What we collect.
This site exists to introduce Dr. Bismah Irfan, MD and her two practices (The Kidney Holistic Institute and iVitality MD), and to allow new patients to request a discovery consultation. The only personal information collected through this site is what you voluntarily submit through the contact form:
- 01Your name (first and last)Required
- 02Email addressRequired
- 03Phone numberOptional
- 04Reason for visit (selected from a list)Required
- 05A short message about what brings you hereOptional
We do not collect any data automatically other than standard server logs (IP address, browser, referring page) used for security and basic analytics.
How we use it.
Information you submit through the contact form is used only to respond to your inquiry and to schedule a discovery consultation if appropriate. Specifically:
- 01Reach out to confirm what you are looking forDirect
- 02Send appointment-related correspondenceScheduling
- 03Coordinate intake if you become a patientOnboarding
We do not sell, rent, or share your information with third parties for marketing, advertising, or research. We do not subscribe you to a newsletter unless you explicitly opt in.
Protected health information (PHI).
This contact form is not a HIPAA-secure channel. Please do not submit detailed medical records, diagnoses, lab results, medications, or any other Protected Health Information through this form.
A short reason-for-visit category and a sentence about what brings you here is appropriate. Detailed clinical information should be shared after you become a patient, through the secure intake channels at the practice.
Once you become a patient at The Kidney Holistic Institute or iVitality MD, your medical records are handled in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and the practice’s Notice of Privacy Practices, which is provided at intake.
Cookies & tracking.
This site uses minimal essential cookies for basic functionality only. We do not run third-party advertising trackers (Facebook Pixel, Google Ads, etc.) on this site. Standard server logs are retained for a limited period for security and traffic analysis.
If we add analytics in the future, we will update this policy and the date below.
Your rights.
You have the right to:
- 01Request a copy of any information we have about youAnytime
- 02Correct inaccurate informationAnytime
- 03Request deletion of your contact-form submissionsAnytime
- 04Withdraw consent for follow-up communicationAnytime
If you have already become a patient, your medical records are governed by HIPAA, not by this policy.
Contact us.
For questions about this privacy policy, or to exercise any of the rights above, please contact us through the main contact form or by reaching out directly to the practice in Houston, TX.
This policy may be updated from time to time. The “Last updated” date at the top reflects the most recent revision.