Website Privacy Policy

THE OREGON CLINIC PRIVACY NOTICE

Last Updated June 16, 2025

This privacy notice (the “Privacy Notice”) together with the Terms of Use and the Notice of Privacy Practices (as defined below) constitutes an agreement between you and The Oregon Clinic, P.C. and its affiliates (collectively “TOC”, “us”, “our,” or “we”) while accessing and using our website located at www.oregonclinic.com, and/or other websites we own or operate (collectively, the “Site”). This Privacy Notice describes how TOC collects, protects, uses, and discloses information and data collected and created in the course of your access to and use of the Site, products, and services, as well as your interactions with TOC via telephone, electronic or other means (collectively, and together with the Site, the “Services”).

Your privacy is important, and we encourage you to read this Privacy Notice carefully to understand the information we collect and what we do with it.

Consent. By accessing the Site or submitting information to TOC, you consent to this Privacy Notice and the collection and use of information as described below. We will take steps to notify you and confirm that you agree at different stages of collecting information. If you do not agree with our policies and practices, you may not be able to access or benefit from certain portions of the Site.

Scope. Please be advised that this Privacy Notice applies to information that we collect when you visit the Site or use our Services, when you submit your information to us on the Site or through our Services, when you communicate with us through email and other means, via third parties that we work with to provide our Services, or by any other means over the course of your use of our Services.

The nature of our Services involves the use of Protected Health Information (45 CFR 160.103). This Privacy Notice will generally only apply to information collected from you that is not Protected Health Information. Under certain circumstances, Personal Information and/or Non-Personal Information may constitute PHI. If HIPAA applies to such Personal Information and/or Non-Personal Information, we will take appropriate steps to comply with HIPAA’s privacy and security rule requirement, as explained in our HIPAA Privacy Policy.

Please visit our Notice of Privacy Practices to understand our practices in relation to any Protected Health Information provided to us. For purposes of this Privacy Notice:

“HIPAA” means the United States Health Insurance Portability and Accountability Act of 1996.

“PHI” means individually identifiable health information, held or maintained by a Covered Entity or its Business Associates acting for the Covered Entity that is transmitted or maintained in any form or medium (including the PHI of non-U.S. citizens).

“Business Associate” means a person or entity that performs certain functions or activities that involve the use or disclosure of PHI on behalf of, or provides services to, a HIPAA Covered Entity.

“Covered Entity” means (1) health plans, (2) health care clearinghouses, and (3) health care providers who electronically transmit any health information in connection with transactions to which HIPAA applies.

Personal Information. As used in this Privacy Notice, “Personal Information” means information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual consumer or device, such as:

Identifiers (e.g., name, address, telephone number, email address, username);
Sensitive Personal Information (e.g., state identification number, financial information);
Protected classification information (e.g., age, citizenship, sex, veteran or military status);
Biometric information (e.g., keystrokes, behavioral or biological characteristics);
Internet or other similar activity (e.g., browsing history);
Employment-related information (e.g., current or past employment);
Non-public educational information, including information protected under the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99); and
Commercial information (e.g., products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies).

Non Personal Information. As used in this Privacy Notice, “Non-Personal Information” means information that does not identify you and cannot be used to contact you personally and may include: (a) publicly available information; (b) aggregate information, meaning data about a group or category of services or users from which individual identities and other Personal Information has been removed; or (c) deidentified information that cannot be easily linked back to the individual.

Lawful Basis. We will only collect your Personal Information (a) when applicable, with your consent; (b) if we have a legitimate interest in doing so; or (c) as authorized or required by law. We will limit the collection of Personal Information to that which is reasonable. If we collect or use your Personal Information based on your consent, we will also notify you of any changes and will request your further consent as needed.

HOW WE COLLECT & USE YOUR PERSONAL INFORMATION

The Personal Information we collect about you and how we use the Personal Information we collect depends on the context of your interactions with TOC, the Site, and our Services.

Information we collect directly from you, with your consent. We collect Personal Information directly from you with your consent when you communicate with us online or by other means. If you access or submit an inquiry through our Site, register to receive marketing materials, or receive other Services, we may ask you to provide certain personal information such as your name, email address, phone number and zip code, and possibly other Personal Information. We take reasonable steps to make sure that your contact information is accurate, complete, current, and otherwise reliable.

