Last Updated: October 26, 2026 Effective Date: October 26, 2026
At Rocky Mountain Diabetes Center, we are committed to protecting your privacy. This Privacy Policy (“Policy”) explains how we collect, use, disclose and protect personal information when you visit our website, rockymountaindiabetes.com (the “Site”). We follow the privacy laws that apply to us, including applicable U.S. federal and state laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
By using the Site, you agree to the collection and use of information in accordance with this Policy.
This Policy applies to personal information that Rocky Mountain Diabetes Center collects through the Site. It does not apply to protected health information that we handle in providing healthcare services, which is governed by our Notice of Privacy Practices.
Our contact details: Rocky Mountain Diabetes Center (Rocky Mountain Diabetes and Osteoporosis Center, P.A.), 3910 Washington Parkway, Idaho Falls, Idaho 83404, and 444 Hospital Way, Building 100, Suite 112, Pocatello, Idaho 83201. Phone: 208-523-1122. Email: office@rockymountaindiabetes.com.
Privacy contact: Privacy Officer, Von Crofts, 208-523-1122 ext. 622, voncrofts@idahomed.com.
We encourage you to read this Policy carefully to understand our practices regarding your information.
We collect only the information we need for the purposes described in this Policy.
When you complete our education registration form, we receive what you type into it:
We use this to contact you about education classes and services. Submissions are delivered to our staff by email. They are not stored on the Site. If you are a parent or guardian, see Section 8 about information you give us about a child.
When you visit the Site, we and our service providers automatically receive limited technical information, including:
Some information you may give us through the Site relates to your health or your child’s health, such as the type of diabetes or the kinds of classes and services you are interested in. We ask for it only so we can respond to your request. We do not use it for advertising, and we do not sell it. We limit access to staff who need it to respond, and we ask that you not send other medical details, Social Security numbers or payment card numbers through the Site or by email.
If you are a patient, your health information is protected by HIPAA, and our Notice of Privacy Practices describes how we use and disclose it.
The Site uses the following:
Your choices. When you first visit, a banner asks whether you accept analytics cookies. We remember your choice in a first-party cookie that lasts 12 months, after which we ask again. This cookie records only your choice and the date, and it is necessary for the banner to work. You can change your choice at any time using the “Your Privacy Choices” link in the page footer. If your browser sends a Global Privacy Control signal, we treat it as a decline and do not load Google Analytics. You can also block or delete cookies in your browser settings, though some features may not work as expected.
We use the information we collect to:
We do not use the Site for targeted advertising.
We may share personal information with third parties in the circumstances below, with appropriate safeguards in place.
4.1 Service providers. We use companies that help us run the Site and handle your requests. They may access personal information only to perform these tasks for us and may not use it for other purposes. These include Cloudflare, Inc. (hosting, security, form delivery and aggregate analytics), Google (analytics, fonts and video), and the email providers that deliver form submissions to our staff.
4.2 No sale of personal information. We do not sell your personal information.
4.3 Business transfers. If Rocky Mountain Diabetes Center is involved in a merger, acquisition or asset sale, personal information may be transferred. We will give notice before it becomes subject to a different privacy policy.
4.4 Legal requirements. We may disclose personal information if we believe in good faith that it is necessary to comply with a legal obligation (such as a subpoena or court order), protect the rights, property or safety of Rocky Mountain Diabetes Center, our users or the public, or prevent or investigate wrongdoing.
4.5 With your consent. We may share personal information for any other purpose with your explicit consent.
4.6 Aggregated or de-identified data. We may share information that has been aggregated or de-identified and cannot reasonably be used to identify you.
Rocky Mountain Diabetes Center is based in the United States, and we process information in the United States. Some of our service providers may process information in other countries. By using the Site, you understand that your information may be transferred to and processed in the United States and elsewhere.
6.1 Data security. We use reasonable technical and organizational measures to protect personal information from unauthorized access, alteration, disclosure or destruction, including:
No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.
6.2 Data retention. We keep personal information only as long as necessary for the purposes in this Policy, unless a longer period is required or permitted by law. Form submissions and the email copies of them are kept only as long as needed to respond to you and keep our records. When we no longer need personal information, we securely delete or anonymize it.
Depending on where you live, you may have rights under state privacy laws, including California’s CCPA/CPRA and other state privacy laws that apply to us.
Contact us at voncrofts@idahomed.com or 208-523-1122. We may need to verify your identity before we act on a request. We respond within the time required by applicable law (45 days under the CCPA). You may exercise your rights free of charge unless a request is manifestly unfounded or excessive.
Parts of the Site are about children’s health, including pediatric diabetes care and our kids classes. The Site is meant to be used by adults, including parents and guardians. It is not directed to children under the age of 13, and we do not knowingly collect personal information directly from them. If you are under 13, please ask a parent or guardian to contact us for you.
Information about a child. If you are a parent or guardian, you may give us information about your child through our education registration form, such as the child’s name, the type of diabetes, or an interest in a kids class. Please give us only what is needed for us to respond. We use it only to respond to your request, we do not sell it or use it for advertising, and we do not share it except as described in this Policy.
You may contact us at any time to ask what information we hold about your child, to correct it, or to have it deleted. If we learn that we have collected personal information directly from a child under 13 without verifiable parental consent, we will delete it.
The Site contains links to websites we do not operate, such as diabetes organizations, drug and device manufacturers, health agencies, social media pages, patient-portal and job-application sites. If you follow a link, you go to that site, which has its own privacy practices. We encourage you to review the privacy policy of every site you visit. We do not control and are not responsible for the content or privacy practices of other sites.
We may update this Policy from time to time. We will post the updated Policy on this page and change the “Last Updated” date at the top. We review this Policy at least once a year. Changes are effective when posted, and we encourage you to review this page periodically.
If you have concerns about our privacy practices, please contact us using the details in Section 1. California residents may also contact the California Attorney General or the California Privacy Protection Agency.