Privacy, stated clearly.

Website and Contact Information

When you use this website, our hosting provider may process ordinary technical request information such as IP address, browser type, requested page, date and time, and security logs.

• The contact form opens your own email application; it does not submit the entered message to this website.
• If you choose to send the prepared email, the message is handled by your email provider and Crimson Heights' email systems.
• Do not include diagnoses, treatment details, member numbers, or other private health information in ordinary email.
• Calls, texts, portals, and third-party services are governed by their own approved workflows and notices.

Texting Information We Collect

When you sign up for Goto Texting, we may collect the following information:

• Your name
• Your phone number
• Your email address (if applicable)
• Any information voluntarily provided through text communication

How We Use Your Information

We use the collected information to:

• Send you text messages regarding our services, updates, schedules and notifications
• Respond to your inquiries and support requests
• Improve our services and customer experience
• Comply with legal requirements

Analytics and Advertising

Crimson Heights may use approved analytics or advertising tools to understand page use and measure nonclinical actions such as viewing a service page or clicking a public phone number. These tools must not receive names, email addresses, phone numbers, message text, diagnoses, treatment details, insurance information, member identifiers, or other health information. Tool use and consent controls are reviewed before activation.

Opting Out

You may opt out of receiving text messages from us at any time by replying "STOP" to any message. Upon opting out, you will no longer receive further messages, except for transactional or legally required communications.

Data Security

Access Controls

Access to personal data is restricted to authorized personnel only, based on role and necessity.

Regular Audits

Regular internal audits and reviews are conducted to ensure compliance with data protection policies.

Encryption

Data is encrypted during transmission and storage using industry-standard protocols (e.g., SSL/TLS).

Secure Systems and Software

Use of secure servers, firewalls, and antivirus software to protect data from unauthorized access and malware.

Employee Training

Regular training for employees on data privacy, handling procedures, and recognizing potential security threats.

Data Minimization

Collecting only the necessary data required for the specified purposes and limiting the retention period.

Incident Response Plan

A defined plan to respond to data breaches, including notifying affected parties and taking corrective measures.

Sharing Your Information

We do not sell, rent, or share your information with third parties except:

• When required by law
• With trusted service providers who assist in our communications
• If required for business transactions (e.g., mergers, acquisitions)

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be communicated through updates on our website or via text message.