Psychiatry Connection Privacy Policy

Effective Date: July 21, 2025 (last updated)

Psychiatry Services Professional Corporation Khurana Jeider, doing business as Psychiatry Connection (referred to as “Psychiatry Connection,” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains what information we collect through our website psychiatryconnection.com and related services (collectively, the “Site” or “Services”), how we use and share that information, and the choices you have. By using our Site or Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site or submit personal information. If you have any questions or concerns about this policy, you can contact us at contact@psychiatryconnection.com.

HIPAA Notice: Psychiatry Connection is a telehealth psychiatric service provider. Any personal health information you provide to us for the purposes of medical diagnosis or treatment is protected under the Health Insurance Portability and Accountability Act (HIPAA). We will use and disclose your protected health information (PHI) only as permitted by HIPAA and applicable law and will not use or share your PHI for marketing or advertising without your consent . We will provide you with a separate Notice of Privacy Practices (describing in detail how we safeguard your health information) when you become a patient, as required by law. This website Privacy Policy focuses on how we handle personal information in our website and marketing activities, distinct from our HIPAA Notice of Privacy Practices.

Information We Collect

We collect information from you in two ways: (1) information you choose to provide to us, and (2) information collected automatically through technology (such as cookies) when you use our Site.

• Information You Provide to Us: When you use our Site or Services, for example by filling out our “Get Started” HIPAA-compliant JotForm or contacting us, you may provide personal information, including:
  
  • Contact Information: Your name, email address, phone number, and mailing address.
    
  • Demographic Details: Your state of residence or location (to confirm service availability).
    
  • Health Information: Information related to your health or medical needs that you voluntarily provide on intake forms (such as the reason for seeking care, medical history, current medications, or insurance details, if requested). We collect only the minimum necessary health information needed to evaluate and provide our Services, and we treat this as protected health information under HIPAA.
    
  • Communication Content: If you contact us via email, phone, or form, we collect the content of your communications and any additional information you choose to share. This may include inquiries about our services or scheduling telehealth appointments. We will use this information to respond to you and provide assistance.
    
• Information We Collect Automatically: Like most websites, our Site automatically collects certain technical data about your visit. This includes:
  
  • Usage Data: Details of your visits to our Site, such as pages viewed, links clicked, referring webpage, and the dates/times of access.
    
  • Device and Network Information: Your IP address, browser type and version, device identifiers, operating system, and Internet service provider. This information helps us ensure the Site is functioning properly for different users.
    
  • Cookies and Tracking Technologies: We and our third-party partners use cookies, pixels, and similar tracking technologies to collect data about your interactions with the Site. For example, when you visit our Site, we (or our analytics and advertising partners) may set cookies on your browser that track which pages you view and how you navigate the Site . This helps us analyze trends, administer the website, and tailor our marketing. Please see “Cookies and Tracking” below for more details on the technologies we use and your choices.
    

We do not knowingly collect personal information from children under 13 years of age through the Site. Our Site is not directed to anyone under 13. If you are a parent or guardian and believe your child under 13 has provided personal information, please contact us so we can delete it. (See also the Children’s Privacy section below.)

How We Use Your Information

We use the personal information we collect for a variety of purposes consistent with the provision of our telepsychiatry services and the operation of our website. These purposes include:

• Providing and Improving Services: We use your information to provide our telehealth psychiatric services and support. For example, we use the information you submit on the “Get Started” form to evaluate if our services are available in your area and to match you with an appropriate psychiatrist or schedule an appointment. We may also use information to personalize your experience and improve our Site’s functionality and content.
  
• Communication: We use contact information (email or phone number) to communicate with you. This includes responding to your inquiries, sending confirmations or updates about appointments, and providing customer support. If you provide a phone number, you consent that we may call or text you at that number regarding your care or our services (you can opt out of non-essential communications at any time).
  
• Marketing and Outreach: We may use your contact details or Site usage data to send you informational materials or promotions about Psychiatry Connection that might interest you, but only in accordance with applicable law. For example, if you provided your email, we might send newsletters or offers; you can unsubscribe from marketing emails at any time. We may also use data collected through cookies to retarget advertisements about our services on platforms like Google, Facebook/Instagram, or Reddit (see “Cookies and Tracking” below), in order to reach people who have shown interest in Psychiatry Connection .
  
