Website Privacy Statement

Effective Date: April 20, 2026
Applies to: https://www.tidewaterortho.com/

1. Who We Are

Tidewater Orthopaedics Associates, INC (“Tidewater Orthopaedics,” “we,” “us,” or “our”) is an orthopedic medical practice serving patients in Hampton, Williamsburg, and Suffolk, Virginia. This Website provides general information about our services and locations, and links patients to secure third‑party platforms for requesting appointments, accessing the patient portal, paying bills, and requesting medical records.

2. Scope of This Privacy Statement & Relation to HIPAA

This Privacy Statement describes how we collect, use, and share information collected through our public Website.

It does not govern how we handle protected health information (PHI) in the course of providing medical care. For PHI, our practices are described in our HIPAA Notice of Privacy Practices (NPP):

HIPAA NPP: Privacy Policy | Tidewater Orthopaedics

This Website is not designed to collect, store, or process PHI. Any health‑related information is handled only through our HIPAA‑compliant vendors, not through this Website.

3. Information We Collect

A. Information You Provide

We may collect information you voluntarily provide through:

• Contact Form (on our Website):
  Name, email, phone number, and general message.
  Please do not include medical details in open text fields.
• Job Application Form (on our Website):
  Contact information and application materials you submit.
• Not hosted on this site:
  No surgery scheduling, referral forms, or bill‑pay forms are hosted directly on our Website.

B. Information Collected Automatically

We use:

• Google Analytics — to measure Website usage
• Google Tag Manager — for managing analytics and ad‑related tags
• Google Ads — campaigns without remarketing or retargeting

We do not use:

• Facebook Pixel
• Session replay tools (e.g., Hotjar)

We do not display a cookie banner. Standard cookies may be set by analytics and site operations.

Visitors can opt out of Google Analytics tracking using:
https://tools.google.com/dlpage/gaoptout

4. Use of Information

We use Website‑collected information to:

• Respond to contact form submissions
• Process job applications
• Improve Website functionality and user experience
• Analyze usage through Google Analytics
• Comply with applicable laws and protect our rights

We do not sell personal information.

5. How Information Is Shared

We share information only when necessary:

• Service providers supporting Website operations (e.g., hosting, security, analytics)
• HIPAA‑compliant third‑party platforms you access through our Website:
  • Phreesia — appointment requests
  • Healow — patient portal and bill pay
  • MedRecs Management — medical records requests

Website submissions that reach staff may be stored or accessed through Microsoft 365 (Outlook) under our internal security and access‑control policies.

We may disclose information if required by law or to protect safety, rights, or property.

6. Do Not Track

Our Website does not respond to browser “Do Not Track” signals.

7. Links to Third‑Party Websites

Links to Phreesia, Healow, MedRecs Management, or other websites are provided for convenience. We do not control their content or privacy practices. Please review their privacy policies before submitting any information.

8. Children’s Privacy

This Website is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted information, contact us so we may remove it.

9. Security

We use reasonable administrative, technical, and physical safeguards appropriate for a healthcare Website, including HTTPS encryption, vendor BAAs, and access controls. No system can guarantee perfect security.

10. Data Retention

We retain Website submissions and related logs only as long as required by applicable legal recordkeeping requirements, unless a longer period is mandated by law.

11. State & International Privacy Rights

This Website is intended for users located in the United States, primarily in Virginia.

• We do not target or serve California residents, and do not meet thresholds requiring CPRA compliance.
• We do not target EU/UK visitors and are not subject to GDPR obligations.

12. Contact Us

For website privacy questions or requests:

Email: marketing@tidewaterortho.com
Phone: 757‑827‑2480
Mailing Address:
Tidewater Orthopaedics Associates, INC
901 Enterprise Parkway, Suite 900
Hampton, VA 23666

13. Changes to This Privacy Statement

We may update this Statement periodically. The Effective Date above reflects the most recent update.