Privacy Policy

Effective Date: February 17, 2026

Last Updated: February 17, 2026

‍

Theodore Cisu, MD (“we,” “our,” or “us”) operates the website theocisumd.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our Site, request an appointment, or otherwise interact with us online.

Important: This Privacy Policy applies only to information collected through this website. It does not replace or modify our HIPAA Notice of Privacy Practices, which governs how we use and disclose Protected Health Information (PHI) in the course of providing medical care. A copy of our HIPAA Notice of Privacy Practices is available at our offices or upon request.

^{1. Information We Collect}

1.1 Information You Provide

When you interact with our Site, you may voluntarily provide personal information, including:

• Name, email address, and phone number (via appointment request forms or contact forms)
• Insurance and referral information (if submitted through our intake process)
• Messages or questions you send us through the Site
• Any other information you choose to provide

1.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies and similar technologies:

• Device and Browser Information: IP address, browser type, operating system, device type, and screen resolution
• Usage Data: Pages viewed, time spent on pages, referring URL, and navigation patterns
• Cookies: Small text files stored on your device that help us analyze Site traffic and improve your experience. Our Site is hosted on Webflow, which uses cookies for analytics and functionality
• Analytics: We may use third-party analytics services (such as Google Analytics) to understand how visitors use our Site

1.3 Information from Third Parties

We may receive information about you from third-party platforms if you interact with our profiles on Google Business, Facebook, Instagram, LinkedIn, Yelp, YouTube, or Doximity.

^{2. How We Use Your Information}

We use the information we collect for the following purposes:

• To respond to your appointment requests and inquiries
• To communicate with you about your care or our services
• To facilitate telehealth consultations where applicable
• To improve our Site, services, and patient experience
• To analyze Site traffic and usage patterns
• To comply with legal obligations, including HIPAA and Virginia state law
• To protect against fraud, unauthorized access, and other security threats

^{3. How We Share Your Information}

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: Third parties that help us operate our Site and practice (e.g., Webflow for hosting, email service providers, analytics tools). These providers are contractually required to protect your information.
• Legal Requirements: When required by law, regulation, legal process, or enforceable government request.
• Safety: To protect the rights, safety, or property of our practice, our patients, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of practice assets, your information may be transferred as part of that transaction.

^{4. Cookies and Tracking Technologies}

Our Site uses cookies and similar technologies to enhance your browsing experience. These include:

• Essential Cookies: Required for the Site to function properly (e.g., form submissions, navigation).
• Analytics Cookies: Help us understand how visitors interact with our Site so we can improve it.
• Third-Party Cookies: Set by services embedded on our Site, such as Google Maps, social media widgets, or review platforms.

Most browsers allow you to control cookies through their settings. Disabling cookies may affect the functionality of certain features on our Site.

^{5. Third-Party Links and Services}

Our Site may contain links to third-party websites and services, including but not limited to Google Reviews, social media profiles (Instagram, Facebook, LinkedIn, YouTube, Yelp), Doximity, and OutCare Health. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

^{6. Data Security}

We implement reasonable administrative, technical, and physical safeguards to protect the personal information we collect through our Site. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

If you submit health-related information through our website forms, please be aware that standard web forms are not encrypted to the same level as our clinical systems. For sensitive medical information, we recommend contacting our office directly by phone.

^{7. Telehealth Services}

We offer telehealth consultations for eligible patients. Telehealth visits are conducted through HIPAA-compliant platforms with appropriate safeguards. The privacy and security of your health information during telehealth visits is governed by our HIPAA Notice of Privacy Practices and applicable federal and state law, not this website Privacy Policy.

^{8. Children’s Privacy}

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children through the Site. If you believe we have inadvertently collected information from a child, please contact us so we can promptly delete it.

^{9. Your Privacy Rights}

Depending on your location, you may have certain rights regarding your personal information collected through this website, including the right to access, correct, or delete your data. Virginia residents may have additional rights under the Virginia Consumer Data Protection Act (VCDPA), though HIPAA-covered entities are largely exempt from the VCDPA with respect to protected health information.

For questions about your health records or to exercise rights under HIPAA, please contact our office directly. For questions about website data, please use the contact information below.

^{10. Changes to This Privacy Policy}

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

^{11. Contact Us}

If you have questions about this Privacy Policy or our data practices, contact us at:

‍

Theodore Cisu, MD

540 Radford Lane, Suite 250

Charlottesville, VA 22903

‍

Phone: (434) 823-7896

Email: hello@theocisumd.com

Website: theocisumd.com