Plain language about what information this website handles, what it doesn't, and how patient information is protected in our client work.
Effective date: July 21, 2026
Grand Vision Practice Management (“GVPM,” “we,” “us”), part of Grand Vision, provides practice operations and financial management services to owner-led private medical practices. This policy covers two things: how this public website (gvpracticemanagement.com) handles information, and how patient information is protected in the services we provide to client practices.
Information you choose to send us. If you submit our contact or walkthrough form, we receive what you enter — typically your name, email, phone, and whatever you tell us about your practice. We use it for one purpose: to respond to you and prepare for the conversation you asked for. No drip campaigns, no list-building, no sale or rental of your information — ever.
Technical basics. Like nearly every website, our hosting provider (Cloudflare) processes standard technical data — IP addresses and request logs — to serve pages and protect the site from abuse. Page fonts are served by Google Fonts and images by Cloudflare Images, which receive the standard web requests needed to deliver those files. This website sets no advertising trackers and no analytics cookies.
This website does not collect, store, or display patient health information. The systems we operate for client practices are separate, access-controlled applications that run on infrastructure covered by Business Associate Agreements (BAAs), with encryption in transit and at rest, role-based access, and access logging.
Where GVPM handles protected health information (PHI) in the course of serving a client practice, we do so as a business associate under HIPAA, governed by a Business Associate Agreement with that practice. We follow the minimum-necessary standard: we handle only the information a workflow requires.
GVPM is not a healthcare provider and this website is not a patient portal. If you are a patient with questions about your medical records or your privacy rights, please contact your practice directly — your practice remains the steward of your health information.
We share information from this website only with the service providers needed to run it (form delivery and hosting), and where the law requires disclosure. We do not sell personal information, and we do not share it for advertising.
Inquiry information is kept only as long as needed to handle your inquiry and any engagement that follows. You may ask us at any time to see, correct, or delete the information you sent through this website — email us at the address below and we'll take care of it.
All traffic to this website is encrypted with TLS. Within our client services, access to systems handling practice data requires multi-factor authentication, is limited to the people who need it, and is logged.
This website is intended for practice owners and administrators. It is not directed to children, and we do not knowingly collect information from anyone under 13.
If we change this policy, we'll post the updated version here with a new effective date.
Questions about privacy — including anything about how we handle information — are welcome:
security@gvpracticemanagement.com · (515) 400-3013