Garcia Facial Plastic Surgery

This Privacy Policy (“Policy”) explains how Garcia Facial Plastic Surgery (“we,” “us,” or “the Practice”) collects, uses, and shares information from visitors to www.garciainstitute.com (the “Site”). This Policy governs our website practices only. It does not apply to protected health information we collect and use in connection with clinical treatment, which is governed by our HIPAA Notice of Privacy Practices, available upon request.

For details on our use of cookies and similar tracking technologies specifically, see our Cookie Policy below.

1. Information We Collect

We and our service providers may collect the following categories of information when you visit or interact with the Site:

Identifiers and contact information you provide directly, such as your name, phone number, email address, and any message content, when you submit a contact form, appointment request, or other inquiry.
Device and browsing information, collected automatically, including your IP address, browser type and version, device type and operating system, referring and exit pages, and general geographic area inferred from your IP address.
Site usage information, such as pages viewed, links clicked, time spent on pages, and navigation patterns, collected through the cookies and tracking technologies described in our Cookie Policy.
Accessibility preference information, if you use the Site’s accessibility tools.

We use the above information described to: operate, maintain, and secure the Site; respond to inquiries and appointment requests; understand how visitors use the Site so we can improve it; and evaluate and improve the effectiveness of our marketing.

2. HIPAA and Protected Health Information

This Section explains how HIPAA applies to information collected through the Site, based on current guidance from the U.S. Department of Health and Human Services, Office for Civil Rights (OCR).

PHI is only implicated where the information collected relates to your past, present, or future health, health care, or payment for health care, and is identifiable. Where PHI is involved, we do not disclose it to a tracking-technology vendor unless that vendor has signed a business associate agreement with us and the disclosure is otherwise permitted under the HIPAA Privacy Rule.

Where we use analytics or advertising platforms that are not business associates, any information sent to them is de-identified or limited to non-PHI data before it leaves our systems.

3. How We May Use Your Information

We do not sell your information. We share information only as follows:

With service providers performing clearly defined functions on our behalf, each bound by a written data processing agreement, and, for any vendor that could receive PHI, a business associate agreement.
When required by law, legal process, or to protect the rights, property, or safety of the Practice, our patients, or others.
In connection with a potential sale, transfer, or reorganization of the Practice, subject to the continued application of this Policy or a materially similar policy.

4. Your Privacy Choices and Rights

Cookie preferences: see our Cookie Policy for how to accept, decline, or customize non-essential cookies.
Access and correction: contact us to ask what information we’ve collected through the Site and to request correction of inaccurate information.
Deletion: request deletion of information collected through the Site, subject to our legitimate need to retain certain records.

To exercise these choices, contact us using the information in Section 7.

5. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information collected through the Site. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children through the Site.

7. Contact Us

Garcia Facial Plastic Surgery Ph. (904) 495-0975

8. Changes to This Policy

We may update this Policy to reflect changes in our practices or applicable law. Changes to our use of tracking technologies specifically are reflected in our Cookie Policy.

Cookie Banner & Cookie Policy

Part A — The On-Site Banner

This is the actual overlay text shown to visitors on first visit, before any non-essential cookie loads:

This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Selecting “Reject All Cookies” will only permit cookies during your visit necessary for the functioning of the website. For more information, read our Cookie Policy. By clicking “Accept All Cookies,” “Reject All Cookies,” “Cookie Settings,” or by continuing to browse our website, you acknowledge and agree to our Terms and Conditions of Use.

Part B — Cookie Policy (PLACE BELOW PRIVACY POLICY)

Garcia Facial Plastic Surgery Cookie Policy

This Cookie Policy explains what cookies and similar tracking technologies Garcia Facial Plastic Surgery (“we,” “us”) uses on www.garciainstitute.com (the “Site”), why, and how you can control them. It supplements our Website Privacy Policy, available at https://www.garciainstitute.com/privacy-policy/, which explains our data practices more generally.

1. What Are Cookies and Tracking Technologies?

Cookies are small files placed on your device when you visit a website. Similar technologies — tracking pixels, tags, and scripts — serve related purposes: remembering your preferences, understanding how the Site is used, and supporting advertising. Some are placed by us directly (first-party); others are placed by third parties whose services we use (third-party), such as analytics or advertising providers.

2. Categories of Cookies We Use

Category	Provider	Purpose	Default Status
Strictly Necessary	First-party (Site infrastructure)	Required for the Site to function, including basic navigation and security. Cannot be disabled.	Always active
Accessibility	[Accessibility widget vendor]	Provides accessibility tools and adjustments for visitors with disabilities.	Requires consent
Analytics	Google Analytics	Collects aggregate information about how visitors use the Site. See Google’s disclosure at policies.google.com/technologies/partner-sites.	Requires consent
Advertising	Google Ads	Measures ad effectiveness and, where enabled, personalizes ads. See policies.google.com/technologies/partner-sites.	Requires consent
Advertising	Meta Ads (Facebook/Instagram)	Measures ad effectiveness and, where enabled, personalizes ads across Meta platforms. See facebook.com/privacy/policies/cookies.	Requires consent
Marketing / Call Tracking	[Call-tracking vendor name]	Helps us understand which marketing channels bring visitors to the practice and attribute phone inquiries to marketing sources.	Requires consent

Several of the services above automatically receive your IP address and the URL of the page you’re visiting whenever they’re active — this is inherent to how those services work. Google describes this directly at policies.google.com/technologies/partner-sites. Meta describes its equivalent practices — including that it receives information from partner sites whether or not you have a Facebook or Instagram account, or are logged in — at facebook.com/privacy/policies/cookies.

3. Third-Party Sharing

Each third-party provider listed above is contractually bound to a data processing agreement restricting its use of information collected through the Site to the purpose described. For any vendor that could receive protected health information (for example, through data tied to an appointment or symptom-related inquiry), we additionally require a signed business associate agreement before any such disclosure — see Section 4.

4. This Cookie Policy Does Not Cover HIPAA Authorization

Accepting cookies through the banner in Part A manages your consent for tracking-technology purposes under general privacy and consumer-protection law only. It is not, and does not substitute for, a HIPAA authorization. We do not treat your cookie-banner response as authorizing the disclosure of protected health information to any vendor. A disclosure of protected health information requires either a signed business associate agreement with the vendor and an applicable HIPAA Privacy Rule permission, or your separate, HIPAA-compliant written authorization.

5. How to Manage Your Preferences

Use the “Cookie Preferences” link in the Site footer to accept, decline, or customize non-essential cookies at any time.
Most browsers let you block or delete cookies directly, though this may affect Site functionality.

6. Cookie Consent Records

When you make a choice through the banner, we record the categories accepted or declined, together with a timestamp and the version of this Cookie Policy then in effect, so we can honor your preference on return visits.

7. Changes to This Cookie Policy

We may update this Cookie Policy as our use of tracking technologies changes. If we make a material change to the categories in Section 2, we will refresh your consent choice.