Last updated: March 1, 2026
AceTech Medical (“AceTech,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit acetechmm.com, submit web forms, subscribe to emails, use telehealth tools linked from our site, or interact with our patient portal. This policy applies to website and marketing activities. Clinical records are also governed by healthcare privacy laws and our Notice of Privacy Practices provided at the time of care.
We collect information that you voluntarily submit, including:
Please avoid including sensitive clinical details in general marketing forms. Use secure portal messaging or clinical intake workflows for protected health information.
When you browse our website, we and our service providers may automatically collect certain technical data, including IP address, browser type, operating system, referring URLs, pages viewed, timestamps, and device identifiers. We use cookies, web beacons, and similar technologies to remember preferences, measure traffic, and improve performance.
You can control cookies through browser settings. Disabling cookies may limit features such as saved login sessions or form autofill.
We may receive information from insurance eligibility services, laboratory and imaging partners, analytics providers, and publicly available professional licensing databases to verify credentials, coordinate care, or improve website content. We contractually require vendors to handle data appropriately.
We use collected information for purposes including:
We may aggregate or de-identify data so it no longer reasonably identifies you, and use such data for analytics and service development.
Where privacy laws require a legal basis, we rely on one or more of the following: your consent (for example, marketing emails); performance of a contract (membership or care agreements); legitimate interests (website security, improving services) balanced against your rights; and compliance with legal duties (mandatory reporting, tax records).
You may withdraw consent for marketing at any time via the Unsubscribe page without affecting the lawfulness of processing before withdrawal.
We do not sell your personal information. We may share information in these circumstances:
We may disclose de-identified or aggregated statistics that do not identify individuals.
When information constitutes protected health information under applicable healthcare privacy regulations, our use and disclosure follow our Notice of Privacy Practices and legal requirements, which may be more restrictive than this general website policy. For example, treatment, payment, and healthcare operations may occur without separate marketing consent, while marketing communications about third-party products generally require authorization.
You may have rights to access, amend, or request an accounting of certain disclosures of your health information as described in the Notice of Privacy Practices.
Marketing emails are sent only to addresses that have opted in through the subscribe form or an equivalent affirmative action. Each message includes instructions to unsubscribe. Transactional messages—such as appointment confirmations or billing notices related to active care—may be sent as necessary even if you unsubscribe from marketing.
We use industry-standard transport security for web forms where implemented; however, email is not always a secure channel. Avoid sending highly sensitive clinical data by standard email.
We retain personal information for as long as needed to fulfill the purposes described in this policy, unless a longer period is required by law, professional regulation, or litigation holds. Marketing contact data is deleted or suppressed within a reasonable time after a confirmed unsubscribe request, except as needed to document compliance.
Clinical records follow medical record retention schedules that may extend many years after your last encounter.
We implement administrative, technical, and physical safeguards designed to protect information, including access controls, encryption in transit for sensitive workflows, employee training, and vendor risk assessments. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
If we become aware of a breach affecting your information, we will notify you and regulators as required by applicable law.
Our website may be accessed from various regions. If you access the site from outside the country where our servers or primary operations are located, your information may be transferred to and processed in jurisdictions with different privacy laws. We take steps to ensure appropriate protections for cross-border transfers where required.
The website is not directed to children under thirteen for independent account registration. Pediatric care may be arranged by a parent or guardian who provides information on behalf of the child. If we learn that we collected personal information from a child in violation of applicable law, we will take steps to delete it.
Depending on your location, you may have rights to:
To exercise rights, submit a request through the Contact Us form with enough detail for us to verify your identity. We may request additional information to prevent unauthorized disclosure. We respond within timeframes required by law.
We may use analytics tools to understand how visitors interact with pages. These tools may set cookies or collect device data. Social sharing buttons may transmit information to platforms when clicked. Their use is governed by the respective platform policies.
Some browsers offer “Do Not Track” signals. Because there is no uniform industry standard, we do not currently respond to all such signals but review practices as standards evolve.
We may update this Privacy Policy periodically. The revised version will be posted with an updated “Last updated” date. Material changes may be communicated via the website or email where appropriate. We encourage you to review this page regularly.
Privacy-related questions or complaints may be submitted through our Contact Us form. Please include “Privacy Request” in your message topic when available. If you believe your concern was not resolved satisfactorily, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction.
Residents of certain states may have additional rights regarding access, deletion, and disclosure of categories of personal information collected for commercial purposes. AceTech does not sell personal information as defined by those laws. A detailed category list is available upon verified request through the contact form. We do not discriminate against individuals for exercising privacy rights.
Where the General Data Protection Regulation or UK GDPR applies, AceTech acts as controller for website and marketing data. Our lawful bases are described in Section 3. You may contact us to exercise rights under those regulations, including the right to lodge a complaint with a data protection authority.