Privacy Policy

1. Who this policy applies to

This Privacy Policy explains how Jones Medical, LLC (“Jones Medical,” “we,” “us”) handles information collected through jonesmedical.org. It applies to anyone who visits the site, submits our contact form, or calls a number listed on it.

It does not apply to:

• Medical records and other protected health information created in the course of providing care — see our Notice of Privacy Practices.
• The Jones Medical employee portal at /portal/, which is a password-protected system for staff. Portal use is governed by your employment agreement and our internal information-security policies.
• Third-party websites we link to, including Facebook and LinkedIn. Those services have their own privacy policies, and we do not control them.

2. Information we collect

2.1 Information you give us

The only place this website asks you for information is the contact form. When you submit it, we receive:

• Your name
• Your email address
• Your phone number, if you choose to provide it
• The subject you selected
• The message you wrote
• Any file you attached

Everything in that form is optional in the sense that you are never required to use it — you may call us instead. Name, email, subject, and message are required only if you choose to submit the form.

2.2 Information collected automatically

Our host, Netlify, records standard server logs for every request: IP address, the page requested, the date and time, the referring page, and your browser’s user-agent string. These logs exist to operate and secure the site. We do not use them to build profiles of visitors.

2.3 What we deliberately do not collect

• No analytics. This site runs no Google Analytics, no advertising pixels, no session recording, and no heat-mapping.
• No tracking cookies. See Section 5.
• No advertising identifiers, and no data sold or shared with data brokers — ever, for any purpose.

3. How we use information

We use what you send us to:

• Respond to your question or request
• Schedule an assessment or a visit, if that is what you asked for
• Evaluate an application, if you contacted us about employment
• Keep a record of the inquiry for our own business records
• Meet legal, regulatory, and accreditation obligations

We do not use your information for marketing unrelated to your inquiry, and we do not add you to a mailing list because you contacted us.

4. Who we share information with

We share website information only with service providers who need it to make the site work, and only for that purpose. As of the effective date above, those are:

We may also disclose information when we are legally required to — in response to a subpoena, court order, or lawful request from a government authority — or when disclosure is necessary to protect the safety of a person or to establish or defend a legal claim.

We do not sell personal information, and we never have. We do not share it for cross-context behavioral advertising.

5. Cookies and local storage

This website sets no cookies. Not for analytics, not for advertising, not for session management on the public pages.

It does use your browser’s localStorage for exactly one thing: remembering that you dismissed the announcement bar at the top of the page, so it does not come back on your next visit. That value is a single flag. It never leaves your device, it is not readable by anyone else, and it contains nothing that identifies you. You can clear it any time by clearing site data in your browser.

The employee portal additionally stores an authentication session on staff devices. That is a functional necessity of signing in, and it applies only to logged-in employees.

Because we set no tracking or advertising cookies, there is no consent banner on this site and nothing for you to opt out of.

6. How long we keep information

• Contact-form submissions: retained in our email and in Formspree’s submission archive while we are responding to you, and for up to 24 months afterward as a business record. Submissions that become part of a patient record are retained under the medical-records schedule instead.
• Employment inquiries: retained for 12 months unless you are hired, in which case they become part of your personnel file.
• Server logs: retained by Netlify under its own retention schedule, typically 30 days.
• Medical records: retained as required by Oklahoma law and our record-retention policy. This is described in the Notice of Privacy Practices.

7. How we protect information

The site is served only over HTTPS, with HTTP Strict Transport Security enabled, so traffic between your browser and our host is encrypted. We apply a Content Security Policy that restricts what code the site is allowed to load, and the site loads no third-party scripts on its public pages.

Contact-form submissions travel over an encrypted connection to Formspree and are then delivered to us by email.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. We can tell you what we do, and the above is an accurate account of it.

8. Your choices and rights

Regardless of where you live, you may ask us to:

• Tell you what website information we hold about you
• Correct it if it is wrong
• Delete it, where we are not required to keep it
• Stop contacting you

Write to us using the details in Section 11. We will respond within 30 days. We will not deny you service, charge you a different price, or provide a lower quality of care because you exercised a privacy right.

If you are a patient, your rights over your medical information — including the right to inspect and copy it, to request an amendment, and to receive an accounting of disclosures — are broader, and are described in the Notice of Privacy Practices.

You can also limit collection at your end: browsers can be set to block requests to Google Fonts, and you may contact us by phone instead of using the form.

9. Children’s privacy

This website is intended for adults. We do not knowingly collect information from children under 13 through the website. If you believe a child has submitted information through our contact form, contact us and we will delete it. Where Jones Medical provides care to a minor patient, that information is handled under the Notice of Privacy Practices, with rights exercised by the minor’s personal representative as permitted by Oklahoma law.

10. Changes to this policy

If we change this policy we will update the “Last updated” date at the top. If a change is significant — for example, if we begin using analytics or add a new third-party service that receives your information — we will say so plainly on this page for at least 60 days after the change.

11. How to reach us

Questions about this policy, or requests under Section 8, should go to our Privacy Officer:

For complaints specifically about the privacy of your medical information, you may also file with the U.S. Department of Health and Human Services. That process is described in the Notice of Privacy Practices. We will not retaliate against you for filing a complaint.