Privacy Policy

We joke about a lot of things. Your privacy isn't one of them.

Effective Date: April 4, 2026  |  Last Updated: April 4, 2026

1. Who We Are

This website (thedoctor.me) is operated by The Doctor Health Center Inc. ("we," "us," or "our"), a management services organization that provides administrative, technology, and operational support to healthcare providers.

Medical care is provided by Flores & Flores, A Professional Corporation, doing business as The Doctor Medical Group, an independent California professional corporation. The doctors, nurse practitioners, and clinical staff who treat you are employed by or contracted with the professional corporation — not by The Doctor Health Center Inc..

2. Information We Collect

Information you give us directly

• Name, email address, phone number, date of birth
• Insurance information entered during booking
• Appointment preferences and scheduling data
• Messages you send through our contact forms or chat
• Feedback, reviews, or survey responses

Information collected automatically

• IP address and approximate location (city-level)
• Browser type, device type, and operating system
• Pages you visit and how long you spend on them
• How you found us (search engine, social media, referral)
• Cookies and similar tracking technologies (see Section 6)

Information from third parties

• Insurance eligibility verification results
• Analytics services (e.g., Google Analytics)

3. How We Use Your Information

• Provide services: Process your appointment bookings, send confirmations and reminders
• Communicate with you: Respond to questions, send health-related information you've requested
• Improve our services: Understand how people use our website so we can make it better
• Protect and secure: Detect fraud, enforce our terms, and keep our systems safe
• Comply with the law: Meet legal and regulatory obligations

We do NOT use your information for: Selling to third parties, targeted advertising based on health conditions, or any purpose unrelated to providing or improving our services.

4. How We Share Your Information

We share your information only in these limited circumstances:

• With The Doctor Medical Group — so your care team can deliver medical services
• With service providers — companies that help us operate (hosting, communications, payment processing, analytics). They're contractually bound to protect your data and have signed Business Associate Agreements where required.
• With insurance companies — for billing and coverage verification, at your direction
• When required by law — in response to valid legal process or to protect safety
• In a business transition — if we merge with or are acquired by another company, with advance notice to you

5. Your Rights (California Residents)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to:

• Know what personal information we collect, use, and share
• Delete your personal information (with some exceptions)
• Opt out of the sale or sharing of personal information (we don't sell, but you still have this right)
• Correct inaccurate personal information
• Non-discrimination — we won't treat you differently for exercising your rights

To exercise these rights: Email us at privacy@thedoctor.me or call (323) 988-5900. We'll respond within 45 days.

Note: Information protected under HIPAA (your medical records, health data) is exempt from CCPA. That information is governed by our Notice of Privacy Practices.

6. Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: Make the website work (login sessions, booking flow)
• Analytics cookies: Help us understand how people use our site
• Functional cookies: Remember your preferences

We do not use advertising or tracking cookies. We don't serve ads, and we don't track you across other websites.

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

7. Data Security

We protect your information using industry-standard security measures, including:

• Encryption in transit (TLS/SSL) and at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection
• Business Associate Agreements with all vendors handling protected data

No system is 100% secure, but we take reasonable and appropriate measures to protect your information from unauthorized access, alteration, or destruction.

8. Data Retention

We keep your information only as long as necessary to provide our services and comply with legal obligations. When your information is no longer needed, we securely delete or de-identify it. Medical records are retained according to California and federal requirements (typically a minimum of 7 years for adults, longer for minors).

9. Children's Privacy

Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this website. If we become aware that we've collected such information, we'll promptly delete it. Our clinical practice may treat minors with parental or guardian consent — that is governed by our Notice of Privacy Practices.

10. Third-Party Links

Our website may contain links to other websites (insurance portals, lab results, partner services). We're not responsible for their privacy practices. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this policy from time to time. When we make significant changes, we'll post a notice on our website and update the effective date above. Your continued use of our website after changes are posted means you accept the updated policy.