Privacy Policy

Riverside Primary Care ("we," "our," or "us") operates the website www.riversideprimarycare.org (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our Website or submit information through it.

1. Scope and Purpose

This Privacy Policy applies to information collected through the Website, including information submitted through secure forms. Certain information collected through secure forms may constitute Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA).

The use and disclosure of PHI is additionally governed by our separate HIPAA Notice of Privacy Practices and applicable federal and state law.

2. Information We Collect

a. Information You Voluntarily Provide

We may collect limited personal information when you choose to submit it through the Website, such as when contacting us or submitting an inquiry form. This may include your name, email address, phone number, and other information you voluntarily provide.

We do not request or intend to collect detailed clinical information, medical histories, diagnoses, or treatment information through public-facing Website forms unless explicitly indicated.

b. Secure Form Submissions and PHI

Certain secure forms may collect information necessary for administrative purposes, such as insurance eligibility verification. This information may include insurance identifiers and related data, which may constitute PHI.

Secure submissions are protected using end-to-end encryption (E2EE). Data is decrypted only within a restricted internal staff portal using ephemeral decryption mechanisms. Access is limited to authorized personnel and protected by administrative, technical, and physical safeguards, including role-based access controls, audit logging, and VPN-restricted access.

c. Automatically Collected Information (Analytics)

We collect limited non-identifying information through Google Analytics, including device type, browser information, pages visited, and interaction data. This data is used solely to analyze Website performance and improve functionality.

Google Analytics may use cookies or similar technologies. We do not use analytics data to identify individual users.

3. How We Use Information

• Respond to inquiries and requests
• Operate and improve the Website
• Maintain security and audit trails
• Detect and prevent misuse or fraud

We do not sell or rent personal information.

4. Data Security

We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. Despite these measures, no method of transmission or storage is completely secure.

5. Third-Party Services

We use trusted third-party services to support Website operations and analytics, including Google Analytics. These providers process information in accordance with their own privacy policies and applicable law.

6. Children’s Privacy

The Website is not directed to children under the age of 18, and we do not knowingly collect personal information from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

8. Contact Us

If you have questions about this Privacy Policy, please contact:

Riverside Primary Care
partners@riversideprimarycare.org