Privacy Policy

BioSight Innovations (“BioSight,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, store, share, and protect information when you visit biosightinnovations.com (the “Site”), submit a form, request an appointment, subscribe to communications, or otherwise interact with us online.

This Privacy Policy applies to general website and visitor data. It does not apply to information collected within the context of an established patient relationship, which is governed by our separate HIPAA Notice of Privacy Practices, provided to you directly as a patient and available upon request.

By using the Site, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described here, please do not use the Site.

 

1. Important Distinction: Website Data vs. Protected Health Information (PHI)

HIPAA NOTICE

BioSight Innovations is a healthcare provider subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Information you submit through general website forms (such as a newsletter sign-up or a general “contact us” message) is treated as ordinary website data under this Privacy Policy. However, once you become a patient or submit information for the purpose of seeking clinical care, that information is treated as Protected Health Information (PHI) and is instead governed by HIPAA and our separate Notice of Privacy Practices, which provides greater protections and specific rights regarding your medical information. Please do not submit detailed medical history, diagnoses, or other sensitive health details through general, non-secure website forms.

 

2. What Information Do We Collect?

Information You Provide to Us

We collect personal information that you voluntarily provide when you:

• Submit a contact, appointment request, or referral form (such as your name, email address, phone number, and the general reason for your inquiry)

• Subscribe to our newsletter or request research/clinical trial updates

• Communicate with us by email, phone, or through the Site

• Apply for or inquire about employment opportunities

• Respond to a survey or provide feedback

Information Collected Automatically

When you visit the Site, certain information is automatically collected through cookies, web beacons, and similar tracking technologies, including:

• Your Internet Protocol (IP) address and approximate geographic location

• Browser type, device type, and operating system

• Pages viewed, time spent on pages, and navigation paths through the Site

• Referring website or search terms that led you to the Site

• Date and time of your visit

Information We Do Not Collect Through the Site

We do not knowingly collect detailed medical records, diagnostic information, treatment history, or other sensitive Protected Health Information through general website forms. Such information is collected only through secure, HIPAA-compliant channels designated for established patients, such as our electronic health record portal or secure intake documentation provided directly by our clinical team.

 

3. How Do We Collect Information?

We collect information directly from you when you voluntarily provide it through forms on the Site (such as the appointment request form, contact form, or newsletter sign-up). We also collect information automatically through cookies and similar tracking technologies as you navigate the Site, and through analytics tools described in Section 7 below.

 

4. Why Do We Collect This Information?

We collect and use the personal information described above for the following purposes:

• To respond to your inquiries and process appointment or referral requests

• To communicate with you about your inquiry, our services, or relevant research and clinical trial opportunities (where you have opted in)

• To improve the content, usability, and performance of the Site

• To understand how visitors use the Site through aggregated, de-identified analytics

• To detect, prevent, and address technical issues, fraud, or security concerns

• To comply with applicable laws, regulations, and legal process

 

5. How Do We Store, Use, Share & Disclose Your Information?

We retain personal information collected through the Site for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Website data is stored using reasonable administrative, technical, and physical safeguards designed to protect it from unauthorized access, disclosure, alteration, or destruction.

Third Parties We May Share Information With

Recipient

Purpose

Website hosting & platform providers

To operate, host, and maintain the Site and its underlying infrastructure

Email & communications platforms

To send newsletters, appointment confirmations, and requested communications

Analytics providers (e.g., Google Analytics)

To understand aggregated, de-identified Site usage and improve performance

Affiliated clinical institutions

Where relevant to coordinated care or research collaboration, and only with appropriate safeguards

Legal & regulatory authorities

Where required to comply with applicable law, subpoena, or legal process

Professional advisors

Such as legal, accounting, or compliance consultants, under confidentiality obligations

 

We do not sell your personal information to third parties. We do not share Protected Health Information with any third party except as permitted or required under HIPAA, as described in our separate Notice of Privacy Practices.

 

6. How Do We Communicate With You?

We may contact you using the information you provide in order to respond to your inquiry, confirm or follow up on an appointment request, provide requested information about our services or research programs, and — where you have separately opted in — send newsletters or promotional communications regarding BioSight Innovations and relevant TED research updates.

We may communicate with you via email, telephone, text message, or postal mail, depending on the contact information and preferences you provide. Communications relating to your active clinical care are sent through secure, HIPAA-compliant channels and are not considered promotional communications.

You may opt out of non-essential marketing communications at any time by following the unsubscribe instructions included in any email, or by contacting us directly using the information in Section 10 below. Opting out of marketing communications does not affect communications necessary for active patient care.

 

7. Cookies & Other Tracking Tools

The Site uses cookies and similar tracking technologies to enhance your browsing experience, understand Site usage, and support essential website functionality. Cookies are small text files stored on your device when you visit a website.

Types of Cookies We May Use

Cookie Type

Purpose

Essential / strictly necessary cookies

Required for core Site functionality, such as page navigation and form submission

Performance & analytics cookies

Help us understand how visitors interact with the Site (e.g., Google Analytics)

Functionality cookies

Remember your preferences to enhance your experience on return visits

Third-party / advertising cookies

May be used if the Site engages in marketing or remarketing campaigns

 

You can control or disable cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Site. Third-party services that may place cookies through the Site, such as analytics or social media plug-ins, operate under their own separate privacy policies, which we encourage you to review.

 

8. Children's Privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 through general website forms. If you believe a child has provided us with personal information without parental consent, please contact us using the information in Section 10 so that we may take appropriate action. This provision does not limit the ability of a parent or legal guardian to provide information on behalf of a minor patient in connection with clinical care, which is governed separately by our Notice of Privacy Practices.

 

9. Your Privacy Rights & Choices

Depending on your location, you may have certain rights regarding your personal information, which may include the right to access, correct, delete, or restrict our use of your information, and the right to opt out of certain data sharing or marketing communications.

California Residents (CCPA / CPRA)

If you are a California resident, you may have the right to know what personal information we have collected about you, request deletion of your personal information, and opt out of the sale or sharing of personal information (we do not sell personal information). To exercise these rights, contact us using the information in Section 10.

European / UK Visitors (GDPR)

If you are located in the European Economic Area or United Kingdom, you may have additional rights under the GDPR, including the right to access, rectify, erase, or port your personal data, and the right to object to or restrict certain processing. Our legal basis for processing your information is generally your consent, our legitimate interests in operating the Site, or as necessary to respond to your inquiry.

Withdrawing Consent

You may withdraw your consent to our collection and use of your personal information at any time by contacting us at the information provided in Section 13. Please note that withdrawing consent may limit our ability to respond to your inquiries or provide certain services through the Site.

 

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information collected through the Site from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are encouraged to avoid submitting highly sensitive information through general, non-secure website forms.

 

11. Third-Party Links

The Site may contain links to third-party websites, including research publications, clinical trial registries (such as ClinicalTrials.gov), or affiliated institutions. This Privacy Policy does not apply to those third-party websites, and we encourage you to review the privacy policies of any third-party site you visit.

 

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, provide additional notice on the Site. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after changes are posted constitutes acceptance of the revised Privacy Policy.

 

13. Questions & Contact Information

If you have questions about this Privacy Policy, wish to access, correct, or delete your personal information, or wish to withdraw your consent to our data practices, please contact us using the information below:

BioSight Innovations

Website:  biosightinnovations.com

Email:  info@biosightinnovations.com