Website Privacy Policy
San Diego Family Dermatology — sdfamilyderm.com
Effective date: October 14,2026 · Last updated: October 14,2026
1. Who we are and what this policy covers
San Diego Family Dermatology (“we,” “us,” or “our”) operates the website sdfamilyderm.com and provides dermatology care at our offices in Clairemont, El Cajon, Poway, and National City, California.
This policy explains what information we collect through our website, how we use it, and the choices you have. It covers two different kinds of information, which are handled differently:
- Website usage information collected by Google Analytics, only if you consent.
- Patient information you submit through the secure forms on our website, which is protected health information (PHI) under HIPAA.
This policy does not replace our Notice of Privacy Practices, which describes how we use and disclose your health information as a patient. You can request a copy at any of our offices.
2. Website usage information (Google Analytics)
We use Google Analytics, a web analytics service provided by Google LLC, to understand how visitors use our website, such as which pages are viewed and how people find us, so we can improve it.
Consent. Google Analytics does not load on your device until you accept analytics cookies in our cookie banner. If you decline, or do not respond, Google Analytics will not run.
What it may collect once you accept:
- Pages you view and how long you spend on them
- Your approximate location (such as city), derived from your IP address
- Device, browser, and operating system type
- How you arrived at our site (for example, a search engine or link)
- Cookie identifiers used to recognize repeat visits
What we do not do with it. We do not use Google Analytics for advertising, remarketing, or building advertising profiles. We do not send information you enter into our patient forms to Google Analytics.
Your choices. You can withdraw or change your consent at any time using the “Manage Cookie Preferences” link in the footer of every page of our website. Withdrawing consent stops Google Analytics from running on pages you visit afterward, and the analytics cookies are removed from your browser the next time a page loads. You can also block or delete cookies in your browser settings, or install Google’s browser opt-out add-on at tools.google.com/dlpage/gaoptout. Google’s own handling of data is described in the Google Privacy Policy at policies.google.com/privacy.
Our website also uses essential cookies that are required for it to function (for example, to keep pages working properly). These do not track you across other sites.
Embedded Google tools. Our Drug Company Representatives page, which is intended for pharmaceutical and device company representatives and not for patients, displays Google Calendar appointment scheduling, which also uses Google reCAPTCHA. These Google tools load when that page opens, regardless of your cookie choices, so Google receives information such as your IP address and browser details and may use cookies or similar technologies, as described in the Google Privacy Policy at policies.google.com/privacy. Please do not enter patient information on that page.
3. Patient information submitted through our forms
Some pages of our website contain forms, such as new patient registration or appointment requests, that allow you to send us information. These forms are provided by Jotform and are configured to support HIPAA compliance.
What you may submit. Depending on the form, this can include your name, contact information, date of birth, insurance details, and information about your skin or health concerns.
How it is handled. Information you submit through these forms is treated as protected health information. We use it to schedule appointments, verify insurance, provide and manage your care, and communicate with you. It is protected by the safeguards required under HIPAA and is used and disclosed only as described in our Notice of Privacy Practices.
Important. Our forms are not monitored around the clock. Please do not use them for medical emergencies or urgent medical questions. If you have an emergency, call 911 or go to the nearest emergency room. For urgent care needs, please contact our office directly at 619-267-8303.
4. How we use information
We use the information described above to:
- Provide, schedule, and manage patient care and billing
- Respond to your questions and requests
- Understand how visitors use our website and improve it (analytics, only with your consent)
- Maintain the security of our website and systems
- Comply with legal obligations
5. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We may share information with service providers who help us run our practice and website, such as our secure form provider and website hosting provider, under agreements that limit their use of your information. Where those providers handle PHI on our behalf, we have business associate agreements in place as HIPAA requires. We may also disclose information when required by law or as permitted by HIPAA, for example for treatment, payment, and health care operations.
Website usage information collected by Google Analytics is shared with Google, as described in Section 2, only if you accept analytics cookies. Our Drug Company Representatives page also embeds Google Calendar scheduling, which sends visitor information to Google when that page opens, as described in Section 2.
6. Data security and retention
We use reasonable administrative, technical, and physical safeguards to protect information, including encryption of patient form submissions in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
We keep patient records for the periods required by California and federal law and our record-retention policies. We keep website analytics data for 2 months before it is deleted automatically.
7. Your privacy rights
Patients. Under HIPAA you have rights regarding your health information, including the right to access and obtain a copy of your records, request corrections, request restrictions, receive an accounting of certain disclosures, and request confidential communications. These are described in our Notice of Privacy Practices. To exercise them, contact our Privacy Officer using the details below.
California residents. California law, including the California Confidential Medical Information Act, gives you protections for your medical information. Depending on whether the California Consumer Privacy Act applies to us, you may also have rights to know what personal information we collect, request its deletion or correction, and opt out of its sale or sharing. We do not sell or share personal information as described in Section 5. Note that information governed by HIPAA is generally exempt from the CCPA and is handled under HIPAA instead. We will not discriminate against you for exercising your privacy rights.
8. Children
Our website is not directed to children under 13, and we do not knowingly collect information from them through website analytics. Parents and guardians may submit information on behalf of a minor patient through our forms.
9. Links to other sites
Our website may link to other websites. We are not responsible for their privacy practices, and we encourage you to read their policies.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows when it was most recently revised. Material changes will be posted on this page.
11. Contact us
If you have questions about this policy, want to exercise your privacy rights, or wish to report a privacy concern, contact our Privacy Officer:
San Diego Family Dermatology
Attn: Privacy Officer
655 Euclid Avenue, Suite 304, National City, CA 91950
Phone: 619.267.8303
Email:
If you believe your health privacy rights have been violated, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.