Privacy

What the forms on this site collect

Three forms submit information, and they ask for different things.

The appointment request asks for your name, date of birth, a phone number, an email address if you give one, which office suits you, the general reason for your visit, a preferred time to call, and how the visit will be paid for. If you tell it the visit is covered by no-fault or workers’ compensation, it then asks for the details the office needs to open the file: your insurance carrier, your employer, who referred you, the claim or case number, the date of injury, the body part named on the claim, and contact details for your adjuster and your attorney. Every one of those is optional except your name, phone number, date of birth and how the visit is being paid for — the office telephones you, and will ask for anything missing then.

The message form on the contact page sends your name, a phone number, an email address if you give one, which of four topics you picked, and the message you type. It is there for billing, records and existing appointments.

The referral form on the referring-physicians page is filled in by a clinician rather than by you. If your doctor refers you this way, it sends your name, a phone number, an email address if they give one, and how the visit will be paid for, together with the referring clinician’s own name and contact details. You may not have been present when it was submitted; the office will telephone you to arrange the appointment, and you can ask them to delete the request.

What any of these send is passed to the practice’s office so they can reply. It travels through the practice’s own Google Workspace, which becomes an email to the office, and it is handled from that point under the practice’s own privacy policy and under HIPAA.

None of the forms asks you to describe your symptoms, and none has a box for it. The reason for your visit is chosen from a few fixed options rather than typed. Where the appointment request asks for a date of injury and a body part, it is asking for what is already written on your insurance claim — not for an account of how you feel — and it says so beneath the question. The one free-text box on this site is the message form, which is for billing and records questions and tells you not to put medical details in it.

What this site does not collect

• No patient portal, no accounts and no logins.
• No advertising trackers, and no advertising profile built from your visit.
• No medical records, no imaging, and no account of your symptoms or clinical history. Bring those to the appointment rather than sending them here. The claim details the appointment request asks for — a date of injury, a body part — are what your insurer already holds, and are asked for so the office can open the file before you arrive.

Measuring how this site is used

This site uses Google Analytics to count visits and see which pages people find useful. It records the page address, roughly where in the world the request came from, and what kind of device and browser you are using. It sets a cookie so that two visits from the same browser are counted as one person returning rather than as two strangers. It is how the practice knows whether anyone is finding the site at all.

It is set up more narrowly than the default, because the address of a page here can say something about your health. Your visit is not linked to a Google account, is not used to build an advertising profile, and is not used to show you adverts anywhere — advertising features and personalisation are switched off rather than left on. Your IP address is shortened before it is stored, and nothing you enter into any of the three forms — not your name, your date of birth, your claim details, nor anything you type — is ever sent to Google. The web address is sent without anything after the “?”, so a page you reached from a link carrying your chosen office or reason is counted as the plain page.

You are asked once, and you can change the answer here at any time. Until you answer, no cookie is set — but the page you are on and your shortened IP address are still counted, without anything stored in your browser and without the visit being tied to a returning person. If you would rather that did not happen either, decline below and nothing further is sent, or use the Global Privacy Control setting described underneath, which stops it before it starts.

If your browser sends a Global Privacy Control signal, analytics does not load at all and nothing about your visit is measured — you will not see the question, because it has already been answered. Most browsers offer this in their privacy settings, and some privacy extensions set it for you.

If you telephone instead

Nothing you say on the telephone passes through this website. The information you give the office is handled under the practice’s own privacy policy and under HIPAA.

Content embedded from other companies

Two pages show material served by someone else, and in both cases that company can see that your browser requested it — your IP address, the page you were on, and any cookies it has already set. Neither is under this practice’s control.

• Instagram posts. The case breakdowns on /instagram, and the three at the foot of /blog, are served by Meta rather than by this site, so opening either page lets Meta see that you did. Those are the only two pages that load anything from Meta, and each embed loads only once you scroll down to it — so no other page here involves Meta at all.
• Maps on the location pages. The map on each office page is served by Google. Every address is printed beside its map as text, so you never have to load the map to find an office.

Links to other sites

Links to New York Brain, Spine & Joint and to other organizations lead to sites this practice does not control, each with its own privacy policy.

Questions

Call the office on (631) 600-9400 with any question about how your information is handled, or to ask that a request you submitted be deleted.