Premier Pain Management
Schedule Consultation

Privacy Policy

PRIVACY POLICY

and

NOTICE OF PRIVACY PRACTICES

Premier Pain Management Arizona

Comprehensive Pain Management • Chiropractic Care • Interventional Procedures
Serving the Phoenix Metropolitan Area Since 1994

 

Location Address Phone
Phoenix (Maryvale) 7141 W Thomas Rd, Ste 101
Phoenix, AZ 85033		 (623) 849-3003
Mesa 1955 S Val Vista Dr, Ste 126
Mesa, AZ 85204		 (480) 954-2491
Queen Creek 20008 S Ellsworth Rd, Ste 105
Queen Creek, AZ 85142		 (480) 660-9202

 

Effective Date: October 25, 2026  |  Last Updated: October 25, 2026

Premier Pain Management Arizona (“we,” “us,” “our,” or the “Practice”) operates the website at https://premierpainaz.com/ and provides non-surgical pain management, chiropractic care, and interventional procedures at our three Arizona locations. We are committed to protecting the privacy of all website visitors and the confidentiality of protected health information (PHI) of our patients in accordance with the Health Insurance Portability and Accountability Act (HIPAA), applicable state laws, and California privacy laws where they apply to California residents.

This document serves as both our general Website Privacy Statement and our HIPAA Notice of Privacy Practices. It applies to information collected through our website as well as PHI created, received, maintained, or transmitted in the course of providing healthcare services. By using our website or receiving services from us, you acknowledge that you have read and understand this policy.

 

1. Website Privacy Statement

Scope. This Website Privacy Statement governs the collection, use, disclosure, and protection of information collected from visitors to our website. It does not apply to information collected offline or through other channels, except as noted for patient information, which is also governed by the HIPAA section below. Your use of the website constitutes acceptance of these practices.

1.1 Information We Collect

We may collect the following categories of information:

  • Personally Identifiable Information (PII): Information you voluntarily provide through contact forms, appointment request forms, or other submissions, such as your full name, email address, phone number, mailing address, date of birth, insurance information, and details about your pain condition or reason for inquiry.
  • Demographic and Preference Data: Anonymous or aggregated information such as ZIP code, age range, gender, areas of interest (e.g., specific conditions like back pain or sciatica), and how you heard about us.
  • Technical and Usage Data: Automatically collected information including your IP address, browser type and version, operating system, device type, referring/exit pages, date/time of visits, pages viewed, time spent on site, and clickstream data. We may also collect location data if permitted by your device/browser settings.
  • Health-Related Information: Any health symptoms, medical history, or treatment preferences you voluntarily disclose via website forms. Note: Once you become a patient or this information is used in connection with care, it becomes Protected Health Information (PHI) subject to the HIPAA Notice below.
  • Communications Data: Records of your communications with us via email, phone, text, or website forms, including appointment requests, feedback, or complaints.

We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected such information, please get in touch with us immediately so we can delete it in accordance with the Children’s Online Privacy Protection Act (COPPA).

1.2 How We Use Your Information

We use the information we collect for the following purposes:

  • To operate, maintain, and improve our website, services, and user experience;
  • To respond to your inquiries, schedule appointments, provide information about our pain management and chiropractic services, and follow up on requests;
  • To process and manage patient intake, insurance verification, and auto accident/personal injury claims documentation;
  • To send appointment reminders, treatment information, or health-related communications (you may opt out of non-essential communications);
  • To analyze website traffic and usage patterns using analytics tools to improve our content and offerings;
  • To detect, prevent, and address technical issues, security incidents, fraud, or abuse;
  • To comply with legal obligations, enforce our Terms of Service, and protect the rights, property, or safety of our patients, staff, and the public;
  • For other purposes with your consent or as otherwise permitted or required by law.

1.3 Cookies, Tracking Technologies, and Analytics

We and our third-party service providers use cookies, web beacons, pixels, local storage, and similar tracking technologies to enhance your browsing experience, remember preferences, analyze site performance, and deliver relevant content. Specifically:

  • Essential cookies for site functionality (e.g., form submissions, session management);
  • Analytics and marketing cookies and pixels (including Google Analytics 4, Google Tag Manager, and the Facebook Pixel) to understand visitor behavior, traffic sources, popular content, and the effectiveness of our marketing. These tools may collect anonymized or pseudonymized data. We do not share identifiable patient health information with these providers for advertising purposes without appropriate consent or a Business Associate Agreement where required.
  • Preference and functionality cookies to remember form data or customize content based on your location or interests;
  • We use limited marketing technologies (such as the Facebook Pixel) for measurement and audience insights. We do not currently engage in cross-site behavioral advertising that would constitute a “sale” or “share” of personal information under the CCPA/CPRA.

