Legal
Privacy Policy
Dr. Kenton Bruice MD • Last updated: April 1, 2025
Contents
- 1. Introduction
- 2. HIPAA Notice — Protected Health Information
- 3. Information We Collect on This Website
- 4. Cookies and Tracking Technologies
- 5. How We Use Your Information
- 6. Disclosure of Your Information
- 7. Data Security
- 8. Data Retention
- 9. Your Privacy Rights
- 10. Children's Privacy
- 11. Third-Party Links
- 12. Contact Information
- 13. Changes to This Policy
1. Introduction
This Privacy Policy describes how Dr. Kenton Bruice MD and his associated medical practices ("Practice," "we," "us," or "our") collect, use, disclose, and safeguard information about you when you visit our website (www.kentonbruicemd.com) or contact our clinics located in Denver, CO; Aspen, CO; and St. Louis, MO.
Please read this policy carefully. By using our website or submitting information to our practice, you agree to the terms described herein. If you do not agree with any part of this policy, please do not use our website or provide us with your information.
2. HIPAA Notice — Protected Health Information
As a medical practice, we are subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. HIPAA governs how we use and disclose your Protected Health Information (PHI) — information that identifies you and relates to your past, present, or future physical or mental health condition, the provision of health care to you, or the payment for health care.
Our full HIPAA Notice of Privacy Practices (NPP) is provided to all patients at the time of their first appointment. The NPP describes: - Your rights with respect to your PHI - Our obligations to safeguard your PHI - How and when we may use or disclose your PHI without your authorization - How to exercise your HIPAA rights
To request a copy of our HIPAA Notice of Privacy Practices, please contact our office at any of our three locations or email us using the contact information below.
Your PHI is used and disclosed solely in accordance with HIPAA and our Notice of Privacy Practices.
3. Information We Collect on This Website
We may collect the following types of information when you visit or interact with our website:
Information You Provide Directly
- Contact form submissions (name, email address, phone number, message)
- Appointment request submissions
- Newsletter or email list sign-ups
Automatically Collected Information
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited, time spent on pages, and referring URLs
- Date and time of your visit
We collect this information to respond to your inquiries, schedule appointments, improve our website, and understand how visitors find and use our site. We do not collect sensitive medical information through our website contact forms. Medical history and health information is collected only through our secure patient intake process.
5. How We Use Your Information
We use the non-medical information collected through our website for the following purposes:
- To respond to your inquiries, questions, and requests
- To schedule and confirm appointments
- To send administrative communications (appointment reminders, office updates)
- To send marketing communications if you have opted in (you may opt out at any time)
- To analyze website usage and improve the content and functionality of our site
- To comply with applicable laws and regulations
- To protect the security and integrity of our website and systems
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
6. Disclosure of Your Information
We may share your non-medical personal information in the following circumstances:
Service Providers: We may share information with trusted third-party vendors who assist us in operating our website, conducting business, or serving you — including email service providers, appointment scheduling platforms, and website analytics providers. These parties are contractually obligated to keep your information confidential and use it only for the purposes for which it was shared.
Legal Requirements: We may disclose your information when required to do so by law, court order, government regulation, or in response to a valid legal process.
Protection of Rights: We may disclose information to protect the rights, property, or safety of our practice, our patients, or others.
Business Transfers: In the event of a merger, acquisition, sale of assets, or similar transaction, patient records and other information may be transferred as part of that transaction, subject to applicable HIPAA requirements.
We will not disclose your Protected Health Information (PHI) except as permitted or required by HIPAA and our Notice of Privacy Practices.
7. Data Security
We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure HTTPS encryption for all website data transmission
- Password-protected administrative systems
- Access controls limiting who can view patient and contact information
- Secure, HIPAA-compliant platforms for storing and transmitting Protected Health Information
Please be aware that no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including complying with legal obligations, resolving disputes, and enforcing our agreements.
Medical records are retained in accordance with applicable state law — which in Colorado and Missouri generally requires retention for a minimum of 7 years for adult patients (longer for pediatric records). Upon request, patients have the right to access and receive copies of their medical records, subject to applicable HIPAA provisions.
Non-medical contact information submitted through our website (e.g., inquiry forms) is retained for as long as reasonably necessary to respond to your inquiry and maintain records of the communication.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the following rights regarding your information:
Under HIPAA (for patients):
- Right to access and receive copies of your medical records
- Right to request amendments to your health information
- Right to an accounting of disclosures
- Right to request restrictions on certain uses and disclosures
- Right to request confidential communications
- Right to file a complaint with our practice or with the U.S. Department of Health and Human Services
Under applicable state law and general privacy principles:
- Right to know what personal information we have collected about you
- Right to request deletion of your personal information (subject to applicable exceptions)
- Right to opt out of marketing communications at any time
To exercise any of these rights, please contact us using the information provided in Section 12 below.
10. Children's Privacy
Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly.
For patients under 18, we require parental or guardian consent for treatment and follow applicable state laws governing minor patient privacy.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link on our website does not imply endorsement of that site or its privacy practices.
12. Contact Information
If you have questions, concerns, or requests related to this Privacy Policy or our privacy practices, please contact us:
Dr. Kenton Bruice MD
Denver Office
90 Madison Street, Suite 704
Denver, CO 80206
Phone: 303-957-6686
Aspen Office
305 Aspen Airport Business Center, Unit M
Aspen, CO 81611
Phone: 970-925-6655
St. Louis Office
9909 Clayton Road, Suite 225
Saint Louis, MO 63124
Phone: 314-222-7567
For HIPAA-related complaints, you also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr or by calling 1-800-368-1019. We will not retaliate against you for filing a complaint.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
We encourage you to review this page periodically to stay informed about how we protect your information.
Questions about this policy? Call our Denver office: 303-957-6686
Back to top ↑Ready to Become a Patient?
We take the privacy and security of your health information seriously. Contact our office to schedule a consultation at any of our three locations.
Contact Our Office