Privacy Policy

1. Scope and Medical Information

Cortina Dermatology Group P.A. (“Cortina,” “we,” “our,” or “us”) operates this website under the Cortina Dermatology & Aesthetics brand. This Privacy Policy explains our practices concerning personal information collected through www.cortinaderm.com, our online store, communications sent directly to us, and related website features (collectively, the “Digital Services”).

This policy applies to information you provide directly to Cortina through the Digital Services and information collected automatically when you use them. It also explains how we work with service providers that support website hosting, ecommerce, scheduling, analytics, advertising measurement, payment processing, communications, and related functions.

Third-party websites and services linked from our website may collect information under their own privacy policies. When a third party sends information to Cortina, our handling of that information is governed by this policy or, when applicable, by healthcare privacy law and Cortina’s Notice of Privacy Practices.

Please do not send sensitive medical information through ordinary email or general website forms. Contact the clinic for an appropriate secure method for clinical communications. If you are experiencing a medical emergency, call 911 or seek emergency care.

2. Information We Collect

Information you provide

We may collect information you choose to provide, including:

• name, email address, telephone number, mailing address, and other contact information;
• information included in inquiries, contact forms, product questions, or correspondence with us;
• account, order, billing, shipping, return, and customer-service information related to online purchases;
• communication preferences and information you provide when subscribing to updates or requesting information.

Information collected automatically

When you use the Digital Services, we and our service providers may automatically collect:

• IP address, browser type, device type, operating system, and device or cookie identifiers;
• referring and exit pages, pages viewed, links clicked, and the date and time of a visit;
• general location information derived from an IP address;
• information collected through cookies, pixels, tags, web beacons, and similar technologies.

Information from service providers

We may receive information from providers that support our website, ecommerce, payments, order fulfillment, appointment scheduling, communications, analytics, advertising measurement, fraud prevention, and security. The information we receive depends on the service used and the choices you make.

3. Cookies, Analytics, and Advertising Measurement

Cookies are small files or identifiers stored on or associated with your device. We and our service providers may use cookies and similar technologies that are:

• Necessary to operate the website, maintain security, process orders, remember selections, or provide requested functionality;
• Analytical to understand how visitors use the website and improve performance and content;
• Advertising measurement-related to attribute website activity and understand campaign performance.

We use Google Analytics and Google Ads to understand website usage and measure advertising performance and attribution. Cortina has disabled advertising personalization for data collected through its Google Analytics property. These services may still receive technical and usage information needed for analytics and measurement, such as IP address, device information, pages viewed, referral source, and actions taken on the website. We do not intend to send patient medical records, appointment details, form contents, or clinical communications to Google Analytics or Google Ads.

Depending on the Shopify and other platform settings enabled, certain cookies, identifiers, or browsing activity may be processed in a manner that some privacy laws define as a “sale,” “sharing,” or “targeted advertising,” even when no money is exchanged. Cortina does not sell personal information for monetary payment. Available opt-out choices are described below.

You can adjust cookies through your browser settings and, when available, through our website privacy controls. Disabling certain cookies may affect website functionality. You may also visit Your Privacy Choices to exercise available opt-out choices concerning data sharing or targeted advertising.

Where required by applicable law and supported by our privacy controls, a recognized Global Privacy Control signal will be treated as an opt-out request for the browser and device sending the signal. Because there is no uniform standard for other “Do Not Track” signals, we may not respond to those signals in the same manner.

4. How We Use Information

We may use personal information to:

• operate, maintain, secure, troubleshoot, and improve the Digital Services;
• respond to questions, requests, appointment inquiries, and other communications;
• process, fulfill, deliver, support, and administer product orders and transactions;
• send service, appointment, transaction, account, security, or policy-related communications;
• provide customer support and maintain records of our interactions;
• understand website usage and measure website, advertising, and marketing performance;
• send promotional communications where permitted by law and consistent with your choices;
• detect, investigate, and prevent fraud, misuse, security incidents, or unlawful activity;
• comply with legal obligations, resolve disputes, enforce agreements, and protect our rights and the rights of others;
• carry out another purpose disclosed when information is collected or with your direction or consent.

