Website Privacy Policy

Carroll Pediatric Center
www.carrollpediatriccenter.com

Effective Date: June 24, 2026    Last Updated: June 24, 2026

1. About This Policy

Carroll Pediatric Center is a pediatric medical practice located at: 1645 Liberty Rd, Suite 205
Eldersburg, MD 21784. We are committed to protecting the privacy of visitors to our website, www.carrollpediatriccenter.com.

This policy explains what information we collect when you visit our Site, how we use it, who we share it with, and what rights you have. It covers data collected through this website only. It does not govern the health information we collect during your care. That information is handled in accordance with our HIPAA Notice of Privacy Practices, which is available at 1645 Liberty Rd, Suite 205, Eldersburg, MD 21784, or on our website.

2. Information We Collect on This Website

2.1 Information You Provide Directly

We collect information you voluntarily submit through forms on our Site, including:

• New patient enrollment forms, including demographic information, insurance details, and emergency contacts
• Contact and general inquiry forms, including your name, email address, phone number, and message content

2.2 Information Collected Automatically

When you visit our Site, certain technical information is collected automatically by our web server and any analytics tools we use, including:

• IP address and general geographic location at the city or region level
• Browser type, operating system, and device type
• Pages visited, time spent on each page, and links clicked
• Referring website, meaning the site you came from before visiting ours
• Date and time of your visit

Note: We do not use Google Analytics, Meta Pixels, or other third-party behavioral tracking tools without first obtaining your consent through our cookie consent banner.

3. How We Use Your Information

We use the information collected on this website only for the following purposes:

• Communications: To respond to questions or messages you send through our contact forms
• Payment processing: To facilitate online co-pay or bill payment through our third-party payment partners
• Site operation and security: To maintain the security and functionality of our website and detect unauthorized activity
• Legal compliance: To comply with applicable federal and state privacy laws

We do not sell your personal information.

We do not use information collected through this website for marketing or advertising purposes without your explicit consent.

4. Third-Party Services and Vendors

Our website integrates with certain third-party service providers to enable appointment scheduling, patient intake, payment processing, and portal access.

Each of these vendors has its own privacy policy. Where they handle your health information, they are bound by HIPAA Business Associate Agreements with our practice.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to remember preferences and recognize returning visitors.

We use cookies only for the purposes described below.

5.2 Strictly Necessary Cookies

These cookies are required for the Site to function and cannot be turned off.

They include session authentication cookies used when you log into the patient portal and security tokens that protect form submissions from unauthorized use.

No consent is required for these cookies.

5.3 YouTube Videos

Some pages on our Site may include embedded YouTube videos.

We use YouTube’s privacy-enhanced mode through youtube-nocookie.com. This means YouTube’s servers are not contacted and no cookies are placed on your device until you actively choose to play a video.

Once you press play, YouTube’s privacy policy applies.

YouTube/Google Privacy Policy

Google Maps

Some pages on our Site include an embedded Google Map to display our office location.

Google Maps may set cookies and collect your IP address when the map loads. You may instead use the “Get Directions” link, which opens Google Maps in a new tab only when you choose to do so.

Google Privacy Policy

5.4 Managing Cookies

You may decline non-essential cookies at any time using the cookie consent banner on our Site.

You may also configure your browser to block or delete cookies, although doing so may limit certain functionality. Most browsers allow you to manage cookie settings through their privacy or security settings menus.

6. Children’s Privacy

Our Site is intended for use by parents and legal guardians of our pediatric patients.

It is not directed at children under the age of 13, and we do not knowingly collect personal information directly from children under 13 through this website.

In accordance with the Children’s Online Privacy Protection Act, or COPPA, if we become aware that we have inadvertently collected information from a child under 13 without verified parental consent, we will delete that information promptly.

If you are a parent or guardian and believe your child has submitted personal information through our Site without your knowledge, please contact us at Office@carrollpediatriccenter.com, and we will remove the information as quickly as possible.

All patient health records for minor patients are maintained in our clinical systems under the direction of a parent or guardian. Those records are governed by our HIPAA Notice of Privacy Practices, not by this website policy.

7. Your Privacy Rights

7.1 Rights for All Visitors

Regardless of where you are located, you may contact us at any time to:

• Request access to the personal information we have collected about you through this website
• Request correction of inaccurate information
• Request deletion of your information, subject to certain legal limitations
• Withdraw consent you previously provided for optional cookies or communications

7.2 Additional Rights for California Residents — CCPA and CPRA

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to Know: You may request a detailed list of the categories of personal information we have collected about you, the sources from which it was collected, the purposes for which it was used, and any third parties with whom it was shared.
• Right to Delete: You may request that we delete personal information we collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt Out of Sale: We do not sell your personal information and have not done so during the preceding 12 months.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To submit a California privacy request, see Section 9 below.

We will respond within 45 days. If we need additional time, we will notify you within the initial 45-day period.

7.3 Additional Rights for EEA and UK Residents — GDPR

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation:

• Access, rectification, erasure, also known as the right to be forgotten, and restriction of processing of your personal data
• Data portability—the right to receive your data in a structured, commonly used format
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time when processing is based on consent
• The right to lodge a complaint with a supervisory authority in your country of residence

Our legal basis for processing data collected through this website is your consent for optional features and cookies, and our legitimate interest in operating a functional, secure website and responding to your inquiries.

To exercise any of these rights, please see Section 9 below.

We will respond within 30 days.

8. Data Retention

We retain personal information collected through this website only as long as necessary for the purposes described in this policy or as required by law.

• Cookie consent records: Retained for 12 months from the date of consent

9. How to Submit a Privacy Request

To exercise any of the rights described in Section 7, please contact us using one of the methods below.

We will verify your identity before processing your request and will respond within the timeframes required by applicable law: 30 days for GDPR requests and 45 days for CCPA requests.

Email—preferred:
Office@carrollpediatriccenter.com

Mail:
Attn: Privacy Officer
Carroll Pediatric Center
1645 Liberty Rd, Suite 205
Eldersburg, MD 21784

Phone:
410-795-7300

To protect your privacy and security, we will verify your identity before processing any data access, correction, or deletion request.

You may be asked to provide your name, date of birth, and the email address or phone number associated with your inquiry.

10. Links to Third-Party Websites

Our Site may contain links to external websites, including our patient portal, payment platforms, and other resources.

We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policy of any third-party site you visit.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, legal requirements, or the features of our website.

We will post the updated policy on this page with a revised “Last Updated” date at the top.

For material changes, we will provide more prominent notice at our discretion.

Your continued use of our Site after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this policy or about how we handle your personal information, please contact us:

Privacy Officer / Office Manager
Carroll Pediatric Center
1645 Liberty Rd, Suite 205
Eldersburg, MD 21784
410-795-7300
office@carrollpediatriccenter.com