Privacy Policy

Last updated: June 2026

This Privacy Policy describes how Dr. Elizabeth Kiwanuka, MD, PhD ("the Practice") collects, uses, and protects information you provide through this website and related services.

1. Information we collect

The Practice may collect the following categories of information when you visit this website or contact the office:

• Information you submit directly, including your name, contact information, date of birth, insurance information, and clinical history, when you book a consultation or contact the office.
• Information collected automatically, including IP address, browser type, device type, and pages visited, through standard web analytics.
• Communications, including emails, text messages, and phone calls, between you and the office.

2. How information is used

Information you provide is used to schedule and conduct consultations, plan and provide medical care, communicate with you about your care, process insurance claims where applicable, and comply with legal and regulatory obligations.

The Practice does not sell or rent your personal information to third parties. The Practice may share protected health information ("PHI") with third parties only as permitted under HIPAA, including with healthcare providers involved in your care, with your insurance carrier, and as required by law.

3. Third-party booking and communication tools

This website links to a third-party patient scheduling portal hosted by MyPatientNow. Information you submit through the booking portal is governed by MyPatientNow's privacy policy in addition to the Practice's. Phone calls placed to the office and text messages sent to the office text line are recorded and stored in accordance with applicable healthcare privacy law.

4. Cookies and analytics

This website may use cookies and standard web analytics tools to understand how the site is used and to improve patient experience. You can disable cookies in your browser settings; doing so may affect how the website functions. The Practice does not use cookies to identify you personally outside of an active session you have initiated.

5. Your rights under HIPAA and New York law

You have rights regarding your protected health information under the federal Health Insurance Portability and Accountability Act (HIPAA), including the right to access, request correction of, and request a record of disclosures of your PHI. Under the New York SHIELD Act, you have rights regarding the security of personal information collected by businesses operating in New York. To exercise any of these rights, contact the office in writing at the address below.

6. Data security

The Practice maintains reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, use, or disclosure. No system can be guaranteed to be fully secure; if you believe your information may have been compromised, contact the office immediately.

7. Children's privacy

This website is not directed to individuals under the age of 18, and the Practice does not knowingly collect personal information from minors except in the context of clinical care arranged through a parent or legal guardian.

8. Changes to this policy

The Practice may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page.

9. Contact

To ask a question about this Privacy Policy, request a copy of the Practice's HIPAA Notice of Privacy Practices, or exercise any of your rights described above, contact: