booked appointment.

The website code does not save form entries in cookies or browser storage. Your browser may separately retain information through its own autofill or session-restoration features. The submission service does not write the content of your form to application logs or a website database.

Provide only the information needed for an initial inquiry. Do not include complete medical records, insurance identification numbers, Social Security numbers, payment-card information, or detailed medical histories in the form or ordinary email. Ask the clinic how to provide records securely.

Use and sharing of information

The clinic uses submitted information to respond to your inquiry, discuss appointment arrangements, and address related administrative questions. Vercel forwards the request and GoHighLevel receives it for the clinic’s workflow. Information is available to clinic staff and service providers as needed for these purposes, subject to applicable privacy obligations.

Submitting a consultation request does not give permission to use your health information for unrelated marketing. The website code does not sell form information or send form entries to advertising networks. The HIPAA notice explains permitted uses and disclosures of protected health information, including when an authorization is required.

Information involved in browsing

When you open a page, your browser sends technical information needed to deliver it, such as your IP address, requested page, browser information, and the time of the request. Hosting and security providers may process technical logs to deliver content, investigate errors, and protect against misuse. These details may identify a visitor even when they are not part of a clinical record.

The website is hosted by Vercel. See the Vercel privacy policy for its service practices. When request delivery is enabled, GoHighLevel processes submitted information on the clinic’s behalf; see GoHighLevel’s privacy policy for its service practices.

Cookies, videos, and analytics

The website does not include separately configured advertising pixels or session-replay tools. Fonts, images, and most videos are served as website files. The EOS imaging page includes an external Wistia player. Loading that page connects your browser to Wistia for player scripts and media and involves technical information such as your IP address. Wistia’s player may use cookies and playback analytics under its own service settings; see the Wistia privacy policy.

Your browser settings let you control cookies and stored browsing data. External services have their own settings and practices. A cookie choice or acceptance of website terms does not by itself authorize disclosure of protected health information.

Security and retention

The website uses HTTPS for information in transit. The submission service restricts accepted fields and request sizes, checks the submitting website, and applies controls against automated and repeated requests. These protections reduce risk but do not promise absolute security.

When enabled, form submissions are held in the clinic’s GoHighLevel system rather than a website form database. The relay temporarily keeps request identifiers and keyed hashes to help limit repeated submissions; it does not keep names or message text in those controls. Hosting logs, correspondence, and clinical records are managed in their respective systems.

Contact the clinic about retention, access, correction, or deletion of information you have provided. Information may need to be retained to meet legal, clinical, billing, or security obligations; records that must legally be kept cannot always be deleted on request.

Your choices and requests

• You can browse general information without completing the form.
• You can leave optional fields blank or contact the clinic by phone instead.
• You can ask the clinic about information you have provided and request a correction where appropriate.
• For medical-record access, amendments, confidential communications, or other HIPAA rights, follow the process in the HIPAA notice.

The clinic may need to verify your identity and authority before responding. Available rights depend on the information, applicable law, and any exceptions. Nothing in this policy limits rights provided by law.

Children and representatives

This website provides general clinic information, including information for parents, guardians, and other authorized representatives. Contact the clinic directly about care for a minor or authority to act for another person. Do not submit someone else’s information unless you have authority to do so, and do not assume a family relationship alone grants access to their medical information.

Links to other websites

Research citations, map directions, social media, and other external links take you to separate services with their own privacy practices. Clicking a link may disclose technical information to that service. Review its policy before submitting information. External links do not make those services part of the clinic’s patient-record system.

Changes to this policy

This policy may be updated when the website’s data practices change. The date at the top identifies its most recent review.

Contact and privacy concerns

For medical-record questions and requests, call the front desk. For privacy questions or complaints, ask for Arica, Privacy Officer, or write to Arica at the clinic address above. Please do not include sensitive medical details in ordinary email.