We use your Personal Information to communicate with you about TOC and our Services and for direct marketing purposes, such as:

Sending you periodic email and newsletter communications;
Responding to your inquiries;
Sending you surveys and other quality assurance communications;
Analyzing preferences, trends, and statistics;
Informing you of our new products, services, and offers; and
Providing you with other marketing information from and about TOC.

We will only contact you in ways compatible with your communications choices. However, even if you have opted-out of receiving marketing communications from us, we may need to contact you to address questions or issues specific to the Services you have requested.

We may periodically supplement the Personal Information we collect from you with personal or non-personal information about you or another person obtained from companies with whom we have marketing or other business relationships and other third party sources. Any aggregate information that is linked or linkable to your Personal Information will be treated as Personal Information under this Privacy Notice.

Currently, TOC or our third party service providers retain and store information collected by, or provided to, us in the cloud and on secure, HIPAA-compliant servers in the United States. TOC and our third party service providers do not retain and store information received from users (including Personal Information) outside of the U.S.

Payment Information. TOC does not collect or maintain any payment information on our Site. If you choose to use our Services in a way that requires payment, our payment processor will collect your credit card information. We partner with third party service providers and vendors to provide access to existing payment gateways and your credit card, banking and other billing information is kept with our payment processor. Information exchanged through those transactions will be governed by the applicable privacy policies of the payment processor.

Information collected from your use of the Site, with a legitimate interest. We use analytics tools or other technologies to collect information about you from your use of this Site. We collect this information to achieve our legitimate interests of operating the Site and our Service. This information may be combined with other information that you choose to submit to us. This information may also be merged into aggregate information about site visitors and traffic. We use third-party analytics tools to distinguish and analyze user behavior.

Bot detection. We use third-party tools for bot detection, which collects and processes various data points to determine if a user is human or a bot. This includes IP address, browser information, mouse movements, dwell time, and other user-generated data. The collected data is then used in a risk analysis to assess the likelihood of a user being a bot. This data may also be transferred to third-party servers in the US for processing.

Log Files. We collect anonymous and technical information from your computer, including your internet protocol address, data about your computer or other device, the type of browser or operating system your device uses, the programs, services, and version of software you use, and the address of any linking site, when you request a web page while visiting the Site. We use this information for statistical purposes, to ensure that our web pages will appear and function appropriately on your computer, to determine how you were referred to our Site, and to personalize your access to our Site or conduct our own analyses and research to improve our programs, products, services, and content. We may convey said information to a third party. We also use third parties to collect and analyze information. If you do not agree with TOC or our Services Providers (as defined below) collecting and using your anonymous and technical information as described in this paragraph, discontinue use of the Site or you may contact us as described under “Controlling Your Personal Information.”

Cookies. Cookies are small text files that are stored on your computer or equipment when you visit certain online pages that record your preferences. TOC and our service providers use cookies to track use of our Site. Cookies may also be used to monitor traffic, improve the Site, make the Site easier and/or more relevant for your use, and improve the performance of our advertising on other websites. You can opt out of accepting cookies by adjusting your browser settings to not accept cookies or to notify you when you are sent a cookie. For more information on cookies and how to disable them on your computer please visit: https://www.consumer.ftc.gov/articles/0042-online-tracking.

Generally-speaking, we use 1st and 3rd-party session and persistent cookies. The cookies set by us are called “1st-party cookies” and the cookies set by our service providers are called “3rd-party cookies.” Session cookies are temporary cookies that remain on your device until you close your web browser. Many session cookies are essential to make our Site work correctly, as they typically enable you to move around our Site and use our features. Persistent cookies remain on your device after you close your browser or until you manually delete it (for the former, the amount of time the cookie remains on your device will depend on the duration or “lifetime” of the specific cookie and your browser settings). Persistent cookies help us recognize you as an existing user of our Site, so it’s easier and convenient to return to our Site. In addition, persistent cookies also help us recognize you when you view a resource belonging to our Site from another website or app (such as an advertisement) and help us record information about your web browsing habits during the lifetime of the persistent cookie.

