Privacy Policy

Effective date: October 24, 2026

Ditmas Park Medical Care (“we,” “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share and protect information when you visit dpmedicalcare.com (the “Website”), call us, or email us using the details on it.

This policy covers the Website only. It is not our HIPAA Notice of Privacy Practices. If you are a patient, the HIPAA Notice for the practice that provides your care explains how we use and disclose protected health information and the rights you have under HIPAA. Please read it alongside this policy.

Ditmas Park Medical Care is the name of the shared medical office at 2020 Cortelyou Road in Brooklyn. Medical care is provided by independent practices: NY Family Physician PC and New York Interventional Spine & Pain Medicine PC. Each is a separate covered entity under HIPAA and has its own Notice of Privacy Practices. This policy does not replace either Notice.

By using the Website, you acknowledge this Privacy Policy and our Terms of Use. If you do not agree, please do not use the Website.

1. Information you give us

The Website does not have an appointment-request form or a general contact form. It provides a phone number, an email address, and a link to the patient portal.

If you call or email us, we receive the information you choose to share. Please do not email medical information. If you need to share medical information, use the patient portal or call the office and we will tell you how to send it safely.

The patient portal is a separate secure system. It is operated by our portal vendor. When you use the portal, the portal’s terms and the HIPAA Notice for your practice apply. The Website does not receive the information you enter in the portal. Do not use the portal for a medical emergency; call 911.

Ordinary email is not a secure or HIPAA-compliant channel. Please do not include symptoms, test results, diagnoses, medications, insurance details or other health information in an email. If you send health information by email, we may ask you to contact the office or use the portal instead. Our HIPAA Notice applies to health information we receive in the course of providing care, but it does not make ordinary email a secure channel for sending it. The office email is not monitored around the clock. For a medical emergency, call 911.

2. Information collected automatically

Like most websites, our hosting provider keeps short-lived standard server logs when you visit. These logs may include your IP address, browser type, device type, operating system, the pages you view, the date and time, and the page that referred you to us. We do not store IP addresses with appointment requests or other messages submitted through the Website. We use these logs only to keep the Website secure, diagnose problems and prevent abuse. We do not use them to build profiles or identify individual visitors.

An IP address can sometimes indicate an approximate location, but we do not use it to determine your precise location. We do not collect GPS location, and we do not use fingerprinting or cross-site tracking.

3. Cookies and third-party services

Cookies are small text files that a website stores in your browser. They can help a site work, remember your choices and understand how it is used. You can block or delete cookies in your browser settings, although some parts of the site may then work differently.

Our cookie banner lets you accept or reject non-essential cookies. Your choice is stored for up to 12 months. To change your choice later, clear the site’s cookies in your browser and reload the page; the banner will appear again.

We do not currently use Google Analytics, advertising pixels or social media trackers. If we add analytics or advertising tools in the future, we will update this policy and, where required, ask for your consent before using them.

Google Fonts is provided by Google and loads on every page. Google Maps is provided by Google and loads only when you press “Load interactive map” on the Home or Contact page. If you do not load the map, Google does not receive a map request from us. Google may receive your IP address and information about your browser when those services load, and Google Maps may set cookies after you load it. Google’s own privacy policy applies to that processing. You can block third-party requests in your browser; the site will still work, and the address and directions links on the Home and Contact pages will still work.

4. How we use your information

We use the information described above to:

• respond to your call or email;
• schedule and coordinate your care;
• answer questions you send us;
• keep the Website secure, prevent spam and abuse, and fix problems;
• comply with the law and enforce our Terms of Use.

Consent to contact. When you call or email us, you agree that we may call or email you back about your inquiry. We do not add you to a marketing list, and we do not send marketing emails or text messages. If you opt in, we may send appointment reminder texts. Message frequency varies, and message and data rates may apply. Reply STOP to stop. You can ask us to stop contacting you about an inquiry at any time. If you are a patient, you can also ask us to contact you in a specific way under the HIPAA Notice for your practice.

We do not sell, rent or trade your personal information, and we do not use it for advertising.

5. How we share information

We share information only in the limited circumstances below.

