Privacy Notice

What we collect

Information you give us

If you request a consultation, use the booking widget, or send us a message through our contact page, we collect what you enter: your name, phone number, email address, the office you'd like to visit, any scheduling preference, and whatever you choose to tell us about your symptoms or reason for reaching out.

We also record which page you were on when you submitted the form, so the coordinator who calls you back knows what you were reading about.

Information collected automatically

We use Plausible Analytics to understand how the site is used. We run it ourselves, on our own servers at analytics.naspacmd.com, so this information is not sent to an analytics company. It records the pages you visit, the site that referred you, your browser, operating system and device type, and your country (worked out from your IP address, which is then discarded), and a few actions: how far you scroll, links and files you click, and whether a form on this site was started and successfully sent. It records which form — never what you typed into it.

Plausible sets no cookies and stores nothing on your device. To tell visits apart without identifying you, it uses a code that changes every day and cannot be traced back to you. We do not use Google Analytics, advertising pixels, or any other tracking service.

We also record IP addresses briefly, in memory only, to limit how often the same source can submit our forms. This is a spam and abuse control. It is not stored and not used to identify anyone.

The office finder and map

Our locations page can find your nearest office. If you use the "use my location" button, your browser asks your permission first, and your coordinates stay in your browser — the distance to each office is calculated on your own device. We never receive your location, and neither does anyone else.

The map images themselves are supplied by OpenStreetMap, which means your IP address reaches their servers in order to send the map tiles. We configure those requests so that the page you are viewing is not disclosed to them.

How we use it

• To respond to you — to call you back, book your appointment, or answer your question.
• To provide and coordinate your care.
• To keep the site secure and to prevent spam and abuse.
• To meet our legal, regulatory and recordkeeping obligations.

We keep information for as long as we need it for the purposes above and for as long as the law requires us to. Medical records are subject to their own retention rules, which are longer than those for general website information.

Who we share it with

We do not sell your personal information, and we do not share it for targeted advertising or use it to build advertising profiles.

Three service providers receive limited technical information when you use this site:

OpenStreetMap

Receives your IP address when map images load on our locations page.

Amazon Web Services

Hosts this website and stores its data on our behalf.

Microsoft

Delivers the submissions you send us into our own staff email system, where a coordinator reads them and calls you back.

Beyond that, we share information only with people involved in your care, with service providers acting under our instructions, and where the law requires it.

Your privacy rights

If you live in Delaware, the Delaware Personal Data Privacy Act gives you the right to:

• Confirm whether we process your personal data, and get a copy of it.
• Correct it if it is inaccurate.
• Delete it.
• Obtain it in a portable format you can take elsewhere.
• Opt out of its sale, of targeted advertising, and of profiling used to make significant decisions about you. We do none of these, but the right exists regardless.

Residents of other states may have similar rights. Ask us and we will apply them where they exist.

These rights apply to the information covered by this notice. Requests about your medical records follow the HIPAA process described in our Notice of Privacy Practices instead — tell us what you need and we will route it correctly.

How to make a request

Email info@naspacmd.com or call (855) 862-7767. Tell us what you would like us to do. We may need to verify your identity before we act, so that we do not disclose your information to someone else.

We will respond within 45 days. If a request is complicated we may take one further 45 days, and we will tell you before we do.

If we say no

You may appeal, at no cost, using the same email address or phone number. We will respond to an appeal within 60 days and explain our reasoning in writing.

If we deny your appeal, you may submit a complaint to the Delaware Department of Justice, Consumer Protection Unit, at attorneygeneral.delaware.gov.

Global Privacy Control

Some browsers and browser extensions can send an automatic opt-out signal — a universal opt-out mechanism, most commonly Global Privacy Control — on every site you visit.

We honour it. If your browser sends the signal, our analytics do not load and nothing about your visit is recorded. You do not need to tell us anything, click anything, or create an account. There is no cookie banner on this site because it sets no tracking cookies.

Children

This website is intended for adults. We do not knowingly collect personal information from children through it. Where we treat a patient under 18, that care and its records are handled under HIPAA with the involvement of a parent or guardian.

How we protect information

Information submitted through this site is encrypted in transit and stored in access controlled systems. Staff access to patient information is granted individually rather than by job title, and every access is logged. Our internal review pages are excluded from search engines and from browser and network caches.

Changes to this notice

If we change how we handle personal information, we will update this page and change the date at the top. Material changes will be described here rather than made quietly.