You can manage or turn off cookies through your browser settings (typically under Privacy or Security settings). Note that disabling certain cookies may affect website functionality, such as the ability to submit forms or maintain login sessions. For more information on Google Analytics and how to opt out, visit Google’s privacy page.

Do Not Track (DNT) Disclosure (CalOPPA): Our website does not respond to Do Not Track (DNT) signals sent by browsers at this time. We continue to collect information as described in this policy regardless of DNT settings. We will update this disclosure if our practices change.

1.4 Information Sharing and Disclosure

We do not sell, rent, lease, or trade your personal information for monetary or other valuable consideration. We may share information in the following limited circumstances:

  • Service Providers and Business Partners: With trusted third parties who perform services on our behalf (e.g., website hosting, form processing, email delivery, analytics providers, IT support, scheduling software vendors). These parties are contractually obligated to use the information only for the purposes we specify and to maintain appropriate confidentiality and security.
  • Legal and Safety Requirements: When required by law, court order, subpoena, or governmental regulation; to enforce our Terms; to protect the rights, property, or safety of Premier Pain Management, our patients, employees, or the public; or in connection with a legal investigation.
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction, subject to the privacy policy of the acquiring entity.
  • With Your Consent: For any other purpose with your explicit consent.
  • Aggregated/Anonymized Data: We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you for research, marketing analytics, or other purposes.

Third-Party Links: Our website may contain links to external sites (e.g., insurance portals, medical resources, or partner sites). We are not responsible for the privacy practices, content, or security of those third-party sites. We encourage you to review their privacy policies before providing any information.

Third-Party Forms, Chat, and CRM Tools

Our website uses third-party platforms to collect information, facilitate communication, and manage patient interactions. These currently include:

HighLevel / LeadConnector for forms and CRM (forms may load via api.smbcrm.com); Emitrr for website chat and messaging; Google Tag Manager and Google Analytics 4 for analytics and tag management; and the Facebook Pixel for marketing measurement.

Information you submit through these tools — including contact details, appointment requests, and any health-related information you choose to share — may be processed and stored by those third-party providers on our behalf. When these tools handle Protected Health Information (PHI), we require the providers to enter into Business Associate Agreements as required by HIPAA. We encourage you to review the privacy policies of any third-party tools you interact with on our website.

1.5 Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your information from unauthorized access, use, disclosure, alteration, or destruction. These include:

  • Encryption of data in transit using industry-standard SSL/TLS protocols;
  • Secure hosting environments with firewalls, intrusion detection, and regular security updates;
  • Access controls limiting PHI and sensitive data to authorized personnel on a need-to-know basis;
  • Staff training on privacy and security policies;
  • Regular risk assessments and monitoring;
  • Secure disposal or destruction of records when no longer needed, in accordance with retention requirements.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law (including HIPAA breach notification rules and Arizona breach notification statutes).

1.6 Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations (including medical record retention requirements under Arizona law, typically a minimum of 7 years for adult patients or longer for certain cases), to resolve disputes, and to enforce our agreements. Website analytics data is typically retained in aggregated form for a limited period. When information is no longer needed, we securely delete or anonymize it.

1.7 Your California Privacy Rights (CCPA/CPRA & CalOPPA)

If you are a resident of California, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) and the California Online Privacy Protection Act (CalOPPA). These rights apply to personal information we collect through our website or in the course of providing services, subject to certain exceptions (particularly for information that constitutes PHI protected under HIPAA, which is generally exempt from CCPA but still subject to strong HIPAA protections).

We do not “sell” personal information as that term is defined under CCPA, nor do we engage in cross-context behavioral advertising that would trigger a right to opt-out of “sharing.” We also do not use or disclose sensitive personal information (such as health-related data) for purposes other than those permitted under applicable law or with your consent.

