Website privacy policy

What this document is

This is not the HIPAA notice, and it does not cover your medical records

Two documents are easy to confuse, and confusing them is the most common mistake on a medical website. Health information that a clinician creates or receives about a patient is covered by the HIPAA Notice of Privacy Practices, which the practice gives to patients directly. This policy is not that notice, and it is not a substitute for it.

This one has a narrower job: what happens on this website. What the pages load, what the contact form does, and what the practice would have to ask you before measuring anything. Nothing here describes how your medical record is handled. If the HIPAA notice is what you are looking for, ask the office and it will be given to you.

What the site does today

What this website collects

This site is a set of ordinary pages. There is no patient login, no account, no cart and no database of visitors.

When you submit the contact form, this website sends the name, phone number, email address, administrative topic and optional message you provide to the office through a server-side email delivery service. The office receives the request, and the site sends an automatic receipt to the email address you entered. The website does not add the submission to its own visitor database.

Use the form only for scheduling or administrative details. Do not include symptoms, diagnoses, medications, medical records or other sensitive clinical information. The form and email are not monitored for emergencies.

• Two measurement tools can run here, Google Analytics 4 and Microsoft Clarity. Neither loads until you accept, and the next section describes both.
• There are no advertising pixels, and nothing on this site is used to advertise to you elsewhere.
• The office map is a Google Maps embed that stays switched off until you click it. Until you do, Google receives nothing about your visit.
• Ordinary web server logs kept by the hosting provider may record technical details such as an IP address, a browser type and the page requested.

Analytics

The two measurement tools, and the consent you are asked for first

Neither tool loads until you accept. A banner asks first, nothing is measured while the question is still open, and declining takes exactly as few clicks as accepting. You can change your answer afterwards from a link in the site footer, and if your browser sends a Global Privacy Control signal the site treats that as a refusal and never asks.

Google Analytics 4 counts visits and reports which pages are used. Pages that name a condition are reported to Google under a neutral stand-in label, so the diagnosis you were reading is not sent.

Microsoft Clarity is a session-recording tool. If you accept analytics, it records how you move, scroll and click through a page and may capture the public text and images needed to reconstruct that page for the practice. Clarity masks input boxes and dropdowns in every mode, so what you enter is not available in the replay. Clarity is not started at all on a page whose address names a condition.

Two limits are worth stating rather than glossing over. Clarity provides no way to hide or disguise the address of the page you are on, so if you reach a condition page by clicking through from another page during a recorded visit, that address is recorded. And Microsoft acts as an independent controller of the data Clarity collects, not as an agent of the practice, which means Microsoft handles that data under its own privacy statement and not under this policy.

Who information is shared with

Nothing you do on this site is sold, and nothing is shared so that somebody else can advertise to you.

• The hosting provider that serves these pages, which necessarily handles the requests your browser makes.
• Resend, the transactional email delivery provider, which processes the contact details and optional message needed to deliver the request to the office and the automatic receipt to the address entered in the form.
• Google, if you accept analytics, and separately if you click to load the office map.
• Microsoft, if you accept analytics, for the session recording described above.
• Anyone the practice is legally required to give information to.

Reviewing or changing your information

Because the site keeps no visitor accounts and builds no profiles, there is usually nothing on file to review. If you have written to the office and want to know what it holds, or want it corrected or deleted, ask and the office will tell you.

Write to info@bedashealth.com, or by post to Palmetto Medical Plaza, 7100 W 20th Ave, Suite 214, Hialeah, FL 33016.

Do Not Track and cross-site tracking

This site does not currently respond to Do Not Track signals sent by a browser. No agreed standard for honouring them ever emerged, and saying otherwise would promise something the site does not do.

It does respond to Global Privacy Control. If your browser sends that signal, the site treats it as a decision to decline analytics and will not ask you again.

No third party is permitted to follow you from this site across other websites.

Changes to this policy

When this policy changes, the effective date on this page is updated. That date is how you can tell whether you are reading the current version, and it is the only announcement of a change that this page makes.

This policy is effective August 29, 2026.