Crown Valley Imaging
Office Policies

Website Privacy Policy


Last updated: June 9, 2026 — pending legal review

Draft. This page contains placeholder content awaiting formal review by Crown Valley Imaging's legal counsel. Do not rely on it as official policy until this notice is removed.

This policy explains what information Crown Valley Imaging collects through this website, how we use and protect it, who helps us operate the site, and the choices you have. It is separate from our HIPAA Notice of Privacy Practices, which governs your medical records, and from the official Unified Policy that governs the patient payment portal.

Information you give us

When you submit a form on this site we collect what you provide: your name and contact details, the exam you're asking about, your preferred dates and location, insurance information you choose to share, your ordering physician, and any notes you write. If you use the document upload, we also receive the files you attach — such as a doctor's order, the front and back of an insurance card, or a photo ID. Please upload only the documents we ask for.

Information collected automatically

Like most websites, our servers receive basic technical data: IP address, browser and device type, the pages you visit, and the referring page. If you accept analytics cookies (see below), we additionally collect aggregate usage statistics. We do not use this data to identify you and we do not run remarketing or behavioral advertising.

How we use information

We use form submissions and uploaded documents solely to respond to you, schedule your exam, verify insurance benefits, and provide care-related services. We use technical and analytics data to keep the site secure, measure performance, and improve content. We do not sell, rent, or share your personal information for advertising, and we never have.

Cookies, consent, and analytics

On your first visit you'll see a cookie banner. If you decline, no analytics run — the site works fully either way. If you accept, we load Google Analytics 4 (with IP anonymization) and Vercel Analytics to measure aggregate traffic. We also set one small cookie to remember your consent choice, and your accessibility-tool preferences are stored only on your own device. You can change your decision at any time using the “Cookie settings” link in the footer.

How your submissions travel

Form submissions and uploaded documents are transmitted over encrypted connections (TLS) and delivered by email to our office inboxes (for example scheduling@cvimaging.net), which are hosted on a platform covered by a HIPAA business associate agreement. Our website itself does not maintain a database of your submissions.

Service providers

We use a small number of vendors to operate this site: Vercel (website hosting and, with consent, privacy-friendly analytics), Sanity (content management for pages and pricing), Resend (delivery of form notifications to our office), Cloudflare Turnstile (spam prevention on forms, which may process your IP address to distinguish humans from bots), and Google (embedded maps and, with consent, Google Analytics). Each processes only what it needs to perform its function.

The patient payment portal

Payments and billing run through our patient portal, which is governed by the official Crown Valley Imaging Unified Privacy, HIPAA, and Financial Policy (effective January 1, 2025) — available as a PDF on this page. The portal uses functional cookies only, maintains safeguards consistent with the HIPAA Security Rule and PCI DSS v4.0, and never sells patient data or permits advertising trackers.

Retention

Records are retained as required by law — typically 6–7 years, or longer where required. Website technical logs and aggregate analytics are retained by our providers for their standard, limited periods. Your cookie-consent choice expires after one year.

Security

All traffic to this website is encrypted in transit (HTTPS/TLS). Access to office inboxes that receive your submissions is restricted to authorized staff. No method of transmission is 100% secure, but we work to protect your information with appropriate technical and organizational safeguards.

Your choices and rights

You may request a copy of the personal information we hold about you, ask us to correct or delete it, or withdraw analytics consent at any time (footer “Cookie settings”). California residents have rights under the CCPA/CPRA — including access, correction, deletion, and limiting use of sensitive personal information; residents of other states (e.g., CO, CT, UT, VA) have similar rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. Contact our Privacy Officer at support@cvimaging.net or (949) 367-1010. We will not discriminate against you for exercising any privacy right.

Children

This website is not directed to children under 13, and we do not knowingly collect personal information from children online. The payment portal is limited to individuals 18 and older. Imaging for minors is arranged by a parent or guardian by phone or in person.

Accessibility

We are committed to making this website usable by everyone. See our Accessibility Statement (linked in the footer) for the tools available on this site and how to request an accommodation or report a barrier.

Changes to this policy

We may update this policy as the website or applicable law changes. Material changes will be posted on this page with a revised “last updated” date.

Contact

Privacy Officer — Crown Valley Imaging: support@cvimaging.net, (949) 367-1010, or write to Crown Valley Imaging, 27401 Los Altos, Suite 180, Mission Viejo, CA 92691.

Questions about this policy? Email support@cvimaging.net or call 949-367-1010.

All policies