Privacy Policy
Introduction
Welcome to AmitSharmaMD.com (“we”, “us”, “our”). We respect and protect your privacy. This Privacy Policy explains:
- What personal data we collect
- How we use and disclose it
- Your rights regarding that data
This policy applies to data collected online (our website, forms, emails, texts) and offline (phone calls, in-person). It complies with applicable laws such as GDPR and CCPA where relevant.
1. Information We Collect
1.1 Personal Identifiers
If you contact us, schedule an appointment, or sign up for our email/text list, we may collect:
- Name, email address, phone number
- Mailing address (if provided)
- Health-related information (e.g., conditions, medications, and medical history)
- Payment information (for telehealth or paid consultations)
1.2 Technical & Usage Data
We use cookies and analytics tools to collect:
- IP address and device/browser details
- Pages visited, click patterns, time spent on pages
- Referring website or search query
This helps us improve content, optimize user experience, and track marketing effectiveness.
1.3 Communications Data
If you send emails, use chat, or submit forms, we may collect those messages and attachments. We also record opt-in/opt-out preferences for email and text communications.
1.4 Mobile Texting Data
If you opt into SMS communications, we store:
- Phone number, opt-in date/time, and messaging history
- Carrier and message timestamps, including STOP/HELP keywords
2. How We Use Your Data
- To provide services: like consultations, appointment scheduling, reminders, e-prescriptions, follow-ups.
- Communications: transactional (confirmations, reminders, billing updates).
- Marketing (with consent): newsletters, promotions, events.
- SMS/Text Messages: sent under our Mobile Texting Terms & Conditions. We follow A2P 10DLC registration standards and Marketing Campaign Approval Requirements (e.g., proper consent, clear sender ID, opt-out language).
- Website analytics & personalization: improving user experience and content relevance.
- Improve services: using feedback and survey data to enhance care.
- Legal compliance: including public health reporting or subpoena response.
3. Legal Bases for Processing (GDPR)
If you are in the EU, we rely on:
- Consent: You freely opt in for texts or emails.
- Contractual necessity: for providing paid services.
- Legal obligation: e.g., public health laws, financial recordkeeping.
- Legitimate interest: for improving our website and broader healthcare goals.
4. Sharing Your Information
4.1 Service Providers
We collaborate with:
- Practice management and appointment software
- Telehealth platforms
- SMS and email service providers (HIPAA-compliant)
- Payment processors
- Web hosting and analytics providers (e.g., Google Analytics)
They may access personal data only as necessary to deliver their services to us.
4.2 Legal Obligations & Safety
We may share data if required by law (e.g., subpoenas, public health reporting, court orders). We also may disclose information to prevent harm or fraud.
4.3 Mergers, Sale of Assets
In case of business transition (sale, merger, acquisition), personal information may be shared with the acquiring entity under the same policy, with user notice on our site.
5. Data Security & Retention
We implement industry-standard safeguards such as encryption (TLS/HTTPS), secure servers, access controls, and staff training. We regularly review our protection procedures.
We retain data:
- As necessary to deliver services
- In compliance with laws (e.g., HIPAA: 6 years; finance records 7 years)
- For legitimate business purposes, such as analytics and improving care
6. Your Privacy Rights
You may, subject to applicable laws:
- Access your data
- Request correction
- Ask for deletion (with exceptions)
- Object to / restrict certain processing
- Request data portability
- Withdraw consent (e.g., unsubscribe from marketing lists)
To exercise these rights, contact [email protected]. We’ll respond within required legal timeframes (e.g., 30 days under GDPR).
7. Cookies & Tracking
We use cookies for:
- Essential site functions
- Analytics (Google Analytics, Hotjar)
- Marketing and social media pixel tracking
You can manage cookies via browser settings, but disabling them may limit functionality.
8. Mobile Texting
For full terms related to SMS messaging, such as opt-in/opt-out instructions, message frequency, and A2P 10DLC compliance, see our Mobile Texting Terms & Conditions.
9. International Transfers
Your data may be stored or processed in the U.S. or by providers operating globally. We ensure such transfers are safeguarded via EU-ECCs or similar protections.
10. Children
We do not knowingly collect or solicit data from children under 16. If you’re under 16, please don’t use our services without parental consent.
11. Changes to This Policy
We may update this policy due to new legal or operational requirements. The Effective Date at the top will reflect the latest update.
12. How to Contact Us
If you have questions about this policy or your privacy rights, contact:
- Email: [email protected]
- Mail: Amit Sharma MD, 123 Health Street, Your City, Your State ZipCode