• Analytics and Performance: Information collected automatically (e.g. via Google Analytics) is used to understand how users find and use our Site, which pages are most popular, and how effective our content or advertising is. This helps us optimize user experience and site performance. We may also use aggregated, de-identified data for internal analyses, research, and reporting (for example, to track the number of visitors to our site or the success of an ad campaign) .
  
• Compliance and Legal Obligations: We may process and retain your information as needed to comply with laws and regulations (for instance, maintaining medical records as required by health regulations or responding to lawful requests by authorities). We also use information to enforce our Terms and Conditions, to detect or prevent fraud, security incidents, or other malicious activity, and to protect the rights and safety of our patients, staff, and others .
  
• Facilitating Healthcare Operations: If you become a patient, we will use your information for treatment and health care operations. This includes sharing relevant information with the licensed psychiatrist or nurse practitioner who will be treating you, scheduling follow-ups, processing payments or insurance claims (if applicable), and other purposes permitted under HIPAA for health care operations. We only use the minimum necessary PHI for these purposes .
  
• With Your Consent: If we intend to use your information for any purpose not covered by this Privacy Policy or the Notice of Privacy Practices, we will explain the purpose at the time of collection and will do so only with your consent. For instance, if we ever want to publish a patient testimonial or success story that includes your personal information, we would obtain your permission first.

We do not sell your personal information to third parties for their own commercial uses. In other words, we do not exchange your personal data for money. Any sharing of data with third-party analytics or advertising providers is solely to allow us to use those services for our purposes (see below), and not for the third party’s independent use. We also never sell or rent your protected health information (PHI) for any purpose .

How We Share Your Information

We value your privacy and only share personal information in limited scenarios, primarily to facilitate the Services and as required by law. The categories of recipients with whom we may share information include:

• Service Providers: We may share information with trusted third-party vendors who perform services on our behalf and under our instructions. These include:
  • Technology/Hosting Providers: Companies that host our website or databases, or provide IT infrastructure, cloud storage, or data backup services.
    
  • Analytics Providers: For example, we use Google Analytics to help us understand how users interact with our Site, and in doing so Google may receive certain usage data (like your IP address or pages visited) . These providers are bound by contracts to use personal data only as needed to provide their services to us.
    
  • Advertising Partners: We use third-party advertising networks (like Google Ads, Meta/Facebook, Instagram, Reddit) to promote our services. We may allow these partners to set cookies or pixels on our Site to measure ad effectiveness and target ads (e.g., to show our ads to users who have visited our Site) . The information shared is typically pseudonymous (such as a cookie ID or aggregated audience segment). We do not share your name, contact, or health details with advertisers without your explicit consent.
    
  • JotForm: The information you submit through our “Get Started” form is collected via JotForm, a third-party form service that is HIPAA-compliant. JotForm stores the form responses on our behalf so we can review your info and contact you. JotForm is contractually obligated to protect your data and not use it for any other purposes.
    
  • Payment Processors: If in the future we collect payments through the Site (for example, for appointment fees), we would use a secure payment processor. Such processors (e.g., Stripe or similar) would handle your payment card information; we would not store full credit card numbers. These processors only use your financial information to process transactions you’ve authorized.
    
• Within Our Organization and Affiliates: Your information may be shared among authorized personnel within Psychiatry Connection who need to know it to perform their duties (for example, scheduling staff, your treating clinician, or our administrative team). All such personnel are bound by confidentiality and privacy obligations. If Psychiatry Connection partners with or is acquired by another healthcare provider or merges with another practice, your information might be shared with that entity as part of the integration, under strict privacy safeguards.
  
• Healthcare Providers: If as part of your care you request that we coordinate with other healthcare providers (for instance, your primary care physician or a specialist), or if we refer you to an outside provider, we will share relevant health information with them with your authorization or as otherwise permitted by law. For example, with your consent, we can share a summary of your telepsychiatry consultation with your primary doctor to ensure continuity of care .
  
• Legal Compliance and Protection: We may disclose your information when required by law, such as:
  
  • In response to a valid subpoena, court order, or legal process, to the extent we are legally compelled to do so.
    
