Website Privacy Policy

• Personal Data: We may collect personally identifiable information such as your name, email address, phone number, and other contact details when you voluntarily provide it to us.
• Protected Health Information (PHI): As part of our healthcare services, we may collect health-related information, including medical history, treatment details, and health conditions, strictly for treatment, payment, and healthcare operations in compliance with HIPAA regulations. This information is collected with your explicit consent and is protected under stringent security measures.
• Usage Data: We collect information automatically when you visit our website, including your IP address, browser type, operating system, access times, and pages viewed.

• Provide Services: To deliver the healthcare services you request, manage your account, and respond to your inquiries.
• Health Information: To comply with HIPAA regulations, we use health information solely for treatment, payment, and healthcare operations.
• Improvement: To analyze and improve our website, services, and user experience.
• Marketing: With your explicit consent, we may use your information to send you promotional materials and updates.

We process your personal data based on the following legal grounds:

• Consent: When you have given us explicit consent to process your data.
• Contract: When processing is necessary to perform a contract with you.
• Legal Obligation: When we are legally required to process your data.
• Legitimate Interests: When processing is in our legitimate interests and not overridden by your rights.

• Service Providers: We may share your information with third-party service providers who perform services on our behalf.
• Legal Requirements: We may disclose your information to comply with legal obligations, court orders, or governmental requests.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction.

Like many other companies, we use cookies and other tracking technologies (collectively, “Cookies”). Cookies are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets).

We use Cookies to:

• Estimate audience size and usage patterns;
• Understand and save your preferences for future visits, allowing us to customize the Site and Services to your individual needs;
• Compile aggregate data about site traffic and site interactions to resolve issues and offer better site experiences and tools in the future; andRecognize when you return to the Site.

We set some Cookies ourselves, while separate entities set other Cookies. We use Cookies other entities set to provide us with useful information, to help us improve our Site and Services, to conduct advertising, and to analyze the effectiveness of advertising. For example, we use Cookies from Google and other similar companies.

How You Can Opt Out of Cookies

You can block Cookies by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Site.

You can find out more about Cookies and how to manage them by visiting www.AboutCookies.org or www.allaboutcookies.org.

Platform Controls

You can opt out of Cookies set by Google by following the instructions found here: https://adssettings.google.com.

Advertising Industry Resources

You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt out of some of those Cookies by accessing the Network Advertising Initiative’s website or the Digital Advertising Alliance’s website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative’s Mobile Choices website.

Please note these opt-out mechanisms are specific to the device or browser on which they are exercised. Therefore, you will need to opt out on every browser and device that you use.

Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies to help us analyze how users interact with the Site and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt out of tracking of analytics by Google, click here.

We do not engage in “sales” or “targeted advertising” as those terms are defined under applicable laws and therefore our Site does not recognize the Global Privacy Control (“GPC”) signal. For more information and to download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Site does not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals.

We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

The Site may contain links that will let you leave the Site and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.

We may disclose personal information to any person performing audit, legal, operational, or other services for us. We will use information which does not identify the individual for these activities whenever reasonably possible. Information disclosed to vendors or contractors for operational purposes may not be re-disclosed to others by such a vendor or contractor, except as permitted by Oregon Weight Loss Surgery and applicable law.

We may also disclose your personal information to third parties who provide services on our behalf to help with our business activities. These companies are authorized to use your personal information only as necessary to provide these services to us pursuant to written instructions. In such cases, these companies must abide by our data privacy and security requirements, and are not allowed to use your personal information they receive from us for any other purpose.

These services may include:

• payment processing
• providing customer service
• sending marketing communications
• fulfilling subscription services
• conducting research and analysis
• providing cloud computing infrastructure

We may also disclose your personal information:

• as required by law, such as to comply with a subpoena, or similar legal process
• as described in our Notices of Privacy Practices for protected health information
• when we believe in good faith that disclosure is necessary to protect our rights, protect you or others safety from threats of imminent harm, investigate fraud or other activity in violation of the law, or respond to lawful request by public authorities (including to meet national security or law enforcement requirements)
• to protect the security and reliability of the Site
• if Oregon Weight Loss Surgery is involved in a merger, acquisition, or sale of all or a portion of its assets. You will be notified via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information
• to any other third party with your prior consent to do so
• to Oregon Weight Loss Surgery entities to carry out business planning and development and business management and general administrative activities, such as to provide, maintain and personalize our sites and services, and to communicate with you

We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy statement, including to meet our legal obligations, resolve disputes, and enforce our agreements, unless a longer retention period is required or permitted by law.

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. Your privacy rights may include (if applicable):

• The right to confirm whether or not we are processing your personal data and to access such personal data;
• The right to obtain a copy of your personal data that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
• The right to delete personal data that we collected from and/or about you, subject to certain exceptions;
• The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions;
• The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the “sale” of your personal data (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent; and
• The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

We do not sell personal data to third parties or engage in targeted advertising as defined under applicable laws. We do not use personal data subject to the Colorado Privacy Act for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals. We may use protected health information subject to HIPAA to provide you with personalized medical care, including providing preventative care and treatment options.

To exercise your rights, please submit a request by emailing us at info@oregonwls.com or by calling us at (503) 227-5050. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision by emailing us at info@oregonwls.com.

Please note the privacy rights described above do not apply to personal data that is collected, processed, or disclosed pursuant to HIPAA. Because we are subject to those laws and regulations, much of the personal data that we collect is exempt from other applicable privacy laws. Your choices and rights with respect to our use and sharing of that information is subject to our Patient Privacy Notice.

We do not disclose personal information obtained through our Site or Services to third parties for their direct marketing purposes. Accordingly, we have no obligations under California Civil Code § 1798.83.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently received personal information from a child under 18, we will delete such information from our records.

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this Privacy Policy in an alternative format, please contact us as described below.

To contact us for questions or concerns about our privacy policies or practices please email us at info@oregonwls.com.