Privacy Policy
Alameda Disc and Spine ("we", "the practice") operates the Alameda Disc & Spine website at https://david-dufour-dc.netlify.app. This policy explains what this website collects, why, and what you can do about it.
Effective date: November 1, 2026
The short version
This website is an information site. It does not have its own forms, accounts or payment pages. Everything you submit to us (appointment requests, messages, intake paperwork, payments) goes through SimplePractice, our practice-management and client-portal provider, on the secure domain david-dufour.clientsecure.me. SimplePractice is bound to us by a HIPAA business associate agreement, and its Client Portal Privacy Policy governs that data: https://david-dufour.clientsecure.me/privacy
What this website collects
- Server logs (IP address, browser type, pages requested, time), collected automatically by our hosting provider for security and site operation. Kept 30 days.
- Nothing else. This website sets no cookies of its own, has no analytics or advertising trackers, and stores nothing in your browser. See our Cookie Policy.
What SimplePractice collects on our behalf
When you click Request appointment or Contact, a SimplePractice form opens inside this page (it is loaded from clientsecure.me). When you click Client Portal you leave this site for SimplePractice. In those forms you may be asked for your name, email, phone number, date of birth, the reason for your visit and, as a patient, health, insurance and payment information. That information is protected health information held by the practice in SimplePractice and used only for scheduling, communication, treatment and billing. We do not sell it and we do not use it for advertising.
Health information we hold about you as a patient is also protected by HIPAA and California's Confidentiality of Medical Information Act. Our Notice of Privacy Practices is available at the office on request.
Who we share website data with
- Netlify: hosts this website and receives server logs. Region: US. https://www.netlify.com/privacy/
- SimplePractice: provides the appointment-request and contact forms and the Client Portal. Receives whatever you enter into them. Region: US. https://david-dufour.clientsecure.me/privacy
We may also disclose information when the law requires it or to protect our rights and safety.
Your choices and rights
Under California law you can ask us what personal information we hold about you, to correct it, or to delete it, and we will not treat you differently for asking. For website data email operations@itforfire.com (see How to request deletion). For patient records, portal accounts and appointment data, call the practice at (510) 473-8008. Medical-records requests and corrections follow HIPAA and California medical-records rules, and we must retain records for the periods the law requires.
We respond within 45 days.
Children
This site is not directed to children under 18, and we do not knowingly collect personal information from them through this website. Minors are seen as patients only with a parent or guardian.
Security
Server logs are held by Netlify with encryption in transit. Clinical and scheduling data are held by SimplePractice with encryption in transit and at rest and role-based access. No system is perfectly secure; if we learn of a breach affecting you, we will notify you as the law requires.
Changes
We will post changes here with a new effective date and flag material changes on the site.
Contact
Alameda Disc and Spine 1150 Ballena Blvd, Suite 220, Alameda, CA 94501 (510) 473-8008
Website technical contact: ITforFire LLC, operations@itforfire.com