This Policy explains what we collect through this website and how we handle it. Your medical record is governed separately, and more strictly.

1. Scope of This Policy

This Privacy Policy describes how [Legal entity name], doing business as Bloom Medical (“Bloom Medical,” “the Practice,” “we,” “us”), collects, uses, and discloses information gathered through this website (the “Site”) — including inquiry and contact forms, newsletter sign-up, and ordinary web traffic.

2. Health Information Is Handled Separately

This Policy covers the information you give us before and outside of the clinical relationship — the contents of a website inquiry, your contact details, your newsletter subscription, and technical data about your visit.

3. Information You Give Us

You may choose to provide:

• Identifiers — name, email address, mailing address, telephone number.
• Inquiry content — the tier you are interested in, how you heard about us, preferred contact method and timing, and anything you write in a free-text message field.
• Health-related detail you volunteer — if you describe a health concern in a message field, we treat that content as confidential and route it into our clinical systems. We ask that you keep website messages general and share clinical detail through the secure channels we designate.
• Payment information — processed by our payment processor. We do not store full card numbers on the Site.

4. Information Collected Automatically

When you visit the Site we may automatically collect IP address, browser type and version, device type, operating system, referring page, pages viewed, time spent, and general geographic location inferred from IP address. This is standard server and analytics data used to keep the Site secure and to understand how it is used.

Analytics on this Site are provided by [Analytics provider — confirm, e.g., Google Analytics 4].

5. Cookies and Similar Technologies

We use cookies and similar technologies for three purposes:

• Strictly necessary — session management, security, and load balancing. The Site does not function properly without these.
• Preference — remembering settings such as form state.
• Analytics — aggregate measurement of Site usage.

Most browsers let you refuse or delete cookies through their settings. Blocking strictly necessary cookies may prevent parts of the Site from working. We honor Global Privacy Control (GPC) signals where required by California law.

6. How We Use Information

• To respond to your inquiry and evaluate fit and panel availability;
• To schedule and conduct membership consultations;
• To administer membership, billing, and account communications;
• To send educational content and practice updates where you have opted in;
• To operate, secure, maintain, and improve the Site;
• To comply with legal, regulatory, and professional obligations;
• To establish, exercise, or defend legal claims.

7. How We Share Information

We share personal information only as follows:

• Service providers. Vendors that host the Site, deliver email and text messages, manage our customer relationship system, process payments, and provide analytics. They are contractually limited to using the information solely to perform services for us.
• Clinical affiliation. Where you request a referral or coordinated care, relevant information may be shared with Apex Multi-Specialty Medical Group or other treating providers under HIPAA-permitted treatment, payment, and health care operations purposes, and consistent with CMIA.
• Professional advisors. Attorneys, accountants, and auditors under duties of confidentiality.
• Legal requirement. Where required by law, subpoena, court order, or to protect the rights, safety, or property of any person.
• Business transfer. In connection with a merger, reorganization, or sale of the Practice, subject to applicable law and continued protection of health information.

8. We Do Not Sell Your Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We do not permit third parties to collect personal information through the Site for their own advertising purposes.

9. The Bloom Reserve Inquiry Path

Bloom Reserve inquiries are handled on a restricted basis. Reserve inquiry records are accessible only to the individuals directly responsible for evaluating and responding to them. Where a prospective member requires additional discretion, we can accommodate a private intake outside of the standard website path — ask us and we will arrange it.

10. Text Messaging (SMS)

If you provide a mobile number and opt in, you consent to receive text messages from Bloom Medical relating to your inquiry, appointments, and membership, and — where separately elected — practice updates.

• Message frequency varies.
• Message and data rates may apply.
• Reply STOP to unsubscribe. Reply HELP for help.
• Carriers are not liable for delayed or undelivered messages.
• Consent to receive text messages is not a condition of membership or of any purchase.

11. Email and Marketing Choices

You can unsubscribe from marketing email at any time using the link in any message, or by contacting us. Transactional and clinical messages related to your care, appointments, or membership are not marketing and will continue.

12. Your California Privacy Rights

If you are a California resident, you have the right to know what personal information we collect and how we use it; to request a copy of it; to request correction of inaccurate information; to request deletion; to limit the use of sensitive personal information; and to be free from retaliation for exercising these rights.

Medical information governed by HIPAA and CMIA is exempt from the California Consumer Privacy Act, so requests to delete will not extend to your medical record, which is retained as required by law and professional standards.

Categories collected in the past twelve months

We use sensitive personal information only for the purposes permitted without a right to limit — performing the services you requested and other uses allowed by law. We do not use it to infer characteristics about you.

How to submit a request

Submit a request using the contact details in Section 18. We will verify your identity before acting, typically by confirming information already in our records. You may use an authorized agent with written permission. We respond within the timeframes required by law and will not discriminate against you for exercising your rights.

13. Data Security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including encryption in transit, access controls, and vendor diligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Do not transmit sensitive health information through unencrypted email or general web forms.

14. Data Retention

We keep website inquiry information only as long as needed for the purpose it was collected, to meet legal and regulatory obligations, and to resolve disputes. Inquiries that do not result in membership are retained for a limited period and then deleted or de-identified. Medical records are retained under the separate schedules required by California law and professional standards.

15. Children’s Privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 13 through the Site. If you believe a child has provided information, contact us and we will delete it.

16. Third-Party Sites and Services

The Site may link to or embed third-party services, including mapping, scheduling, and payment tools. Their privacy practices are their own, this Policy does not apply to them, and we encourage you to review their policies before providing information.

17. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised date, and material changes may be highlighted on the Site or communicated to you directly where required by law.

18. How to Contact Us

For privacy questions, requests, or to obtain a copy of our Notice of Privacy Practices: