Cheyenne Regional Medical Center & Cheyenne Regional Medical Group Cookie Privacy Notice

Effective Date: 09-04-2025
Last Updated: 09-04-2025

Welcome to the websites, mobile applications and related online and digital services of Cheyenne Regional Medical Center and Cheyenne Regional Medical Group (collectively, “CRMC,” “Cheyenne Regional” “We,” “Us,” or “Our”). These services are collectively referred to as our “Sites.”

We take your privacy seriously and want you to know how we collect, use, share and protect your information. This Privacy Notice applies to all CRMC Sites where it is posted. In addition to this notice, you should review our Notice of Privacy Practices for information about how we handle protected health information (“PHI”) in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”).

Other CRMC online properties may have their own privacy policies. You should review those policies when using those sites.

We collect information from and about you in several ways:

We receive and store information that you provide when using our Sites or services, including:

• Personal Identifiers: Name, mailing address, billing address, shipping address, email address, home/work/mobile phone numbers.
• Demographics: Age, date of birth, sex assigned at birth, current gender identity, race, ethnicity, citizenship, veteran/military status, national origin, ancestry.
• Sensitive Personal Information: Religious or philosophical beliefs, political opinions, sexual orientation, pregnancy or childbirth information, medical conditions, disabilities, genetic information (including familial history), biometric data (fingerprints, facial recognition data, gait patterns, voiceprints, iris/retina scans, sleep data) and criminal history (where permitted by law).
• Financial Information: Bank account number, credit/debit card number (for payment processing only).
• Health Information: Medical records, treatment history, diagnoses, medications, insurance notice details and other PHI required to provide care.
• User Contributions: Information you submit for posting or sharing on public or semi-public areas of the Sites (e.g., discussion forums, social features). Your User Contributions are shared at your own risk.

These also include:

• Information you provide when completing forms (e.g., appointment requests, surveys, product ordering).
• Records of correspondence (including email addresses).
• Responses to surveys for research, development and marketing purposes.
• Details of transactions through our Sites, including payment and order fulfillment information.

As you navigate or use our Sites, we may automatically collect:

• Usage Data: Traffic data, referring/exit pages, date/time of visits, clickstream paths, error logs.
• Device Information: IP address, browser type/version, operating system, app version.
• Location Data: If enabled on your device, we may collect geolocation for purposes such as appointment check-in.

These may be collected via:

• Cookies: Small data files stored on your device to remember preferences and track site use.
• Pixels & Web Beacons: Small electronic images used to track usage patterns or email interactions.
• Session Replay Technology: Tools that record interactions on the Sites for troubleshooting and analytics.
• Analytics Tools: Such as Google Analytics, which use cookies to collect aggregate usage data.

You may adjust your browser or device settings to refuse cookies; however, this may affect site functionality.

We use collected information for purposes including:

• Delivering healthcare services and managing your care.
• Operating, maintaining and improving our Sites and services.
• Customizing your experience based on preferences and prior interactions.
• Processing purchases, payments, returns and exchanges.
• Conducting research and analysis to improve our offerings.
• Communicating about your account, appointments, surveys and events.
• Sending newsletters, educational materials and marketing communications (with opt-out options).
• Providing targeted advertising based on your online interactions (unless you opt out).
• Meeting legal, regulatory and contractual obligations.
• Protecting our systems, preventing fraud and ensuring safety.

We may combine this information with other information we maintain about you, including PHI and handle it in accordance with HIPAA when applicable.

We may share your information with:

• Affiliates/Subsidiaries for operational purposes.
• Service Providers/Contractors (e.g., IT support, analytics, marketing, payment processors).
• Legal Authorities to comply with court orders, laws or government requests.
• In Transactions such as mergers, reorganizations or asset sales.
• With Your Consent for specific uses.

We may share aggregated, non-identifiable information with partners for research and improvement purposes.

We do not sell your personal information to third parties for their independent marketing purposes and no mobile opt-in data will be shared with third parties.

You can:

• Opt out of marketing communications by following unsubscribe links or contacting us.
• Manage cookie/tracking preferences via browser/device settings.
• Access, correct or request deletion of your data (subject to legal retention requirements).
• Request a copy of your data.

Patients may exercise HIPAA rights as detailed in our Notice of Privacy Practices.

We use reasonable safeguards, including encryption for certain data transmissions, to protect your information. However, no system is completely secure, and transmission is at your own risk.

Except for patient portal use (with parental/guardian consent for minors 13–17), our Sites are not intended for children under 18. We do not knowingly collect information from children without proper consent.

If you access our Sites from outside the U.S., you acknowledge that your data will be transferred to and processed in the U.S., which may have different privacy laws than your home country.

Our Sites may contain links or content from third parties that have their own privacy notices. We are not responsible for their practices.

We may update this notice as technology, services and laws change. We will post the updated notice with a new “Last Updated” date.

Cheyenne Regional Medical Center & Cheyenne Regional Medical Group [email protected]