Privacy Policy
Last Updated: January 1, 2026
BritePath Medical (“BritePath Medical,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information and health information.
This Privacy Policy explains how we collect, use, disclose, store, and protect information when you:
- Visit our website
- Schedule appointments
- Complete forms
- Communicate with us
- Receive SMS or email communications
- Utilize our healthcare services
This Privacy Policy supplements, but does not replace, our HIPAA Notice of Privacy Practices.
Protected health information is governed by our HIPAA Notice of Privacy Practices and applicable federal and state healthcare privacy laws.
This Privacy Policy applies to information collected through our website, online forms, patient communications, SMS messaging services, email communications, and healthcare services provided by BritePath Medical.
1.0 Information We Collect
1.1 Personal Information
We may collect:
- Name
- Address
- Email address
- Phone number
- Date of birth
- Insurance information
- Emergency contact information
1.2 Protected Health Information (PHI)
We may collect health-related information necessary to provide healthcare services.
1.3 Communication Information
We may collect:
- SMS consent records
- Email consent records
- Communication preferences
- Message history
- Appointment communications
1.4. Technical Information
We may automatically collect:
- IP address
- Browser type
- Device information
- Operating system
- Referral sources
- Website activity
- We may use analytics tools, including Google Analytics and similar technologies, to understand website usage and improve website performance.
1.5. Cookies
Our website uses cookies, pixels, tags, and similar technologies to improve website functionality, analyze website usage, remember user preferences, and support marketing and advertising activities where consent has been provided.
We use cookies and related technologies to:
- Operate the website
- Analyze performance
- Improve user experience
- Measure advertising effectiveness
Some cookies are necessary for website operation, while others are optional and may be enabled or disabled through our Cookiebot consent management platform.
We use Cookiebot by Usercentrics as our Consent Management Platform (CMP) to help manage cookie consent preferences and comply with applicable privacy regulations. Cookiebot supports Google Consent Mode and industry-standard consent management frameworks. You may modify your cookie preferences at any time through the Cookie Preferences link available on our website.
You may also configure your browser settings to refuse certain cookies; however, doing so may affect website functionality.
2.0 How We Use Information
We may use information to:
Provide Healthcare Services
- Treatment
- Care coordination
- Scheduling
- Billing
- Insurance processing
Communicate With You
- Appointment reminders
- Care updates
- Follow-up instructions
- Telehealth notifications
- Patient service communications
Improve Operations
- Website analytics
- Security monitoring
- Quality improvement
- Training
Legal Compliance
- HIPAA compliance
- Regulatory requirements
- Legal obligations
3.0 Sale of Personal Information
BritePath Medical does not sell, rent, lease, trade, or otherwise monetize personal information, protected health information, or mobile phone information.
We maintain a strict prohibition on transferring consumer personal data to external organizations.
Your data will not be transferred to external organizations.
Consumer personal data is shared only when strictly necessary to provide the service you requested, and never for the recipient’s own use.
We do not permit broad sharing for general treatment, payment, operations, or other external purposes that would weaken this restriction.
Any limited sharing must be strictly necessary to deliver the requested service.
Recipients are not permitted to use consumer personal data for their own purposes.We apply contractual, technical, and administrative safeguards to prevent unauthorized sharing, use, or disclosure.
4.0 SMS/Email Communications
If you provide your mobile phone number, you may receive SMS messages from BritePath Medical.
Your SMS registration data, mobile number, and messaging consent will not be transferred to external organizations under any circumstances.
BritePath Medical uses SMS for conversational messages between patients and staff about individual questions, responses, care, or scheduling.
Message frequency varies based on your interaction with BritePath Medical and the services you receive.
Message and data rates may apply.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All text messaging originator opt-in data and consent information will not be shared with any third parties.
You may opt out at any time by replying:
- STOP – unsubscribe
- HELP – assistance
- You may also contact our office to update your communication preferences.
Consent to receive SMS messages is not a condition of receiving medical treatment. SMS consent records may be maintained for compliance purposes.
4.1 Website Forms and Consent
When you submit a form on our website and voluntarily provide your telephone number, email address, or other contact information, you consent to be contacted by BritePath Medical regarding your inquiry, follow-up communications, and other administrative matters. Submission of a website form does not establish a provider-patient relationship.
4.2 Marketing Communications
BritePath Medical may occasionally provide information regarding new services and promotions. Marketing communications will only be sent where permitted by applicable law and, where required, with your consent. You may opt out of marketing communications at any time.
4.3 Email Communications
BritePath Medical may also communicate with patients through email regarding appointments, treatment coordination, billing matters, patient education, and clinic updates.
5.0 Data Sharing Statement
We do not sell personal information. We may share information only as necessary to provide healthcare services, operate our business, comply with legal obligations, or as otherwise permitted by law.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.Text messaging originator opt-in data and consent will not be shared with any third parties.
Access to SMS registration data, mobile numbers, and messaging consent is restricted to authorized personnel only.
Internal policies prohibit unauthorized sharing of this information.
Contractual limitations are in place to prevent unauthorized disclosure.Security measures are maintained to protect this information from unauthorized access or sharing.
We may share information:
For Treatment
With healthcare providers involved in your care.
For Payment
With insurers and payment processors.
For Operations
With vendors supporting:
- EMR systems
- Scheduling systems
- SMS providers
- Email providers
- Hosting providers
- Security providers
- Business associates and service providers acting on our behalf pursuant to written agreements requiring appropriate privacy and security safeguards.
Legal Requirements
When required by:
- Law
- Court order
- Subpoena
- Government agencies
6.0 Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information and protected health information from unauthorized access, disclosure, alteration, or destruction.
While we employ reasonable safeguards, no method of electronic transmission or storage can be guaranteed to be completely secure.
6.1 Data Retention
We retain information as required by:
- HIPAA
- Arizona law
- Medical record retention requirements
- Business and legal obligations
- Medical records may be retained for the period required by applicable federal and Arizona state law, even if a patient is no longer actively receiving services.
6.2 Your Rights
Subject to applicable law, you may:
- Access records
- Request corrections
- Request restrictions
- Request confidential communications
- Request copies of information
- Withdraw communication consent
Additional rights relating to protected health information are described in our HIPAA Notice of Privacy Practices.
6.3 Security Incidents
In the event we become aware of a security incident affecting personal information or protected health information, we will investigate and provide notifications as required by applicable federal and state laws.
7.0 Children's Privacy
We do not knowingly collect information from children except as necessary to provide healthcare services with appropriate parental or legal guardian authorization.
8.0 Changes
We may update this Privacy Policy from time to time. Any updates will be posted on this page and reflected by an updated “Last Updated” date.
9.0 Third-Party Websites
Our website may contain links to third-party websites, applications, or services. BritePath Medical is not responsible for the privacy practices, content, or security of third-party websites. Users should review the privacy policies of those third parties before providing personal information.
10.0 Contact
BritePath Medical
Surprise: 14827 W Bell Road, Unit 103, Surprise, AZ 85374
Anthem: 3624 W Anthem Way, C114, Anthem, AZ 85086
Phoenix: 8618 N 35th Ave, Ste 3, Phoenix, AZ 85051
Contact Email: info@britepathmedical.com
Privacy Questions: privacy@britepathmedical.com