Privacy notice
What Alder Health collects on this website, why, how long we keep it and what you can ask us to do, followed by a plain-language notice about health information.
Last updated October 24, 2026
Alder Health is a fictional clinic. This notice is illustrative: it shows the kind of information a real clinic gives, and it is not legal advice. Please do not enter real health information on this website.
In short
- We collect only what we need to book your visit or answer you.
- There is no advertising, no analytics, no tracking and no cookies on this website, and we load nothing from other companies.
- We do not sell or rent your information.
- We delete requests and messages automatically after 90 days.
What we collect here
| When you use | We collect | Why |
|---|---|---|
| An appointment request | Name, date of birth, phone, email, new or returning patient, the reason you gave, your insurance if you entered it, a parent or guardian’s name for patients under 18, and the time, provider and clinic you chose. | To hold your time and contact you about it. |
| A message | Name, email address, topic and the message you write. | To reply to you. |
| A call back request | Name, phone number, the time window and a reason if you gave one. | To phone you. |
| Protection against abuse | A scrambled code made from your IP address and a secret key. We cannot turn it back into your address. It is kept for one hour. | To limit how many requests one visitor can send. |
| Server records | A request number, the page, the result and how long it took. No names, no contact details and no IP address. | To find and fix faults. |
Only our staff can see appointment requests, messages and call back requests. The confirmation page shows your reference, the time, the provider, the clinic and a masked version of your phone number and email address, never the full details. Anyone with your reference can open that page, so please keep it to yourself.
The data is stored in a managed Postgres database in the United States and is reached only over encrypted connections. The website is delivered through Cloudflare, which processes requests so the site can reach you.
Cookies and storage
We set no cookies. If you use the High contrast button, your browser keeps one small setting
named ah-contrast on your device so the choice is remembered. It is never sent to
us.
Your choices
You can ask us what we hold about you, ask us to correct it or ask us to delete it. Email privacy@clinic.phoenixcodes.org with your appointment reference or the email address you used, and we reply within 30 days. To change or cancel an appointment, call 512 555 0142.
How we protect it
- Every page and every request uses HTTPS, and browsers are told to insist on it.
- The site sends strict security headers, including a content security policy that blocks scripts from anywhere else.
- Each form limits how often one visitor can send it and rejects automated spam.
- Logs never contain personal details.
Notice about health information
This section is a plain-language version of the notice of privacy practices that health care providers in the United States give their patients under the federal HIPAA rules. It is illustrative.
How we may use and share your health information
- For your treatment. Providers who care for you share what they need with each other, and with specialists or labs we refer you to.
- For payment. We share what an insurer needs to pay for your care.
- To run the clinic. We use information to check the quality of care, train staff and plan services.
- When the law requires it. For example, to report certain infectious diseases, respond to a court order or protect someone from serious harm.
- With your permission. For anything else, such as sharing with a family member you name, we ask you first, in writing, and you can change your mind.
Your rights
- See and get a copy of your records, on paper or electronically.
- Ask us to correct something that is wrong or incomplete.
- Ask us to contact you in a particular way, such as by phone only, or at a different address.
- Ask us to limit what we share, and we will say if we cannot agree.
- Get a list of the times we have shared your information beyond the uses above.
- Get a paper copy of this notice, and choose someone to act for you.
- Complain without any penalty to you, to us or to the Office for Civil Rights at the US Department of Health and Human Services.
Our responsibilities
We keep your health information private and secure, we tell you promptly if there is a breach that could affect you, and we follow the notice described here. Our privacy contact is privacy@clinic.phoenixcodes.org.
Changes and contact
If we change this notice we update the date at the top of the page and, for a change that matters, say so on the home page. Questions about it go to privacy@clinic.phoenixcodes.org.