Website Privacy Policy

1. Who we are

Community Vascular Institute ("CVI," "we," "us") is a vascular and interventional radiology clinic located at 12827 Harbor Blvd, Suite G, Garden Grove, California 92840. This policy applies to our website, community-vascular.com, in both its English and Spanish versions. This policy is intended to comply with the California Online Privacy Protection Act (CalOPPA) and, to the extent it applies to us, the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA").

2. Information we collect

Information you give us. When you use our appointment request form, call or email us, we may collect your name, phone number, email address, reason for visit, preferred language, insurance carrier and any message you choose to send.

Information collected automatically. Our server and website tools may automatically record technical information such as your IP address, approximate location derived from your IP address, browser type, device type, pages visited, referring website and the date and time of your visit. We may use cookies and similar technologies to keep the site working, remember preferences and understand how the site is used.

3. How we use information

• To respond to appointment requests and questions, and to schedule visits
• To verify insurance information you provide and prepare for your visit
• To operate, maintain, secure and improve our website, and to detect and prevent fraud or misuse
• To comply with legal obligations and protect our rights and the safety of others

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law.

4. How we share information

We disclose information only as needed to run our practice and this website, including to:

• Service providers that host, maintain or secure our website and email, under written obligations to protect your information and use it only for the services they provide to us
• Third-party services embedded in the site, such as Google Maps, which may collect information under their own privacy policies
• Government authorities or others when required by law, subpoena or court order, or to protect rights, property or safety

5. Medical information, HIPAA and the CMIA

Our online appointment form is intended only for contact and scheduling details. Please do not include detailed medical history, diagnoses, test results or other sensitive health information in website forms or email; our team will call you to discuss your health needs. Once you become a patient, your medical information is protected under HIPAA and the California Confidentiality of Medical Information Act (Cal. Civ. Code § 56 et seq.), and we use and disclose it only as described in our Notice of Privacy Practices. Medical information covered by those laws is not governed by the CCPA section of this policy.

6. Cookies, "Do Not Track" and Global Privacy Control

You can set your browser to refuse or delete cookies; some parts of the site may not work properly if you do. Some browsers send "Do Not Track" signals. Because there is no common industry standard for these signals, our website does not currently respond to them. We do, however, treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale or sharing of personal information, as required by California law. We do not allow third parties to collect personal information about your online activities across different websites over time through our site for advertising purposes.

7. California Privacy Notice (CCPA / CPRA)

This section applies to California residents and supplements the rest of this policy. In the past 12 months we have collected the following categories of personal information through this website:

Sources. Directly from you, and automatically from your browser or device when you use the site.

Purposes. The business purposes described in Section 3. We use sensitive personal information only to respond to your request and provide services you ask for, and not to infer characteristics about you; we therefore do not offer a separate "limit" option.

Sale and sharing. We have not sold or shared personal information in the past 12 months, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

Retention. We keep website inquiries for as long as needed to respond and schedule care, and generally no longer than three years unless the information becomes part of your medical record or a longer period is required by law. Technical logs are kept for a shorter period for security purposes.

Your rights. Subject to legal exceptions, California residents have the right to:

• Know and access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties to whom we disclosed it
• Delete personal information we collected from you
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (we do not sell or share)
• Limit the use of sensitive personal information (we already limit our use as described above)
• Not be discriminated or retaliated against for exercising any of these rights

How to make a request. Call us at (562) 236-0650, email admin@community-vascular.com, or write to us at the address below. We will confirm receipt within 10 business days and respond within 45 calendar days; if we need more time (up to 45 additional days), we will tell you why. To protect your information, we will verify your identity by matching information you provide with information we already have. You may use an authorized agent to submit a request on your behalf; we may require written, signed permission from you and may ask you to verify your identity directly with us.

8. California "Shine the Light"

Under California Civil Code § 1798.83, California residents may ask whether we disclosed personal information to third parties for their own direct marketing purposes in the prior calendar year. We do not disclose personal information to third parties for their direct marketing purposes. You may still contact us with any questions using the information below.

9. Children and minors

This website is not directed to children under 13, and we do not knowingly collect personal information from children through the website. Parents or guardians may contact us to schedule care for a minor. Our website does not allow users to post public content; if you are a California resident under 18 and believe you have submitted information you would like removed, contact us and we will remove it as required by California Business and Professions Code § 22581.

10. Data security and breach notification

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information, including encrypted (SSL) connections, to protect information submitted through the website. No method of transmission over the internet is completely secure. If a security breach involving your personal information occurs, we will notify you as required by California Civil Code § 1798.82 and other applicable laws.

11. Accessibility

This policy is available in English and Spanish. If you have a disability and need this policy in an alternative format, please call (562) 236-0650 or email admin@community-vascular.com.

12. Links to other websites

Our website may link to other websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

13. Changes to this policy

We may update this policy from time to time and will review it at least once every 12 months. When we make changes, we will post the updated policy on this page and revise the effective date at the top. For material changes, we may also provide a notice on our home page.

14. Contact us

Community Vascular Institute
12827 Harbor Blvd, Suite G, Garden Grove, CA 92840
Phone: (562) 236-0650 · Fax: (562) 232-7120
Email: admin@community-vascular.com