Urgent Care Update: Effective immediately, our Urgent Care hours are Monday–Friday, 10:00 AM–7:00 PM. We will not be open on Saturdays or Sundays. Please note: Effective August 1, our Urgent Care is no longer contracted with IEHP and cannot provide Urgent Care services to patients with IEHP coverage, regardless of who their Primary Care Provider (PCP) is. This change applies only to our Urgent Care. If you are an IEHP member assigned to a Citrus Valley Primary Care Provider, you may continue to schedule appointments with and receive care from your assigned PCP at their Primary Care office.

Request Medical Records
NextGen Patient Portal
Book Appointment
Pay InvoiceCare Credit
Request Medical Records ChNextGen Patient Portal
Book AppointmentChPay Invoice
Care CreditCh

Privacy Policy

Last updated January 01, 2025

This Privacy Notice for Citrus Valley Medical Associates, Inc. (doing business as Norco Medical Group;
Eastvale Medical Group; Circle City Medical Group; Platinum Providers Medical Group; Citrus Valley Urgent Care;
Citrus Valley Family Practice; Citrus Valley Internal Medicine; Citrus Valley Pediatrics;
Citrus Valley Coordinated Care Clinic) (“we,” “us,” or “our”), describes how and why we might access, collect, store,
use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

  • Visit our website at www.citrusvalleymedical.com, or any website of ours that links to this Privacy Notice
  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices.
We are responsible for making decisions about how your personal information is processed.
If you do not agree with our policies and practices, please do not use our Services.
If you still have any questions or concerns, please contact us at
[email protected].

Summary of Key Points

What personal information do we process? We may process personal information depending on how you interact with us and the Services. Learn more below.

Do we process sensitive information? We may process sensitive information (such as race, ethnic origin, sexual orientation, or religious beliefs) when necessary with your consent or as permitted by law.

Do we collect from third parties? We do not collect information from third parties.

How do we process your information? To provide, improve, and administer our Services; communicate with you; ensure security; comply with law; and with your consent for other purposes.

When and with whom do we share information? We may share information in specific situations and with third parties as described below.

How do we keep your information safe? We use organizational and technical measures, though no system is 100% secure.

Your rights: Depending on your location, you may have rights regarding your personal information.

How to exercise rights: Contact us at [email protected].

 

Table of Contents

  1. What Information Do We Collect?
  2. How Do We Process Your Information?
  3. When and With Whom Do We Share Your Personal Information?
  4. How Long Do We Keep Your Information?
  5. How Do We Keep Your Information Safe?
  6. Do We Collect Information from Minors?
  7. What Are Your Privacy Rights?
  8. Controls for Do-Not-Track Features
  9. Do United States Residents Have Specific Privacy Rights?
  10. SMS Terms of Service
  11. Do We Make Updates to This Notice?
  12. How Can You Contact Us About This Notice?
  13. How Can You Review, Update, or Delete the Data We Collect from You?

1. What Information Do We Collect?

Personal Information You Disclose to Us: names, phone numbers, email addresses, mailing addresses.

Sensitive Information: health data, sex life or sexual orientation, race/ethnic origin, government identifiers.

2. How Do We Process Your Information?

We process your information to provide, improve, and administer Services, communicate with you, ensure security, comply with law, and with consent for other purposes.

3. When and With Whom Do We Share Your Personal Information?

We may share information in business transfers such as mergers, sales, or acquisitions.

4. How Long Do We Keep Your Information?

We retain personal information for as long as necessary (up to 7 years unless required otherwise by law).

5. How Do We Keep Your Information Safe?

We implement technical and organizational safeguards, but no system is 100% secure.

6. Do We Collect Information from Minors?

We do not knowingly collect or market to children under 18. If collected, data is deleted. Contact [email protected] with concerns.

7. What Are Your Privacy Rights?

You may review, change, or terminate your account at any time. You may also withdraw consent or opt out of marketing by emailing [email protected].

8. Controls for Do-Not-Track Features

We do not currently respond to DNT signals due to lack of industry standards.

9. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.
You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

10. SMS Terms of Service

Citrus Valley Medical Associates, Inc. uses SMS texting to send patients SMS messages related to their Healthcare needs. Messages include appointment reminders, reminders for annual wellness checkups and follow up for care of chronic conditions.

You can cancel the SMS service at any time. Just text “STOP” to the short code. After you send the SMS message “STOP” to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us. If you want to join again, just sign up as you did the first time and we will start sending SMS messages to you again.

If you are experiencing issues with the messaging program, you can reply with the keyword- HELP for more assistance, or you can get help directly at [email protected].

Carriers are not liable for delayed or undelivered messages.

As always, message and data rates may apply for any messages sent to you from us and to us from you. If you have any questions about your text plan or data plan, it is best to contact your wireless provider.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

11. Do We Make Updates to this Notice?

Yes, we may update this Privacy Notice from time to time to remain compliant with applicable laws, regulations, and our business practices.

