CIBD Website Privacy Policy

Last Modified: February 2026

The Center for Inherited Blood Disorders (“CIBD,” “we,” “our,” or “us”) is committed to protecting the privacy of visitors to our website, cibd-ca.org (“Website”). This Privacy Policy explains what information we collect, how we use, maintain, protect and share it, and what choices you have when accessing and using our Website.

This policy applies only to information we collect:

Through the Website.
In communications, including email, text, chat, and other electronic messages, between you and us through the Website.
When you interact with our advertising and applications (including mobile apps) on third-party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries) that does not link to this policy; or
Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Website or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. This policy may change from time to time. Your continued use of the Website after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.

1. Personal Data and Information We Collect. “Personal data” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, home address, or payment information (for example, account information such as name, postal address, and email address).

The types and categories of personal data we collect or process include:

Contact information including name, address (such as home address, work address, or other address), email address, phone number, username, and other contact information you provide us.
General geographic location such as city, country, and/or state.
Device information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other device information.
Any other information that you provide to use.

Please note the following:

We do not ask for medical records, insurance details, Social Security numbers, or other sensitive personal data through our website.
Any financial information you provide is NOT collected by our Website but is collected by a third-party payment processor. Please review the third-party payment processor’s privacy policy to learn how they handle your financial information.
CIBD’s clinical services follow separate HIPAA requirements. Any protected health information (PHI) provided as part of your medical care is handled according to our Notice of Privacy Practices, not this Website Privacy Policy.

We also collect:

Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Website feature.
Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Website, such as clickstream information to, through, and from our Website (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal information.

2. How We Collect Your Personal and Other Data. We collect information about you when you interact with our Website.

Information You Provide Directly

You may choose to provide information when you:

Request an appointment
Fill out a form
Subscribe to communications
Contact us by email or phone
Request access to educational content

Information Collected Automatically

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies.

Using automatic collection technologies helps us to improve our Website and to deliver a better and more personalized experience.

The technologies we use for this automatic data collection may include:

Cookies. A cookie is a small file placed on your device when you interact with the Website. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Website.
Web Beacons. Our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those parts or opened an email and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity).

When you interact with the Website, there are third parties that may use automatic collection technologies to collect information about your or your device. These third parties may include: advertisers, ad networks, ad servers and/or analytics companies.These third parties may use tracking technologies to collect information about you when you use the Website.

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. We do not use GA4 data to make automated decisions about individuals or for profiling purposes. GA4 collects information such as:

Pages visited
Time spent on pages
Browser type
Device type
General geographic region (e.g., city-level)

GA4 uses cookies and similar technologies to provide these insights. GA4 does not collect or store IP addresses, and we do not use GA4 for advertising, remarketing, or profiling.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: policies.google.com/privacy?hl=en. We also encourage you to review the Google’s policy for safeguarding your data: support.google.com/analytics/answer/6004245.

You may opt out of Google Analytics by adjusting your browser settings or using Google’s opt-out tools, including by installing the Google Analytics Opt-out Browser Add-on available at: tools.google.com/dlpage/gaoptout. We will honor opt-out preference signals transmitted by your browser.

3. How We Use Your Information. We use the information collected through our Website to:

Provide you with any services and any contents, features, information, products, or services that we make available through the Website
Fulfill any other purpose for which you provide it
Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection
In any other way we may describe when you provide the information
For any other purpose with your consent
Respond to appointment requests
Communicate with you about services, events, and resources
Provide information and educational materials
Improve our Website and understand visitor engagement
Maintain the security and functionality of the website

The usage information we collect, whether connected to your personal data or not, helps us improve our Website and deliver a better and more personalized experience by enabling us to:

Estimate our audience sizes and usage patterns
Store information about your preferences, allowing us to customize the Website according to your individual needs and interests
Speed up your searches
Recognize you when you return to our Website

We may also use your information to provide you with educational content that may be of interest to you. If you do not want us to use your information in this way, please unsubscribe at the bottom of the email or through this website.

4. How We Share Information. We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may share personal data with:

CIBD staff who need the information to respond to your request
Clinical or community partners involved in providing services to you
To our subsidiaries and affiliates
To contractors, service providers, and other third parties we use to support our organization To fulfill the purpose for which you provide it
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CIBD’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CIBD about our Website users is among the assets transferred

We may also disclose your personal data:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request
To enforce or apply our terms of use and other agreements, including for billing and collection purposes
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our patients, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction

We do not share your information with third parties for their independent marketing purposes. Further, we do not use, sell, or share personal information collected through this Website to train artificial intelligence systems or large language models.

5. Data Security. We use reasonable administrative, technical, and physical safeguards to protect the information submitted through our website. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. In particular, email, texts, and chats sent to or from the Website may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

6. Links to Other Websites. Our Website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. You should review the privacy policies of any third-party website you visit.

7. Children’s Privacy. We do not knowingly collect personal information from children under the age of 18. If we learn that a child has submitted information, we will delete it.

8. Your Privacy Rights. While we respect user privacy, CIBD is a non-profit, health entity that is exempt from comprehensive consumer privacy laws enacted in various US states. Therefore, we do not provide specific rights (e.g., to delete, to opt-out of sale) that are exclusive to residents of those states, except where required by federal law. If you have questions, please contact us.

9. Changes to This Privacy Policy. The “Last Modified” date at the top of this page indicates the most recent updates. We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements, and any changes will be posted on this page. If we make material changes, we will provide notice through our Website or by other means as appropriate.

10. How We Retain Your Personal Data. We keep the information described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required. These purposes may include the following: operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

11. Contact Us. If you have questions about this Privacy Policy or how your information is handled, please contact us at:

Center for Inherited Blood Disorders

701 S. Parker Street

Suite 1000

Orange, CA 92868

ATTN: Privacy Officer

Administration: (657) 375-0508

Clinic: (714) 221-1200