Your Rights Include:

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you in the preceding 12 months, the categories of sources from which it was collected, the business or commercial purposes for collecting or selling it (if applicable), and the categories of third parties with whom we shared it. You may also request the specific pieces of personal information we hold about you.
  • Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to important exceptions. For example, we may retain information necessary to complete a transaction, detect security incidents, comply with legal or regulatory obligations (including medical record retention and HIPAA), exercise free speech rights, or for internal uses aligned with your expectations. Health information in medical records often falls under these exceptions.
  • Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes of processing.
  • Right to Opt-Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information. As noted above, we currently do not sell or share personal information in a manner that triggers this right.
  • Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information (which includes personal information that reveals health conditions, biometric data, etc.) to only what is necessary to perform the services or provide the goods you requested, or for certain other limited purposes permitted by CPRA. Because we are a HIPAA-covered entity, HIPAA primarily governs our use of health information and provides robust protections.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights, including by denying goods or services, charging different prices, or providing a different level or quality of service.

How to Exercise Your Rights: To submit a verifiable consumer request, please get in touch with our Privacy Officer by phone at (480) 954-2491 or by email. Please provide sufficient information to allow us to reasonably verify your identity (e.g., full name, contact information, description of your relationship with us, and specifics of your request). For deletion or access requests involving significant personal information, we may require additional verification steps or a signed declaration under penalty of perjury.

We will respond to verifiable requests within 45 days of receipt (we may extend by an additional 45 days with notice). There is generally no fee for making a request or for the first two requests in 12 months. If you use an authorized agent to submit a request on your behalf, we may require proof of authorization and verification of your identity.

Note on Healthcare Records: Many of your rights regarding medical records and PHI are governed by HIPAA (see Section 2 below), which provides you with rights to access, amend, and receive an accounting of disclosures of your health information. CCPA rights apply primarily to non-PHI personal information collected via the website or other non-treatment contexts. Where both apply, we will honor your rights to the fullest extent permitted by law.

1.8 Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last Updated” date at the top of this document, post the revised policy on our website, and make it available at our clinic locations. Your continued use of the website after any such changes constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

2. HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Premier Pain Management Arizona (“Practice,” “we,” “us,” or “our”) is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations (the “Privacy Rule” and “Security Rule”). We are required by law to maintain the privacy of your protected health information (PHI) — individually identifiable health information that relates to your past, present, or future physical or mental health or condition, the provision of healthcare to you, or the past, present, or future payment for the provision of healthcare to you — and to provide you with this Notice of our legal duties and privacy practices with respect to your PHI.

This Notice applies to all PHI created, received, maintained, or transmitted by the Practice, whether in electronic, paper, or oral form. It describes how we may use and disclose your PHI, your rights regarding your PHI, and our obligations concerning your PHI.

2.1 How We May Use and Disclose Your Protected Health Information

We may use or disclose your PHI for purposes of treatment, payment, and healthcare operations without your written authorization, as permitted by HIPAA. We may also use or disclose your PHI for other purposes with your written authorization or as otherwise permitted or required by law. The following describes the most common uses and disclosures:

Treatment

We use and disclose your PHI to provide, coordinate, and manage your pain management and chiropractic care. Examples include:

  • Evaluating your condition through history, physical examination, and review of diagnostic studies;
  • Performing interventional procedures such as epidural steroid injections, facet joint injections, radiofrequency neuroablation, nerve blocks, and other minimally invasive techniques;
  • Providing chiropractic adjustments, physical medicine modalities, and rehabilitative therapies;
  • Prescribing medications (including responsible opioid management when clinically appropriate) and monitoring your response;
  • Coordinating care with your primary care physician, referring specialists, physical therapists, imaging centers, laboratories, pharmacies, and other healthcare providers involved in your treatment;
  • Discussing your care with family members, friends, or other individuals you designate as involved in your care or payment for care (you may request restrictions on such disclosures);
  • Sending appointment reminders via phone, voicemail, text message, email, or mail (you may request alternative methods or locations);
  • Providing you with information about treatment alternatives, health-related products, or services that may be of interest to you (you may opt out of certain communications).

Payment

We use and disclose your PHI to obtain payment for the healthcare services we provide. Examples include:

  • Verifying your insurance coverage and benefits before or during treatment;
  • Submitting claims and billing statements to your health insurance plan, Medicare, Medicaid, auto insurance carriers (for accident-related injuries), workers’ compensation carriers, attorneys, or other responsible third parties;
  • Collecting copayments, deductibles, coinsurance, and outstanding balances;
  • Appealing claim denials or negotiating payment arrangements;
  • Providing detailed medical reports, narratives, and documentation to support personal injury claims, insurance claims, or legal proceedings related to your condition (with appropriate authorization or as permitted);
  • Disclosing PHI to collection agencies or attorneys if necessary to collect unpaid amounts (subject to applicable laws).

Healthcare Operations

We use and disclose your PHI for our internal business activities to support and improve the quality of care we provide. Examples include:

  • Quality assessment, improvement activities, and peer review;
  • Care coordination and case management;
  • Staff training, education, and competency assessments;
  • Licensing, accreditation, certification, and credentialing activities;
  • Compliance programs, audits, and risk management;
  • Business planning, development, and management activities;
  • Customer service and complaint resolution;
  • Creating de-identified or aggregated data for research, benchmarking, or operational analysis;
  • Conducting patient satisfaction surveys and outcome studies.

Other Permitted or Required Uses and Disclosures (Without Authorization)

We may use or disclose your PHI without your authorization in the following additional circumstances permitted or required by HIPAA and other laws:

  • As Required by Law: Disclosures mandated by federal, state, or local law, including reporting of certain communicable diseases, abuse or neglect of children or vulnerable adults, domestic violence, or other public health or safety matters.
  • Public Health Activities: Reporting to public health authorities for purposes such as disease surveillance, vital statistics, or public health investigations.
  • Health Oversight Activities: Disclosures to health oversight agencies (e.g., licensing boards, Medicare/Medicaid auditors, or the Office for Civil Rights) for audits, investigations, inspections, or licensure purposes.
  • Judicial and Administrative Proceedings: In response to a court order, subpoena, discovery request, or other lawful process, provided we attempt to notify you or obtain a protective order where required or appropriate.
  • Law Enforcement: Limited disclosures to law enforcement officials for purposes such as identifying or locating a suspect, fugitive, or missing person; reporting criminal conduct on our premises; or in response to a court order or warrant.
  • Serious Threat to Health or Safety: Disclosures to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, or to law enforcement or other appropriate persons.
  • Workers’ Compensation and Similar Programs: Disclosures as authorized by and necessary to comply with workers’ compensation laws or similar programs that provide benefits for work-related injuries or illness.
  • Military, National Security, and Intelligence: Disclosures to military authorities, veterans’ affairs, or for national security and intelligence activities as permitted by law.
  • Coroners, Medical Examiners, and Funeral Directors: Disclosures to these professionals as necessary to carry out their duties.
  • Organ, Eye, or Tissue Donation: Disclosures to organ procurement organizations or for transplantation purposes if you are a donor or potential donor.
  • Research: Use or disclosure for research purposes under certain conditions (e.g., with Institutional Review Board approval, waiver of authorization, or for preparatory research) or with your authorization.
  • Business Associates: We may disclose your PHI to “business associates” — individuals or organizations that perform functions or services on our behalf involving the use or disclosure of PHI (e.g., billing companies, electronic health record vendors, laboratories, transcription services, legal counsel, accountants, or consultants). We require all business associates to enter into written agreements obligating them to protect the privacy and security of your PHI in accordance with HIPAA.
  • Inmates and Correctional Institutions: Limited disclosures if you are an inmate or under the custody of law enforcement.
  • Workforce Members: We may disclose your PHI to members of our workforce (employees, volunteers, trainees, students) who need the information to perform their job duties.

Uses and Disclosures Requiring Your Written Authorization

Most other uses and disclosures of your PHI require your written authorization. Examples include:

  • Uses and disclosures for marketing purposes (except face-to-face communications or promotional gifts of nominal value);
  • Disclosures that constitute a “sale” of PHI under HIPAA;
  • Most uses and disclosures of psychotherapy notes (if maintained by the Practice);
  • Any other use or disclosure not described in this Notice or not otherwise permitted by HIPAA.

If you provide written authorization, you may revoke it at any time in writing, except to the extent we have already relied on it. Revocation does not affect uses or disclosures made before the revocation.

2.2 Your Rights Regarding Your Protected Health Information

You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer (contact information provided at the end of this Notice). We will respond to your request within the timeframes required by HIPAA (generally 30 days, with one 30-day extension possible).

Right to Inspect and Obtain a Copy. You have the right to inspect and obtain a copy of your medical records and other PHI we maintain in a designated record set. We may charge a reasonable, cost-based fee for copying, postage, or preparing a summary (if you agree). In certain limited circumstances (e.g., psychotherapy notes, information compiled for legal proceedings, or if access would endanger you or others), we may deny your request in whole or in part. If denied, we will provide a written explanation and, in some cases, you may request a review of the denial by a licensed healthcare professional not involved in the original decision.

