Website Privacy Policy
Effective Date: January 1, 2024
Last Reviewed: August 14th, 2026
- About This Privacy Policy
This Website Privacy Policy explains how Robey Plastic Surgery, doing business as Robey Plastic Surgery & Regenerative Medicine (“Robey Plastic Surgery,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you:
- Visit or use our website;
- Submit a website inquiry;
- Request an appointment or consultation;
- Subscribe to marketing communications;
- Interact with our online advertisements or social media links; or
- Use another online feature that links to this Privacy Policy.
This Privacy Policy applies to website visitors, prospective patients, customers, subscribers, and other individuals who interact with the online services we control.
It does not apply to:
- Employment applicants, employees, or contractors in their workforce capacity;
- Third-party websites or services that publish their own privacy notices; or
- Protected health information governed by our Notice of Privacy Practices, as explained below.
This Privacy Policy provides notice of our practices. It does not replace any consent, authorization, or other permission required by law.
- Website Information and Protected Health Information
This Website Privacy Policy is different from our Notice of Privacy Practices.
When information is maintained by a HIPAA-covered part of our practice as protected health information, our [Notice of Privacy Practices] governs how that information may be used, disclosed, and protected. If this Website Privacy Policy conflicts with our Notice of Privacy Practices regarding protected health information, the Notice of Privacy Practices controls.
Please do not submit sensitive medical information through a general website form
Our general contact and marketing forms are intended for basic scheduling and service-interest questions. Unless a form is expressly identified as a secure patient form, please do not use it to submit:
- Medical histories;
- Diagnoses or symptoms;
- Medication information;
- Treatment records;
- Photographs of a medical concern;
- Social Security numbers;
- Insurance identification numbers;
- Financial account or payment-card information; or
- Other sensitive health information.
When medical information is required, we will direct you to an appropriate secure method.
General website forms, ordinary email, and standard text messaging should not be used for urgent medical needs. Call 911 or seek emergency medical care for an emergency.
- Personal Information We Collect
“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.
Personal information generally does not include properly de-identified, aggregated, or publicly available information as defined by applicable law.
- Information you provide directly
We may collect information you voluntarily provide, including:
Contact and identification information
- First and last name;
- Email address;
- Telephone number;
- Mailing address, when needed; and
- Other information you provide to identify or contact you.
Inquiry and service-interest information
- The procedure, treatment, aesthetic service, or wellness service in which you express interest;
- General scheduling questions;
- Preferred appointment information;
- The content of messages you send us; and
- Feedback or survey responses.
A stated interest in a particular procedure or service may be considered sensitive or consumer health data under some laws.
Scheduling and transaction information
- Appointment type;
- Preferred date or time;
- Consultation or booking status;
- Products or services requested;
- General payment status; and
- Information related to a financing, payment, or scheduling service you choose to use.
Third-party payment, financing, and scheduling providers may collect additional information directly from you under their own privacy notices.
Communication and marketing preferences
- Email subscription choices;
- Text-message choices;
- Cookie preferences;
- Opt-out requests; and
- Records of your communication preferences.
Other information you choose to provide
We may collect other information that you voluntarily include in a form, email, telephone call, text message, survey, or other communication.
- Information collected automatically
When you visit the website, we and our authorized service providers may automatically collect:
- Internet Protocol address;
- Browser type and version;
- Device type;
- Operating system;
- Device or cookie identifiers;
- Approximate location derived from an Internet Protocol address;
- Pages viewed;
- Links or buttons selected;
- Referring and exit pages;
- Date and time of a visit;
- Time spent on pages;
- Website errors and performance information;
- Advertising or campaign identifiers;
- General interaction and conversion information; and
- Security and fraud-prevention logs.
We collect this information through server logs, cookies, pixels, tags, software development tools, and similar technologies, subject to your choices and applicable law.
- Information received from other sources
We may receive personal information from:
- Appointment-scheduling and patient-management providers;
- Communications and call-service providers;
- Website hosting and security providers;
- Analytics providers;
- Advertising and campaign-management providers;
- Social media platforms;
- Payment or financing providers;
- Referral partners;
- Professional advisers;
- Publicly available sources; and
- Other parties acting at your direction.
The information we receive depends on the service, your settings, the provider’s practices, and applicable law.