We may update this Privacy Notice periodically. The updated version will be identified by a revised “Last updated” date at the top of this Privacy Notice and will become effective when it is posted, unless otherwise stated.

If we make material changes to this Privacy Notice, we may notify you by prominently posting a notice on our website or by other means as required by applicable law. We encourage you to review this Privacy Notice periodically to stay informed about how we collect, use, disclose, and protect your personal information.

Changes to this Privacy Notice will not affect any rights you may have under applicable federal or state law, including rights relating to protected health information.

12. How Can You Contact Us About This Notice?

If you have questions, comments, or concerns regarding this Privacy Notice or our privacy practices, you may contact us at:

Citrus Valley Medical Associates, Inc.
Email: [email protected]
Website: www.citrusvalleymedical.com

If your inquiry concerns your medical records, protected health information, or rights under the Health Insurance Portability and Accountability Act (“HIPAA”) or other applicable healthcare privacy laws, you may also contact the appropriate CVMA office or privacy representative for assistance.

Please do not send highly sensitive medical information, Social Security numbers, financial information, or other confidential information through unsecured email unless specifically instructed to do so through an approved secure communication method.

13. How Can You Review, Update, or Delete the Data We Collect from You?

Depending on applicable law, you may have certain rights regarding personal information we collect about you, including the right to request access to, correction of, or deletion of certain personal information.

To submit a request regarding personal information you have provided to us through our website or Services, please contact us at [email protected].

We may need to verify your identity before processing a request. We will respond to verified requests as required by applicable law. Certain information may not be eligible for correction or deletion when we are required or permitted to retain it for legal, regulatory, security, recordkeeping, healthcare, billing, or other lawful purposes.

Medical Records and Health Information

Requests concerning access to or amendment of medical records or Protected Health Information (“PHI”) are subject to separate rights and procedures under the Health Insurance Portability and Accountability Act (“HIPAA”), the California Confidentiality of Medical Information Act (“CMIA”), and other applicable healthcare privacy laws. Please contact Citrus Valley Medical Associates, Inc. regarding requests involving your medical records or PHI.

Nothing in this Privacy Notice is intended to limit any rights you may have regarding your medical records or PHI under applicable law.

 

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Category Examples Collected
A. Identifiers Real name, alias, postal address, phone, online identifier, IP address, email, account name YES
B. California Customer Records information Name, contact info, education, employment, history, financial info YES
C. Protected classification characteristics Gender, age, DOB, race/ethnicity, national origin, marital status, demographics YES
D. Commercial information Transactions, purchase history, financial details, payments NO
E. Biometric information Fingerprints, voiceprints NO
F. Internet or similar activity Browsing/search history, interactions with sites, apps, ads NO
G. Geolocation data Device location NO
H. Audio, electronic, sensory info Images, audio, video, call recordings from business activities YES
I. Professional or employment info Business contact details, work history, qualifications (if job applicant) NO
J. Education information Student records, directory info NO
K. Inferences Profiles based on preferences/characteristics NO
L. Sensitive personal information Email/text contents, card numbers, driver’s license, health data, race, sex life/orientation, SSN, state ID YES

We only collect sensitive personal information as defined by applicable privacy laws, or with your consent.
Sensitive personal information may be used or disclosed to service providers/contractors for specific purposes.
You may have the right to limit such use or disclosure. We do not collect or process sensitive information to infer characteristics.

We may also collect information outside of these categories, such as when you:

  • Receive help through customer support channels
  • Participate in customer surveys or contests
  • Facilitate delivery of our Services and respond to inquiries

Retention of Personal Information

We will use and retain collected personal information as needed to provide Services or for:

  • Category A – 7 years
  • Category B – 7 years
  • Category C – 7 years
  • Category H – 7 years
  • Category L – 7 years

How We Use and Share Personal Information

We may disclose personal information to service providers via contract. We may also use it for internal research and
development. This is not considered “selling” of your data. We have not sold or shared personal data in the past 12 months
and will not do so in the future.

Your Rights

You may have the following rights under U.S. state data protection laws:

  • Right to know if we are processing your data
  • Right to access your data
  • Right to correct inaccuracies
  • Right to request deletion
  • Right to obtain a copy of your data
  • Right to non-discrimination for exercising your rights
  • Right to opt out of targeted advertising, sale, or profiling-based decisions
  • (State-dependent) Right to know categories of third parties we disclosed data to
  • (State-dependent) Right to limit use/disclosure of sensitive data

How to Exercise Your Rights

Contact us at [email protected].
You may designate an authorized agent, but proof of authorization is required. We will verify identity before processing requests.

California “Shine The Light” Law

California residents may annually request, free of charge, information on categories of personal data disclosed to third parties
for direct marketing purposes and the names/addresses of such parties. Submit requests in writing using the contact details
in “How Can You Contact Us About This Notice?”