5. How We Disclose Information

We may disclose personal information as described below:

• Service providers. We may provide information to vendors that support website hosting, ecommerce, payments, shipping, order fulfillment, appointment scheduling, communications, analytics, advertising measurement, IT, security, and customer support.
• Advertising and analytics providers. These providers may receive technical, cookie, and usage information to help us understand website and campaign performance.
• Legal and safety purposes. We may disclose information to comply with law or legal process, respond to lawful requests, protect rights and safety, prevent fraud, or enforce agreements.
• Business transactions. Information may be disclosed in connection with an actual or proposed merger, acquisition, financing, reorganization, sale, or transfer of all or part of our business or assets.
• At your direction. We may disclose information when you direct us to do so, give consent, or request a service requiring the disclosure.

We may use and disclose aggregated or deidentified information as permitted by law. This website policy does not permit uses or disclosures of protected health information beyond those allowed by Cortina’s Notice of Privacy Practices and applicable healthcare privacy law.

6. Shopify and Other Third-Party Services

Shopify and online purchases

Our website and online store are hosted by Shopify. Shopify processes personal information when you browse our store, make a purchase, use Shopify-supported checkout features, or otherwise interact with Shopify services. Depending on the features enabled, Shopify may process information to provide security, fraud prevention, analytics, personalization, advertising, and other platform services informed by your interactions with our store, Shopify, or other Shopify merchants.

Information may be disclosed to Shopify and other service providers that operate in the United States or other countries. Their processing is subject to their applicable terms, privacy policies, and legal obligations. You can review the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for Shopify-level privacy choices.

Appointment scheduling and patient services

Our appointment booking links direct you to NextPatient, a separately operated scheduling service. Information you submit directly to NextPatient is subject to NextPatient’s privacy policy and terms.

When Cortina receives information from NextPatient for scheduling or patient-care purposes, Cortina handles that information under this policy or, when the information is protected health information, under our Notice of Privacy Practices and applicable healthcare privacy law. Other third-party services linked from our website operate under their own privacy policies and terms.

7. Your Choices and Privacy Requests

Communications

You can opt out of promotional emails by using the unsubscribe link in the message or contacting us. If you separately opt in to promotional text messages, you may opt out by replying STOP. Choosing not to receive promotional messages will not prevent service, appointment, transaction, safety, or legally required communications.

Privacy requests

Depending on the law that applies, you may have rights concerning certain nonclinical personal information, such as requesting access, correction, deletion, or a portable copy, or opting out of certain data sharing or targeted advertising. To submit a request, contact us using the information below. We may need to verify your identity and may deny or limit a request where permitted or required by law.

For available website advertising and data-sharing choices, visit Your Privacy Choices. Requests concerning protected health information or medical records are governed by Cortina’s Notice of Privacy Practices and applicable healthcare privacy law and may be submitted through the clinic.

8. Children’s Privacy

Our Digital Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 without appropriate parental or guardian involvement. A parent or legal guardian may use our Digital Services to request information, arrange care, or purchase products for a minor.

If you believe a child has provided personal information to us in a manner that does not comply with applicable law, please contact us at info@cortinaderm.com.

9. Data Security and Retention

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or loss. No internet transmission or electronic storage method can be guaranteed to be completely secure.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing services, completing transactions, maintaining business and legal records, resolving disputes, preventing fraud, and meeting legal, accounting, contractual, or regulatory obligations. Retention periods vary according to the information and the reason it was collected.

Medical records and protected health information are retained according to applicable healthcare law, professional requirements, and Cortina’s medical-record retention practices.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, services, technology, or legal obligations. We will post the revised policy on this page and change the “Last updated” date above. We will provide any additional notice required by applicable law.

11. Contact Us

Contact us with questions about this Privacy Policy, our privacy practices, or a privacy request: