Privacy Policy

Introduction and scope

The Institute For Spine Surgery operates this website to share information about our team, our services, and how to request care. This policy describes how we handle information collected through the website, such as a consultation request or general site usage data. It is separate from our Notice of Privacy Practices, which governs protected health information in the context of treatment. See the section on health information below.

Please do not send sensitive health details online

The forms and email on this website are convenient ways to reach us, but they are not secure channels for sensitive health information. Please do not include detailed medical history, test results, or other private health details in a form or email. If you have a medical emergency, call 911. To discuss your health, call our office at (914) 948 3008.

Information we collect

Information you provide

When you submit a consultation request, we collect your name, email address, and phone number, along with any details you choose to share, such as a diagnosis, a brief description of your concern, and how you heard about us. You decide how much to share.

Information collected automatically

Like most websites, we collect limited technical information automatically, such as your device type, browser, approximate location based on your network, the pages you view, and how you arrived at the site. This information is collected through cookies and similar technologies described below.

Cookies and analytics

We use cookies and similar technologies to keep the site working and to understand how visitors use our pages. You can control cookies through your browser and the choices described in the section on your rights.

• Google Analytics, which helps us understand site usage. Learn more in the Google Privacy Policy.
• Google reCAPTCHA, which helps protect our forms from spam and abuse. Its use is governed by the Google Privacy Policy and Terms of Service.

Advertising

We may use advertising and measurement technologies, such as Google Ads conversion tracking, to understand whether a visit followed one of our ads. We do not send your name, contact details, or any health or condition information to advertising or analytics platforms. You can manage ad personalization in your Google Ad Settings.

How we use information

• To respond to your request and schedule a consultation.
• To operate, maintain, and improve the website and its content.
• To measure the performance of our pages and advertising.
• To protect the website and our forms from spam, fraud, and abuse.
• To meet legal, regulatory, and recordkeeping obligations.

How we share information

We do not sell your personal information. We share information only as needed with service providers that help us run the website and respond to you, and when required by law.

• Our HIPAA compliant email delivery provider, which transmits your consultation request securely to our care team. See the Paubox Privacy Policy.
• Our website hosting and infrastructure providers.
• The analytics and advertising services described above.
• Legal, regulatory, or law enforcement authorities when required, or to protect rights and safety.

Third party links

Our website may link to other sites that we do not operate, such as professional societies or hospital partners. We are not responsible for the privacy practices of those sites. Please review their policies before sharing information with them.

Data retention

We keep consultation requests for as long as needed to respond to you and to meet our recordkeeping obligations, then dispose of them securely. Analytics and advertising data are kept according to the settings of those services. [CONFIRM: retention period for website inquiries].

Data security

We use reasonable administrative, technical, and physical safeguards to protect the information we collect, including encryption in transit. These measures are intended to align with applicable data security requirements, including the New York SHIELD Act. No website or method of transmission over the internet is completely secure, so we cannot guarantee absolute security.