Concept website privacy

Website privacyand analytics.

This prelaunch notice covers the current public concept website. It does not replace the practice’s HIPAA Notice of Privacy Practices.

Effective September 5, 2026

At a glance

A public information site, not a patient system.

The site is intentionally separated from appointment, billing, referral, and medical-record workflows.

No patient submissions

This site has no forms, accounts, scheduling, payments, messages, or document uploads.

Analytics by choice

Full self-hosted Umami analytics loads only after a visitor chooses to allow it.

No advertising profiles

This site does not use advertising pixels, retargeting, or cross-site behavioral profiles.

No tracking cookies

Umami sets no cookies. Browser storage remembers whether you allowed or declined analytics.

Information processed

Only what is needed to deliver and understand the site.

Cookieless does not mean that no technical information is processed. The categories are listed here plainly.

Hosting and security: Vercel hosts the public site. Vercel and its network providers receive routine request information, such as IP address, user agent, requested page, and time, to deliver and protect the service.
Umami analytics: On pages where analytics is active, Umami processes the page path and title, referring page or site, browser, operating system, device type, screen size, and language. It may derive approximate country, region, or city and a rotating session identifier from the request IP address and user agent. Full analytics may also measure clicks, navigation journeys, visit duration, performance metrics, heatmaps, and session replay. Umami states that it does not store the source IP address in its analytics data.
Privacy controls: Analytics does not load until a visitor allows it. If allowed, it honors the browser’s Do Not Track setting and excludes URL search parameters and fragments. It may operate across all public pages, including exam-specific service pages. Analytics is not used for advertising, retargeting, selling, or sharing visitor information for cross-context behavioral advertising.
Cookies and browser storage: The current website does not set cookies or advertising identifiers. It stores the analytics choice in a local value named privacy.analytics-consent.v1 and, when analytics is declined, also sets umami.disabled.

Cookie and analytics choices

Your analytics preferences.

Umami does not use cookies, but its full analytics features can record detailed interaction data. The site asks once before loading it and keeps the controls available here.

Analytics are off until you choose

Your choice applies only to this browser. The site stores the choice locally so it can decide whether to load Umami. Clearing browser storage may reset it.

A browser Do Not Track signal also prevents Umami analytics. Navigation on exam-specific pages may reveal an interest in a health service and is treated as sensitive. Analytics is used only to understand and improve this website, not to identify a patient or advertise across unrelated sites. If other tracking or embedded services are added, the practice must review consent requirements and update this notice before enabling them.

Service providers and links

Separate systems stay separate.

Website analytics is operated for this site by its technical administrator through Umami at umami.arianizadi.com. Cloudflare helps deliver and protect that analytics service and receives routine network and request information for that purpose.

When allowed, Umami may use its full pageview, click, journey, performance, heatmap, and session-replay features. This public site has no form fields, accounts, uploads, or patient-system inputs for those features to capture. The site does not configure Vercel, Umami, or Cloudflare for advertising or cross-site advertising profiles.

Future scheduling, patient, billing, or provider services will be separate third-party websites. Their privacy notices and terms will apply after a visitor chooses to leave this site. No such service is active here today.

Retention, choices, and children

Keep it limited and accountable.

We retain website analytics, including heatmaps and session replays, for as long as reasonably necessary to understand website use and improve the site. Security records are retained for as long as reasonably necessary to protect the site and meet applicable legal obligations. There is currently no fixed automatic deletion schedule.

This general-audience site is not directed to children under 13. It does not ask for a visitor’s age and provides no way for a child to submit information. Pediatric or child-directed features would require a new privacy review before launch.

For website privacy questions, use the practice details on the Contact page once published. Do not send medical, appointment, insurance, or identifying information through ordinary email or a website URL.

This site does not create a named visitor account or profile that can be reviewed or corrected. Material changes to this notice will be posted on this page with a revised effective date.

The site does not sell visitor information or share it for cross-context behavioral advertising. It therefore has no sale or advertising-share opt-out transaction to process under the current configuration.

View contact details

HIPAA notice status

This is not the practice’s Notice of Privacy Practices.

If the practice is a HIPAA covered entity, it must provide its approved Notice of Privacy Practices and designated privacy contact person or office for prominent publication on this website before official launch.

That practice-specific notice explains how protected health information may be used and disclosed, patient rights, complaint options, and whom to contact. This website privacy notice cannot substitute for it.

View current HIPAA model notices at HHS