Right to Request Amendment. If you believe your PHI is inaccurate or incomplete, you have the right to request that we amend it. Your request must be in writing and include the reason for the requested amendment. We may deny your request if we did not create the information, if it is not part of the designated record set, if it is accurate and complete, or for other reasons permitted by HIPAA. If denied, we will provide a written explanation and allow you to submit a statement of disagreement that will be included with your records.

Right to an Accounting of Disclosures. You have the right to receive an accounting of certain disclosures of your PHI made by our business associates or us in the six (6) years before your request (or a shorter period if you request). The accounting will include the date of each disclosure, the name and address of the recipient, a brief description of the information disclosed, and the purpose of the disclosure. Exceptions apply to disclosures made for treatment, payment, or healthcare operations; to you; pursuant to your authorization; or for certain other purposes. You are entitled to one free accounting in any 12 months; we may charge a reasonable fee for additional accountings in the same period.

Right to Request Restrictions on Uses and Disclosures. You have the right to request that we restrict the use or disclosure of your PHI for treatment, payment, or healthcare operations, or that we limit disclosures to family members, friends, or others involved in your care or payment. We are not required to agree to your requested restriction (except in the limited case where you request, and pay in full out-of-pocket for, a service and ask that we not disclose information about that service to your health plan). If we agree to a restriction, we will honor it unless the information is needed for emergency treatment or we are otherwise required or permitted by law to use or disclose it. You may terminate a restriction in writing.

Right to Request Confidential Communications. You have the right to request that we communicate with you about your PHI or healthcare in a specific manner or at a specific location (e.g., only by cell phone, only at work, or only by email). Your request must be in writing and specify how or where you wish to be contacted. We will accommodate all reasonable requests if you provide us with information about how payment will be handled and the request does not interfere with our ability to provide care or conduct operations.

Right to Receive a Paper Copy of This Notice. You have the right to receive a paper copy of this Notice of Privacy Practices upon request, even if you have previously agreed to receive it electronically or have obtained it from our website. We will provide it to you at no charge.

Right to File a Complaint. If you believe we have violated your privacy rights, you have the right to file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR). You may file a complaint with HHS OCR by visiting their website (www.hhs.gov/ocr), calling 1-800-368-1019, or writing to the regional office serving Arizona. We will not retaliate against you or take any adverse action against you for filing a complaint.

2.3 Our Legal Duties and Responsibilities

HIPAA requires us to:

  • Maintain the privacy of your PHI as described in this Notice (and any future revisions);
  • Provide you with this Notice of our privacy practices;
  • Abide by the terms of the current Notice;
  • Notify you in the event of a breach of your unsecured PHI, as required by the HIPAA Breach Notification Rule (we will notify affected individuals by first-class mail or other permitted means, and will notify HHS and, in some cases, the media, depending on the scope of the breach);
  • Train our workforce on privacy and security policies and procedures;
  • Implement appropriate administrative, physical, and technical safeguards to protect the privacy and security of your PHI;
  • Enter into Business Associate Agreements with vendors and partners who handle PHI on our behalf.

Changes to Our Privacy Practices and This Notice: We reserve the right to change our privacy practices and the terms of this Notice at any time, as permitted by HIPAA and other applicable law. Any changes will be effective for all PHI we maintain, including PHI created or received before the effective date of the change. We will post the revised Notice on our website (https://premierpainaz.com/privacy-policy/), make copies available at all clinic locations, and provide a copy to you upon request. The effective date of the current Notice will always be displayed prominently at the top of the document.

2.4 Contact Information and How to Exercise Your Rights

If you have any questions about this Notice, wish to exercise any of your rights under HIPAA or California law, would like to file a complaint, or need a paper copy of this Notice, please get in touch with our Privacy Officer:


Privacy Officer
Premier Pain Management Arizona
Phone: (480) 954-2491
Website: https://premierpainaz.com/

Mailing Address for Privacy Requests:
Premier Pain Management Arizona
Attn: Privacy Officer
7141 W Thomas Rd, Ste 101
Phoenix, AZ 85033

We will make every effort to respond to your inquiries and requests promptly and in accordance with applicable legal timeframes. For the fastest response to website-related privacy questions or California consumer requests, please email or call during business hours.