Privacy Policy

Last updated January 01, 2025

This Privacy Notice for Citrus Valley Medical Associates, Inc. (doing business as Norco Medical Group;
Eastvale Medical Group; Circle City Medical Group; Platinum Providers Medical Group; Citrus Valley Urgent Care;
Citrus Valley Family Practice; Citrus Valley Internal Medicine; Citrus Valley Pediatrics;
Citrus Valley Coordinated Care Clinic) (“we,” “us,” or “our”), describes how and why we might access, collect, store,
use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

Visit our website at www.citrusvalleymedical.com, or any website of ours that links to this Privacy Notice
Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices.
We are responsible for making decisions about how your personal information is processed.
If you do not agree with our policies and practices, please do not use our Services.
If you still have any questions or concerns, please contact us at
[email protected].

Summary of Key Points

What personal information do we process? We may process personal information depending on how you interact with us and the Services. Learn more below.
Do we process sensitive information? We may process sensitive information (such as race, ethnic origin, sexual orientation, or religious beliefs) when necessary with your consent or as permitted by law.
Do we collect from third parties? We do not collect information from third parties.
How do we process your information? To provide, improve, and administer our Services; communicate with you; ensure security; comply with law; and with your consent for other purposes.
When and with whom do we share information? We may share information in specific situations and with third parties as described below.
How do we keep your information safe? We use organizational and technical measures, though no system is 100% secure.
Your rights: Depending on your location, you may have rights regarding your personal information.
How to exercise rights: Contact us at [email protected].

What Information Do We Collect?
How Do We Process Your Information?
When and With Whom Do We Share Your Personal Information?
How Long Do We Keep Your Information?
How Do We Keep Your Information Safe?
Do We Collect Information from Minors?
What Are Your Privacy Rights?
Controls for Do-Not-Track Features
Do United States Residents Have Specific Privacy Rights?
SMS Terms of Service
Do We Make Updates to This Notice?
How Can You Contact Us About This Notice?
How Can You Review, Update, or Delete the Data We Collect from You?

1. What Information Do We Collect?

Personal Information You Disclose to Us: names, phone numbers, email addresses, mailing addresses.

Sensitive Information: health data, sex life or sexual orientation, race/ethnic origin, government identifiers.

2. How Do We Process Your Information?

We process your information to provide, improve, and administer Services, communicate with you, ensure security, comply with law, and with consent for other purposes.

3. When and With Whom Do We Share Your Personal Information?

We may share information in business transfers such as mergers, sales, or acquisitions.

4. How Long Do We Keep Your Information?

We retain personal information for as long as necessary (up to 7 years unless required otherwise by law).

5. How Do We Keep Your Information Safe?

We implement technical and organizational safeguards, but no system is 100% secure.

6. Do We Collect Information from Minors?

We do not knowingly collect or market to children under 18. If collected, data is deleted. Contact [email protected] with concerns.

7. What Are Your Privacy Rights?

You may review, change, or terminate your account at any time. You may also withdraw consent or opt out of marketing by emailing [email protected].

8. Controls for Do-Not-Track Features

We do not currently respond to DNT signals due to lack of industry standards.

9. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.
You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Real name, alias, postal address, phone, online identifier, IP address, email, account name	YES
B. California Customer Records information	Name, contact info, education, employment, history, financial info	YES
C. Protected classification characteristics	Gender, age, DOB, race/ethnicity, national origin, marital status, demographics	YES
D. Commercial information	Transactions, purchase history, financial details, payments	NO
E. Biometric information	Fingerprints, voiceprints	NO
F. Internet or similar activity	Browsing/search history, interactions with sites, apps, ads	NO
G. Geolocation data	Device location	NO
H. Audio, electronic, sensory info	Images, audio, video, call recordings from business activities	YES
I. Professional or employment info	Business contact details, work history, qualifications (if job applicant)	NO
J. Education information	Student records, directory info	NO
K. Inferences	Profiles based on preferences/characteristics	NO
L. Sensitive personal information	Email/text contents, card numbers, driver’s license, health data, race, sex life/orientation, SSN, state ID	YES

We only collect sensitive personal information as defined by applicable privacy laws, or with your consent.
Sensitive personal information may be used or disclosed to service providers/contractors for specific purposes.
You may have the right to limit such use or disclosure. We do not collect or process sensitive information to infer characteristics.

We may also collect information outside of these categories, such as when you:

Receive help through customer support channels
Participate in customer surveys or contests
Facilitate delivery of our Services and respond to inquiries

Retention of Personal Information

We will use and retain collected personal information as needed to provide Services or for:

Category A – 7 years
Category B – 7 years
Category C – 7 years
Category H – 7 years
Category L – 7 years

How We Use and Share Personal Information

We may disclose personal information to service providers via contract. We may also use it for internal research and
development. This is not considered “selling” of your data. We have not sold or shared personal data in the past 12 months
and will not do so in the future.

Your Rights

You may have the following rights under U.S. state data protection laws:

Right to know if we are processing your data
Right to access your data
Right to correct inaccuracies
Right to request deletion
Right to obtain a copy of your data
Right to non-discrimination for exercising your rights
Right to opt out of targeted advertising, sale, or profiling-based decisions
(State-dependent) Right to know categories of third parties we disclosed data to
(State-dependent) Right to limit use/disclosure of sensitive data

How to Exercise Your Rights

Contact us at [email protected].
You may designate an authorized agent, but proof of authorization is required. We will verify identity before processing requests.

California “Shine The Light” Law

California residents may annually request, free of charge, information on categories of personal data disclosed to third parties
for direct marketing purposes and the names/addresses of such parties. Submit requests in writing using the contact details
in “How Can You Contact Us About This Notice?”