Website Privacy & Cookie Policy and HIPAA Notice of Privacy Practices
Website Privacy & Cookie Policy
Last Updated: August 13, 2026
Georgia Vascular Institute (“GVI,” “we,” “us,” or “our”) respects your privacy. This Privacy & Cookie Policy explains how information may be collected, used, and disclosed when you visit our website at thegvi.com, including our use of cookies, analytics, advertising technologies, embedded videos, and maps.
This policy applies to our public website only.
It is separate from our HIPAA Notice of Privacy Practices, which describes how Georgia Vascular Institute may use and disclose protected health information in connection with providing healthcare services.
1. Information You Provide Directly Through This Website
Georgia Vascular Institute may collect information that you voluntarily provide through forms available on our website, including your name, email address, telephone number, date of birth, information about symptoms, medical conditions or health concerns, responses to health-related questionnaires or candidate-assessment questions, information related to your interest in a particular treatment or procedure, and other information you choose to provide.
If you choose to contact us using a telephone number or email address listed on the website, you may voluntarily provide information to us through those separate communication methods.
Please do not send sensitive medical information through ordinary email unless specifically instructed to do so through an appropriate secure method.
2. Appointment Scheduling Through Tebra
Our website includes links such as “Schedule a Consultation” and similar appointment-related buttons.
When you select one of these links, you are redirected from thegvi.com to a third-party healthcare technology platform operated by Tebra.
Information you enter through the Tebra scheduling platform is submitted through Tebra’s platform and is not entered into a form hosted directly on thegvi.com.
Tebra may collect personal, scheduling, and health-related information in connection with providing services to Georgia Vascular Institute.
Information handled through Tebra may also be subject to applicable healthcare privacy laws, including HIPAA, and to agreements between Tebra and Georgia Vascular Institute.
You should review the privacy information presented through the Tebra platform when submitting information.
3. Information Collected Automatically
In addition to information you voluntarily submit through website forms, certain technical and usage information may be collected automatically when you browse or interact with the website.
This information may include:
- Internet Protocol (IP) address;
- browser type and version;
- device type;
- operating system;
- referring website or source;
- pages viewed;
- date and time of visits;
- approximate geographic location derived from an IP address;
- interactions with pages, links, buttons, videos, maps, and other website features;
- advertising identifiers; and
- analytics identifiers.
We may use this information to operate and improve our website, understand website traffic, measure advertising effectiveness, evaluate website performance, and help protect our website from fraud or misuse.
Our analytics and advertising technologies are not configured to collect information entered into healthcare-related website forms or to fire on the form submission event.
4. What Are Cookies and Similar Technologies?
Cookies are small data files that websites may place on your computer, smartphone, tablet, or other device.
Cookies and similar technologies can help websites function properly, understand how visitors use a website, measure advertising effectiveness, and provide embedded third-party content.
Some cookies are placed directly by GVI or our website platform. Others may be placed or used by third-party service providers whose technologies are integrated with our website.
Similar technologies may include:
- tracking pixels;
- advertising tags;
- web beacons;
- conversion tags;
- local browser storage; and
- other technologies that recognize a browser or device or measure website interactions.
5. Why We Use Cookies and Similar Technologies
We may use cookies and similar technologies for purposes that include:
- operating and maintaining our website;
- providing website functionality;
- measuring website traffic and performance;
- understanding how visitors interact with our website;
- measuring the effectiveness of advertising campaigns;
- tracking certain website conversions and interactions;
- displaying embedded videos and maps; and
- supporting website security and technical functions.
6. Website Functionality Technologies
Our website uses technologies that support website functionality and performance.
For example, our website uses Elementor, which may use local browser storage or similar technology in connection with website functionality.
7. Google Analytics
We use Google Analytics 4 (“GA4”) to help us understand how visitors use our website.
Google Analytics may collect or process information such as:
- IP address;
- browser and device information;
- approximate geographic area;
- pages viewed;
- referring source;
- date and time of visits; and
- interactions with website content.
Google Analytics uses cookies and similar identifiers to distinguish website visits and sessions and provide us with website usage information.
Cookies associated with Google Analytics may include:
- _ga
- _ga_#
We use this information to understand website traffic and improve the performance and usefulness of our website.
Google Analytics is not configured to collect information entered into our healthcare-related website forms or to fire on the form submission event.
8. Google Ads and Conversion Tracking
Georgia Vascular Institute uses Google Ads to advertise our services and uses Google advertising technologies to measure the effectiveness of those advertisements.
Google Ads conversion tracking may help us determine whether someone who interacted with a Google advertisement later visited our website or performed a measured website action.
Google advertising technologies may use cookies, pixels, local browser storage, and similar technologies.
Technologies that may be associated with our website include:
- _gcl_au
- _gcl_ls
- DoubleClick-related cookies or technologies
- Google advertising pixels
- Google conversion-tracking technologies
These technologies may process information such as advertising identifiers, browser and device information, IP address, page URLs, referring information, and website interactions.
Google Ads tracking is not configured to collect information entered into our healthcare-related website forms or to fire on the form submission event.
9. Meta/Facebook Pixel
We use the Meta Pixel, provided by Meta Platforms, Inc., in connection with advertising on Facebook and Instagram.
The Meta Pixel helps us measure the effectiveness of our advertising campaigns and understand certain actions visitors take after interacting with a Meta advertisement.
The Meta Pixel may process information associated with:
- IP address;
- browser and device information;
- page URLs;
- advertising identifiers; and
- certain website interactions or events.
Georgia Vascular Institute provides certain website forms through which individuals may voluntarily submit contact information and health-related information. The Meta Pixel is not configured to collect information entered into these healthcare-related forms or to fire on the form submission event.
10. Google Tag Manager
We use Google Tag Manager (“GTM”) to manage certain analytics and advertising technologies used on our website.
Google Tag Manager may be used to deploy or manage technologies such as:
- Google Analytics 4;
- Google Ads conversion tracking; and
- Meta Pixel.
The individual technologies managed through Google Tag Manager may independently collect or process information as described in this policy.
Google Tag Manager is not configured to transmit information entered into our healthcare-related website forms to our analytics or advertising platforms.
11. Embedded YouTube Videos
Our website contains videos embedded from YouTube, a service provided by Google.
When an embedded YouTube video or player loads or when you interact with a video, Google and YouTube may receive information from your browser or device.
This information may include:
- IP address;
- browser and device information;
- the webpage containing the video;
- video interaction information; and
- cookies or similar identifiers.
If you block third-party cookies or other technologies through your browser, some embedded YouTube functionality will be affected.
12. Embedded Google Maps
Our website uses Google Maps to display the locations of our medical offices.
When an embedded Google Map loads, Google may receive technical information associated with your browser, device, and interaction with the map.
This may include:
- IP address;
- browser and device information;
- the webpage containing the map; and
- interactions with the embedded map.
Google may process this information in accordance with its own privacy policies and settings.
13. Advertising and Measurement
GVI uses Google Ads and Meta advertising services to promote our medical practice and measure advertising performance.
Advertising and measurement technologies may process online identifiers and information about website visits and interactions.
Depending on applicable privacy law, certain uses of advertising technologies may be considered “targeted advertising,” “sharing,” or similar activity even when information is not sold for money.
Our analytics and advertising technologies are not configured to collect the information visitors enter into GVI’s healthcare-related website forms or to fire on the form submission event.
We do not sell patient medical records or protected health information for advertising purposes.
14. How You Can Control Cookies
At this time, Georgia Vascular Institute does provide an on-site cookie preference center that allows visitors to selectively enable or disable categories of cookies.
Most web browsers also allow you to control or delete cookies through your browser settings.
Depending on your browser, you may be able to:
- block cookies;
- delete existing cookies;
- restrict third-party cookies; or
- receive notifications when a website attempts to place cookies.
You may also use privacy and advertising controls provided directly by Google, Meta, and other third-party providers.
Please note that blocking or deleting cookies may affect certain website features, including embedded videos, maps, analytics functionality, or other third-party content.
15. Important Notice for Visitors to Our Healthcare Website
Georgia Vascular Institute is a healthcare provider, and portions of our website contain information about medical conditions, treatments, physicians, and healthcare services.
Certain areas of our website include forms through which visitors may voluntarily provide personal information and health-related information, including information about symptoms, conditions, or interest in particular healthcare services or procedures.
Depending on the information submitted and the circumstances in which it is collected or maintained, health-related information provided through these forms may be subject to HIPAA or other applicable healthcare privacy laws.
Visitors who select a “Schedule a Consultation” or similar scheduling link are redirected to Tebra, a separate third-party healthcare platform.
Information entered through Tebra is submitted through Tebra’s platform rather than through a form hosted directly on thegvi.com.
Our use of website analytics, advertising technologies, cookies, pixels, or other tracking technologies does not replace or modify our obligations under HIPAA or other applicable healthcare privacy laws.
For information regarding how Georgia Vascular Institute uses and discloses protected health information in connection with providing healthcare services, please review our separate HIPAA Notice of Privacy Practices.
16. Third-Party Websites and Services
Our website contains or uses services provided by third parties, including:
- Tebra;
- Google;
- Google Analytics;
- Google Ads;
- Google Tag Manager;
- YouTube;
- Google Maps;
- Meta Platforms, Inc.; and
- other website and technology service providers.
Once you leave our website or interact directly with a third-party service, that third party’s privacy practices may apply.
Third parties may process information according to their own privacy policies, terms, settings, and applicable agreements.
Georgia Vascular Institute is not responsible for the privacy practices of websites or services that we do not operate.
17. How We Use Website Information
We may use information collected through our website and related technologies to:
- operate, maintain, and secure our website;
- understand how visitors use the website;
- improve website content and performance;
- measure website traffic;
- analyze the effectiveness of advertising;
- measure conversions and other website interactions;
- detect technical problems, fraud, or misuse; and
- comply with applicable legal requirements;
- respond to inquiries submitted through website forms;
- evaluate questionnaire or candidate-assessment responses related to healthcare services or procedures;
- communicate with individuals who request information about our services;
- assist with scheduling or coordinating healthcare services.
18. How Website Information May Be Shared
We may allow service providers to process website-related information on our behalf or in connection with services they provide to us.
These providers may include:
- website hosting and technology providers;
- Google;
- Meta Platforms, Inc.;
- website analytics providers;
- advertising and conversion-measurement providers; and
- other vendors that support the operation, security, analytics, or
- advertising functions of our website;
- healthcare technology providers;
- website and form service providers.
We do not sell patient medical records or protected health information for advertising purposes.
The type of information available to a service provider depends on the service it provides and how the relevant technology is configured.
19. Your Privacy Rights
Depending on where you live and the laws applicable to you, you may have certain rights regarding personal information, including rights to request:
- access to personal information;
- correction of inaccurate information;
- deletion of certain information;
- information about how personal information is used or disclosed; or
- an opt-out from certain forms of targeted advertising or sharing.
These rights are subject to applicable law and may not apply in every situation.
These website privacy rights are separate from your rights regarding protected health information under HIPAA.
Requests relating to medical records or protected health information should be made in accordance with our HIPAA Notice of Privacy Practices.
20. Children’s Privacy
Our website is intended to provide general information about Georgia Vascular Institute and our healthcare services.
Certain website forms may request personal information, including date of birth, as part of a healthcare-related inquiry or candidate assessment.
We do not knowingly collect personal information from children through the website for advertising purposes. Information involving a minor that is collected in connection with healthcare services will be handled in accordance with applicable federal and state privacy requirements.
If you believe that a child has provided personal information to us through the website in a manner we did not intend, please contact us.
21. Security
Information submitted through our website is subject to applicable privacy and security requirements. We take steps intended to protect information associated with our website from unauthorized access, use, or disclosure.
However, no website, internet transmission, or electronic storage system can be guaranteed to be completely secure.
