Privacy Policy
Effective date: October 18, 2026
This policy explains what information drewalbertmd.com (“the Website”), the website of Drew Albert, MD MBA, collects, how it is used, and the choices you have. It covers this Website only. It does not cover care you receive in clinic, which is handled under the clinic’s own notices.
Information you give us
- Appointment requests. When you use the booking form, you give us your name, phone number, email address and the reason for your visit. The form sends this to the clinic’s email inbox (through Amazon Simple Email Service) so the team can contact you. The Website does not keep a separate database of appointment requests.
- MRI Review. When you request an MRI Review, you give us your name, email address, phone number, the area of your spine, how long you have had symptoms, a short description of your symptoms and where your imaging was done, and you upload your imaging files. This is health information. It is stored on the Website’s server so Dr. Albert can complete the review you requested, and only authorized staff with an admin account can open it. Access to imaging is logged.
- Payments. MRI Review payments are processed by Stripe on Stripe’s checkout page. We do not receive or store your full card number. We keep the payment status, amount and Stripe reference numbers with your order.
- Email. If you email us, we receive whatever you send. Please do not email medical records or imaging.
Information collected automatically
- Site analytics. The Website runs its own simple analytics. Your browser stores a random visitor ID in local storage, and each page view sends the page address, the referring page and any campaign tags in the link. We use this only to count visits and see which pages are useful. We do not use Google Analytics or advertising trackers, and we do not show ads.
- Server logs. Like most websites, our web server records your IP address, the page requested, the time and your browser type. We use these logs to run and protect the Website.
- Cookies. The Website itself does not set cookies on public pages. Staff who sign in to the admin area receive a session cookie. Stripe may set its own cookies on its checkout page.
Content from other services
Some pages load content from other companies: fonts from Google Fonts, an embedded video from YouTube, a map from Google Maps and a newsletter signup form from beehiiv. When a page loads that content, your browser connects to those services, and they receive your IP address and browser information under their own privacy policies.
How we use and share information
We use the information above to respond to appointment requests, provide and bill for MRI Reviews, keep the Website running and secure, and understand overall traffic. We do not sell personal information, and we do not use it for advertising. We share it only with the service providers that run these features (our hosting provider, Stripe, Amazon Web Services and our backup storage provider), or when the law requires it.
Retention
We keep MRI Review records and imaging only as long as we need them to provide the review and meet legal, accounting and record-keeping obligations. Analytics are stored as daily page counts, a short list of recent page views and the random visitor IDs described above. They do not include names, contact details or IP addresses.
Security
The Website uses HTTPS. MRI Review records and imaging can be opened only by signed-in staff accounts, and access is logged. No method of storage or transmission is completely secure, but we work to protect your information.
Your choices
To ask what information we hold about you, or to ask us to correct or delete it, email admin@drewalbertmd.com or call 770.834.0873. We may need to keep some records for legal, billing or security reasons.
Changes to this policy
If we change this policy, we will post the new version on this page and update the effective date.