Privacy Policy.

This Privacy Policy explains how the Steven J. Lee, MD website (stevenjleemd.com) collects, uses, and shares information from visitors. It applies only to this website. It does not govern care delivered by Dr. Lee or his practice; that is covered by the practice's separate Notice of Privacy Practices, which you receive when you become a patient.

We collect a limited amount of information when you use this website:

• Contact form submissions.If you submit the “request a callback” form, we collect the information you provide: name, phone number, email address, the reason for your inquiry (selected from a short list), and an optional preferred call-back time.
• Automatic technical information. When you visit a page, our analytics provider records general details such as the pages viewed, the approximate location (city or region), the type of device and browser, the referring site, and an anonymized IP address. This information is aggregated and is not used to personally identify you.
• Cookies. We use a small number of cookies set by Google Analytics to measure website traffic. We do not use cookies for advertising.

We do not request medical or health information on this website. The contact form asks you not to include health details, and is designed to capture only the information needed to call you back. The website does not include patient portals, medical records, or any clinical workflow.

• Contact form data is used solely to respond to your inquiry, most often by calling you back to schedule an appointment or answer a general question.
• Analytics data is used to understand which pages are most useful, how visitors find the site, and to improve content and performance. We do not use it for advertising or to build profiles of individual visitors.

We do not sell or rent personal information. We share limited information with a small number of service providers that help operate the website:

• Hosting: Vercel Inc., which serves the website.
• Analytics: Google LLC, through Google Analytics 4, which measures website traffic.
• Form delivery: a third-party form-delivery service that transmits contact-form submissions to the office by email.
• Email: Google Workspace, which the practice uses to receive contact-form notifications under a signed Business Associate Agreement.

We may also disclose information when required by law, to comply with legal process, or to protect the rights, safety, or property of patients, staff, or the practice.

The cookies we use are set by Google Analytics and are categorized as functional or analytics cookies. We do not use advertising cookies, retargeting pixels, or cross-site tracking on this website. You can clear or block cookies through your browser settings; doing so will not affect your ability to read content or contact the office.

The website is served over HTTPS, and we use industry-standard measures to protect information in transit and at rest. The practice follows the reasonable data-security requirements of the New York SHIELD Act. No website or system can guarantee absolute security; you share information at your own risk.

• Contact form submissionsare retained by the office for as long as needed to respond to your inquiry and to keep a reasonable record of communications, then handled according to the practice's record-retention policies.
• Analytics data is retained by Google Analytics for up to 14 months, after which it is automatically deleted from the analytics account.

You may request access to, correction of, or deletion of personal information we hold about you that was submitted through this website. California residents may have additional rights under the California Consumer Privacy Act. To make a request, contact us using the details at the bottom of this policy. We will respond within a reasonable time and in accordance with applicable law.

This website is intended for adults and is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has submitted information, contact us and we will delete it.

The website is operated from the United States. If you visit it from outside the United States, your information will be transferred to and processed in the United States, which may have data-protection rules different from those in your country.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top. Continued use of the website after a change means you accept the updated policy.

For privacy-related questions or requests, contact:

• Steven J. Lee, MD
• 159 East 74th Street, New York, NY 10021
• Phone: (212) 737-3301
• Email: admin@stevenjleemd.com

For clinical questions, please do not use the addresses above. Call the office or use the patient portal.