WEBSITE PRIVACY

Privacy Policy

Effective Date: July 23, 2026

This policy covers how this website collects and uses information through normal browsing. It is separate from our Notice of Privacy Practices, which governs your protected health information (PHI) under HIPAA. If you are a patient asking about your medical records, that notice is the one that applies.

Who This Policy Covers

This Privacy Policy applies to visitors of hirschspine.com, the website of Brandon P. Hirsch, MD, operating through DISC Sports and Spine Center in Newport Beach and Carlsbad, California. It describes the information this website collects automatically and through forms, how that information is used, and the privacy rights available to California residents.

Information You Provide to Us

If you submit a contact form, appointment request, or MRI review request, we collect the information you enter — name, contact details, and any imaging report you choose to upload. That information is transmitted by email to our practice's Google Workspace account, which operates under a Business Associate Agreement with our practice, and is not stored on this website or its hosting infrastructure. Submitting a form does not create a physician-patient relationship.

Information Collected Automatically

Like most websites, we use tools that collect information about how visitors use the site:

— Google Analytics 4 — page views, approximate location (city-level, derived from IP address), device and browser type, referring website, and which links you click, including phone-number links.
— PostHog — how visitors move through and interact with pages, including session recordings. All form fields are masked in these recordings, so text you type — such as symptom descriptions — is never captured or stored.

On pages built for MRI review requests and appointment intake, we turn off PostHog session recording entirely, so no session replay is captured on those pages. Google Analytics still records that a page was visited (for example, to measure how many visitors reach the MRI review page), but it never sees what you type into any form field.

Cookies

Google Analytics sets cookies to distinguish visitors and measure site usage. These are standard analytics cookies, not advertising cookies. We do not currently run advertising campaigns that place tracking pixels on this site, and we do not use cookies to build advertising profiles of visitors. If that changes, we will update this policy and add a cookie consent mechanism before doing so.

How We Use This Information

We use website analytics to understand which pages and content help patients, to fix broken or confusing parts of the site, and to measure whether our marketing efforts are working. We use information submitted through forms to respond to your inquiry, schedule appointments, and provide the services you requested.

How We Share Information

We share information with the service providers that operate the tools above: Google (Analytics and Workspace), PostHog (session analytics), Zocdoc (online scheduling), and Weave (patient text and phone communication). Each of these providers processes data on our behalf and under their own privacy and security terms. We do not sell your information to data brokers or other third parties.

We Do Not Sell or Share Your Information for Advertising

Under California law, "sharing" personal information for cross-context behavioral advertising — for example, through ad tracking pixels or ad-platform data sharing — requires us to offer you a "Do Not Sell or Share My Personal Information" opt-out. We do not currently engage in this kind of advertising or data sharing on this website. If we begin running paid advertising that involves this kind of tracking, we will update this policy and add the required opt-out link before doing so.

Your California Privacy Rights

If you are a California resident, you have the right to:

— Know what personal information we have collected about you and why
— Request a copy of that information
— Request correction of inaccurate personal information
— Request deletion of personal information we hold, subject to legal exceptions
— Not be discriminated against for exercising any of these rights

To exercise any of these rights, contact our office at (949) 781-4704 or doc@hirschspine.com. We will respond within the timeframe required by California law.

Children's Privacy

This website is not directed at children, and we do not knowingly collect personal information from children under 13 through website forms or analytics.

Third-Party Links

This website links to third-party services, including Zocdoc for scheduling. We do not control and are not responsible for the privacy practices of those third-party sites. Review their privacy policies directly.

Data Security

We use reasonable administrative and technical safeguards to protect information collected through this website. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy as our website, tools, or legal obligations change. The effective date at the top of this page reflects the most recent revision. Material changes — such as beginning to use cookies for advertising — will be reflected here before they take effect.

Contact Us

Questions about this Privacy Policy can be directed to Dr. Hirsch's office at (949) 781-4704 or doc@hirschspine.com.