  • To report suspected abuse, neglect, or domestic violence as required by law.
    
  • When necessary to protect your vital interests or the safety of others – for example, if you express an intent to harm yourself or someone else, we may notify authorities or family members as appropriate and as allowed by law.
    
  • To law enforcement or regulatory agencies if needed for investigations (for instance, reporting a crime that occurred on our premises or during a telehealth session, or as part of a public health mandate).
    
  • To defend or enforce our legal rights, protect our property, or ensure the safety of Psychiatry Connection personnel, patients, or the public. This includes sharing information with our legal counsel or law enforcement to address violations of our Terms or policies.
    
• Business Transfers: If Psychiatry Connection undergoes a business transaction such as a merger, acquisition by another company, sale of all or a portion of its assets, or financing, your personal information may be disclosed to the new owners or parties to the transaction as part of due diligence or asset transfer, under appropriate confidentiality agreements. In such cases, we would ensure the recipient is bound to honor the commitments of this Privacy Policy with respect to your personal data.
  
• With Your Consent: In any situation not covered above, we will seek your consent before sharing your personal information. You have the right to tell us not to share your information with certain parties. For example, if you wanted us to share information with a family member or employer, we would do so only with your written authorization. Conversely, if you want your information sent to a specific third party (like if you request us to send your records to another doctor), we will do so with your consent and direction.

Importantly, we do not sell your personal information. We also do not share or disclose your sensitive health information except as allowed by HIPAA and described in our Notice of Privacy Practices. Any third parties with whom we share data are required to protect it and use it only for the purposes we specify.

Cookies and Tracking Technologies

Cookies are small text files placed on your device that help websites function and gather information. Psychiatry Connection and our partners use cookies and similar tracking technologies (such as web beacons, pixels, and device identifiers) to provide and improve our Site and to deliver relevant advertising. This section explains how we use these technologies and your choices.

• Types of Cookies We Use:
  
  • Necessary Cookies: These are essential for the Site to operate correctly (for example, to enable page navigation or remember your cookie preferences). Without these, certain features may not work. Because they are necessary for the Site’s basic functionality, you cannot opt-out of necessary cookies.
    
  • Analytics Cookies: We use Google Analytics (GA4) to collect anonymized information about how visitors use our Site . Google Analytics uses cookies to track things like how you found our Site, which pages you visit, how long you stay, and what actions you take. We use these insights to improve content and user experience. Google may also set cookies to help distinguish unique users and throttle request rates. The data we get from Google Analytics does not include direct personal identifiers (we do not see your name or email via analytics, but we might see an IP address and general location). Google’s use of data collected from our Site is described in Google’s Privacy Policy and its document “How Google uses data when you use our partners’ sites or apps.” .
    
  • Advertising Cookies / Pixels: We partner with advertising platforms that use cookies or pixels to deliver our ads and measure their performance:
    
    • Google Ads: We use Google Ads remarketing cookies (including Google’s DoubleClick cookies) to show ads for Psychiatry Connection on other websites you visit, based on your past visits to our Site . For example, if you visited our Site, you might later see an advertisement for Psychiatry Connection when you’re on Google or another site in Google’s ad network. These cookies also help us limit how often you see our ad and measure the effectiveness of our campaigns. Google may consider this use as a “personalized advertisement.” (Opt-out: You can opt out of Google’s personalized advertising by visiting your Google Ad Settings and/or installing the [Google Analytics Opt-out Browser Add-on] , which prevents Google Analytics from using your data.)
    • Meta Pixel (Facebook/Instagram): We use the Meta Pixel (formerly Facebook Pixel) on our Site . This tool by Facebook allows us to understand the actions users take on our Site after interacting with our ads on Facebook or Instagram. It helps us “retarget” ads to those users or find similar audiences. The Meta Pixel may trigger cookies to collect device identifiers and information about your browsing on our Site, which gets sent to Facebook. Facebook/Meta can combine this data with your Facebook or Instagram profile if you have one, and use it for their own advertising purposes in accordance with Facebook’s Data Policy . (Opt-out: You can control whether Facebook shows you targeted ads by adjusting your Facebook Ads Settings to withdraw consent for data use by Meta Pixel .)
    • Reddit Pixel: Our Site may use a Reddit Ads pixel for similar advertising purposes on Reddit. This pixel tracks if you visit our Site so that we can measure ad conversions and potentially show follow-up ads on Reddit. (Opt-out: To opt out of Reddit targeted ads, you can adjust your Reddit Personalization and Data settings when logged into Reddit, and/or use browser settings to block third-party cookies.)
    • Other Third-Party Tools: We may utilize other analytics or marketing tools over time (such as pixels from LinkedIn, Twitter, or other advertising networks) to reach our audience. If we do, we will update our policy accordingly. These tools similarly may set cookies to collect limited information about your visit. We encourage you to review the privacy policies of any platforms on which you see our ads for information on how they handle data.
      
