Privacy Policy
Download the unified policy (PDF)The complete Unified Privacy, HIPAA, and Financial Policy — revised August 24, 2026.
This policy explains what information Crown Valley Imaging collects through this website, how we use and protect it, who helps us operate the site, and the choices you have. It is separate from our HIPAA Notice of Privacy Practices, which governs your medical records, and from the privacy policy of our patient portal, CVI Connect, which governs the portal.
What this policy covers
This policy covers crownvalleyimaging.com — this website. It does not govern our patient portal. CVI Connect, at connect.crownvalleyimaging.com, is a separate application with its own privacy policy at connect.crownvalleyimaging.com/privacy, and that policy governs your use of the portal, including the imaging studies and reports you access there. Your medical records themselves are governed by our HIPAA Notice of Privacy Practices, also on this site.
Information you give us
When you submit a form on this site we collect what you provide: your name and contact details, the exam you're asking about, your preferred dates and location, insurance information you choose to share, your ordering physician, and any notes you write. If you use the document upload, we also receive the files you attach — such as a doctor's order, the front and back of an insurance card, or a photo ID. Please upload only the documents we ask for. The chat window on this site is different: it answers general questions about hours, pricing, insurance, and exam preparation, and is not intended for personal or health information. What you type there is sent to an AI provider to generate a reply, is not added to a medical record, is not used to book or change appointments, and is not reviewed as part of your care. Please don't enter patient details there — use the scheduling form, or call us, so the practice can take them properly. We do not keep a record of chat conversations. We keep only aggregate, non-identifying counts — which broad topic a question fell under, and whether the assistant was able to answer it — so we can see what our website explains poorly and improve it.
Information collected automatically
Like most websites, our servers receive basic technical data: IP address, browser and device type, the pages you visit, and the referring page. If you accept analytics cookies (see below), we additionally collect aggregate usage statistics. We do not use this data to identify you and we do not run remarketing or behavioral advertising.
How we use information
We use form submissions and uploaded documents solely to respond to you, schedule your exam, verify insurance benefits, and provide care-related services. We use technical and analytics data to keep the site secure, measure performance, and improve content. We do not sell, rent, or share your personal information for advertising, and we never have.
How your submissions travel
Form submissions and uploaded documents are transmitted over encrypted connections (TLS) and delivered by email to our office inboxes (for example scheduling@cvimaging.net), which are hosted on a platform covered by a HIPAA business associate agreement. Our website itself does not maintain a database of your submissions.
Service providers
We use a small number of vendors to operate this site — website hosting, content management, delivery of form submissions to our office inboxes, spam prevention, embedded maps, the AI assistant that answers questions in the chat window, and (only if you accept the cookie banner) analytics. Each processes only what it needs to perform its function. Where a vendor may hold information that identifies you as a patient — such as the platform that hosts our office inboxes — that vendor is covered by a HIPAA business associate agreement. Our spam-prevention tool may process your IP address to distinguish real visitors from automated bots.
The patient portal (CVI Connect)
CVI Connect, at connect.crownvalleyimaging.com, is where you verify your identity, view and download your imaging studies and radiology reports, share them with a physician through an expiring link, and pay a bill. It is a separate application governed by its own privacy policy at connect.crownvalleyimaging.com/privacy. Unlike this website, the portal uses no third-party analytics and no advertising cookies. It maintains safeguards consistent with the HIPAA Security Rule and PCI DSS v4.0, and never sells patient data or permits advertising trackers. Obtaining electronic copies of your own records through the portal is free — see our HIPAA Notice of Privacy Practices.
Text messages (SMS)
If you use CVI Connect, our patient portal at connect.crownvalleyimaging.com, we may send you a one-time passcode by text message to verify your identity. These messages are one-time identity verification codes for the patient portal — we do not send marketing or promotional text messages. Message frequency varies (typically one message per verification attempt). Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. We do not share, sell, or provide your mobile phone number or your text messaging consent data to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Full program details are at https://connect.crownvalleyimaging.com/sms.
Retention
Records are retained as required by law — typically 6–7 years, or longer where required. Website technical logs and aggregate analytics are retained by our providers for their standard, limited periods. Your cookie-consent choice expires after one year.
Security
All traffic to this website is encrypted in transit (HTTPS/TLS). Access to office inboxes that receive your submissions is restricted to authorized staff. No method of transmission is 100% secure, but we work to protect your information with appropriate technical and organizational safeguards.
Your choices and rights
You may request a copy of the personal information we hold about you, ask us to correct or delete it, or withdraw analytics consent at any time (footer “Cookie settings”). California residents have rights under the CCPA/CPRA — including access, correction, deletion, and limiting use of sensitive personal information; residents of other states (e.g., CO, CT, UT, VA) have similar rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. Contact our Privacy Officer at support@cvimaging.net or (949) 367-1010. We will not discriminate against you for exercising any privacy right.
Children
This website is not directed to children under 13, and we do not knowingly collect personal information from children online. Patient portal use is limited to individuals 18 years and older. Imaging for minors is arranged by a parent or guardian by phone or in person.
Accessibility
We are committed to making this website usable by everyone. See our Accessibility Statement (linked in the footer) for the tools available on this site and how to request an accommodation or report a barrier.
Changes to this policy
We may update this policy as the website or applicable law changes. Material changes will be posted on this page with a revised “last updated” date.
Contact
Privacy Officer — Crown Valley Imaging: support@cvimaging.net, (949) 367-1010, or write to Crown Valley Imaging, 27401 Los Altos, Suite 150, Mission Viejo, CA 92691 (mailing address). Patients check in at Suite 180.
Questions about this policy? Email support@cvimaging.net or call 949-367-1010.
All policies