- How We Use Personal Information
We may use personal information to:
Respond to you and provide requested services
- Respond to questions;
- Contact you about an inquiry;
- Schedule or manage an appointment;
- Route an inquiry to the appropriate surgery, medical-aesthetics, or wellness team;
- Provide requested information;
- Process an order or transaction; and
- Deliver administrative or service-related communications.
Support healthcare operations
When applicable and permitted by law, we may use information to:
- Coordinate requested care;
- Manage patient relationships;
- Operate the practice;
- Communicate with healthcare providers, facilities, insurers, or other participants involved in care; and
- Perform activities described in our Notice of Privacy Practices.
Operate and improve the website
We may use information to:
- Maintain website functionality;
- Understand general website use;
- Diagnose errors;
- Improve navigation and customer experience;
- Measure the effectiveness of pages and campaigns;
- Develop aggregate or de-identified reporting; and
- Test and improve services.
Protect the website, the practice, and others
We may use information to:
- Detect and prevent fraud, abuse, or security incidents;
- Protect accounts, systems, and networks;
- Investigate suspected wrongdoing;
- Enforce applicable policies;
- Protect legal rights and safety; and
- Maintain business records.
Communicate and market
Subject to applicable law and your choices, we may use information to:
- Send newsletters;
- Provide information about services or events;
- Send offers or promotional communications;
- Measure campaign performance; and
- Manage communication preferences.
We do not use the content of general inquiry forms, patient-portal activity, appointment details, or protected health information to create third-party advertising audiences unless a valid consent or authorization expressly permits the use.
Comply with legal obligations
We may process information to:
- Comply with applicable laws and regulations;
- Respond to lawful government, court, or regulatory requests;
- Maintain required records;
- Establish, exercise, or defend legal claims;
- Conduct audits; and
- Fulfill reporting or notification obligations.
Conduct business transactions
Information may be reviewed or transferred as part of a proposed or completed merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards and applicable law.
- Cookies and Similar Technologies
Cookies are small data files stored on a browser or device. We may use cookies and similar technologies for the following purposes.
Strictly necessary technologies
These technologies support essential website functions, security, network management, form operation, fraud prevention, and your privacy preferences.
Because they are necessary to provide requested functions, they may operate without an optional cookie choice where permitted by law.
Functional technologies
These technologies remember selections and help provide enhanced website features.
Analytics technologies
These technologies help us understand website performance and general visitor interaction, such as which pages are visited and whether website features operate correctly.
Advertising technologies
Subject to applicable law and your cookie choices, these technologies may help:
- Measure advertising performance;
- Many of the images are models and not actual patients unless labeled at a patient of Robey plastic Surgery.
- Understand how a visitor reached the website;
- Limit repeated advertisements; or
- Present advertisements based on activity across websites or services.
Advertising technologies must not be configured to receive free-text form content, medical histories, appointment details, patient-portal activity, payment information, or other information that identifies an individual’s care.
Your cookie choices
You can review or change nonessential cookie choices through the [Cookie Settings] link available in the website footer or cookie notice.
You may also restrict cookies through your browser. Blocking cookies may affect certain website features.
Where required by applicable law, we will treat a recognized universal opt-out mechanism, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device sending the signal.
Some browsers offer a legacy “Do Not Track” setting. Because there is no single uniform standard for those settings, the website may not respond to every legacy Do Not Track signal. We process legally recognized opt-out preference signals where required.
- How We Disclose Personal Information
We may disclose personal information to the following categories of recipients.
Service providers and contractors
We may provide information to companies that perform services for us, including:
- Website hosting;
- Website development and maintenance;
- Form processing;
- Appointment scheduling;
- Patient-management systems;
- Email and text-message delivery;
- Call handling and call measurement;
- Analytics;
- Advertising measurement;
- Payment processing;
- Financing;
- Data storage;
- Cybersecurity;
- Fraud prevention;
- Records management; and
- Professional or operational support.
These providers should receive only the information reasonably necessary to perform their services and must be subject to appropriate contractual, privacy, and security requirements.
When a service provider handles protected health information on our behalf and qualifies as a business associate, a HIPAA-compliant business associate agreement is required.
Healthcare providers and healthcare operations participants
When applicable and permitted under our Notice of Privacy Practices, we may disclose information to:
- Treating professionals;
- Surgical facilities;
- Laboratories;
- Pharmacies;
- Insurers;
- Billing providers; and
- Other parties involved in treatment, payment, or healthcare operations.
