Privacy Policy

Information you provide

This website does not collect personal information from you directly. There are no forms on this site. If you choose to contact us using the phone number or email address listed on this site, we receive whatever information you include in that message and use it only to respond to your inquiry.

Information collected automatically

Like most websites, this site is served by a hosting provider that records standard technical request data and produces aggregate visit statistics. This may include:

• IP address and approximate country, as processed by the hosting provider
• Browser type, device type and operating system
• Pages viewed, referring source and time of visit

We use this only to understand aggregate traffic and to operate and secure the site. We do not use it to build advertising profiles, and we do not sell or share personal information for cross-context behavioral advertising.

Cookies and embedded content

This site does not set advertising or marketing cookies and does not run advertising pixels. Pages that include video use Vimeo's embedded player, which is loaded with Vimeo's "Do Not Track" setting enabled so the player does not set tracking cookies or profile viewers. Vimeo still receives the technical request data needed to deliver the video. Vimeo's own privacy policy governs that processing.

Categories of third parties

• Website hosting and content delivery provider (site delivery, aggregate analytics)
• Vimeo (video playback for embedded videos)
• Google Fonts (web font delivery)

Links to trinitymsg.com and firstsurgerycenter.com leave this website; those sites have their own privacy practices.

How this website is built

So that our data practices are verifiable rather than assumed, here is how the site is actually configured today:

• No database, no storage buckets and no application data store of any kind
• No user accounts, logins, sessions, passwords or administrative interface
• No contact, intake, appointment, application or newsletter forms — no input fields
• No file uploads and no payment, subscription or e-commerce processing
• No advertising, marketing, retargeting or cross-site tracking pixels
• No artificial-intelligence features and no data sent to AI providers
• No cookies set by this website's own code
• Server-side security headers (HSTS, nosniff, frame and referrer restrictions, a permissions policy disabling camera, microphone and geolocation) on every response
• Vimeo video embedded with Do Not Track enabled; fonts served by Google Fonts

Because there is nowhere on this site to enter information, the site itself cannot receive personal or health information from you.

Patient and medical information (no PHI)

This website is not a patient portal, is not a HIPAA-covered communication channel, and is not intended for clinical communication. It is deliberately built so that protected health information (PHI) cannot be collected: there are no forms, no message boxes, no upload fields, no chat, no scheduling or intake tools, and no database in which any submission could be stored. No PHI is collected, processed, stored or transmitted by this site at any time, and no such capability will be added without a HIPAA review and appropriate safeguards.

Do not send protected health information, medical records, insurance details or other sensitive health information to the email address listed on this site. Email is not a secure channel. If health information is sent to us by email anyway, we will not add it to any record maintained by this website, and we will direct you to the practice. For patient matters, contact the practice directly by phone.

Photographs

Photographs on this site depict Trinity MSG physicians, fellows, staff and program events and are published with the participants' permission. If you appear in a photograph and would like it removed, contact us using the details below and we will remove it.

Retention

Our retention rule is simple: any personal information we receive is deleted no later than 12 months from the date it is received. Nothing is kept beyond 12 months unless a longer period is required by law. Applied to how the website is currently configured:

• Website-held personal data: none, retained for zero days. The site has no database, no accounts and no forms, so there is no record for it to keep or delete.
• Server logs and aggregate analytics: held by our hosting provider, not by us. We do not export, download or combine these records with anything else, and we retain no copy of them for longer than 12 months.
• Email inquiries sent to the addresses published on this site: stored in our email system, outside this website, and deleted no later than 12 months after the date the message is received. Within that 12-month window, messages may be deleted earlier at the discretion of the administrator once they are no longer needed.
• Embedded video: Vimeo retains its own delivery records under Vimeo's policy; the player is loaded with Do Not Track enabled.
• Backups: none, because the site owns no data store to back up.

Your privacy rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of personal information we hold about you, to request a copy of it, and to appeal a denied request. Because this site does not maintain accounts or a customer database, in most cases the only information we hold is an email you sent us. To make a request, email us at the address below with the subject line "Privacy Request". We will respond within the time period required by applicable law.

Children

This site is intended for physicians, trainees and adult visitors. It is not directed to children and we do not knowingly collect information from children.

Changes and contact

We may update this policy; the date above reflects the most recent revision. Questions or privacy requests:

• Privacy requests: Tyler Combs — tyler@trinitymsg.com, subject line "Privacy Request"
• Phone: (951) 501-4200
• Mail: 31625 De Portola Rd, Suite 101, Temecula, CA 92592

Please do not include health information in a privacy request.