Privacy policy.

This policy explains what IYA Medical, PLC (“IYA Medical,” “we,” “us”) collects when you use iyamedical.com, how we use it, and the choices you have. It covers the website only. How we handle your medical information as a healthcare provider is described in our Notice of Privacy Practices, which controls whenever the two overlap.

Information you give us

• Contact form and callback requests. Your name, phone number, email address and your message or the reason for your request.
• Online intake. Our intake assistant asks for your name, date of birth, contact details, mailing address, preferred doctor, reason for visit, symptoms, medical history, medications, allergies, referring and primary care physicians, recent imaging, and insurance details. This is health information. It is used to prepare for your visit and becomes part of your record with us.
• New patient paperwork. If our office sends you a link to complete your new patient packet online, the answers, signatures and any photos of your insurance cards or ID that you choose to upload are stored in our patient records system. Your Social Security number is optional online; you may provide it in person instead.

Information collected automatically

We run our own, first-party website analytics. When you browse the site we record the pages you view, how long you stay, how far you scroll, the type of device, browser and operating system you use, the page that referred you, and any campaign tags in the link you arrived from. To do this we set two cookies: a visitor identifier (kept for one year) and a session identifier (kept for about 30 minutes). These identifiers are random values; they are not your name, and we do not combine them with your health information.

We do not run third-party advertising pixels or trackers on this site. If you arrive from one of our advertisements, the campaign and click identifiers in the link are stored with your callback request so our scheduling team knows how you found us. Videos and maps on some pages are loaded from YouTube and Google, which may set their own cookies under Google’s privacy policy.

The website also stores small preferences in your browser (your light or dark theme choice, whether you dismissed an announcement, and your cookie choice). These never leave your device.

The online intake assistant

The intake assistant on this site is automated software. It asks the questions our front desk would ask and summarizes your answers for our scheduling team, who review every submission. It does not give medical advice and cannot schedule appointments on its own. Transcripts and summaries are processed on secure cloud services that have signed HIPAA business associate agreements with us. If you prefer not to use it, call us at 480-771-0000.

How we use what you share

• To respond to your request and contact you about scheduling, paperwork, and your care.
• To prepare your patient record and verify insurance before your visit.
• To understand how the website is used and improve it.
• To meet our legal obligations and protect the security of our systems.

We do not sell your information, and we do not share your health information with advertisers. We do not use it for marketing without your written authorization.

Calls, texts and email

When you submit a request through this site you agree that we may contact you by phone, text message or email about that request, your appointments and your paperwork. Text messages are sent for scheduling and to deliver secure links, not for marketing. Message and data rates may apply. You can ask us to stop texting you at any time by replying STOP or by calling the office.

Who we share information with

Service providers that host our website and patient records, deliver our text messages and email, and operate our electronic health record act on our instructions under written agreements, including HIPAA business associate agreements where health information is involved. We may also disclose information when the law requires it. Other disclosures of health information are described in our Notice of Privacy Practices.

How long we keep information

Information you give us to arrange care becomes part of your medical record. Arizona law (A.R.S. § 12-2297) generally requires us to keep medical records for at least six years after your last visit, and longer for minors. Website analytics records are kept only as long as they are useful for understanding site traffic.

Your choices

• Analytics cookies.Choose “Decline” in the cookie banner and our analytics will not run. You can also block or delete cookies in your browser.
• Access, correction and deletion. You may ask what website information we hold about you, ask us to correct it, or ask us to delete it. We will honor deletion requests except where the information is part of your medical record or we are required by law to keep it. Requests for your medical records are handled under the Notice of Privacy Practices.
• Texts. Reply STOP to any text from us, or tell the office you prefer calls.

Children

This website is not directed to children under 13 and we do not knowingly collect information from them online. A parent or legal guardian should complete intake and paperwork on behalf of a minor patient.

Security

Information you send through this site is encrypted in transit, and patient information is stored encrypted at rest with access limited to staff who need it. Pages that handle your paperwork are never cached and are not indexed by search engines. No method of transmission or storage is completely secure, so please do not send health information by ordinary email.

Links to other sites

Our site links to other websites, including our patient portal and insurance resources. Their privacy practices are their own and we encourage you to read them.

Changes to this policy

We will post any changes on this page and update the effective date. Material changes to how we handle information you have already given us will be explained here before they take effect.

Contact us

Questions about this policy, or a request about your information, can be sent to: