Privacy Notice

What we collect

Information you give us

If you request a consultation, use the booking widget, or send us a message through our contact page, we collect what you enter: your name, phone number, email address, the office you'd like to visit, any scheduling preference, and whatever you choose to tell us about your symptoms or reason for reaching out.

We also record which page you were on when you submitted the form, so the coordinator who calls you back knows what you were reading about.

Information collected automatically

Like most websites, ours records how visitors move through it. We use Google Analytics to see which pages are read, which links and phone numbers are tapped, how far people scroll, and where people stop partway through a form.

This is deliberately limited to behaviour. Our analytics setup is built so that names, email addresses, phone numbers, search terms and anything typed into a form cannot be sent to Google — the restriction is enforced in our code and covered by automated tests, not left to configuration.

Google Analytics sets cookies in your browser to tell repeat visits apart. Your IP address reaches Google as part of that request and is used to work out an approximate region; Google states that it does not log or store IP addresses in Google Analytics.

We also record IP addresses briefly, in memory only, to limit how often the same source can submit our forms. This is a spam and abuse control. It is not stored and not used to identify anyone.

The office finder and map

Our locations page can find your nearest office. If you use the "use my location" button, your browser asks your permission first, and your coordinates stay in your browser — the distance to each office is calculated on your own device. We never receive your location, and neither does anyone else.

The map images themselves are supplied by OpenStreetMap, which means your IP address reaches their servers in order to send the map tiles. We configure those requests so that the page you are viewing is not disclosed to them.

How we use it

• To respond to you — to call you back, book your appointment, or answer your question.
• To provide and coordinate your care.
• To understand which parts of this site are useful, so we can improve it.
• To keep the site secure and to prevent spam and abuse.
• To meet our legal, regulatory and recordkeeping obligations.

We keep information for as long as we need it for the purposes above and for as long as the law requires us to. Medical records are subject to their own retention rules, which are longer than those for website analytics.

Who we share it with

We do not sell your personal information, and we do not share it for targeted advertising or use it to build advertising profiles.

Three service providers receive limited technical information when you use this site:

Google (Google Analytics)

Receives which pages you view and which elements you interact with, plus your IP address and general device information. It does not receive your name, email address, phone number, or anything you typed into a form.

OpenStreetMap

Receives your IP address when map images load on our locations page.

Amazon Web Services

Hosts this website and stores its data on our behalf.

Beyond that, we share information only with people involved in your care, with service providers acting under our instructions, and where the law requires it.

Your privacy rights

If you live in Delaware, the Delaware Personal Data Privacy Act gives you the right to:

• Confirm whether we process your personal data, and get a copy of it.
• Correct it if it is inaccurate.
• Delete it.
• Obtain it in a portable format you can take elsewhere.
• Opt out of its sale, of targeted advertising, and of profiling used to make significant decisions about you. We do none of these, but the right exists regardless.

Residents of other states may have similar rights. Ask us and we will apply them where they exist.

These rights apply to the information covered by this notice. Requests about your medical records follow the HIPAA process described in our Notice of Privacy Practices instead — tell us what you need and we will route it correctly.

How to make a request

Email info@naspacmd.com or call (855) 862-7767. Tell us what you would like us to do. We may need to verify your identity before we act, so that we do not disclose your information to someone else.

We will respond within 45 days. If a request is complicated we may take one further 45 days, and we will tell you before we do.

If we say no

You may appeal, at no cost, using the same email address or phone number. We will respond to an appeal within 60 days and explain our reasoning in writing.

If we deny your appeal, you may submit a complaint to the Delaware Department of Justice, Consumer Protection Unit, at attorneygeneral.delaware.gov.

Global Privacy Control

Some browsers and browser extensions can send an automatic opt-out signal — a universal opt-out mechanism, most commonly Global Privacy Control — on every site you visit.

We honour it. If your browser sends that signal, this site does not load analytics for your visit at all. You do not need to tell us anything, click anything, or create an account. There is no cookie banner on this site because there is nothing for you to have to switch off.

Children

This website is intended for adults. We do not knowingly collect personal information from children through it. Where we treat a patient under 18, that care and its records are handled under HIPAA with the involvement of a parent or guardian.

How we protect information

Information submitted through this site is encrypted in transit and stored in access controlled systems. Staff access to patient information is granted individually rather than by job title, and every access is logged. Our internal review pages are excluded from search engines and from browser and network caches.

Changes to this notice

If we change how we handle personal information, we will update this page and change the date at the top. Material changes will be described here rather than made quietly.