• Cookie Consent & Your Choices: On your first visit to our Site (and periodically thereafter), you will see a cookie consent banner. We ask for your consent to use non-essential cookies (like analytics and advertising cookies). You have the right to choose which cookies we use:
  • If you click “Accept All Cookies,” you are giving us permission to use all categories of cookies described above.
    
  • If you click “Reject” or decline non-essential cookies, we will not set those cookies on your browser. The Site will still function, but certain personalized features or analytics may be unavailable or less accurate. For example, if you opt out of analytics cookies, we won’t be able to include your Site usage in our metrics, which is fine – it’s your choice.
  • You can also click “Customize” (if provided) to selectively choose which categories of cookies to allow (for instance, you might allow analytics but not advertising cookies, or vice versa).
    
  • Once you’ve made your choice, you can always change your mind later. We will provide a mechanism (such as a “Cookie Preferences” link on our Site) for you to update your consent and cookie settings at any time.
    
  • Browser Controls: In addition to our website controls, you can manage cookies through your web browser settings. Most browsers allow you to block or delete cookies. You can usually find these options in the browser’s “Options” or “Preferences” menu. Keep in mind that blocking all cookies (including necessary ones) might impair some functionality of websites, including ours . For the best experience, we recommend that you allow at least the strictly necessary cookies. If you block advertising cookies, you may still see ads, but they will be less relevant to you.
    
  • Do Not Track: Some browsers offer a “Do Not Track” (DNT) setting that lets you signal to websites that you do not want to be tracked. The internet industry has not yet agreed on a standard for how sites should respond to DNT signals, so currently our Site does not respond differently to a browser DNT signal . Instead, we provide you with the cookie consent tools described above. We will honor any specific legal requirements for DNT signals if and when a standard is established.

• Third-Party Analytics/Ads Opt-Out: In addition to the options above, here are links to opt-out pages provided by some of our partners:
  • Google: You can opt out of Google Analytics tracking by using the [Google Analytics Opt-out add-on] . To opt out of personalized Google ads, go to Google’s [Ad Settings] .
    
  • Facebook/Meta: Adjust your ad preferences on Facebook via your [Facebook Ads Settings] (you may need to be logged in).
    
  • Reddit: See Reddit’s privacy settings or opt-out instructions on their site (e.g., toggle off “Personalize Ads” in your Reddit account settings).
    
  • Network Advertising Initiative (NAI): You can visit the NAI’s opt-out page or the Digital Advertising Alliance’s opt-out page to opt out of many ad networks’ targeted ads. Note that these opt-outs often work via cookies, so if you clear your cookies you might need to opt out again.

By providing clear choices and information, we aim to comply with privacy regulations (like the EU’s GDPR and US state laws) that require user consent for certain cookies. If you have any issues or questions about adjusting your cookie preferences, please contact us.

Data Security and Storage

We take the security of your personal information seriously. Psychiatry Connection has implemented a variety of administrative, technical, and physical safeguards to protect your data against unauthorized access, disclosure, or loss. These include, for example:

• Encryption: Any sensitive data we collect (especially health information) is transmitted over secure, encrypted connections (HTTPS). Our databases and form submissions via JotForm are encrypted and/or stored in HIPAA-compliant environments.
  
• Access Controls: We restrict access to personal information to those personnel and service providers who need it to perform their duties. All Psychiatry Connection staff are trained on confidentiality and HIPAA obligations. We use strong passwords and multi-factor authentication where possible to access systems holding PHI.
  
• Secure Infrastructure: Our website hosting and IT systems employ firewalls, intrusion detection systems, and regular security updates to guard against vulnerabilities. We also utilize secure cloud storage for data backups. Third-party vendors handling data on our behalf are vetted for robust security practices (for example, JotForm and Google are compliant with industry security standards for healthcare data).
  
• Retention Policies: We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. For instance, as a medical practice, we may be required by state law to retain health records for a minimum period (often 7 years or more). When personal information is no longer needed, we will dispose of it in a secure manner (such as deletion of electronic records and shredding of any physical documents).
  
• Payment Info: (If applicable) Any payment transactions will be processed using secure encryption. We do not store your full credit card information on our systems; it is handled by compliant payment processors.
  
• Monitoring: We monitor our systems for possible vulnerabilities and attacks. While no website or online service can guarantee 100% security, we strive to update and patch our systems to address security threats.

Despite our precautions, no method of transmission over the Internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security of your data. You share information at your own risk. However, we will promptly notify you, consistent with applicable laws, in the event of any data breach that compromises your personally identifiable information or protected health information. By using our Site, you acknowledge and accept these risks.

Your Rights and Choices

Depending on where you live and applicable law, you may have certain rights regarding your personal information. Psychiatry Connection is committed to honoring applicable data protection rights, which may include:

• Access and Transparency: You have the right to request a copy of the personal information we hold about you and to be informed how we use it. We will provide you with a summary of the data and our uses if you ask.
  
• Correction: If any of your personal information is inaccurate or outdated, you have the right to request that we correct or update it. For example, if you change your email or notice an error in your record, please let us know.
  
• Deletion: You can request that we delete personal information that we hold about you. Note: If you are or have been a patient, we might be required to retain certain medical information for legal compliance and patient safety (we will let you know if that’s the case). For non-essential data (like a marketing email list), we can certainly delete upon request. When we no longer need your information, we will securely dispose of it as described above.
  
• Withdrawal of Consent: If we are processing your personal information based on your consent (for instance, you consented to receive marketing emails or to allow non-essential cookies), you have the right to withdraw that consent at any time. For example, you can unsubscribe from our newsletter using the link in the emails, or adjust your cookie settings as described above. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
  
• Opt-Out of Communications: We provide methods to opt out of marketing communications. You can click “unsubscribe” in any promotional email we send. If you have provided us with SMS consent for appointment reminders or updates, you can reply “STOP” to opt out of further texts (note: opting out of reminder texts may mean you miss appointment notices, so be sure to coordinate with us on alternative communication).
  
• Do Not Sell or Share (California/CCPA): California residents have the right to direct us not to sell or share their personal information (as defined under California law). As noted, we do not sell personal data for money . In the context of California’s privacy law, “share” can include some targeted advertising activities. We have structured our use of cookies so that they are only deployed with consent (which satisfies the “do not sell/share” requirement if you decline cookies). If you have any concerns or wish to formally opt out of any potential “sharing” of your data under California law, you can contact us or use the cookie preference tool.
  
• California “Shine the Light”: California Civil Code Section 1798.83 permits users of our Site who are California residents to request certain information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing without consent. California residents may also have rights under the California Consumer Privacy Act (CCPA) / CPRA to request information about the categories of personal info we collect, the sources, purposes, and third parties with whom we share it. We provide much of this information in this Privacy Policy. You may contact us to exercise your rights to access or delete your data, or to ask about our data practices specific to you.
  
• Colorado, Virginia, Connecticut, Utah Residents: New state privacy laws provide similar rights (access, correction, deletion, and the right to opt out of certain data uses like targeted advertising or sale of personal data). If you are a resident of Colorado, Virginia, Connecticut, Utah (or any state with privacy laws) and utilize our Site or Services, you can exercise your rights by contacting us. For example, Colorado residents have the right to opt out of processing of personal data for targeted advertising – you may use our cookie management tool to do so (which is a way of opting out of targeted advertising cookies) and/or contact us for assistance.
  
