Privacy Policy

Effective Date: February 12, 2025. Website cookie disclosures updated October 13, 2026.

At Southern California Brain & Spine Surgery, we are committed to protecting your privacy and ensuring the confidentiality of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and protect your information, including our compliance with the Health Insurance Portability and Accountability Act (HIPAA), which safeguards your medical records and other health-related information.

This Privacy Policy applies to information collected through our website, https://socalbrainspine.com/, as well as interactions with our healthcare providers, administrative personnel, and other service-related communications. Reading this policy or visiting our website does not by itself authorize optional tracking or disclosure of your medical information. Optional analytics requires a separate choice through the cookie banner.

Website cookies and analytics
Necessary cookies support website functions and remember your cookie choices. As of October 13, 2026, Google Analytics and Microsoft Clarity collection are disabled throughout this website. Choosing optional cookies does not re-enable those services. Any future analytics deployment requires a separate review of the pages, information collected, and applicable consent requirements. You can choose Necessary only and change your choice through Cookie preferences. Rejecting optional analytics does not prevent use of our contact, appointment-request, or payment forms.

When enabled, Google Analytics may receive page addresses and titles, browser and device information, interaction events, and a cookie identifier. Google processes this information under its own terms and privacy policy. Advertising personalization and Google signals are disabled in our website Analytics collection. We do not deploy Microsoft Clarity session recording through our current website tracking setup.

Google Analytics is excluded from the contact, booking, virtual second-opinion request, package/payment, and medical-record upload pages identified in our website configuration. Cookie choices are not an authorization to disclose protected health information. Please use the designated patient-intake or medical-record channels to send medical information, and avoid including it in general inquiry forms. Our consent preference is normally remembered for up to 180 days. Separate operational or security logs may still be maintained by the website and its necessary service providers.

For questions about website privacy, contact admin@socalbrainspine.com.

1. Information We Collect

We collect personal and health-related information from patients, visitors, and users of our website through various means, including online interactions, medical visits, and communications with our staff. The types of information we collect may include:

Personal Identifiers: Name, date of birth, address, phone number, and email address.
Medical Information: Health history, diagnoses, treatments, test results, physician notes, prescriptions, and other records related to your care.
Insurance Information: Health insurance provider, policy number, billing details, and claims information.
Financial Information: Payment details, credit or debit card information, billing addresses, and transaction history related to medical services.
Website Usage Information: IP address, browser type, operating system, and interaction data collected through cookies and analytics tools.

We collect this information to provide high-quality medical care, process insurance and billing, comply with legal requirements, and improve our services.

2. How We Use Your Information

Your personal and medical information is used for multiple purposes, including but not limited to:

Providing Medical Treatment: Healthcare professionals use your information to diagnose conditions, prescribe medications, perform medical procedures, and coordinate care with other medical providers.
Processing Payments and Insurance Claims: We use your financial and insurance details to submit claims, process payments, verify insurance eligibility, and coordinate benefits.
Communicating with You: We may contact you regarding appointment reminders, test results, treatment options, patient satisfaction surveys, and other administrative updates.
Enhancing Our Services: We use aggregated data to analyze trends, improve patient care, and enhance our website and practice operations.
Complying with Legal and Regulatory Requirements: We may use or disclose your information to comply with federal and state laws, respond to legal requests, and fulfill regulatory reporting obligations.

Under HIPAA regulations, we will not use or disclose your medical information for marketing, sales, or psychotherapy notes without your written authorization

3. How We Share Your Information

Your personal and health information may be shared in compliance with HIPAA guidelines under the following circumstances:

With Healthcare Providers: We may share your medical information with doctors, specialists, hospitals, pharmacies, and other professionals involved in your treatment.
With Health Insurance Companies: We may provide necessary details to your health insurance provider for billing, claims processing, pre-authorizations, and coverage verification.
For Legal and Regulatory Compliance: If required by law, we may disclose your information to government agencies, public health authorities, or law enforcement entities.
For Healthcare Operations: Your information may be used internally for quality assurance, risk management, staff training, and operational improvements.
With Authorized Family Members or Representatives: If you have designated a medical power of attorney or a legal guardian, we may share information with them after verification.
For Research and Public Health Purposes: In accordance with HIPAA, we may share de-identified health information for research, disease prevention, and healthcare studies.

Your information will only be shared as necessary for these purposes. In situations requiring additional disclosure, we will obtain your written consent before proceeding.

4. Your Rights Under HIPAA

HIPAA grants you specific rights regarding your health information, including:

Right to Access Your Medical Records: You may request a paper or electronic copy of your medical records. We will provide access within 30 days and may charge a reasonable, cost-based fee for copies.
Right to Request Corrections: If you believe your medical records contain incorrect or incomplete information, you may request a correction. If we deny your request, we will provide a written explanation. You may also submit a written statement (up to 250 words) explaining why you believe the record is incorrect.
Right to Request Confidential Communications: You may request that we contact you through a specific method, such as a designated phone number or mailing address. We will honor all reasonable requests.
Right to Restrict Information Sharing: You may request restrictions on how your information is shared for treatment, payment, or healthcare operations. While we are not required to agree to all requests, we will comply when feasible and legally permissible.
Right to Obtain a List of Disclosures: You may request a report of disclosures made in the past six years. Your first request per year is free; additional requests may incur a fee.
Right to a Paper Copy of This Privacy Policy: You may request a printed copy of this Privacy Policy at any time.
Right to Choose a Personal Representative: If you have appointed a medical power of attorney or a legal guardian, they may exercise your HIPAA rights on your behalf. We will verify their authority before sharing information.
Right to File a Complaint: If you believe we have violated your privacy rights under HIPAA, you may file a complaint with:
- Southern California Brain & Spine Surgery
- 101 E Beverly Blvd, Ste 404A, Montebello, CA 90640
- (213) 369-4583

We will not retaliate against you for filing a complaint.

5. Data Security and Protection

We implement stringent security measures to safeguard your personal and medical information from unauthorized access, disclosure, or misuse. These measures include:

Encryption: Secure data transmission to prevent unauthorized access.
Access Controls: Limiting staff access to sensitive information based on job roles.
Regular Security Audits: Periodic assessments to maintain compliance with HIPAA security standards.
Secure Storage: Physical and digital security measures to protect medical records.

Despite these safeguards, no system is completely secure. We encourage patients to take additional precautions, such as securing their online accounts and using strong passwords.

6. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. If significant updates are made, we will notify users via our website and update the Effective Date at the top of this page. A policy update does not override your cookie preferences or constitute authorization to disclose protected health information.