Privacy Policy

PromiseCare Medical Group
Effective Date: March 12, 2026
Last Updated: March 12, 2026

Introduction

PromiseCare Medical Group, including its affiliated physician groups — Hemet Community Medical Group, Family Senior Medical Group, Temecula Valley Physicians Medical Group, and Menifee Valley Community Medical Group — (“PromiseCare,” “we,” “us,” or “our”) is committed to protecting your privacy.

This Privacy Policy describes how we collect, use, share, and protect personal information through our websites at promisecare.com, promisecaremanagementservices.com, hemetcommunitymedicalgroup.com, and all affiliated PromiseCare websites (collectively, the “Sites”). It also describes your rights under applicable California and federal law.

Important Note Regarding Health Information: PromiseCare Medical Group is a HIPAA-covered entity. Protected Health Information (PHI) — meaning individually identifiable health information related to your past, present, or future physical or mental health, healthcare services received, or healthcare payment — is governed separately by HIPAA and our HIPAA Notice of Privacy Practices, not by this Privacy Policy. The California Consumer Privacy Act (CCPA/CPRA) expressly exempts PHI maintained by HIPAA-covered entities from its scope. This Privacy Policy applies to non-PHI personal information collected through our Sites, such as contact form submissions, newsletter signups, and website analytics.

If you have questions about how your medical information or health records are handled, please review our HIPAA Notice of Privacy Practices or contact our Privacy Officer at (951) 390-2840.

1. Information We Collect

When you interact with our Sites, we may collect the following categories of personal information:

Information You Provide Directly:

Name, address, email address, phone number
Inquiry content submitted through contact forms
Newsletter subscription information (name, email)
Communication preferences (text/email opt-in or opt-out)
The reason for your contact (e.g., general inquiry, member services, enrollment)

Information Collected Automatically:

IP address, browser type and version, operating system
Pages visited, time and date of visits, time spent on pages
Device identifiers (mobile device ID, mobile operating system)
Referral source (how you arrived at our Site)
Cookie and tracking data (see Section 3 below)

Important: The contact forms on our Sites explicitly state they are not intended for PHI. Do not submit protected health information through website contact forms. Any information that would constitute PHI submitted through a general contact form is handled in accordance with our HIPAA Notice of Privacy Practices, not this Privacy Policy.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

To respond to your inquiries and requests submitted through the Sites
To send newsletters, health education content, Medicare guidance, and other communications you have requested
To send appointment reminders, enrollment information, and service updates
To analyze website traffic and improve Site functionality and content
To process enrollment information requests and connect you with appropriate PromiseCare staff
To comply with legal obligations and respond to lawful requests from government authorities
For internal business operations including auditing, security monitoring, and quality improvement
To evaluate and improve our Sites, marketing efforts, and patient engagement

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our Sites.

Types of Cookies We Use:

Strictly Necessary Cookies — Required for the Site to function. These cannot be disabled.

Analytics and Performance Cookies — We use Google Analytics to understand how visitors use our Sites (pages visited, traffic sources, session duration). Google may use this data in accordance with its Privacy Policy. You may opt out via the Google Analytics Opt-Out Browser Add-On.

Functionality Cookies — Remember your preferences to improve your experience.

Location Services — We use Google Places to support our provider and location search features. This service may access your device location with your permission.

Your Cookie Choices: You may control cookies through your browser settings. Note that disabling certain cookies may affect Site functionality. California residents may also opt out of the sale or sharing of personal information collected through cookies — see Section 8 below.

Global Privacy Control: PromiseCare honors Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal information for users in California, as required by the CPRA.

We may share your non-PHI personal information in the following circumstances:

With Service Providers: We share information with third-party vendors who help us operate the Sites and communicate with you, including analytics providers (Google Analytics), location services (Google Places), email and SMS communication platforms, and web hosting providers. These providers are contractually required to protect your information and use it only for the purposes we specify.

For Business Operations: We may share information internally among PromiseCare affiliated entities for operational and administrative purposes.

For Legal Compliance: We may disclose information when required by law, court order, or valid government request, or when we believe disclosure is necessary to protect the safety of any person or to protect our legal rights.

In a Business Transfer: In the event of a merger, acquisition, or sale of assets, personal information held through the Sites may be transferred as part of that transaction. We will notify you of any such change through the Sites or by email.

With Your Consent: We may share information for other purposes with your explicit consent.

What We Do Not Do: We do not sell your name, contact information, or any personal information submitted through our Sites to data brokers or unaffiliated third parties for their own marketing purposes. We do not sell, rent, or disclose PHI governed by HIPAA. To the extent any data sharing through analytics or advertising tools constitutes a “sale” or “sharing” under California law, California residents have the right to opt out as described in Section 8.

5. Sensitive Personal Information

Under the California Privacy Rights Act (CPRA), certain categories of personal information are classified as “sensitive personal information” (SPI) and receive heightened protections. To the extent PromiseCare collects SPI through the Sites (for example, health-related information submitted voluntarily through contact forms, or location data), we use it only for the purpose for which it was provided and do not use it for secondary purposes without your consent.

You have the right to request that we limit our use and disclosure of your SPI to what is necessary to provide the service you requested. See Section 8 for how to exercise this right.

6. Reproductive Health Information

California law (including SB 107 and AB 2089) and the federal HHS HIPAA Privacy Rule (effective June 25, 2024) provide special protections for information related to reproductive health care. PromiseCare will not disclose personal information related to reproductive health care sought, obtained, or provided lawfully in California for the purpose of investigating, imposing liability on, or penalizing any person for seeking or obtaining such care. This protection applies to personal information collected through the Sites as well as to PHI governed by HIPAA.

7. Data Retention

We retain personal information collected through the Sites for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Analytics data is generally retained in accordance with Google Analytics’ standard retention settings. Contact form and communication preference data is retained until you request deletion or opt out. Information that constitutes PHI is retained in accordance with HIPAA requirements and California medical records retention law.

8. Your Privacy Rights (California Residents)

If you are a California resident, you have the following rights under the CCPA/CPRA:

Right to Know — You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it was used, and the categories of third parties with whom it was shared.

Right to Delete — You have the right to request that we delete personal information we have collected about you, subject to certain legal exceptions.

Right to Correct — You have the right to request that we correct inaccurate personal information we hold about you.

Right to Opt Out of Sale or Sharing — You have the right to opt out of the sale or sharing of your personal information. To exercise this right, click the Do Not Sell or Share My Personal Information link in the footer of this Site, contact us at contact@promisecare.com, or call (951) 390-2840. We will process opt-out requests within 15 business days.

Right to Limit Use of Sensitive Personal Information — You have the right to request that we limit our use and disclosure of sensitive personal information to what is necessary to provide the service you requested. Contact us using the information in Section 11 to exercise this right.

Right Not to Be Discriminated Against — We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not be denied services, charged different prices, or provided a different level of service as a result of exercising your privacy rights.

Exercising Your Rights: To submit a verifiable rights request, contact us at:

We will respond to verifiable requests within 45 days. If we need additional time (up to 90 days total), we will notify you of the extension and the reason for it.

Authorized Agents: You may designate an authorized agent to make a request on your behalf. The agent must provide written proof of authorization, and we may contact you to verify the request.

9. Children’s Privacy

Our Sites are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected information from a child under 13, we will promptly delete it. If you believe a child under 13 has submitted information through our Sites, please contact us at contact@promisecare.com.

We do not sell the personal information of consumers we know to be under 16 years of age without affirmative opt-in consent as required by California law.

10. Do Not Track and Global Privacy Control

Our Sites do not currently respond to Do Not Track (DNT) browser signals. However, we do honor Global Privacy Control (GPC) signals as described in Section 3 for California residents.

11. California Shine the Light (Civil Code § 1798.83)

California residents with an established business relationship with us may request information once per year about the personal information we have shared with third parties for their direct marketing purposes during the prior calendar year. To make such a request, contact us at contact@promisecare.com.

12. Third-Party Links

Our Sites may contain links to third-party websites, including insurance carriers, Quest Diagnostics, the NextMD patient portal, and health resources. These third-party sites have their own privacy policies, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party site before providing personal information.

13. Security

We use commercially reasonable administrative, technical, and physical security measures to protect personal information collected through our Sites against unauthorized access, loss, or misuse. However, no internet transmission or electronic storage system is completely secure. We cannot guarantee the absolute security of information transmitted to or from our Sites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or by a notice on our Sites. We encourage you to review this Privacy Policy periodically to stay informed of any changes.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, or to exercise your privacy rights, contact us at:

PromiseCare Medical Group — Privacy
1545 W. Florida Ave., Hemet, CA 92543
Phone: (951) 390-2840 | TTY: 711
Email: contact@promisecare.com
Online: promisecare.com/contact-us/

For questions specifically about your protected health information and HIPAA rights, contact our Privacy Officer at the address above or review our HIPAA Notice of Privacy Practices.