Website Privacy Policy

1. Who We Are

This website is operated by MTH Specialty LLC, a primary care practice located at 19 Pleasant Street, Suite 101A, Woburn, MA 01801. In this policy, "we," "us," and "our" refer to MTH Specialty LLC.

2. Information We Collect

We collect information when you visit our website in several ways:

Information You Provide Directly

If you contact us through our website (for example, by filling out a form, requesting an appointment, or sending us an email), we may collect:

• Name
• Email address and phone number
• Date of birth (if requested for appointment scheduling)
• Insurance information (if requested)
• Any health-related information you choose to provide in messages
• Other information you provide to us voluntarily

Information Collected Automatically

When you visit our website, certain information is collected automatically:

• IP address and approximate geographic location
• Device type, browser type, and operating system
• Referring website (the site you came from)
• Pages visited, time spent on pages, and links clicked
• Date and time of your visit

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and requests
• To schedule appointments and provide appointment-related communications
• To improve our website and user experience
• To analyze website usage and trends
• To comply with applicable laws and regulations
• To protect against fraud, unauthorized access, and other security threats

4. How We Share Information

We do not sell your personal information. We may share information with:

Service Providers

We work with trusted third-party service providers who help us operate our website and practice (for example, our website host, email service, appointment scheduling system, and electronic medical record provider). These providers have access to information only to perform specific tasks on our behalf and are obligated to protect it.

When Required by Law

We may disclose information when required by law, court order, or other legal process, or to protect our rights, your safety, or the safety of others.

Patient Health Information (PHI)

Any health-related information you provide is also subject to our Notice of Privacy Practices under HIPAA, which provides additional protections beyond this Privacy Policy.

5. Cookies and Tracking Technologies

Our website may use "cookies" and similar tracking technologies. Cookies are small data files stored on your device that help websites function properly and provide a better user experience.

Types of Cookies We May Use

• Essential cookies — Required for the website to function (e.g., remembering your menu preferences).
• Analytics cookies — Help us understand how visitors use our site, such as which pages are visited most often. We may use Google Analytics or similar tools for this purpose.
• Functional cookies — Help us remember your preferences for a better experience.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, some parts of our website may not function properly without cookies.

6. Third-Party Services

Our website integrates with several third-party services to provide functionality:

• athenahealth — Our electronic health record and patient portal provider. When you click "Patient Portal" or "Pay My Bill," you are directed to athenahealth's secure portal, which is governed by athenahealth's own privacy practices.
• Google Fonts — Used to display website typography. Google may collect data when your browser requests these fonts.
• Myriad Genetics — Linked for educational information about hereditary cancer screening. Their website is governed by their own privacy policy.
• Google Maps (if embedded) — May be used for displaying our location. Subject to Google's privacy policy.

We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party services you use.

7. Data Security

We take reasonable technical, administrative, and physical measures to protect the information we collect from unauthorized access, disclosure, alteration, or destruction. These measures include encryption (HTTPS/TLS), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain information for as long as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Medical records are retained according to Massachusetts state law requirements (generally a minimum of 7 years for adult patients, longer for minors).

9. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information, including:

• The right to know what personal information we have about you
• The right to request correction of inaccurate information
• The right to request deletion of your information (subject to legal retention requirements)
• The right to opt out of certain types of data sharing
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information below. We may need to verify your identity before fulfilling your request. Note: Patient medical record requests are handled separately under HIPAA — please see our Notice of Privacy Practices.

10. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and update the "Last Updated" date at the top. We encourage you to review this policy periodically.