1. What this policy covers
This policy concerns the Dzac Yah Healing Clinic website and its Hydrate & Heal IV Therapy booking links. It distinguishes website browsing from the clinic’s clinical assessment and patient records.
This website policy is not a HIPAA Notice of Privacy Practices, consent to treatment, or an authorization to disclose medical information. Clinical privacy notices and consent documents are separate from these website policies. Contact the clinic for questions about your clinical information.
2. Website and booking information
This website has no user-account database or medical intake form. It does not store visitor-submitted booking or medical records in a separate website database. Appointment information is entered directly with Square through its embedded calendar or booking page.
Square processes the information you enter, and the clinic may receive the appointment details needed to arrange your visit. This does not mean that no information is processed outside the website: the booking and hosting providers may receive technical information such as your IP address, device or browser information, and page requests.
Do not enter medical history, diagnoses, medication lists, identification documents or other sensitive clinical details into general booking notes or ordinary website communications. Share clinical information only through the process the clinic designates for assessment.
3. Assessment and clinical privacy
The nurse practitioner conducts a clinical assessment before treatment. Clinical information is separate from this website and is used to assess eligibility and provide appropriate care. Booking does not guarantee treatment.
The clinic’s policy is to restrict routine clinical access to authorized licensed healthcare professionals involved in your care. Other access or disclosure must have a lawful basis, such as appropriately authorized administrative or service-provider support, your valid authorization, or a disclosure permitted or required by law. Access is limited to what the role and lawful purpose require, subject to applicable clinical and legal exceptions.
Where information is protected by HIPAA, its applicable privacy protections, patient rights and disclosure requirements govern that information. Applicable Arizona confidentiality protections also apply. General website visits and independent third-party services are not automatically covered by HIPAA.
4. Service providers and cookies
The website uses Square for appointments and is configured for Cloudflare hosting. When the embedded calendar loads, your browser connects to Square even if you do not finish a booking. Providers may use cookies or similar technologies to operate and protect their services. The clinic website does not include its own advertising pixels, analytics integration or marketing signup form.
Square’s handling of information depends on the feature and configuration being used. Its business-associate agreement applies to covered services and configurations; consumer buyer features have separate terms. Using Square is not a blanket assurance that all information is covered by that agreement.
Read Square’s privacy notice for customers without an account, its buyer-features privacy notice, and Cloudflare’s privacy policy for their practices. Independent provider practices are not controlled by this website policy. The clinic remains responsible for its own handling of information.
5. Your choices and information requests
Your appearance and text-size choices are saved in your browser’s local storage so they can carry across pages and visits. These display preferences are not sent to the clinic. Use Reset display to restore device appearance and standard text size, or clear your browser’s site data to remove the saved settings. Service filters run in your browser and are not saved or submitted to the clinic.
You can review the clinic’s service information without creating a website account. Browser settings can limit cookies, although this may affect Square booking. Opening Square directly changes where you use the scheduler; it does not avoid Square’s data processing.
For clinic-held information, call the clinic and ask how to make a privacy or records request. Do not leave sensitive clinical details in voicemail or booking notes. Identity or authority may need to be verified before records are released. Where HIPAA applies, rights can include requesting access, corrections, confidential communications, certain restrictions and an accounting of certain disclosures, subject to legal limits. Medical records cannot necessarily be deleted on request because record-retention duties may apply.
Requests concerning Square’s independently held buyer information should follow Square’s privacy-request process. That does not replace a request to the clinic for records it holds. You may also contact HHS about a suspected HIPAA violation. Nothing in these website terms waives your privacy rights or right to complain.
6. Contact and policy updates
For questions about this website policy or how to request your clinic records, call Dzac Yah Healing Clinic at (619) 797-6263. Ask for the appropriate person and instructions before sharing sensitive information.
We will update this policy when our website practices change and identify the revision date above. Any notice or authorization required by law still applies. Website use alone is not permission for unrelated uses of medical information.
Related document: Terms & Conditions.