PRIVACY POLICY

Last updated May 27, 2025

INTRODUCTION

This Privacy Notice for Advanced Wound Care of Arizona, PLLC (“we,” “us,” or “our”) explains how and why we access, collect, store, use and/or share (“process”) your personal information when you engage with our services (“Services”), including when you visit our website at https://advancedwoundcareaz.mdwoundclinic.com/wound-care-treatment or any site that links to this Privacy Notice; receive medical services from Dr. Ron Olsen (e.g., chronic-wound treatment, diabetic-ulcer care, hyperbaric therapy); orinteract with us in other ways—such as telephone, SMS, e-mail, marketing campaigns, social media, events or surveys.

If you have questions after reading this Notice, e-mail us at [email protected] or write to us at 3667 Reflection Dr, Prescott, AZ 86305, USA.If you disagree with any part of this Notice, please discontinue use of our Services.

SUMMARY OF KEY POINTS

Data we process —contact data (name, e-mail, phone), medical-appointment details, communication preferences, device/usage data and cookies.**Sensitive data —we do not process “special” categories (e.g., racial origin, religion) via the public site or SMS program.Sources —information is provided directly by you; we do not buy data from third parties.Why —to deliver care, send appointment reminders, answer inquiries, run our practice, protect security and comply with law.Sharing —limited to service providers (EHR platform, SMS gateway, IT/security vendors) and legal disclosures. We never sell or lease your mobile numbers for marketing.Security —industry-standard safeguards (encryption in transit, role-based access, MFA).Rights —depending on where you live, you may access, correct, delete or restrict your data and opt out of marketing at any time.SMS Program —prior express written consent required; Msg & Data rates may apply; text HELP for help, STOP to cancel; carriers not liable for delays.Retention **—kept only as long as necessary for medical, legal or accounting purposes, then securely destroyed or anonymized.

TABLE OF CONTENTS

What information do we collect?How do we process your information?When and with whom do we share personal information?Do we use cookies and other tracking technologies?How long do we keep your information?How do we keep your information safe?Do we collect information from minors?What are your privacy rights?Controls for Do-Not-Track featuresDo United States residents have specific privacy rights?Do we make updates to this Notice?How can you contact us about this Notice?How can you review, update or delete the data we collect from you?

1 WHAT INFORMATION DO WE COLLECT?

1.1 Personal information you provide

CategoryExamplesIdentifiersName, postal address, mobile/landline number, e-mail, signature, consent time-stampMedical appointment dataPreferred provider, appointment date/time, treatment notes (stored in HIPAA-compliant EHR—never sent via marketing SMS)Marketing preferencesOpt-in status, communication channels, SMS keyword responses (HELP/STOP)All information must be accurate and kept current; please notify us of changes.

1.2 Information collected automatically

When you browse our site we collect:

Device/Usage Data – IP address, browser type, OS, referring URL, pages viewed, time spent.Location Data – coarse geolocation inferred from IP (disabled if your browser blocks it).Cookies/Web Beacons – see Section 4.

2 HOW DO WE PROCESS YOUR INFORMATION?

PurposeLegal basis*Provide healthcare, schedule appointments, deliver treatment plansPerformance of a contract with youSend transactional & marketing SMS/e-mails (with consent)Consent (TCPA)Respond to inquiries & support requestsLegitimate interestProtect against fraud/security threatsLegitimate interestMaintain regulatory compliance (HIPAA, state medical boards)Legal obligationAnalytics to improve site & servicesLegitimate interest / consent via cookie banner*Additional state-specific bases appear in Section 10.

3 WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?

We share only as necessary:

Service providers – HIPAA-compliant EHR vendor, HIPAA-compliant SMS platform, web-hosting & IT-security firms, payment processors.Business transfers – in a merger or acquisition, data may transfer subject to the same protections.Legal – government requests, subpoenas, or to enforce our Terms.

All vendors are bound by contracts prohibiting sale or secondary marketing use of your data.

4 DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes. We use:

Strictly necessary cookies – site security, form submission.Analytics cookies – Google Analytics to measure traffic. You can opt out via https://tools.google.com/dlpage/gaoptout.Marketing cookies – none at this time.

Your browser settings allow you to block cookies, but some features may break.

5 HOW LONG DO WE KEEP YOUR INFORMATION?

Medical records – minimum 7 years (AZ Administrative Code) or longer if law requires.Marketing SMS consent logs – 4 years (TCPA safe-harbor).Website analytics – 26 months (Google Analytics default) then aggregated/anonymized.

When data is no longer needed we securely delete or anonymize it.

6 HOW DO WE KEEP YOUR INFORMATION SAFE?

HTTPS encryption, TLS 1.2+.HIPAA-compliant cloud hosting.Role-based access; MFA for staff.Annual penetration testing and vendor audits.Incident-response plan; breach notifications per HIPAA and state law.

7 DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect or market to children under 18. Parents/guardians may contact us to delete a minor’s data.

8 WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your state (see Section 10) you may:

Access a copy of personal data we hold.Correct inaccuracies.Delete data (subject to medical-record retention laws).Withdraw consent to marketing at any time.Opt out of “sale”/“sharing” or profiling (we do not sell or profile).

Exercising rights

E-mail [email protected] or call (928) [clinic number]. We will verify your identity and respond within the time required by law.

Marketing opt-outs

SMS – reply STOP to any message; you will receive a confirmation.E-mail – click the unsubscribe link.No third-party sharing – we do not share SMS originator opt-in data with third parties for their marketing.

9 CONTROLS FOR DO-NOT-TRACK (DNT) FEATURES

There is no uniform standard; therefore we do not respond to DNT browser signals. If standards emerge, we will update this Notice.

10 DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Residents of CA, CO, CT, FL, IN, IA, KY, MD, MN, MT, NE, NH, NJ, OR, RI, TN, TX, UT and VA have additional rights:RightDescriptionKnow / ConfirmRequest the categories & specific pieces of personal data we hold.DeleteRequest deletion of personal data (subject to HIPAA retention).CorrectRequest correction of inaccuracies.Opt-outObject to targeted advertising or sale (we do not sell).AppealIf we deny your request, you may appeal via the contact methods above.California residents may also request, once per year, a list of third parties to which we disclosed personal info for direct-marketing purposes (we disclose none).We recognize and honor the Global Privacy Control (GPC) signal for applicable data.

11 DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We will post the revised date at the top. Material changes may also be communicated via e-mail or SMS (where permitted).

12 HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Advanced Wound Care of Arizona, PLLC

3667 Reflection Dr

Prescott, AZ 86305 USA

E-mail: [email protected]

Phone: (888) 344-8709

13 HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU?

Submit a request via e-mail or postal mail (see above). After verification we will comply as required by applicable law.

SMS PROGRAM DISCLOSURE (CTIA/TCPA COMPLIANT)

By providing your mobile number and checking the consent box or texting a keyword to our shortcode / 10DLC number, you consent to receive recurring automated text messages from Advanced Wound Care of Arizona, PLLC for appointment reminders, treatment updates and promotional offers. Message frequency varies. Msg & Data rates may apply. Reply HELP for help, STOP to cancel. Consent is not a condition of receiving medical treatment. Carriers are not liable for delayed or undelivered messages. View this Privacy Policy at https://advancedwoundcareaz.mdwoundclinic.com/privacy-policy.