Privacy Policy
Last updated September 2026
The short version
This site does not track you. There are no cookies, no analytics, no advertising pixels, and no third-party trackers. Nothing on these pages loads from another company's servers unless you ask it to, so no one but this practice learns that you visited. The only information we receive is what you choose to type into the contact form or send by phone, text, or email.
What the contact form collects
The form asks for your name, your email address, an optional phone number, and your message. It is sent to this site's own server, which passes it on as an email to Dr. Rob using Resend, an email delivery service. Resend handles the message in transit; Dr. Rob keeps it in his email.
Please keep your message general. Email and text message are not secure channels for medical information, and neither this website nor the form service is set up to handle protected health information. Anything clinical is better discussed at your visit or by phone.
What the site does automatically
The site is hosted by Vercel, which keeps standard server logs, including IP addresses, for security and reliability. That is the ordinary record any web server keeps, and the practice does not read it to identify or profile anyone.
To stop the contact form being used to send floods of junk mail, the server counts recent submissions. It does this without storing your IP address: the address is converted into an irreversible string of characters, that string is counted, and it is deleted within the hour. There is no way to work backwards from it to you.
The map is off until you ask for it
The location section shows the address and a button rather than a live map. A Google map is loaded from Google's servers, and simply displaying one would hand Google your IP address and set cookies in your browser before you had done anything. So it does not load until you press the button, and the button tells you what pressing it does.
The Get Directions link is an ordinary link. Following it takes you to Google Maps, which is Google's site and is governed by Google's privacy policy, not this one.
How your information is protected
Every page is served over an encrypted connection, and browsers are instructed to refuse an unencrypted one. There are no user accounts and no passwords on this site, so there is nothing to breach. No payment information is ever collected here.
None of this makes email a confidential medical channel. It is not, which is why the form asks you to keep your message general.
What is never done with your information
Your information is not sold, rented, or traded. It is not used for advertising, and it is not shared with anyone beyond the services described above that are needed to deliver your message and run the site.
How long it is kept
Messages stay in the practice's email so your history is available if you become a patient. If you would like a message deleted, ask and it will be removed.
Patient records are separate
If you become a patient, the clinical records created during your care are governed by HIPAA and by New York State law, and are kept separately from anything submitted through this website. This policy covers the website only.
Children
This site is not directed at children and does not knowingly collect information from them. A parent or guardian should make contact on a child's behalf.
Changes to this policy
If how this site handles information changes, this page changes with it and the date at the top is updated. There is no version of this policy that is more current than the one you are reading.
Questions or requests
Call the office at (914) 479-1000 or email docrobdc@me.com. To see, correct, or delete anything you have sent through this site, just ask.