Privacy Policy & Notice of Privacy Policies (NPP)

Privacy Policy

Effective Date: September 1, 2024
Bright Eyes MD under Garbutt Medical Corp (“we,” “us,” or “our”) is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information in compliance with the Health Insurance Portability and Accountability Act (HIPAA), the California Confidentiality of Medical Information Act (CMIA), and the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA).

By using this website, you agree to the practices described below.

1. Information We Collect
When you use our website, request consultations, or communicate with us, we may collect:

  • Personal identifiers (such as name, email address, phone number, mailing address)

  • Health and treatment information you voluntarily submit (such as medical history, conditions, photographs for consultation)

  • Online identifiers (such as IP address, device ID, cookies, browsing data)

  • Payment or billing information when applicable

2. How We Use Your Information
We use your information to:

  • Schedule appointments and deliver care

  • Provide treatment recommendations and coordinate care

  • Communicate with you about services, procedures, or follow-up care

  • Improve our website, services, and marketing with your consent

  • Comply with legal and regulatory obligations

3. How We Share Your Information
We may share your information as permitted by law:

  • With your treating providers or referring physicians

  • With business associates who help us operate this website or provide services (under a HIPAA-compliant agreement)

  • With health plans, insurance companies, or payment processors for billing purposes

  • As required by federal, state, or local law (such as for public health reporting or law enforcement)

  • With your written authorization for any uses not listed here (for example, testimonials or marketing beyond basic communications)

We do not sell your personal data. If we ever share personal information for cross-context behavioral advertising, we will provide an explicit opt-out option as required by CCPA/CPRA.

4. Before & After Photos / Testimonials
Before-and-after photos shown on this website feature actual patients who have signed a valid HIPAA authorization. Results are not guaranteed, and individual results vary. Photographs and testimonials are published only with written consent, in compliance with California Business & Professions Code §651 and HIPAA.

5. Cookies & Website Analytics
We use cookies and similar tracking technologies to analyze website usage and improve user experience. You can adjust your browser settings to refuse cookies, but parts of the site may not function properly.

6. Your Privacy Rights
If you are a California resident, you have these rights under the California Consumer Privacy Act/Privacy Rights Act (CCPA/CPRA):

  • Right to Know: You may request details about the personal information we collect and share.

  • Right to Delete: You may request deletion of your personal data, subject to legal retention needs.

  • Right to Correct: You may request that we correct inaccurate personal data.

  • Right to Opt-Out: You may opt out of having your personal information shared for certain purposes.

  • Right to Non-Discrimination: We will not deny you services or charge different prices if you exercise your privacy rights.

    To exercise these rights, please contact us at dr@brighteyesmd.com or call 858-215-2159.

7. Safeguards & Security
We use administrative, technical, and physical safeguards to protect your personal and health information in accordance with HIPAA and CMIA. However, please note that email or general website forms are not encrypted by default. Do not submit sensitive or urgent medical information through unencrypted email. For secure communication, please use our patient portal or call our office.

8. Telehealth & Online Consults
If you use telehealth or online consultations, you will be required to sign an informed consent acknowledging:

  • You have the right to an in-person consultation

  • Telehealth is voluntary and may be withdrawn at any time

  • Telehealth carries some limitations and risks compared to in-person care

  • Telehealth should not be used for medical emergencies

By using our telehealth services, you agree to these terms and acknowledge you are in California or other approved states where our physician is licensed.

9. No Medical Advice
Content on this website is for informational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. Always consult with a qualified healthcare provider regarding any questions about your health.

10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or new technology. The effective date will be updated above. Please review this page periodically for updates.

11. Contact Us
If you have questions about this policy or believe your privacy rights have been violated, you may contact:

Privacy Officer
 Bright Eyes MD under Garbutt Medical Corp
Email: dr@brighteyesmd.com
Phone: 858-215-2159
Website: www.brighteyesmd.com

You also have the right to file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights.

Notice of Privacy Practices

Effective Date: September 1, 2024
This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Bright Eyes MD under Garbutt Medical Corp (“we,” “us,” “our”) is committed to protecting your health information and your privacy. This Notice of Privacy Practices explains how we may use and disclose your Protected Health Information (PHI) and your rights regarding your PHI.

Uses and Disclosures of Health Information
We may use and disclose your health information for the following purposes:

Treatment — We use your PHI to provide, coordinate, and manage your medical and surgical care.

Payment — We may use and disclose your PHI to bill and collect payment for our services.

Health Care Operations — We may use PHI to run our practice, including quality assessment, staff training, compliance, licensing, and business management.

Required by Law — We may share your PHI if required by federal, state, or local law.

Public Health & Safety — We may share PHI for public health activities, to report abuse or neglect, or to reduce serious threats to health or safety.

Business Associates — We may share PHI with vendors who help us provide services, provided they agree to safeguard it appropriately.

With Your Authorization — Uses or disclosures not described here (for example, marketing, use of photographs, testimonials) will only happen with your written authorization, which you may revoke at any time.

Your Rights
You have the right to:

  • Inspect and obtain a copy of your medical record

  • Request corrections to your PHI

  • Request restrictions on certain uses or disclosures

  • Request confidential communications (for example, to a different address)

  • Receive an accounting of certain disclosures we have made

  • Receive a paper copy of this Notice

  • File a complaint if you believe your rights have been violated

To exercise any of these rights, please contact us using the information below.

Our Duties

  • We are required by law to maintain the privacy of your protected health information.

  • We will provide you with this Notice explaining our privacy practices.

  • We must follow the terms of this Notice currently in effect.

  • We reserve the right to change the terms of this Notice, and make those changes effective for all PHI we maintain. We will post an updated Notice on our website and provide it on request.

Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Contact Information:

Privacy Officer
Bright Eyes MD under Garbutt Medical Corp
Email: dr@brighteyesmd.com
Phone: 858-215-2159
Website: www.brighteyesmd.com

Questions
If you have any questions about this Notice, please contact us at the information above.

Garbutt Medical Corp. © 2025 All rights reserved.