Privacy Policy

This Privacy Policy applies to information collected through the Site and general online interactions with Crescent Health Clinic. It does not replace our Notice of Privacy Practices and should be read together with it and other HIPAA-related documents that govern Protected Health Information ("PHI") when you are a patient or receive clinical services from us.

Information you submit through the Site before becoming a patient may not be protected as PHI under HIPAA until a treatment relationship and applicable privacy protections are established. Please avoid submitting highly sensitive clinical information through general website contact methods unless we direct you to a secure clinical channel.

We may collect the following categories of information:

• Contact and inquiry information: name, email address, phone number, messages, and other details you voluntarily provide when contacting us, requesting information, or submitting forms.
• Scheduling and administrative information: information provided through online scheduling tools or appointment requests, which may be processed by third-party vendors acting on our behalf.
• Technical and usage information: IP address, browser type, device identifiers, operating system, referring and exit pages, pages viewed, dates and times of access, and similar analytics data.
• Cookie and tracking data: information collected through cookies, pixels, and similar technologies as described below.
• Communications metadata: records of calls, texts, or emails sent to the clinic phone numbers or email addresses listed on the Site, subject to applicable law and our clinic policies.

We do not intentionally collect sensitive categories of information through the Site beyond what you choose to submit. Please do not provide information you are not comfortable sharing through non-secure website channels.

We may use collected information to:

• Operate, maintain, and improve the Site;
• Respond to inquiries and communicate with you about services, appointments, and administrative matters;
• Facilitate scheduling and clinic operations;
• Analyze Site usage and performance;
• Protect the security and integrity of the Site and our systems;
• Comply with legal, regulatory, licensing, and payor obligations;
• Enforce our Terms and Conditions and protect our legal rights;
• Send service-related notices where permitted by law.

We do not use the Site to provide clinical diagnosis or treatment decisions. Clinical use of patient information is governed by separate policies and consents.

We and our service providers may use cookies, web beacons, and similar technologies to recognize your browser or device, remember preferences, and understand how visitors use the Site. We may use analytics services such as Google Analytics to collect aggregated usage statistics. Analytics providers may use their own cookies and are governed by their respective privacy policies.

You can control cookies through your browser settings. Disabling cookies may affect Site functionality. We do not respond to "Do Not Track" signals in a uniform manner because there is no industry standard for doing so.

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: with vendors who perform services on our behalf—such as website hosting, analytics, scheduling, communications, IT support, and marketing platforms—subject to contractual obligations to protect information and use it only for authorized purposes.
• Patient communication platforms: such as Spruce Health or similar tools, when you choose to engage through those channels, subject to their terms and privacy practices.
• Legal and safety: when required by law, regulation, legal process, or governmental request; to protect the rights, property, or safety of the Clinic, our patients, staff, or others; or to investigate fraud or security issues.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to applicable law.
• With your direction or consent: when you authorize us to share information or direct us to a third party.

The Site may link to third-party websites, social media platforms, review sites, scheduling systems, and patient communication applications. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access.

If you contact us by phone, text, or email using information displayed on the Site, we may retain those communications as permitted by law and our clinic policies. Standard message and data rates may apply to SMS messages. By contacting us, you consent to receiving administrative responses through the channel you used, subject to applicable law and your right to opt out of non-essential marketing communications where required.

Our clinic phone line is not monitored continuously for emergencies. For emergencies, call 911 or the Suicide & Crisis Lifeline at 988, as described on the Site.

We retain information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, regulation, professional standards, or legitimate business needs (including dispute resolution and enforcement of agreements). Retention periods for patient records and PHI are governed by separate clinical and HIPAA policies.

We implement reasonable administrative, technical, and physical safeguards designed to protect information collected through the Site. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security and, to the fullest extent permitted by law, disclaim liability for unauthorized access, disclosure, or loss beyond our reasonable control, except where liability cannot be disclaimed under applicable law.

You are responsible for safeguarding any device or credentials you use to access the Site and for using secure channels when transmitting sensitive information.

Depending on your location and applicable law, you may have rights regarding your personal information, which may include the right to:

• Request access to or a copy of personal information we maintain about you;
• Request correction of inaccurate information;
• Request deletion of information, subject to legal and clinical retention obligations;
• Opt out of certain processing activities where applicable;
• Be free from discriminatory treatment for exercising privacy rights, where prohibited by law.

Utah residents may have additional rights under the Utah Consumer Privacy Act (UCPA), where applicable. HIPAA rights for patients regarding PHI are addressed in our Notice of Privacy Practices, not solely in this website Privacy Policy.

To submit a privacy request, contact us at info@ch.clinic. We may need to verify your identity before responding. We will respond within timeframes required by applicable law.

The Site is not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from children under 13 through the Site without appropriate parental consent as required by the Children's Online Privacy Protection Act (COPPA). Our clinical services for minors are provided through proper guardian consent and separate intake processes. If you believe we have collected information from a child under 13 through the Site in error, please contact us promptly.

The Site is intended for users in the United States, primarily Utah. If you access the Site from outside the United States, you understand that your information may be processed in the United States, where privacy laws may differ from those in your jurisdiction. Your use of the Site constitutes consent to such processing to the extent permitted by law.

While we strive to protect information collected through the Site, we make no representations or warranties that this Privacy Policy will prevent all unauthorized access, disclosure, or misuse of information. To the fullest extent permitted by applicable law, Crescent Health Clinic LLC disclaims liability for breaches or incidents arising from factors outside our reasonable control, third-party actions, or your failure to use appropriate safeguards, except where liability cannot be disclaimed under applicable law.

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page indicates when the current version took effect. Material changes will be posted on this page. Your continued use of the Site after changes are posted constitutes your acknowledgment of the updated Privacy Policy, subject to applicable law.

For questions about this Privacy Policy or our data practices related to the Site:

Crescent Health Clinic LLC
Attn: Privacy / Site Administrator
11193 South Redwood Road, Suite #102N
South Jordan, UT 84095
Email: info@ch.clinic
Phone: (385) 438-3255