Your privacy matters.
The content below is a general-purpose template and is pending review by the practice's legal counsel before publication. Do not rely on this page for compliance determinations.
Website privacy
This website is provided by the practice of Dr. Caleb Steffen, MD. The site is intended to provide information about Dr. Steffen's practice and the services offered. Submissions made through the website contact and subscription forms are used only to respond to your inquiry, schedule consultations, or provide you with requested updates.
Please do not include protected health information (PHI) in website forms. Confidential information should be shared only during a scheduled consultation or through our secure patient communication channels.
Information we collect
- Information you voluntarily submit through contact or subscription forms (name, email, phone, city, message content).
- Basic technical information (IP address, browser, device type) collected automatically to support the site.
How we use your information
- To respond to your inquiry and schedule consultations.
- To send requested updates about the practice, Steffen Med Spa, and promotional offers.
- To maintain and improve the website.
Cookies and analytics
We use two categories of cookies on this website:
- Strictly necessary. Required for the site to function and to remember your cookie choice. These are always active and cannot be switched off.
- Analytics. Google Analytics 4 and Microsoft Clarity, which show us which pages are useful and where visitors get stuck. These load only if you accept. If you decline, they are never loaded — no analytics cookies are set and no data about your visit is sent.
These tools record standard technical information — pages viewed, approximate city-level location derived from your IP address, referring site, device and browser type, and time on page. It is aggregated and is not used to identify you, and it is never combined with any medical information.
We do not use advertising or cross-site tracking cookies on this site, and we do not sell or share your personal information for targeted advertising.
Your choices
- Choose Accept or Decline when the cookie banner appears. Declining leaves the site fully functional.
- Change your mind at any time — .
- Clear cookies and site data in your browser to reset the choice.
- Install Google's Analytics Opt-out Browser Add-on to opt out of Google Analytics across all sites.
- Unsubscribe from marketing emails at any time using the link in those communications, or by contacting the practice directly.
Your privacy rights
Depending on where you live, you may have the right to request a copy of the personal information we hold about you, ask us to correct or delete it, or opt out of its sale or sharing. California residents have these rights under the California Consumer Privacy Act as amended by the CPRA, including the right not to be discriminated against for exercising them. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of on that front — but you may still ask us what we hold.
Note that medical records held by the practice are governed by HIPAA and state medical records law rather than by this website notice; see the section below.
Data retention and security
Form submissions and correspondence are kept as long as needed to respond to you and to maintain the practice's business records. Analytics data is retained on Google's and Microsoft's standard schedules in aggregated form. This site is served over encrypted HTTPS. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — which is why website forms should not be used for PHI.
Children's privacy
This website is intended for a general adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this site.
Changes to this notice
We may update this notice as our practices or the law change. The current version is always the one published on this page.
Notice of Privacy Practices (HIPAA)
As a healthcare practice, we maintain a separate Notice of Privacy Practices in compliance with the Health Insurance Portability and Accountability Act (HIPAA). That notice describes how medical information about you may be used and disclosed and how you can access this information. A full copy of the Notice of Privacy Practices is available at the practice office and will be provided during your first visit.
Contact
Questions about this privacy notice can be directed to the practice by phone or by writing to the practice address listed in the footer.