• Service providers. We use companies that help us run the Website, such as our hosting provider, our email service, our cookie-consent tool, and Google for fonts. Google Maps is used only if you choose to load it. They may access information only to provide those services to us and are expected to protect it. If you email us, your message passes through our email provider.
• Legal requirements. We may disclose information if we are required by law, such as in response to a subpoena, court order or lawful request from a government agency; to report abuse or protect someone’s safety; or to investigate fraud or security issues. If we disclose health information, we follow the HIPAA Notice for the practice involved and HIPAA.
• Business transfer. If the Website or the practice is sold, merged or reorganized, information may transfer to the successor organization as part of the practice, subject to this policy.
• Aggregated or de-identified information. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

We do not sell, rent or trade your personal information. We do not share it with advertisers or social media companies for advertising.

6. Your health information and HIPAA

This Website is not the patient portal. The patient portal is a separate secure system. Please do not use the Website to send medical records, test results, symptoms or messages about a medical emergency. If you need to share detailed medical information, use the patient portal or call the office.

If you are a patient, your protected health information is governed by the HIPAA Notice for the practice that provides your care. Each practice at this office has its own Notice. That Notice explains how your health information may be used and disclosed for treatment, payment and health care operations; the rights you have under HIPAA, including access, amendment, an accounting of disclosures, restrictions and confidential communications; and how to complain.

You may complain to us or to the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint. The HIPAA Notice explains how.

7. How we protect information

We use reasonable administrative, technical and physical safeguards designed to protect the information we collect. These include HTTPS on the Website, access controls, and limiting access to staff who need it to do their jobs.

No website or internet transmission is completely secure. Ordinary email is not encrypted end-to-end and may be intercepted, misdirected, or accessed by someone other than the intended recipient. We use reasonable safeguards for information we receive, but we cannot guarantee that an email will not be intercepted before it reaches us. Please do not send sensitive medical information by ordinary email. If you are a patient, use the patient portal or call us and we will tell you how to share it safely. If we discover a breach affecting your information, we will notify you and the appropriate authorities as required by law.

8. How long we keep information

• Website inquiries. If you call or email us, we keep the message for as long as needed to respond and for our records.
• Medical records. If you are a patient, we keep your medical record for the period required by New York and federal law. The HIPAA Notice applies.
• Server logs. Our hosting provider keeps short-lived standard logs for security and troubleshooting. We do not store IP addresses with appointment requests or other messages.
• Cookie choices. Your cookie preference is kept for up to 12 months.
• Patient portal. The portal is separate. Its records are governed by the portal terms and the HIPAA Notice for your practice.

9. Your choices and rights

You can ask us to:

• tell you what information we have about you from the Website;
• correct information that is wrong;
• delete information you sent us by email; or
• stop contacting you about an inquiry.

Contact our Privacy Officer using the details below. We may need to verify your identity before we act. We may keep some information if the law requires it or if we need it for our records. If you are a patient, your HIPAA rights are described in the HIPAA Notice for your practice.

You can change your cookie choices by clearing the site’s cookies in your browser and reloading the page. You can also set your browser to block cookies, although some features may not work.

We do not discriminate against you for exercising any of these choices.

10. Children’s privacy

The Website is intended for adults. The practice does not provide care to patients under 18. We do not knowingly collect personal information from children under 13 through the Website. If you believe a child has provided information, please contact us and we will delete it.

11. Links to other websites

The Website may link to other sites, such as Google Maps, the 988 Suicide & Crisis Lifeline, and the patient portal. We do not control those sites and are not responsible for their content or privacy practices. A link does not mean we endorse the site. The patient portal is operated by a separate vendor and has its own terms and privacy policy. When you leave our Website, the privacy policy of the site you visit applies.

12. Changes to this policy

We may update this policy from time to time. When we do, we will post the revised policy on this page and update the effective date. If we make a material change in how we use information we have already collected, we will provide notice as required by law and, where required, obtain your consent.

Your continued use of the Website after a change means you acknowledge the updated policy.

13. Contact us

If you have questions about this policy, or want to exercise a privacy choice, contact our Privacy Officer:

Privacy Officer
2020 Cortelyou Road
Brooklyn, NY 11226
Phone: 718-689-7353
Email: admin@dpmedicalcare.com

Please include “Privacy Policy” in the subject line of your email. Please do not email medical information; this address is for privacy questions and general website questions only. If you need this policy in another format, call us and we will help.

For complaints about how we handle your health information, see the HIPAA Notice for your practice. You may also contact the U.S. Department of Health and Human Services, Office for Civil Rights.

Effective date: October 24, 2026. This policy applies to dpmedicalcare.com.