Professional advisers
We may disclose information to legal counsel, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary.
Government authorities and legal recipients
We may disclose information where we reasonably believe disclosure is necessary to:
- Comply with law;
- Respond to a valid subpoena, warrant, court order, or government request;
- Protect the rights, property, safety, or security of the practice, our patients, website visitors, or others;
- Investigate fraud or illegal activity; or
- Establish, exercise, or defend legal claims.
Business-transaction recipients
Information may be disclosed to potential or completed buyers, investors, lenders, successors, or advisers involved in a business transaction.
Parties you direct us to contact
We may disclose information at your request, with your consent, or as otherwise directed by you.
Analytics and advertising providers
Depending on our configuration, your cookie choices, and applicable law, analytics or advertising providers may receive device identifiers, Internet Protocol addresses, general website activity, referral information, and campaign information.
We do not authorize these providers to receive general inquiry text, patient-portal information, treatment records, appointment details, or protected health information for their independent advertising purposes.
- Sale, Sharing, Targeted Advertising, and Consumer Health Data
Sale of personal information
We do not exchange personal information for money.
Some state laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain disclosures to analytics or advertising providers, even when no money is exchanged.
Where those definitions and rights apply, you may opt out through:
- [Cookie Settings];
- A legally recognized universal opt-out mechanism; or
- A privacy request submitted using the instructions below.
Sensitive and consumer health data
Your selection of a procedure, treatment, aesthetic service, or wellness service may reveal or allow an inference about health-related interests.
Depending on the jurisdiction and context, this information may be treated as sensitive personal information or consumer health data.
We may collect such information:
- Directly from you;
- From your interactions with our website;
- From scheduling or communications providers; or
- From parties acting at your direction.
We use it to respond to requests, route inquiries, schedule services, provide requested care, maintain security, and fulfill legal obligations.
We do not sell consumer health data or disclose it to third parties for their independent advertising purposes without a valid consent or authorization when one is required by law.
We do not use free-text inquiry content, appointment details, patient-portal activity, or protected health information for third-party targeted advertising without a valid consent or authorization.
Mobile information
Mobile telephone numbers, text-message opt-in information, and text-message consent records will not be sold or disclosed to third parties for their own marketing or promotional purposes.
We may disclose this information to service providers that help deliver messages, maintain consent records, prevent fraud, or support communications on our behalf.
- How Long We Retain Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.
Retention decisions may consider:
- The purpose for which information was collected;
- The duration of an inquiry, customer, or patient relationship;
- Whether an inquiry became part of a patient record;
- Applicable medical-record obligations;
- Legal, accounting, insurance, or regulatory requirements;
- Contractual obligations;
- Fraud-prevention and security needs;
- Potential or actual disputes;
- Applicable limitation periods;
- Consent or communication preferences; and
- The need to maintain an opt-out or suppression record.
Website inquiry information that becomes part of a patient record may be retained according to our medical-record retention obligations and Notice of Privacy Practices.
Cookie and analytics retention periods should be available through [Cookie Settings] or the applicable technology description.
When information is no longer reasonably necessary, we take reasonable steps to delete, destroy, or de-identify it, subject to legal and technical limitations.
- Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, destruction, loss, misuse, alteration, or disclosure.
Safeguards should be appropriate to the sensitivity and volume of information and may include:
- Access restrictions;
- Authentication controls;
- Encryption where appropriate;
- Secure transmission methods;
- System monitoring;
- Backups;
- Vendor oversight;
- Workforce training;
- Incident-response procedures; and
- Periodic risk review.
No website, network, transmission method, or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.
If a security incident occurs, we will investigate and provide notifications as required by applicable law.
- Email, Telephone, and Text Communications
When you ask us to contact you, we may use the contact information you provide to respond to the request, provide scheduling information, and send necessary administrative communications.
Marketing email
You may unsubscribe from marketing email by using the unsubscribe link in the message or contacting us.
An unsubscribe request may not stop nonmarketing communications related to an appointment, transaction, request, safety notice, or ongoing patient relationship.
Text messages
When you expressly consent to receive text messages, we may send messages consistent with that consent.
Message frequency may vary. Message and data rates may apply. Consent to marketing text messages is not a condition of receiving treatment or purchasing a service.
You may reply:
- STOP to opt out of text messages; or
- HELP for assistance.
