Privacy Policy.

Last updated · October 2026

1. Scope of this Policy

This Privacy Policy applies to personal information collected through our website at www.msyanest.shop (the "Site"), through email, telephone and other communications with our company, and in the course of providing physician-office services (the "Services"). It does not govern third-party websites or services linked from the Site, which are subject to their own privacy policies.

This Policy covers administrative and website privacy. Patient health information in medical records is governed by the Notice of Privacy Practices provided at each office and by applicable health-privacy law, which may impose stricter requirements than this Policy.

By using the Site or communicating with us, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Site or submit personal information to us.

2. Information We Collect

2.1 Information you provide to us

• Inquiry data. When you contact the office by email, form or phone, we collect your name, organization, email address, telephone number and the contents of your inquiry.
• Scheduling and registration data. When scheduling or registering, we may collect name, date of birth, insurance details and the department or specialty requested.
• Records and referral data. For records requests and referrals, we collect the information needed to identify the chart and process the request, including written authorizations.
• Practice documentation. In performing our Services we maintain encounter notes, consent forms, referral logs and administrative records required by the practice's role.

2.2 Information collected automatically

• Technical log data. When you visit the Site, our hosting provider may automatically record standard technical information such as IP address, browser and device type, referring page, pages viewed and access timestamps.
• Cookies. The Site is a static website and does not set tracking or advertising cookies. Our hosting provider (Firebase Hosting, operated by Google) processes technical data as described in Section 5.

2.3 Information we do not seek

The contact form is for scheduling and office inquiries — do not send medical details, symptoms, diagnoses or insurance numbers through it. Clinical information belongs in the intake paperwork the office provides, not in email. We do not engage in behavioral advertising or cross-site tracking.

3. How We Use Information

We use collected information to:

• Schedule appointments and process intake paperwork;
• Verify coverage, process billing and maintain administrative records;
• Coordinate referrals and produce records on authorized request;
• Maintain credential files, consent documents and office logs;
• Issue and receive business correspondence;
• Operate, maintain and secure the Site;
• Meet healthcare licensing, tax, insurance and regulatory obligations;
• Establish, exercise or defend legal claims.

We do not use personal information for automated decision-making or profiling, and we never sell personal information.

4. Legal Bases for Processing

Where applicable law requires a stated legal basis, we process personal information on the following grounds:

• Performance of services. Processing needed to schedule visits, maintain records and provide office functions.
• Legitimate interests. Operating our practice, documenting office functions and securing our systems, where not overridden by your rights.
• Legal obligation. Recordkeeping and disclosure required under healthcare licensing, tax and other applicable law.
• Consent and authorization. Where processing relies on consent or a signed authorization, you may withdraw it subject to legal retention requirements.

5. How We Share Information

We do not sell, rent or trade personal information. Disclosure occurs only in these limited cases:

• Service providers. The Site is hosted on Firebase Hosting (Google LLC); email and business systems are handled by providers acting on our behalf under their own terms and safeguards.
• Within the practice. Departments and offices within the group access the shared medical record for continuity of care, subject to the practice's internal access policies.
• Professional advisers. Attorneys, accountants, insurers and regulators receive information where necessary for services or compliance.
• With your authorization. Medical records are produced to third parties only with written authorization or as otherwise permitted by law.
• Legal requirements. We may disclose information where required by law, regulation, legal process or governmental request, or to protect the rights, property or safety of MSY ANESTHESIA LLC, our patients or others.
• Business transfers. In a merger, acquisition or asset sale, information may transfer as part of the transaction, subject to this Policy.

6. Data Retention

Personal information is kept only as long as needed for the purposes in this Policy. Administrative inquiries are generally retained for up to twenty-four months. Medical records, consent forms and practice documentation are retained for the periods required by healthcare record-retention law — often for the life of the patient relationship plus statutory periods. Information no longer needed is deleted or anonymized.

7. Data Security

We maintain reasonable administrative, technical and physical safeguards, including encrypted transport (HTTPS) on the Site, access controls on records and administrative files, and limiting access to staff who need it for their function. No transmission or storage method is fully secure; if we become aware of a breach affecting your personal information, we will notify you and regulators as required by law.

8. Your Rights and Choices

Depending on your state of residence, you may have some or all of the following rights:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request correction of inaccurate or incomplete data.
• Deletion. Request deletion, subject to legal and record-retention requirements.
• Restriction & objection. Request limits on, or object to, certain processing.
• Portability. Receive your data in a structured, commonly used format.
• Non-discrimination. Exercise your rights without discriminatory treatment.

Requests about medical records are governed by the Notice of Privacy Practices at your office and applicable health-privacy law — contact the office directly for those. For all other requests, residents of states with comprehensive privacy laws may write to zhouyating@msyanest.shop. We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of.

9. Children's Privacy

The Site is intended for businesses and adults. Pediatric offices serve patients under adult supervision; we do not knowingly collect personal information from children under 13 through the Site. If you believe a child has provided us information, contact us and we will delete it.

10. International Visitors

We are located in the United States and process information in the United States. If you access the Site or contact us from abroad, you understand your information will be transferred to and processed in the United States, whose data protection laws may differ from yours.

11. Third-Party Links

The Site may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

12. Changes to this Policy

We may update this Policy to reflect changes in our practices, the Site or applicable law. The "Last updated" date above shows the current version. Material changes are posted here; continued use of the Site after a change constitutes acceptance.

13. Contact Us

Questions, requests or complaints about this Policy or our data handling may be directed to:

MSY ANESTHESIA LLC
3400 Bates Rd
Athens, OH 45701, United States
Email: zhouyating@msyanest.shop
Telephone: +1 712 412 6543