• EU/EEA Residents (GDPR): Although our Services are currently focused in the United States, if you are using our Site from the European Union or a similar jurisdiction, you have the rights under the General Data Protection Regulation (GDPR), such as the right to access, rectify, or erase your data, restrict or object to processing, and data portability. You also have the right to lodge a complaint with a supervisory authority. We will extend those rights to you as applicable. Note that the legal bases for our processing of data (under GDPR terms) are typically: your consent (for cookies, marketing); performance of a contract (providing you healthcare services); and our legitimate interests (running and improving our Site, ensuring security) or compliance with legal obligations (healthcare record-keeping laws, etc.).
  
• Authorized Agents: If you wish to have an authorized agent make a request on your behalf (as allowed by certain laws like CCPA or Colorado’s law), we will take steps to verify the agent’s authority and your identity before fulfilling the request, for your security.

How to Exercise Your Rights: To exercise any of your privacy rights, please contact us at contact@psychiatryconnection.com with your request. Provide enough information for us to verify your identity (we may ask for additional information if needed to protect your data from unauthorized access) and clearly describe what action you want us to take. We will respond within the timeframe required by law (for example, under CCPA, within 45 days, with possible extension). There is no charge for making a privacy rights request, though if requests become excessive or manifestly unfounded, we reserve the right to charge a reasonable fee or refuse, as permitted by law.

We will not discriminate against you for exercising any of these rights. That means if you choose to opt out of cookies or request deletion of your data, we will not deny you services or provide a different level of service, except where your request makes it impossible for us to provide the service (for example, if you ask us to delete all your information while you are still a patient, we might need to terminate the service after fulfilling your request, as we cannot provide care without any records). We will explain any impact to you at the time of your request so you can decide how to proceed.

Children’s Privacy

Our Site and Services are not directed to children under 13. We do not knowingly collect personal information online from individuals under the age of 13. If you are under 13, do not use this Site or provide any information about yourself. If we learn that we have inadvertently collected personal data from a child under 13 without proper parental consent, we will delete that information as quickly as possible.

For minors aged 13 to 17 who are interested in our Services: Psychiatry Connection requires parental or legal guardian consent before providing telepsychiatry services to minors. If you are under 18, you should only use this Site and provide personal information with the involvement and consent of your parent or guardian . Parents/guardians should supervise the minor’s use of our Site and Services. We may require verification of a parent’s authority and consent in compliance with applicable laws before a minor can receive services.

If you are a parent or guardian and believe your child under 18 has provided us information or is using our Services without your consent, please contact us. We will work with you to address the situation, which may include deleting the data or obtaining proper consent.

International Users and Data Transfers

Psychiatry Connection is based in the United States and our Services are intended for users in the U.S., specifically in the states we operate (AZ, UT, CO, ID, MT, WA). If you are visiting our Site from outside the United States, please be aware that any information you provide or that we collect will be transferred to and processed in the United States or other jurisdictions where our service providers are located. The data protection laws in the U.S. may differ from those of your country of residence. By using our Site or providing us with information, you acknowledge that your information will be handled as described in this Privacy Policy and will be transferred to the U.S.

We will handle personal information of international users in accordance with this Policy. For users in jurisdictions with stricter data protection laws (such as the EU’s GDPR), we will take appropriate measures to ensure an adequate level of data protection, such as using Standard Contractual Clauses or other legal mechanisms for data transfer when required. If you have questions about international data transfers, you can contact us.

Updates to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will:

• Post the updated Policy on this page with a new “Effective Date.”
  
• If the changes are significant, we may provide a more prominent notice (such as a banner on our Site or an email notification, if appropriate).

Your continued use of our Site or Services after any changes to the Privacy Policy become effective constitutes acceptance of those changes. We encourage you to periodically review this page for the latest information on our privacy practices.

If you do not agree with any updates or changes, you should stop using the Site and Services and contact us if you wish to have your data removed.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please do not hesitate to contact us:

Psychiatry Connection Privacy Officer

Email: contact@psychiatryconnection.com

 

(Please note: The above contact information is for privacy inquiries. For general support or appointments, you may contact us through the methods listed on our website’s Contact page.)

We are dedicated to protecting your privacy and will do our best to address any issue. If you feel we have not satisfactorily resolved a privacy concern, you may also contact the regulatory authority in your jurisdiction (for example, your state’s Attorney General or, if applicable, a health privacy regulator or data protection authority).