COMBINED WEBSITE PRIVACY POLICY & NOTICE OF PRIVACY PRACTICES

Effective Date: March 1, 2026
Last Updated: March 1, 2026

Innovative Medical Group (“Innovative Medical Group,” “we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your medical information.

This document explains:

  1. How we collect and use personal information through our website

  2. Your rights under California privacy law

  3. How we use and disclose Protected Health Information (PHI) under HIPAA

  4. Your rights regarding your medical records

PART I — WEBSITE PRIVACY POLICY (CCPA/CPRA COMPLIANT)

1. Information We Collect

We may collect the following categories of personal information:

Identifiers

  • Name

  • Address

  • Email

  • Phone number

  • IP address

Internet / Network Activity

  • Browser type

  • Device information

  • Pages visited

  • Referring URLs

  • Date and time of access

Communications

  • Contact form submissions

  • Appointment requests

  • SMS opt-in information

Sensitive Personal Information

  • Account login credentials (if applicable)

  • Health-related information submitted via forms

2. How We Use Personal Information

We use information to:

  • Schedule appointments

  • Respond to inquiries

  • Provide healthcare services

  • Send appointment reminders (including SMS if consented)

  • Improve website performance

  • Maintain security and prevent fraud

  • Comply with legal obligations

We do not sell personal information.

3. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect

  • Request deletion (subject to legal exceptions)

  • Request correction of inaccurate information

  • Limit use of sensitive personal information

  • Not be discriminated against for exercising your rights

To submit a request:

Phone: 951-880-0701
Email: [Insert Privacy Email Address]

We will verify your identity before processing requests.

Certain medical information governed by HIPAA is exempt from CCPA/CPRA and is addressed below in our Notice of Privacy Practices.

4. Cookies & Tracking Technologies

We may use cookies or analytics tools to:

  • Improve website functionality

  • Understand website traffic

  • Enhance user experience

You may disable cookies in your browser settings.

If analytics tools are used (e.g., Google Analytics), they are configured in accordance with applicable healthcare privacy guidance.

5. SMS Communications

If you opt in to receive SMS communications:

  • Message frequency may vary

  • Message and data rates may apply

  • Reply STOP to opt out

  • Reply HELP for assistance

We do not sell or share mobile information for marketing purposes.

6. Data Security

We maintain reasonable administrative, technical, and physical safeguards to protect personal information and medical data.

However, no internet transmission is completely secure.

PART II — HIPAA NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

Please review it carefully.

1. Our Legal Duty

Innovative Medical Group is required by the Health Insurance Portability and Accountability Act (HIPAA) to:

  • Maintain the privacy of Protected Health Information (PHI)

  • Provide you with this Notice

  • Abide by the terms of this Notice

  • Notify you following a breach of unsecured PHI

Protected Health Information (PHI) includes individually identifiable health information relating to your condition, treatment, or payment for healthcare services.

2. How We May Use and Disclose PHI

We may use and disclose your PHI without written authorization for:

Treatment

To provide, coordinate, or manage your healthcare.

Payment

To obtain reimbursement for services provided.

Healthcare Operations

For quality improvement, training, auditing, and administrative activities.

Appointment Reminders

To contact you regarding upcoming appointments.

Public Health & Legal Requirements

As required by law, public health authorities, or court orders.

Business Associates

We may share PHI with vendors who perform services on our behalf under written agreements requiring them to safeguard your information.

3. Uses Requiring Authorization

We will obtain your written authorization for:

  • Marketing communications (where required by HIPAA)

  • Sale of PHI

  • Most disclosures of psychotherapy notes

You may revoke authorization in writing at any time.

4. Your Rights Under HIPAA

You have the right to:

Access

Request a copy of your medical records.

Amend

Request corrections to your medical record.

Accounting of Disclosures

Receive a list of certain disclosures of your PHI.

Restrict

Request restrictions on certain uses or disclosures.

Confidential Communications

Request communication through alternative means (e.g., different address).

Receive a Paper Copy

Request a paper copy of this Notice at any time.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

Innovative Medical Group
44045 Margarita Rd., Suite 103
Temecula, CA 92592
Phone: 951-880-0701
Email: [Insert Privacy Email Address]

You may also file a complaint with the U.S. Department of Health & Human Services. We will not retaliate against you for filing a complaint.

6. Changes to This Notice

We reserve the right to change this Notice at any time. Updated versions will be posted on our website with a revised effective date.

IMPORTANT WEBSITE DISCLAIMER

Information submitted through website contact forms may not be transmitted through a secure messaging system unless specifically indicated. Patients should avoid submitting highly sensitive medical information through general website forms.