Privacy Policy & Notice of Privacy Practices

Who We Are

This website, jamesbarnesmd.com, is operated by James W. Barnes, MD, practicing at CH Orthopedics at Convergence Health, 5601 HWY 95 N, Suite 714, Lake Havasu City, AZ 86404.

This Privacy Policy explains how we collect, use, and protect information gathered through this website. It does not govern information you share with our medical practice — that is covered by our HIPAA Notice of Privacy Practices below.

Information We Collect

Information you provide

This website does not include contact forms. If you call us, email us, or submit a request through our third-party scheduling portal, that information is handled separately by those systems.

Information collected automatically

When you visit jamesbarnesmd.com, we and our third-party service providers may automatically collect certain information, including:

• Pages visited and time spent on each page
• Referring website or search query
• Browser type, operating system, and device type
• General geographic location (city/region level, based on IP address)

This data is collected in aggregate and is not used to identify you personally.

Google Analytics

With your consent, we use Google Analytics to understand how visitors use this website. Google Analytics collects anonymized data about page views, session duration, traffic sources, and device types. It does not collect your name, contact information, or any health-related data.

Google Analytics only activates after you accept the cookie consent prompt on your first visit. You can withdraw consent at any time by clearing your browser's local storage for this site, or by declining via any future prompt. You may also opt out globally at tools.google.com/dlpage/gaoptout.

Google Analytics data is processed by Google LLC under Google's privacy policy. We do not combine it with any personally identifiable information or protected health information.

Cookies

This website uses cookies only if you consent to Google Analytics. If you decline, no tracking cookies are set by this site. Third-party embeds (Google Maps, YouTube) may set their own cookies when you interact with them, governed by their respective policies. Most browsers allow you to view, refuse, or delete cookies through your browser settings.

Third-Party Services

This website may include or link to the following third-party services, each governed by their own privacy policies:

• Online scheduling portal — operated by Tebra (formerly Kareo). Appointment data you submit is subject to Tebra's privacy policy and HIPAA Business Associate Agreement with our practice.
• Google Maps — embedded maps are subject to Google's privacy policy.
• YouTube — embedded videos use YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube's scripts and cookies are sent only when you click to play the video. Data handling is subject to Google/YouTube's privacy policy.
• Social media platforms — links to Facebook, Instagram, and YouTube are subject to those platforms' respective privacy policies.

We do not sell personal data to third parties, and we do not use advertising networks that track you across websites.

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you certain rights regarding personal information we collect. With your consent, this website uses Google Analytics to collect anonymized usage statistics. You may decline analytics cookies via the consent prompt on your first visit. We do not sell personal information.

For personal information held in connection with your medical care, please refer to the HIPAA Notice of Privacy Practices below, which provides stronger federal protections.

Children's Privacy

This website is not directed to children under 13 and we do not knowingly collect personal information from children. If you believe a child has submitted personal information through this website, please contact us so we can delete it.

Security

This website is served over HTTPS (TLS encryption). We implement reasonable technical measures to protect information transmitted through this website. No transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Links to Other Websites

This website contains links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

Contact — Website Privacy Questions

If you have questions about this website's privacy practices, please contact:

Who This Notice Applies To

This Notice applies to the medical practice of James W. Barnes, MD, including services provided at CH Orthopedics at Convergence Health and Convergence Ambulatory Surgery Center. It applies to all workforce members and business associates who create, receive, maintain, or transmit your health information on behalf of this practice.

Our Duties

We are required by law to:

• Maintain the privacy of your protected health information (PHI)
• Provide you with this notice of our legal duties and privacy practices
• Follow the terms of the notice currently in effect
• Notify you in the event of a breach of your unsecured PHI

We reserve the right to change our privacy practices and this notice. Changes will apply to all PHI we maintain. The updated notice will be posted on this website and made available at our office.

How We May Use and Disclose Your Health Information

Treatment

We may use and share your PHI to provide, coordinate, or manage your health care and related services. For example, we may share your information with specialists, hospitals, physical therapists, or other providers involved in your care, or with Convergence Ambulatory Surgery Center when you have a procedure.