Examples of cookies we use:

Strictly Necessary Cookies: these cookies are strictly necessary for our Site to function properly and ensure our Services are accessible to you (e.g., log-in functionality, load balancing, navigation, filling in forms). The Site cannot function properly without these cookies.
Statistic Cookies: Statistic cookies enable us to understand how visitors interact with our Site by collecting and reporting information anonymously.
Marketing Cookies: Third-party Marketing cookies are used to track visitors across our Site. The intention is to track performance of ads served on external websites or apps.

TOC uses Personal Information collected from you automatically to perform data analysis, identify Site and Services usage trends, and to measure the effectiveness of our marketing efforts and our Services. TOC may use and store this information and the reports we generate using this information in an anonymized form or in the aggregate that it is not associated with individual end users and does not include personal information.

Other ways we might use your Personal Information. In addition to the specific uses and purposes described above, we might use information that we collect about you or that you provide to us, including any Personal Information:

To provide you with information, products, or services that you request from us;
To protect your privacy and enforce this Privacy Notice;
If we believe it is necessary to identify, contact or bring legal action against persons or entities who may be causing injury to you, to TOC, or to others;
To comply with a law, regulation, legal process or court order; and
For any other purpose to which you consent.

Children Under Age 18. The Site is not intended for children under the age of 18, and generally-speaking our Services require parental and/or legal guardian consent in order to be provided to children under 18. No one under age 18 may provide any Personal Information to or on the Site. If you are under 18, do not use or provide any information on this Site or on or through any of its features, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 18 without verification of parental or legal guardian consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at [email protected].

DISCLOSURE OF YOUR INFORMATION

As permitted by applicable law, we may share your Personal Information as follows:

To Our Service Providers. Vendors that provide us with various services (collectively, “Service Providers”) may have access to your Personal Information while they are performing their contractual obligations. Examples of Service Providers we use include electronic health record software, payment processors, data analytics companies, email delivery, web hosting services, customer service, and marketing services. We prohibit our Service Providers from selling or disclosing the Personal Information we provide, and we require all Service Providers to maintain confidentiality standards that are commercially reasonable to ensure the security of your Personal Information. These Service Providers include but are not limited to marketing companies, companies that host our Site or App, or provide IT services to support either, platforms we use to help us manage our data and companies that assist us in processing job applications that you submit through our Site. The type of information that we provide to a Service Provider will depend on the purpose of the service that they provide to us.
To Affiliates. We may disclose some or all of your Personal Information with our subsidiaries in which case this Privacy Notice will apply to the same extent it applies to TOC.
Other Third Parties. As permitted by applicable law, we may disclose Personal Information to third parties (i) as part of a business transition (e.g. a merger or acquisition by another company); (ii) too comply with federal, state, or local law, a judicial proceeding, court order, or other legal process, or if we have a good faith belief that disclosure is necessary to comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities; (iii) if we believe it is appropriate in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Privacy Notice, or to exercise or defend our legal claims; or (iv) in any case where we have obtained your prior consent.
For Legal and Other Compliance. We may disclose Personal Information when we believe it is appropriate to: (a) comply with the law, (b) enforce or apply this Privacy Notice or our other policies or agreements, (b) protect our or our users’ rights, property or safety, (c) protect our users from fraudulent, abusive or unlawful use of, our Site, or (d) if we reasonably believe that an emergency involving immediate danger of death or serious physical injury to any person requires disclosure of communications or justifies disclosure of records without delay.
As Part of Business Transfers. We may disclose Personal Information as part of any merger, acquisition, debt financing, sale of company assets or other business transaction.
As Aggregated or Deidentified Information. We reserve the right to share or sell aggregated, anonymous or deidentified information about any individuals with non-affiliated entities for marketing, advertising, research or other purposes, without restriction. We do not limit the third parties’ use of the aggregated information.
As PHI Information. If information constitutes PHI, we will only use or share PHI in compliance with the privacy and data security requirements of HIPAA, and in conformity with the terms and conditions of any applicable Business Associate Agreement and our HIPAA Privacy Policy.

Security

Data Security. It is TOC’s policy to treat your Personal Information with complete confidentiality. We minimize the Personal Information we store and employ commercially appropriate and reasonable safeguards both online and offline to maintain the security, confidentiality, and integrity of information that we collect about you. We maintain physical, electronic and procedural security measures to safeguard your non-public personal information. We update and test our technology to improve the protection of our information about you and to assure the integrity of that information.

We educate our employees about the importance of confidentiality and customer privacy through standard operating procedures and special training programs.

Please note, however, that no transmission of data over the internet is 100% secure. While we employ reasonable measures to protect your Personal Information, we cannot guarantee that unauthorized third parties will not defeat those measures and use nonpublic Personal Information for improper purposes. We are not responsible for circumvention of any privacy settings or security measures contained on the Site or for actions of third parties. The safety and security of your information also depends on you, and you are responsible for keeping your password confidential. Also remember to log off your account and close your browser window when you have finished your visit. This is to ensure that others cannot access your account, especially if you are sharing a computer with someone else or are using a computer in a public place. Please refer to the Federal Trade Commission’s website at http://www.ftc.gov/bcp/menus/consumer/data.shtm for information about how to help protect yourself against identity theft.

Third Party Sites. This Privacy Notice applies only to information collected by TOC. We may provide links to third party websites from our Sites as a service to our users, but we have no ability to control, and we are not responsible for, the privacy and data collection, use, and disclosure practices of third party websites. When you click on links that take you to external websites, you will be subject to their privacy policies and practices and not ours. We encourage you to review and understand the privacy policies of such websites before providing them with any information.

Do Not Track Signals. Do Not Track is a privacy preference that users can set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. For information about Do Not Track, visit www.allaboutdnt.org. At this time, TOC does not respond to Do Not Track browser settings or signals. In addition, TOC may use other technology that is standard to the internet to track visitors to the Site. Those tools may be used by us and by third parties to collect information about you and your internet activity, even if you have turned on the Do Not Track signal.

Unauthorized Use. If you become aware of any unauthorized submission of information to TOC, including children’s information, please inform us by contacting us at the contact information listed below so that we may delete it.

Controlling Your Personal Information

TOC provides you the ability to exercise certain controls and choices regarding our collection, use and sharing of your information. Depending on where you reside, your options to control your Personal Information may include some or all of the following:

Requesting access to the Personal Information we hold about you and that we amend or delete it.
Choosing whether to receive marketing communications from us, including promotions, surveys, and information about products and services that may be of interest to you.
Control how the cookies we use interact with your browser.

At any time, you may exercise any of these controls and choices, express concerns, lodge a complaint, or obtain additional information about the use of your Personal Information by contacting us at [email protected].

Opting Out of Communications. We will only communicate with you if you want to hear from us. You can modify or limit the communications we send to you through our email vendor by clicking the “unsubscribe” link at the bottom of any of our emails. You may also contact us directly by email at [email protected]. Please be sure to include your full name, email address and specifically what information you do not want to receive.

TERMS

Terms of Use. We encourage you to familiarize yourself with the Site Terms of Use and Notice of Privacy Practices which governs all matters not set forth in this Privacy Notice.

Changes to this Privacy Notice. We may occasionally make changes to this Privacy Notice to ensure its accuracy. If we make changes, the revised Privacy Notice will be posted online and the date of the newest version will be listed. Please check back frequently, especially before you provide us with Personal Information, to determine the current scope of the Notice.

Governing Law. Those who choose to use or access the Site and/or Services from outside of the United States do so on their own initiative and are responsible for compliance with local laws, if and to the extent local laws are applicable. Notwithstanding the foregoing, and recognizing the global nature of the internet, each viewer and user shall comply with all local rules regarding online conduct and submission of acceptable materials. This Privacy Notice is governed and interpreted pursuant to the laws of the State of Oregon and the federal laws of the United States applicable therein, without regard to principles of conflicts of law that would impose the law of another jurisdiction, and you accept and submit to the exclusive jurisdiction of the state and federal courts located within Oregon.

International Transfer. We may transfer information that we collect about you to affiliated entities, or to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world. Please note that these countries and jurisdictions may not have the same personal information protection laws as your own jurisdiction, and you consent to the transfer of information over international borders and the use and disclosure of information about you, including Personal Information, as described in this Privacy Policy.

Contact Information

If you have any further questions about our collection and use of your Personal Information, or if you wish to exercise any of your rights over your Personal Information or if you have any questions about this Privacy Notice, please contact us at [email protected].

The Oregon Clinic, P.C.

Attention:
Compliance Officer

Address:
541 NE 20th Ave, Suite 225
Portland, OR 97232