Legal
Website Privacy Policy
Effective Date: July 29, 2026 · Last Revised: July 29, 2026
1. Introduction and Scope
CNY Neurological Consulting, PLLC ("CNY Neurological," "the Practice," "we," "us," or "our") operates the website located at cnyneuro.com (the "Website"). This Website Privacy Policy ("Policy") describes how we collect, use, disclose, and protect information obtained through the Website and its publicly accessible features.
This Policy applies to information collected through the Website only. It does not govern information collected through the Practice's clinical operations, electronic health records, patient portal, billing systems, or other non-website channels. The Practice's use and disclosure of protected health information in the context of providing healthcare services is governed by HIPAA and our separate Notice of Privacy Practices.
By using the Website, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please discontinue use of the Website.
2. Information We Collect
We may collect the following categories of information when you use the Website:
a. Information You Voluntarily Provide
- Name, email address, and telephone number submitted through contact or appointment-request forms
- The content of messages, questions, or inquiries you send to the Practice
- Any other information you choose to include in a website form or communication
b. Automatically Collected Technical Information
- IP address, browser type and version, operating system, and device type
- Pages visited, time spent on pages, referring URLs, and navigation paths
- Date and time of access
- Information collected through cookies and similar technologies (see Section 6)
c. Information from Third-Party Services
When you access the Patient Portal or payment services through links on this Website, those services are operated by independent third parties under their own privacy policies. We do not receive or control the information you submit directly to those platforms.
3. Important Warning Regarding Medical Information
⚠ Do Not Submit Sensitive Medical Information Through Ordinary Website Forms
The general contact and appointment-request forms on this Website are not a secure patient portal, are not verified as HIPAA-compliant encrypted communication channels, and are not designed for the transmission of protected health information. Do not submit diagnoses, symptoms, Social Security numbers, insurance identifiers, medication lists, medical records, or other sensitive personal health information through these forms.
For clinical communications, medication refill requests, test results, and other health-related matters, please use the Practice's approved Patient Portal or contact the office directly by telephone at (315) 634-5550.
4. How We Use Information
We use information collected through the Website for the following purposes:
- Responding to inquiries, appointment requests, and other communications submitted through the Website
- Operating, maintaining, and improving the Website's functionality, accessibility, and performance
- Detecting, preventing, and addressing fraud, abuse, security incidents, and technical problems
- Analyzing aggregate, non-identifiable usage patterns to understand how visitors use the Website
- Complying with applicable legal, regulatory, and professional obligations
- Supporting medical-practice administration where information is appropriately connected to a patient relationship
- Communicating with users where they have provided permission or where communication is necessary to respond to their inquiry
5. HIPAA and Protected Health Information
CNY Neurological Consulting, PLLC is a HIPAA-covered healthcare provider. The Practice's use and disclosure of protected health information (PHI) maintained in connection with the provision of healthcare services is governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), applicable New York law, and our Notice of Privacy Practices.
This Website Privacy Policy governs information collected through the public website and does not replace, supersede, or limit the Notice of Privacy Practices. If you are a patient of the Practice, please review the Notice of Privacy Practices for a complete description of your rights and the Practice's obligations with respect to your health information.
Information submitted through general website contact forms may not qualify as PHI under HIPAA if it is collected outside a covered clinical workflow. However, the Practice treats all patient-related information with care and discretion regardless of its technical HIPAA classification.
7. Third-Party Service Providers
The Website interacts with or links to the following categories of third-party services. Each operates under its own privacy policy:
- Website Hosting and Development Platform: The Website is hosted and operated through a third-party web development and hosting platform. The platform may process technical data in connection with serving the Website.
- Patient Portal Provider (MedEnt): The Patient Portal is operated by MedEnt. When you access the portal through a link on this Website, you are directed to MedEnt's platform, which is governed by MedEnt's own terms and privacy practices. CNY Neurological does not control the information you submit directly to MedEnt.
- Payment Services: Online bill payment is processed through a third-party payment platform accessible at pay.cnyneuro.com. Payment information is handled by that platform under its own security and privacy standards. CNY Neurological does not receive or store payment card information through the Website.
- Mapping Services: The Website may link to Google Maps for directions to the Practice's office. Google Maps is operated by Google LLC and is subject to Google's Privacy Policy.
- Email and Communication: [PRACTICE TO CONFIRM] — Confirm the email service provider used to receive and respond to website inquiries.
8. Information Sharing
CNY Neurological Consulting does not sell personal information collected through the Website to third parties.
We may share information in the following limited circumstances:
- Service Providers: We may share information with vendors and service providers who assist in operating the Website, subject to appropriate confidentiality obligations.
- Legal Requirements: We may disclose information when required by law, court order, subpoena, or other legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of the Practice, its patients, or the public.
- Professional Advisers: We may share information with attorneys, accountants, or other professional advisers under appropriate confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or transfer of the Practice's assets, information may be transferred as part of that transaction, subject to applicable law.
9. Data Retention
We retain information collected through the Website for as long as necessary to fulfill the purposes described in this Policy, including responding to inquiries, maintaining records for operational and legal purposes, and complying with applicable medical, billing, regulatory, and recordkeeping requirements. The appropriate retention period varies depending on the nature of the information and applicable law. Some information may be retained for extended periods where required by New York law, HIPAA, or other applicable regulations.
10. Data Security
CNY Neurological Consulting implements reasonable administrative, technical, and physical safeguards designed to protect information collected through the Website from unauthorized access, use, disclosure, alteration, or destruction. The Website is served over HTTPS to protect data in transit.
No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and we do not warrant that information transmitted to or through the Website will be free from interception or unauthorized access. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately using the information in Section 16.
11. Data Breach and Incident Response
In the event of a qualifying security incident involving personal information or protected health information, CNY Neurological Consulting will respond in accordance with applicable federal and New York law, including the HIPAA Breach Notification Rule (45 C.F.R. §§ 164.400–414) and the New York SHIELD Act. Affected individuals will be notified as required by applicable law.
12. Your Choices and Rights
Depending on applicable law and the nature of the information, you may have the right to:
- Request access to or correction of information we hold about you
- Request deletion of certain information where legally available
- Withdraw permission for certain communications
- Manage cookies through your browser settings
- Contact us with privacy concerns or questions
Please note that some information cannot be deleted when retention is required for medical, billing, legal, regulatory, fraud-prevention, or recordkeeping purposes. Requests related to protected health information maintained in connection with your care should be directed to the Practice's Privacy Officer as described in the Notice of Privacy Practices.
13. Children and Minors
The public Website is not directed toward children for independent use. Parents or legal guardians should manage all website communications involving minors. Nothing in this Policy is intended to conflict with applicable healthcare consent or confidentiality laws governing the treatment of minors.
14. External Links
The Website contains links to third-party websites, including the Patient Portal and payment platform. CNY Neurological Consulting is not responsible for the privacy practices, security, or content of those websites. We encourage you to review the privacy policies of any third-party site you visit.
15. Policy Changes
We may update this Policy from time to time. When we do, we will post the revised Policy on this page with an updated "Last Revised" date at the top. We encourage you to review this Policy periodically. Your continued use of the Website after any changes constitutes your acceptance of the updated Policy.
16. Privacy Contact
If you have questions, concerns, or requests regarding this Privacy Policy or the Practice's privacy practices, please contact:
CNY Neurological Consulting, PLLC
Privacy Officer / Privacy Contact: Nabeel Shukri, MD
5000 Brittonfield Parkway, East Syracuse, NY
Phone: (315) 634-5550
Email: [email protected]