Last updated: October 23, 2026
This Privacy Policy explains how Kariah Healthcare Solutions (“Kariah,” “we,” “us,” or “our”) handles information when you visit kariahealth.com, contact us, or request an appointment or referral.
Kariah is a healthcare provider. Health information you share with us to obtain or coordinate care is protected health information (“PHI”) and is governed by the federal Health Insurance Portability and Accountability Act (“HIPAA”) and our Notice of Privacy Practices — not by this website policy. See Section 2 for how the two fit together.
1. Who we are
Kariah Healthcare Solutions operates an outpatient clinical practice in Gaithersburg, Maryland, serving patients across Montgomery County and the greater DMV, and operates the website at kariahealth.com. This policy applies to that website and to non-clinical communications with us.
If you have questions about this policy or your privacy, contact our Privacy Officer using the details in Section 17.
2. This policy and HIPAA
Because we provide healthcare, two sets of rules apply depending on the kind of information involved:
- Protected health information (PHI). Information you provide so that we can evaluate, schedule, treat, or coordinate your care — for example, through the appointment or referral forms, during a visit, or when you discuss your condition with our team — is handled under HIPAA and described in our Notice of Privacy Practices. That notice, not this policy, governs how we use and disclose PHI and the rights you have over it.
- Website and general information. This Privacy Policy governs the information we handle as a website operator and marketer: how you browse kariahealth.com, cookies and analytics, advertising measurement, and general contact details that are not tied to your care.
Where a single form collects both (for example, an intake form that asks for your name alongside your wound type and insurance), we treat the health-related details as PHI under HIPAA and the Notice of Privacy Practices.
Please do not send detailed health information through unsecured channels. Standard email and text messages are not secure. To share clinical details, use the forms on our website or call us at (240) 852-9384. If this is a medical emergency, call 911.
3. Information we collect
Information you give us
When you complete a form, call, email, or text us, we may collect your name, contact details, the reason for your inquiry, and any information you choose to include. Our appointment and referral forms may also ask for details such as date of birth, insurance, and wound or condition type; those health-related details are PHI handled under HIPAA, as described in Section 2.
Information collected automatically
When you use our website, we and our service providers automatically collect limited technical data, which may include your device and browser type, operating system, IP address, pages viewed and actions taken, the site or ad that referred you, and the date and time of your visit. This is collected through cookies and similar technologies (see Section 7).
What we do not collect
- We do not knowingly collect personal information from children through the website (see Section 14).
- We do not collect payment card numbers through the website.
- We do not send your health information or the contents of your form fields to advertising or analytics providers (see Section 6).
4. How we use your information
We use website and general information to:
- respond to your questions and requests;
- schedule appointments and coordinate referrals (health details handled under HIPAA);
- operate, secure, maintain, and improve our website;
- understand how visitors find and use the site, and measure the performance of our advertising;
- send you updates you have asked for, and administrative or service messages; and
- comply with legal obligations and protect our rights, our patients, and the public.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
5. We do not sell your information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are used under applicable state privacy laws. We never use your health information for advertising.
6. Advertising, analytics, and measurement
We use tools such as Google Analytics and Google Ads conversion tracking to understand site traffic and to measure how well our ads perform. These tools set cookies and collect technical data as described in Section 3.
Because we are a healthcare provider, we configure these tools carefully: we do not enable features that would send protected health information or the contents of your form fields to Google or other advertising vendors. Ad conversions are measured without transmitting your identity together with health details.
You can limit this kind of measurement:
- Install the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
- Adjust your Google Ads settings (adssettings.google.com).
- Use the industry opt-out pages at optout.aboutads.info and optout.networkadvertising.org.
- Manage cookies through your browser or our cookie controls (see our Cookie Policy).
7. Cookies and similar technologies
We use cookies and similar technologies to run the website, remember your preferences, understand usage, and measure advertising. Some are necessary for the site to work; others are optional and used only where permitted.
| Category | Purpose | Can you refuse? |
| Strictly necessary | Core site functions, security, and form submission. | No — the site will not work properly without them. |
| Performance & analytics | Measuring traffic and how pages are used. | Yes. |
| Advertising & measurement | Measuring ad performance and conversions (without health data). | Yes. |
| Functional | Remembering choices such as your cookie preferences. | Yes. |
For the full list of cookies, their providers, and how to control them, see our Cookie Policy.
8. Universal opt-out signals
Where required by law, we honor universal opt-out signals such as Global Privacy Control (GPC). If your browser or an extension sends a recognized signal, we treat it as a request to opt out of optional analytics and advertising cookies for that browser.
9. How we share information
We share information only as needed, with:
- Service providers that help us operate the website, forms, email, scheduling, hosting, security, and analytics. Providers that handle protected health information on our behalf do so under a Business Associate Agreement as required by HIPAA.
- Government authorities or others when required by law, to comply with legal process, or to protect the safety and rights of our patients, staff, or the public.
- A successor entity in connection with a merger, acquisition, or transfer of our practice, subject to this policy and applicable law.
We do not share your information with advertisers for their own marketing.
10. Email and text messages
If you contact us or ask for updates, we may email you administrative or service messages. You can unsubscribe from non-essential email at any time using the link in the message or by contacting us. Please do not include detailed health information in email.
Text messages
If you give us your mobile number and agree to texts, we may send appointment-related or service messages. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent to texts is not a condition of receiving care. Please do not include detailed health information in text messages.
11. How long we keep information
We keep information only as long as needed for the purposes described here or as required by law. Protected health information is retained according to our Notice of Privacy Practices and applicable medical-record laws.
| Type of information | Typical retention |
| Website inquiry and contact messages | Up to 24 months after our last contact, unless they become part of a patient record. |
| Analytics and advertising data | As set in the relevant tool, typically up to 14 months. |
| Server and security logs | A short rolling period, typically up to 12 months. |
| Protected health information | Per the Notice of Privacy Practices and applicable law. |
12. Security
We use reasonable administrative, technical, and physical safeguards designed to protect the information we hold. No website or method of transmission is completely secure, however, so we cannot guarantee absolute security. Help protect your information by using the secure forms on our site rather than unsecured email or text for clinical details.
13. Your privacy rights
Depending on where you live, you may have rights over your personal information under the Maryland Online Data Privacy Act or other applicable state privacy laws, which can include the right to know what we hold, to request a copy, to correct or delete it, and to opt out of certain processing. We will not discriminate against you for exercising these rights.
To make a request, contact us using Section 17. We will verify your request and respond within the time the law allows. If we decline, you may ask us to reconsider.
Rights over your health information — such as access to, amendment of, or an accounting of disclosures of your PHI — are described in our Notice of Privacy Practices and are handled by our Privacy Officer.
14. Children
Our website is intended for adults. We do not knowingly collect personal information from children through the website. Where a minor is a patient, a parent or guardian provides information on the child’s behalf, and that information is handled as PHI under HIPAA. If you believe a child has provided personal information through the website, contact us and we will delete it.
15. Third-party links
Our website may link to other sites, such as a scheduling provider or social media pages, that we do not control. We are not responsible for the privacy practices of those sites, and we encourage you to review their policies.
16. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes will be posted on this page. Your continued use of the website after an update means you accept the revised policy.
17. Contact us
For questions about this policy, your privacy, or to make a request, contact our Privacy Officer:
Kariah Healthcare Solutions
16021 Comprint Cir, Gaithersburg, MD 20877
Phone: (240) 852-9384
Email: connect@kariahealth.com
Hours: Monday to Friday, 9:00 AM to 5:00 PM