How information moves through our website, the choices you have, and how to reach us about privacy.
Website Policy Effective September 12, 2026
This policy describes the Sigma Eyehealth Centers website, including the appointment-request pages and email links available through sigmaeyehealthcenters.com and our related domains. It explains website information handling. It does not replace our clinical Notice of Privacy Practices, authorize additional uses of health information, or limit your rights under applicable law.
Website Information · Patient Privacy & Our Notice · Privacy Questions
You can browse our public pages without submitting an appointment request. When you request a visit, we ask for your name, a cellphone number or email address, a brief reason for the visit, your chosen office, and permission to contact you about that request. You may also provide your date of birth and insurance details.
If you choose to share coverage information, the form can collect your medical or vision insurer, member ID, group number, and policyholder’s name, date of birth, and relationship to you. You can choose to provide insurance information later. Share another person’s information only when you are authorized to do so.
Contact and career links open your email application. We receive the information you include in your message and attachments, such as your contact details, resume, work history, and qualifications. Please do not send Social Security numbers, payment-card information, passwords, or unnecessary medical details through these links.
Appointment requests help our team contact you, understand the type of visit you need, arrange scheduling, and begin checking insurance benefits when you supply coverage details. The submitted information is sent through our Microsoft Azure appointment service and delivered by Microsoft 365 email to the office you select. That office’s distribution group delivers the request to the staff members assigned to receive it. Copies can remain in sent mail, recipient mailboxes, and related email systems; relevant information may also become part of your patient record.
Submitting a request does not book an appointment or guarantee insurance coverage. Our team must confirm the visit. Permission to contact you about a request is not permission to sell your health information or enroll you in unrelated marketing.
Website hosting, email, and security services may process technical information such as IP addresses, browser and device information, requested pages, timestamps, and delivery or error records. These services help deliver pages, troubleshoot problems, and protect the site from abuse. Our hosting infrastructure includes OpenAI Sites and Cloudflare; appointment processing uses Microsoft Azure and our Microsoft 365 email services managed through GoDaddy.
Appointment forms use Cloudflare Turnstile to help distinguish visitors from automated abuse. Cloudflare processes browser and connection signals for security and improvement of its detection service, as explained in its Turnstile Privacy Addendum. Our form code sends the appointment fields to the appointment service, rather than including them in the Turnstile verification request.
The appointment service also uses limited submission counters and protected identifiers derived from contact information to reduce repeated or abusive requests. These security records serve a different purpose from your appointment email.
Our welcome message uses session storage in your browser to remember that it has been dismissed. This setting does not contain your appointment or insurance details. The website’s own form code does not save those details in browser storage, although your browser or device may offer its own autofill or history features.
The current website code does not include advertising pixels, session-replay software, or marketing analytics tags. Hosting and security providers may use their own necessary cookies or similar technologies. Browser settings can help you manage storage and cookies; blocking security scripts may prevent the online form from working. You can always call to request a visit.
Information may be handled by Sigma personnel and service providers involved in hosting, security, communications, scheduling, records, and benefit verification. Insurance details may be used with your insurer to verify benefits. Employment inquiries go to the team reviewing them. Information may also be disclosed when required or permitted by applicable law, including valid legal processes. Any use or disclosure of protected health information remains subject to applicable health-privacy requirements; this website policy does not create a separate permission to disclose it.
The website and appointment service use HTTPS to protect information while it travels between your browser and those services. Access controls, server-side validation, and abuse prevention add protection. No website, email system, or device can be guaranteed completely secure.
Ordinary email can be forwarded, stored on other devices, or seen by someone with access to your account. If you need a different way to communicate, call us before sending sensitive information and tell our team how you prefer to be contacted.
Retention varies by record type. Appointment emails, clinical records, employment correspondence, security records, and backups may have different retention requirements. Information needed for care, recordkeeping, legal obligations, or resolving a dispute may need to be retained. Contact us with a specific question or request; deleting browser history does not delete information already delivered to us, and we cannot promise deletion of records that must be kept.
You may call instead of using an online form, defer insurance details, or ask us to correct information you submitted. To discuss access, correction, communication preferences, or a privacy concern, use the contact information below. We may need to verify your identity or authority before responding, and applicable law determines which requests can be fulfilled.
These website forms are intended for adults and parents, guardians, or other authorized representatives arranging care. Children should not independently submit personal information. If you believe a child submitted information without appropriate authorization, contact us so we can review the situation.
Links to Crystal PM patient forms, Facebook, Google Maps or reviews, insurers, and other resources take you to separately operated services. Their privacy practices and terms also apply. Public social-media messages and reviews are not appropriate places to share insurance IDs or private medical details. Contact our office for help choosing an appropriate communication method.
Our clinical Notice of Privacy Practices describes how health information may be used and disclosed, our responsibilities, and patients’ rights. Read our Notice of Privacy Practices online or download the notice (PDF). The clinical notice is effective February 10, 2026. You may also request a paper copy from our office.
Depending on applicable law, you can request access to or a copy of your health records, ask for corrections, request confidential communications or limits on sharing, and request an accounting of certain disclosures. Some requests have legal exceptions or conditions. Ask our team how to make a request or obtain the notice in paper form.
You can raise a privacy concern with Sigma or file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. You do not need our permission to contact HHS. HIPAA prohibits retaliation for exercising protected rights. Learn more about privacy notices and patient rights.
We may update this website policy as website features or information practices change. The effective date above identifies the current version. Changes to this website policy do not override legal protections for health information or replace the practice’s clinical notice.
Call 319-462-4891 and ask to speak with our Office Manager, the practice’s Privacy Officer, or email contactus@sigmaeyehealthcenters.com. Please describe the type of help you need without including sensitive records or insurance IDs in your initial email.
You can also write to Sigma Eyehealth Centers, Attention: Privacy, 603 E Main St, Anamosa, IA 52205.
Online requests and email are not emergency services. For urgent eye symptoms, call us. For a medical emergency, call 911 or seek emergency care.
