Privacy Policy
This policy covers the information you send through this website, and what this website records when you send it. It does not cover the medical records the practice holds about its patients. Those are protected health information, and they are covered by the practice's Notice of Privacy Practices. The office will also give you a paper copy on request.
Effective date
This policy takes effect on September 7, 2026. Each time the policy is revised, that date is replaced with the date of the new version.
What this site collects
This site collects the personally identifiable information you type into the appointment request form. That is:
- your name
- your phone number
- your email address
- the kind of inquiry you chose, so the office knows who should handle it
- the procedure you are asking about
- your preferred timing
- anything you write in the message field
Attorneys and claims examiners fill in a different set of questions instead, and give a name, a firm, contact details and the type of matter.
The server also records a little about the request itself, whichever form you used: the date and time your request arrived, the website address it was sent to, whether it came from the main site's request form or from one of the advertising pages and which one, and the network address your browser sent it from.
The advertising pages under /lp/ collect one thing more. If you reached the page from a Google ad, the form carries the Google click identifier that Google added to the link. It identifies the ad click that brought you here. It is stored with the request and it is never put in the email to the office.
The server also leaves a marker in its temporary storage, named after a scrambled form of your network address, so that a second request sent within twenty seconds is ignored and a script cannot hammer the form. It records nothing you typed. That is all. This site has no accounts, no logins and no saved profiles, so there is nothing else for it to hold.
Who receives it
Your request reaches these three, and no one else:
- The practice. Your request is emailed to the practice's own office inbox, read by the staff who book appointments, and answered from there. That mailbox is hosted by Microsoft, so the message travels through and is stored on Microsoft's servers, the way any office email is.
- Community1 Marketing. Community1 hosts and maintains this website for the practice, and the log of submissions sits on the server it runs, which its staff can reach. It is also sent a short receipt each time a request arrives, so that a failure of the practice's email is noticed. That receipt records only the time and which form was used. It carries nothing you typed: no name, no telephone number, no email address, no message.
- Cloudflare. Cloudflare carries this site's traffic, so your request passes through its network on the way to the server.
Nothing collected here is sold. What you type into the form is not passed to anyone beyond the three above. Other companies do receive information about your visit itself, as described under Analytics and advertising and Other services on these pages below.
Analytics and advertising
The main site loads no analytics tag and no advertising tag at all. Nothing on it counts your visit or reports it to an advertiser. Two Google services are still fetched on it, and both are described under Other services on these pages: the typefaces every page uses, and the map at the foot of the page.
The advertising pages under /lp/ are different. They are where the practice's Google Ads campaigns send people, and when advertising is running they load Google Tag Manager and Google Ads conversion measurement. Those record that a page was opened, that a phone link was used, that the online booking link was clicked, that the form was used, and that a request was submitted.
Google does not receive what you typed into the form: not your name, not your phone number, not your email address, and not your message. When you submit, Google is told which advertising page you submitted from, which is the address it already has. What Google is told at the confirmation page names no procedure and no page. Each advertising page is about a single procedure, so the page address itself shows the subject you were reading about. Personalized advertising and enhanced conversions are both switched off.
Cookies
This site sets no cookies of its own outside /lp/. The Google map at the foot of the page is Google's own frame, and Google may set its cookies there once the map loads, which happens only if you scroll down to it.
The advertising pages under /lp/ set Google's advertising cookies when the tag loads. Your browser settings control whether those are accepted, and refusing them does not stop the form from working.
Those pages also set one cookie of the site's own. It lasts five minutes, and it carries only which advertising page your request came from through to the confirmation page, so that page's address is the same for every request and names no procedure. The confirmation page erases the cookie as soon as it has read it.
The accessibility panel is not a cookie. Your display choices, such as larger text or a motion pause, are stored by your own browser on your own device. They never leave it, and they are never sent to the practice or to anyone else.
Other services on these pages
- Google Fonts. The typefaces used on this site are fetched from Google's servers when a page loads, so opening a page tells Google that a browser at your network address asked for those font files.
- The map in the footer. The map is a Google embed. Nothing is requested from Google's map service until you scroll down to it.
- MyPatientVisit. Online scheduling is run by a separate company on its own domain. Once you follow a booking link you have left this site, and what you enter there is covered by that company's privacy policy, not by this one. On the advertising pages under /lp/, the tag records that you clicked that link before you go.
Google may combine what its services observe anywhere on this site with information it already holds about you from other websites you visit. That covers the typefaces on every page, the map in the footer, and the advertising tag on the /lp/ pages. That is information about what you do online, collected over time and across different websites. It is Google's practice across the sites that use its services. The practice does not control it and does not receive it.
Do Not Track and Global Privacy Control
Some browsers can send a Do Not Track signal. There is no agreed standard for what a website should do when it receives one, and this site does not change its behavior in response to it. What is described above is what happens on every visit.
This site does honor the Global Privacy Control signal. When your browser sends that signal, the advertising tag on the /lp/ pages is not loaded at all.
Keeping information
The log of submissions is held outside the public part of the server, so it cannot be read from the web. Entries are deleted 90 days after they are received. The log is never published and never sold.
Email records are kept under the practice's own record keeping policy.
Reviewing and correcting what is held
You can ask what this site holds from your inquiry, ask for it to be corrected, and ask for it to be deleted.
Call 510-451-6950 during office hours, Monday to Friday, 9:00am to 5:00pm. The office is closed Saturday and Sunday. You can also write to East Bay Plastic & Reconstructive Surgery, 80 Grand Ave, Suite 810, Oakland, CA 94612. The practice publishes no email address, so please use the phone or the post.
Tell the office the name and phone number you put in the form, and roughly when you sent it, so the right record can be found.
California residents
The practice is not a business as the California Consumer Privacy Act defines one, so that Act does not govern the information described here. The medical information the practice holds about you is governed instead by the Confidentiality of Medical Information Act and by HIPAA.
The practice does not sell personal information and does not share it. It does not send what you enter here to any advertiser. Google's own collection across the sites that use its services is described under Other services on these pages.
Changes
Any change to this policy is posted on this page, and the effective date above is changed to the date the new version goes up. You are not notified separately. The version on this page is the one in force, so check that date to see which version you are reading.
Contact
East Bay Plastic & Reconstructive Surgery, 80 Grand Ave, Suite 810, Oakland, CA 94612.
510-451-6950, Monday to Friday, 9:00am to 5:00pm.
The practice publishes no email address. Use the telephone number above.
