Privacy Policy

1. About This Policy

This Privacy Policy describes how California Institute of Cosmetic and Reconstructive Surgery, Inc. (“CICRS,” “we,” “us,” or “our”) collects, uses, and discloses information about visitors to cicrsmed.com (the “Site”). This Policy applies only to information collected by the Site itself and does not govern protected health information — see Section 2 below.

2. Protected Health Information & HIPAA

The Site does not itself collect, store, or transmit protected health information (“PHI”). When you submit a consultation request, insurance information, or other health-related information, you do so through forms hosted by Tebra, Inc., our practice management and patient portal partner. Any PHI submitted through Tebra is governed by our Notice of Privacy Practices, which describes how we use and disclose PHI in compliance with the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”).

The Notice of Privacy Practices is available online or by request at our office. This Privacy Policy does not modify or replace the Notice of Privacy Practices.

3. Information We Collect

The Site is informational and does not require you to provide any personal information to use it. We collect the following limited information automatically when you visit:

• Server log information — IP address, browser type, operating system, referring URL, pages viewed, and timestamps. This information is collected by our hosting and content-delivery provider, Cloudflare, in the ordinary course of operating a website and is used for security, performance, and troubleshooting.
• Font delivery requests — the Site loads typography from Google Fonts. Your browser may make a request to fonts.gstatic.com, which is governed by Google’s privacy practices.
• Aggregate page-view measurement — the Site uses Cloudflare Web Analytics to count page views and see which pages visitors reach. It is cookieless: it stores nothing on your device, does not use a fingerprint or any other persistent identifier, does not follow you across other websites, and is not used for advertising. It reports only aggregate, non-identifying measurements such as page URL, referring site, country, and browser type.

The Site itself does not set cookies, web beacons, advertising pixels, session-replay tools, or behavioral analytics tools. The only measurement in use is the cookieless, aggregate page-view counting described above.

4. How We Use Information

We use the limited information described above only to operate, maintain, and improve the Site; to detect, prevent, and respond to security threats, fraud, or technical issues; and to comply with legal obligations. We do not sell, rent, or share visitor information for marketing or advertising purposes.

5. How We Share Information

We share information only with service providers who host the Site or provide infrastructure (currently Cloudflare, for hosting, content delivery, security, and cookieless page-view measurement; and Google Fonts, for typography), and with authorities when required by valid legal process. We do not sell or share visitor information for cross-context behavioral advertising as defined under California law.

6. Third-Party Services

The Site uses or links to the following third-party services. Each is governed by its own privacy policy:

• Cloudflare (hosting, content delivery, security, and Cloudflare Web Analytics) — cloudflare.com/privacypolicy
• Google Fonts (typography CDN) — policies.google.com/privacy
• Tebra (patient forms and portal — accessed via outbound links from this Site) — tebra.com/privacy-notice

7. Cookies and Tracking

The Site itself sets no cookies.

The Site uses Cloudflare Web Analytics to measure how many people visit and which pages they reach. We use it because we cannot maintain the Site sensibly without knowing what is being read. It was chosen specifically because it is the least intrusive option available to us:

• It sets no cookies and stores nothing on your device.
• It does not use device fingerprinting or any persistent identifier, and cannot recognize you on a return visit or on any other website.
• It collects no personal information and builds no profile of you.
• It is not an advertising product. No data is shared with, or used by, any advertising network, and none of it is sold or shared for cross-context behavioral advertising.

We do not use Google Analytics, the Meta Pixel, advertising trackers, session-replay tools, or any other behavioral analytics on this Site. If we add such tools in the future, this Policy will be updated and the change will be reflected in the “Last updated” date above.

8. California Residents’ Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”), including the right to know what personal information we have collected about you, the right to delete that information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. As described above, we do not sell or share personal information for cross-context behavioral advertising. To exercise any rights, please contact us using the information in Section 12.

9. Children’s Privacy

The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

We use commercially reasonable measures to protect information collected through the Site. No method of transmission over the internet or electronic storage is fully secure, however, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be noted prominently. Your continued use of the Site after a change becomes effective indicates your acceptance of the updated Policy.

12. Contact Us

Questions about this Policy may be directed to: