Privacy Policy

1. Introduction and Scope

Thunderbird Men's Health, LLC ("Clinic," "we," "us," or "our") is committed to protecting your privacy. This Website Privacy Policy explains our practices regarding the collection, use, and disclosure of information collected when you visit www.thunderbirdmenshealth.com (the "Site").

This policy applies to information collected through our public website, including general site analytics and the forms on our Site. Health-related information you submit through our forms is treated as Protected Health Information (PHI) and is also governed by our Notice of Privacy Practices. This policy does not replace or modify our obligations under HIPAA and Arizona law concerning PHI.

2. Relationship to Our HIPAA Notice of Privacy Practices

We separate routine website visitor data from protected health information:

• General Website Visitor Data: Technical logs, cookies, IP addresses, and general site usage information are governed by this Website Privacy Policy.
• Consultation and Contact Forms: Information you submit through our consultation request and contact forms, including your name, contact details, the conditions or services you select, and any message you write, is treated as Protected Health Information (PHI) and is handled under our HIPAA Notice of Privacy Practices (NPP).
• Other Protected Health Information: Any health metrics, lab results, medical history, or clinical communications submitted during care or via secure portal forms are also governed by our NPP.

3. Information We Collect

A. Information You Voluntarily Provide

We collect personal information that you choose to submit through our consultation request and contact forms. Depending on the form, this may include:

• First and last name
• Email address and telephone number
• The conditions or services you are interested in (for example, selections you make from a list of symptoms or treatments)
• Any message you write in a free-text field
• Your request to be contacted about a specific service or treatment, and your communication preferences

Information submitted through these forms is treated as PHI, as described in Section 2.

B. Automatically Collected Technical Data

When navigating our Site, our web servers and analytics services automatically log standard technical connection information, which is anonymized, including:

• IP address and approximate geographic location (city/state)
• Browser version, operating system, and device details
• Referring URLs, pages visited, duration of stay, and site navigation patterns

4. Cookies and Web Analytics

We use essential cookies to operate the Site and limited analytics to understand how it performs. Our consultation and contact forms are provided by a secure form provider, which may set cookies needed to process and protect your submission.

5. How We Use Your Information & Communications

We use website data for legitimate business operations, including responding to inquiries, operating site features, and communicating with you. Information submitted through our consultation and contact forms is used to respond to your request and arrange care, as described in our Notice of Privacy Practices.

Email, Phone, and SMS/Text Communications

• Email Communications: Email: You may opt out of promotional or educational emails at any time by clicking the “Unsubscribe” link in any email. Appointment and care-related messages are not promotional and may still be sent.
• SMS/Text Messages: We send text messages only if you agree to receive them, such as by checking the SMS consent box on our forms. Texts may include appointment reminders and scheduling updates, and promotional messages only if you separately agreed to receive them. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. We honor opt-out requests made by any reasonable method, including calling or emailing us at (602) 661-7764 or info@thunderbirdmens.com. Consent to receive text messages is not a condition of receiving care or purchasing any service. Texting is not a secure method of communication, so we avoid including sensitive health information in text messages. Do not use text messages for emergencies.
• Mobile Data Privacy: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We do not sell your personal information.

6. Sharing Information with Service Providers

We may partner with trusted service providers to support operations such as cloud web hosting, IT infrastructure, and web form security. These providers are bound by confidentiality and security agreements.

Our consultation and contact forms are provided by a third-party secure form provider that is configured to handle PHI and has signed a Business Associate Agreement (BAA) with our clinic. Other vendors that create, receive, maintain, or transmit PHI on our behalf also sign a BAA. Under these agreements, vendors may use PHI only to provide services to us and as permitted by law.

We do not sell your personal information.

7. Data Security Measures

We deploy technical and administrative safeguards to protect information collected through our Site. Web communications are encrypted in transit using Transport Layer Security (TLS) technology (HTTPS), and our consultation and contact forms are submitted through a secure form provider configured for PHI.

Our forms are intended for non-urgent requests. Do not use them for medical emergencies. If you are experiencing an emergency, call 911. To protect your privacy, please share only the information needed to request a consultation, and we will discuss details with you directly. For acute medical issues, please call our clinic at (602) 661-7764.

8. Your Privacy Rights

Depending on your state of residence, you may possess specific rights regarding your non-medical personal data, including:

• Opt-Out: Unsubscribe from non-essential emails at any time via the opt-out link provided in emails.

9. Children's Online Privacy

Our Site is designed for an adult audience and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors through our public website.