Legal & Privacy

Privacy Policy

This page explains what website information we collect, how we use it, how we protect it, and how website privacy differs from the HIPAA protections that apply when you become a patient.

Last Updated: April 2, 2026

1. Who This Policy Applies To

This Privacy Policy applies to visitors to the Sunflower Family Medicine website located at sunflowerfamilymedicine.com. It explains how we collect, use, share, and protect personal information submitted through the website.

For patients, this policy is supplemented by our HIPAA Notice of Privacy Practices, which covers how we use and disclose protected health information in the course of providing care.

2. Information We Collect

Information you provide directly

  • Contact form submissions, including your name, email address, phone number, and message.
  • New patient form submissions, including identifying, contact, insurance, and health-related information provided to begin the intake process.
  • Other information you choose to provide when communicating with our office through website forms.

Information collected automatically

  • IP address, browser type, browser version, referring pages, device information, visit timing, and page interaction data.
  • Cookie and usage data used to help the website function, measure performance, and understand how visitors use the site.

3. How We Use Information

  • To respond to general inquiries and support requests.
  • To review new patient submissions and prepare for intake or scheduling.
  • To communicate by email, phone, or other appropriate methods regarding your inquiry, appointment-related matters, or administrative follow-up.
  • To operate, maintain, secure, and improve the website.
  • To comply with legal, regulatory, safety, and recordkeeping obligations.
Please do not use the general contact form for emergencies, urgent medical issues, or time-sensitive clinical concerns. Call 911 for emergencies or contact the office directly during business hours for urgent administrative questions.

4. How We Share Information

We do not sell or rent personal information for marketing or solicitation purposes. We may share information only in limited situations such as:

  • With staff who need the information to respond, schedule, verify, or support operations.
  • With trusted service providers such as website hosting, form handling, analytics, technology, or electronic records vendors that support our operations.
  • When required by law, subpoena, court order, or valid governmental request.
  • As part of a business transaction such as a merger, sale, or transfer of assets, if ever applicable.
  • With your direction or consent.

5. HIPAA and Protected Health Information

As a healthcare provider, Sunflower Family Medicine is a covered entity under HIPAA. Information collected in connection with patient care, including information submitted through the new patient workflow, may be considered protected health information.

Our HIPAA Notice of Privacy Practices explains patient rights and our legal duties regarding protected health information in more detail. If you need a copy of our Notice of Privacy Practices, please contact the office directly at (305) 217-1736 or [email protected].

6. Cookies, Analytics, and Third-Party Tools

We may use cookies, embedded content, analytics tools, and similar technologies to understand traffic, maintain functionality, and improve the website experience. You can often adjust your browser settings to refuse cookies, though doing so may affect website functionality.

When the website links to or embeds third-party services such as maps, social media platforms, scheduling tools, or other external websites, those providers may collect information under their own privacy policies.

7. Data Security, Retention, and Transfers

We use reasonable administrative, technical, and physical safeguards designed to protect information collected through the website. No website or internet transmission can be guaranteed to be completely secure, so we cannot promise absolute security.

  • Contact form information is retained as long as reasonably necessary to address the inquiry and support our operations.
  • Patient-related information is retained according to applicable healthcare and record-retention requirements.
  • Usage and analytics data may be retained for shorter or operationally limited periods.

Our website and service providers may process information in the United States. By using the site, you understand that your information may be processed and stored in the United States.

8. Your Privacy Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or restriction of certain personal information, subject to legal exceptions and recordkeeping obligations.

California residents may have rights under the CCPA/CPRA. Residents of the EEA or UK may have rights under GDPR or similar laws. We do not sell or share personal information for cross-context behavioral advertising as those laws define those terms.

To make a request, contact us using the information at the bottom of this page.

9. Children’s Privacy

This website is not directed to children under 13. Although our practice provides care to minors, information about a minor should be provided through a parent or legal guardian in the context of patient care and intake, not through general unsupervised use of the website.

10. Policy Updates and Contact Information

We may update this Privacy Policy from time to time. When we do, we will revise the last updated date on this page.

If you have questions about this Privacy Policy, contact us at: