PRIVACY POLICY
Effective Date: May 2, 2026
1. Overview
Nancy Yen Shipley, MD LLC d/b/a Form & Function Orthopaedics (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our Site, use our services, or interact with our intake and communication tools.
Please read this policy carefully. By using the Site, you consent to the practices described here.
Note: This Privacy Policy governs general website activity. A separate Notice of Privacy Practices governs protected health information (PHI) collected in the context of your care, in accordance with HIPAA. You may request a copy of our Notice of Privacy Practices from our office.
2. Information We Collect
2a. Information You Provide Directly
• Contact information (name, email address, phone number, mailing address)
• Health and symptom information submitted through intake forms, quiz tools, or contact forms
• Payment and billing information (processed through a third-party payment processor; we do not store full card numbers)
• Communications you send us via email, forms, or the patient portal
• Account registration information
2b. Information Collected Automatically
When you visit the Site, certain data is collected automatically through cookies and similar technologies, including:
• IP address and approximate geographic location
• Browser type and device information
• Pages visited and time spent on the Site
• Referring URLs
• Interaction data (clicks, scroll depth, form completions)
2c. Information from Third Parties
We may receive information about you from third-party platforms including email marketing services, analytics providers, and social media platforms if you interact with our content on those platforms.
3. How We Use Your Information
We use information we collect to:
• Respond to your inquiries and schedule appointments
• Provide and improve our clinical and wellness services
• Process payments and purchases
• Send appointment reminders, educational content, and service updates (with your consent)
• Personalize your experience, including quiz results and content recommendations
• Comply with legal and regulatory obligations
• Protect the security and integrity of the Site and our operations
• Analyze Site usage to improve functionality and content
4. Health Information and HIPAA
We take the handling of health-related information seriously. Information submitted through our secure patient portal and used in connection with your clinical care is subject to HIPAA and our Notice of Privacy Practices.
Information submitted through general web forms, lead capture tools, or quiz features is not transmitted through HIPAA-secure channels. Please do not include sensitive clinical details (e.g., diagnoses, medications, lab results) in general contact or quiz forms. Use the patient portal for secure clinical communication.
5. Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to operate and improve the Site. You may control cookie settings through your browser. Note that disabling certain cookies may affect Site functionality.
We may use analytics tools (such as Google Analytics) to understand Site usage. These tools may collect information sent by your browser as part of a web page request. You can opt out of Google Analytics data collection by using the Google Analytics Opt-Out Browser Add-on.
6. Email Marketing and Communications
If you subscribe to our email list or opt in through a quiz, lead magnet, or form, you consent to receive marketing and educational communications from us. Each email will include an unsubscribe option. We use a third-party email service provider (such as Flodesk) to manage and send communications.
We do not send commercial email to individuals who have not opted in.
7. How We Share Your Information
We do not sell your personal information. We may share information with:
• Service providers who assist us in operating the Site and delivering services (e.g., payment processors, email platforms, analytics tools, EHR vendors) under confidentiality agreements
• Healthcare providers involved in your care, as permitted by HIPAA and with appropriate authorizations
• Legal and regulatory authorities, when required by law, court order, or to protect rights and safety
• Successors in the event of a merger, acquisition, or sale of practice assets, subject to continued privacy protections
8. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations (including Oregon medical records retention requirements), resolve disputes, and enforce our agreements.
9. Your Rights and Choices
Depending on your location and applicable law, you may have rights regarding your personal information, including:
• Access to the personal information we hold about you
• Correction of inaccurate or incomplete information
• Deletion of your personal information (subject to legal retention requirements)
• Opt-out of marketing communications at any time via the unsubscribe link in any email
To exercise these rights, contact us using the information in Section 13. Note that certain rights may be limited where information is subject to HIPAA or other legal requirements.
10. Children’s Privacy
The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
11. Third-Party Links and Integrations
The Site may link to or integrate with third-party platforms (social media, research databases, scheduling tools). This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access.
12. Security
We implement reasonable administrative, technical, and physical security measures to protect your information. However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
If you believe your information has been compromised, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. We encourage you to review this policy regularly.
14. Contact Us
For questions, requests, or concerns regarding this Privacy Policy, please contact:
Form & Function Orthopaedics
Attn: Privacy Inquiry – Nancy Yen Shipley, MD
9555 SW Barnes Road, #275
Portland, OR 97225
info@f2ortho.com
971-971-4325