Payment

We may use and share your PHI to bill and collect payment for services we provide. For example, we may send your diagnosis and treatment information to your health insurer to obtain payment for services rendered.

Health Care Operations

We may use and share your PHI for our internal business operations, including quality assessment, training, credentialing, compliance reviews, and business planning activities.

Other Uses and Disclosures Permitted or Required by Law

• As required by law — We will disclose PHI when required to do so by federal, state, or local law.
• Public health activities — To prevent or control disease, injury, or disability; to report births and deaths; to report child abuse or neglect.
• Health oversight activities — To government agencies for audits, investigations, and inspections.
• Judicial and administrative proceedings — In response to a court order, subpoena, or other lawful process.
• Law enforcement — To identify or locate a suspect, fugitive, or missing person; to respond to a court order or subpoena; to report crimes on premises.
• Coroners and medical examiners — To identify a deceased person or determine cause of death.
• Organ and tissue donation — To organ procurement organizations.
• Research — Under strict oversight conditions required by law.
• Serious threat to health or safety — To prevent a serious and imminent threat to a person or the public.
• Workers' compensation — As authorized or required by workers' compensation laws.
• Military and veterans — If you are a member of the armed forces, to military command authorities as required by law.
• Inmates — If you are an inmate, to the correctional institution or law enforcement official as necessary for health care and the safety of others.
• Appointment reminders and treatment alternatives — We may contact you to remind you of appointments or to tell you about possible treatment options.
• Individuals involved in your care — With your verbal agreement, to family members, close friends, or others involved in your care or payment for your care.
• Disaster relief — To assist in disaster relief efforts.

Uses and Disclosures That Require Your Written Authorization

We will not use or disclose your PHI for the purposes below without your specific written authorization:

• Marketing — We will not use your PHI for marketing purposes without your authorization, except to describe our services in face-to-face communications or by giving you a promotional gift of nominal value.
• Sale of PHI — We will not sell your PHI without your authorization.
• Psychotherapy notes — We will not disclose psychotherapy notes without your specific authorization (applicable if such notes exist).
• Most other uses not described in this notice.

You may revoke any authorization you have given at any time in writing, except where we have already taken action based on your authorization.

Your Rights Regarding Your Health Information

Right to Access Your Records

You have the right to inspect and obtain copies of your PHI that we maintain in a designated record set, including your medical records and billing records. We may charge a reasonable, cost-based fee for copies. Requests must be submitted in writing to our office. We will respond within 30 days.

Right to an Electronic Copy

If your records are maintained electronically, you have the right to request an electronic copy in a format you specify (if readily producible).

Right to Amend Your Records

If you believe your PHI is incorrect or incomplete, you have the right to request an amendment. Requests must be in writing and state the reason for the request. We may deny your request in certain circumstances and will explain why in writing.

Right to an Accounting of Disclosures

You have the right to request a list of disclosures of your PHI made in the last six years (beginning April 14, 2003) for purposes other than treatment, payment, health care operations, and certain other purposes. The first list in a 12-month period is free; additional lists may incur a reasonable fee.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations, and to limit disclosures to family members or others involved in your care. We are not required to agree to your request, except: if you request that we not disclose your PHI to your health plan for services you paid for entirely out-of-pocket, we must agree (unless disclosure is required by law).

Right to Request Confidential Communications

You have the right to request that we communicate with you in a certain way or at a certain location (for example, by mail only, or only at a specific phone number). We will accommodate reasonable requests without requiring you to explain the reason.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice of Privacy Practices at any time, even if you agreed to receive it electronically. Please contact our office to request a paper copy.

Right to Be Notified of a Breach

You have the right to be notified if your unsecured PHI is breached. We will notify you without unreasonable delay and no later than 60 days after discovery of the breach.

Exercising Your Rights

To exercise any of the rights described above, please submit a written request to: