Privacy Policy

Last Updated: June 13, 2025
This Privacy Policy explains how DISC Spine Sport & Stem Cell ("we," "us," or "our") collects, uses, and protects your personal information on mydischealth.com (the “Website”) and any associated services. By using the Website, you agree to the terms outlined below.

Information We Collect

We may collect the following types of personal information:

• Contact details (e.g., name, email address, phone number)

• Health-related information you choose to submit (e.g., symptoms, medical history)

• Browser data such as IP address, device type, or usage behavior

• Any other personal details submitted through forms or communication tools

You may access most of the Website without sharing personal data, but certain features may require it (e.g., consultation requests, appointment forms).

How We Use Your Information

We may use the data we collect to:

• Respond to your inquiries or appointment requests

• Provide and maintain our services

• Communicate important updates

• Improve user experience on the Website

• Ensure security and legal compliance

HIPAA & Health Data Privacy

We are committed to protecting any Protected Health Information (PHI) submitted through the Website. All health-related submissions are handled through HIPAA-compliant tools, including:

• JotForm

• HIPAAtizer

• Google Workspace

• Wix

• Ambra

• HeyRosie

Sensitive information should only be submitted through our secure HIPAA-compliant JotForm page, not by email or unsecured forms.

Sharing of Information

We only share personal data with:

• Internal staff for communication or scheduling

• Authorized third-party vendors who operate under signed Business Associate Agreements (BAAs)

• Legal authorities if required by law (e.g., subpoenas, public health investigations)

We do not sell or trade your personal data with unaffiliated third parties.

Your Rights

You have the right to:

• Access and review your personal information

• Request correction or deletion of your data

• Withdraw consent for data use

• File a complaint if you believe your data is being mishandled

California residents have additional rights under the CCPA, including the right to request what personal data we collect and to opt out of any sale (which we do not perform).

To exercise any of these rights, please email us at ldouglas@mydischealth.com.

Cookies and Tracking

We use cookies and analytics tools (e.g., Google Analytics) to:

• Improve website performance

• Track basic visitor behavior

• Personalize user experience

You can manage or disable cookies via your browser settings.

Do Not Track Signals

Our Website currently does not respond to Do Not Track browser requests. However, we limit data use and never track users across other websites.

Security

We use administrative, physical, and technical safeguards to protect your information. While we work hard to protect data, no online system is 100% secure. We recommend using only our secure communication channels for sensitive information.

Third-Party Tools and Links

We may link to external sites or tools that have separate privacy practices. We are not responsible for their policies, so we recommend reviewing their terms before using them.

Data Retention

We retain personal data only as long as necessary to provide services or comply with legal obligations. Once no longer needed, data is securely deleted or anonymized.

Changes to This Policy

We may revise this policy at any time. The latest version will always be posted on this page, with the updated date clearly listed.

Contact Us

If you have questions about this Privacy Policy or your personal data, contact:

Email: ldouglas@mydischealth.com