We may send a final message confirming an opt-out. Transactional or requested communications may be governed by separate consent and legal requirements.
Withdrawal of consent does not affect processing that occurred before the withdrawal.
- Your Privacy Rights
Depending on your state of residence, the nature of the information, and whether an applicable law covers the processing, you may have the right to:
- Confirm whether we process your personal information;
- Access personal information;
- Obtain a copy or representative summary of personal information;
- Correct inaccurate information you previously provided;
- Request deletion;
- Obtain information in a portable format;
- Opt out of sale, sharing, or targeted advertising;
- Opt out of qualifying profiling;
- Limit certain uses or disclosures of sensitive information;
- Withdraw consent where processing is based on consent;
- Appeal the denial of a privacy request; and
- Exercise privacy rights without unlawful discrimination.
These rights are subject to applicable definitions, exceptions, verification requirements, and retention obligations.
For example, we may be unable to delete information that must be retained as part of a medical record, to comply with law, complete a transaction, maintain security, prevent fraud, or establish or defend legal claims.
How to submit a request
Submit a privacy request using one of the following methods:
Email: info@robeyplasticsurgery.com
Email subject: Privacy Request
Mail:
Privacy Officer
Robey Plastic Surgery & Regenerative Medicine
12760 Meeting House Road
Carmel, Indiana 46032
Telephone: 317-721-7110
Please provide:
- Your name;
- The email address or telephone number associated with your interaction;
- Your state of residence;
- The right you wish to exercise; and
- Enough information to help us locate the relevant record.
Do not send medical records, Social Security numbers, payment-card information, or copies of identification through ordinary email.
We may request additional information through an appropriate method when reasonably necessary to verify identity and protect information from unauthorized disclosure.
We will respond within the time required by applicable law. When permitted, we may extend the response period and will explain the extension.
Authorized agents
Where permitted by law, an authorized agent may submit a request on your behalf. We may request proof of the agent’s authority and may separately verify your identity.
Appeals
When applicable, you may appeal a denied privacy request by emailing info@robeyplasticsurgery.com with the subject:
Privacy Appeal
Describe the original request and why you believe the decision should be reconsidered. We will respond within the period required by applicable law.
Protected health information rights
Requests concerning protected health information—including medical-record access, amendments, confidential communications, restrictions, or an accounting of disclosures—should be submitted through the process described in our [Notice of Privacy Practices].
- Children’s Privacy
The website is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through general website services without legally required authorization.
A parent or legal guardian may contact us concerning a child’s care through an appropriate process.
If we learn that a child submitted personal information without required permission, we will take reasonable steps to address or delete it as required by law.
Where applicable, we do not knowingly sell or share the personal information of minors or use it for targeted advertising without legally required consent.
- Third-Party Websites and Services
The website may link to services operated by other organizations, including:
- Appointment-booking services;
- Patient portals;
- Payment or financing providers;
- Online stores;
- Social media platforms;
- Mapping services;
- Review platforms;
- Podcast platforms; and
- Other external websites.
A third-party service may collect information directly from you and apply its own privacy notice and terms.
We are not responsible for an independent third party’s privacy or security practices. This does not limit our responsibility for service providers that process information on our behalf.
Review the privacy notice of a third-party service before providing information to it.
- Processing in the United States
Our website and services are directed primarily to individuals in the United States.
Personal information may be processed and stored in the United States or another location where our authorized providers operate. Privacy and data-protection laws in those locations may differ from those in your jurisdiction.
We use appropriate safeguards where required by applicable law.
- Changes to This Privacy Policy
We may update this Privacy Policy when:
- Our website or services change;
- Our data practices change;
- We change service providers;
- Laws or regulatory guidance change; or
- Security and operational needs change.
We will post the revised policy and update the effective or last-reviewed date.
When required by law, we will provide additional notice or obtain consent before using previously collected information for a materially different purpose.
- Contact Us
Questions, concerns, complaints, or requests regarding this Website Privacy Policy may be directed to:
Robey Plastic Surgery
Doing business as Robey Plastic Surgery & Regenerative Medicine
Attn: Privacy Officer
12760 Meeting House Road
Carmel, Indiana 46032
Email: info@robeyplasticsurgery.com
Telephone: 317-721-7110
Use “Privacy Question” in the email subject line for general questions.
For matters concerning protected health information or patient privacy rights, follow the contact instructions in our Notice of Privacy Practices.