22. Changes to This Privacy & Cookie Policy
We may update this policy periodically to reflect changes in:
- our website;
- cookies and tracking technologies;
- advertising or analytics services;
- website functionality;
- our business practices; or
- applicable legal requirements;
- website forms and information-collection practices.
The “Last Updated” date at the top of this policy indicates when it was most recently revised.
We recommend reviewing this policy periodically.
23. Contact Us
If you have questions about this Privacy & Cookie Policy or our website privacy practices, please contact:
Georgia Vascular Institute
3886 Princeton Lakes Way, Suite 100
Atlanta, GA 30331
United States
Phone: (770) 506-4007
Email: info@thegvi.com
HIPAA Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW CAREFULLY.
The Health Insurance Portability and Accountability Act of 1966 (“HIPAA”) is a federal program that requires all medical records and
other individually identifiable health information used or disclosed by us in any form, whether electronically, on paper or orally, are kept properly confidential. This Act gives you, the patient, significant new rights to understand and control how your health information is used. HIPAA provides penalties for covered entities that misuse personal health information.
As required by HIPAA, we have prepared this explanation of how we are required to maintain the privacy of your health information and how we may use and disclose your health information.
A. How the Center May Use or Disclose Your Health Information
We may use and disclose your medical records only for each of the following purposes: treatment, payment and health care operations.
• TREATMENT means providing, coordinating or managing health care and related services by one or more health care providers. An example of this would include performing diagnostic tests in our office.
• PAYMENT means such activities as obtaining reimbursement for services, confirming coverage, billing or collection activities and utilization review. An example of this would be sending a bill for your visit to your insurance company for payment.
• HEALTH CARE OPERATIONS include the business aspects of running the Center, such as conducting quality assessment and improvement activities, auditing functions, cost-management analysis and customer service. An example would be an internal quality assessment review.
We may also create and distribute de-identified health information by removing all references to individually identifiable information.
We may contact you to provide appointment reminders or information about treatment alternatives or other health related benefits and services that may be of interest to you.
There are times we may be required by law to disclose information for law enforcement or public health reasons without additional authorization from the patient.
B. When the Center May Not Use or Disclose Your Health Information
Except as described in this Notice of Privacy Practices, the Center will not use or disclose health information which identifies you without your written authorization. If you do authorize the Center to use or disclose your health information for another purpose, you may revoke your authorization in writing at any time. We are required to honor and abide by that written request, except to the extent that we have already taken actions relying on your authorization.
C. Your Health Information Rights
You have the following rights with respect to your personal health information (“PHI”), which you can exercise by presenting a written request to the Privacy Officer using Center forms:
• The right to request restrictions on certain uses and disclosers of PHI, including those related to disclosers to family members, other relatives, close personal friends or any other person identified by you. We are, however, not required to agree to a requested restriction. If we do agree to a requested restriction, we must abide by it unless you agree in writing to remove it.
• The right to reasonable requests to receive confidential communications of PHI from us by alternative means or at alternatives locations.
• The right to inspect and copy your PHI.
• The right to amend your PHI.
• The right to obtain a paper copy of this Notice from us upon request.
We are required by law to maintain the privacy of your PHI and to provide you with notice of our legal duties and privacy practices with respect to PHI.
D. Changes of this Notice of Privacy Practices
We reserve the right to change the terms of our Notice of Privacy Practices and to make the new notice provisions effective for all PHI that we maintain. We will post and you may request a written copy of a revised Notice of Privacy Practices from the Center.
E. Complaints
If you believe there has been a problem with our collection, use or discloser of your PHI, you have the right to file a complaint with our Privacy Officer/Administrator. If we do not respond to your complaint in a satisfactory manner, you may file a complaint with the U.S.Office of Civil Rights. We will not retaliate against you for filing a complaint.
For more information about HIPAA or to file with our complaint contact:
The U.S. Department of Health & Human Services
Office of Civil Rights
61 Forsyth Street, SW, Suite 3B70
Atlanta, GA 30303-8909
Telephone (404)562-7886; (404)331-2867 (TDD)
Fax: (404)562-7881
www.hhs.gov/ocr/privacy/hipaa/complaints/hipcomplaintpackage.pdf