Privacy Policy

Effective Date: July 15, 2026 Last Updated: July 15, 2026

This Privacy Policy describes how Southern Vascular Access ("we," "us," or "our") collects, uses, and protects information collected through www.southernvascularaccess.com (the "Site"). By using the Site, you agree to the terms of this Privacy Policy.

1. A Note About Health Information

This Privacy Policy governs information collected through our website — it is not our HIPAA Notice of Privacy Practices. If you become a patient, your protected health information ("PHI") is separately governed by the Health Insurance Portability and Accountability Act (HIPAA) and our Notice of Privacy Practices, which is provided to patients directly and is available at our office. Where this policy and our Notice of Privacy Practices overlap regarding PHI, the Notice of Privacy Practices controls.

2. Information We Collect

We may collect the following categories of information:

• Contact/Appointment Request Information: name, phone number, email address, and any message details you submit through our contact or appointment request forms.
• Patient Intake/Portal Information: if you use an online patient portal or intake form, we (or our secure third-party portal provider) may collect health history, insurance information, demographic details, and other information relevant to your care. This information is treated as PHI and safeguarded consistent with HIPAA.
• Automatically Collected Information: when you visit the Site, certain information may be collected automatically, such as your IP address, browser type, device information, pages visited, and referring URLs. This may occur through cookies, web beacons, or similar tracking technologies, including tools such as Google Analytics, if used on the Site.
• Information You Voluntarily Provide: any additional information you choose to submit, such as through email correspondence or forms.

3. How We Use Information

We use the information we collect to:

• Respond to inquiries and vascular access services requests
• Facilitate scheduling and communication with our practice
• Operate, maintain, and improve the Site
• Understand how visitors use the Site (via analytics, if enabled)
• Comply with legal and regulatory obligations
• Protect against fraud, unauthorized access, or misuse of the Site

We do not sell your personal information.

4. Cookies and Tracking Technologies

The Site may use cookies and similar technologies to enhance your browsing experience, remember preferences, and analyze site traffic. These may include analytics tools (such as Google Analytics) or advertising pixels. You can control cookies through your browser settings, including blocking or deleting them; doing so may affect certain Site functionality. We do not currently respond to "Do Not Track" browser signals.

5. How We Share Information

We may share information with:

• Service providers who help us operate the Site, host our patient portal, process forms, or provide analytics, under confidentiality obligations
• Legal authorities when required by law, subpoena, or court order, or to protect the rights, safety, or property of our practice, patients, or others
• Business transfers, in the event of a merger, acquisition, or sale of practice assets, subject to applicable confidentiality requirements for health information

We do not share PHI except as permitted or required by HIPAA.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information submitted through the Site, including PHI submitted through a patient portal. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain information for as long as necessary to fulfill the purposes described in this policy, respond to inquiries, and comply with legal, regulatory, and recordkeeping obligations (including medical record retention requirements under Alabama law, for patient records).

8. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through general website forms. Information about minor patients may be collected as part of care provided to them, consistent with our Notice of Privacy Practices and applicable law.

9. Your Choices and Rights

You may:

• Decline to submit information through website forms (though this may limit our ability to respond to your request)
• Contact us to ask what information we hold about you submitted through the Site
• Opt out of non-essential cookies through your browser settings

Patients have additional rights regarding PHI as described in our Notice of Privacy Practices, including rights to access, amend, and request restrictions on their health records.

10. Third-Party Links

The Site may contain links to third-party websites (such as insurance providers or a patient portal hosted by a third party). We are not responsible for the privacy practices of those third-party sites. We encourage you to review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us at:

Southern Vascular Access 1 Perimeter Park South, Suite 100N Birmingham, AL 35243 (800) 553-8458