Privacy policy

About this policy

This policy explains how Kirwan Plastic Surgery, the practice of Dr. Laurence Kirwan in Norwalk, Connecticut, handles information collected through this website. It covers website enquiries and feedback, not the practice’s full handling of patient medical records.

Information you provide

The contact form collects your first and last name, email address, and any phone number, procedure interest, subject, message, or other form details you choose to provide. If you submit private feedback, we collect your name, email address, rating, feedback, and any optional phone number or additional details you supply.

Please do not include medical history, photographs, insurance details, payment-card information, or other sensitive information in website forms or ordinary email. The website forms are not a secure patient portal, do not confirm an appointment, and are not monitored for emergencies. For an emergency, call 911.

How enquiries and feedback are handled

Submitted enquiries and private feedback are sent to the practice by email using Resend, our email-delivery provider. The destination is the practice’s info@drkirwan.com inbox. Your email address is used as the reply address so the office can respond.

We use these details to respond to your questions, discuss consultation arrangements, and address feedback. Submitting private feedback does not publish a public review. The website submission handlers send email rather than creating a patient record in a website database. Copies may remain in the practice’s email systems and the delivery provider’s systems.

Form messages are not sent to an AI service for classification. To limit abuse, the submission handler temporarily keeps a hashed network address and request counts in server memory for a ten-minute rate-limit window.

Analytics and technical information

The website uses Vercel for hosting and Vercel Web Analytics to understand traffic and improve the site. Analytics can include pages visited, referring websites, browser and device information, and approximate geographic information. This is separate from the contents of contact forms and private feedback; the form handlers do not send those contents as analytics events.

Hosting and delivery services process technical request information, such as IP addresses, request URLs, and error information, to deliver and protect the website. Avoid putting personal or medical details into page URLs.

Cookies and third-party services

Vercel Web Analytics is designed to measure visits without analytics cookies. Browser settings can restrict cookies or site storage; extensions may also block analytics or embedded services. These settings can affect how third-party features work.

Pages with Google Maps or Cherry and CareCredit financing widgets load content from those providers. Loading or interacting with them can share technical information, including your IP address and browser details, with the provider. They may use their own cookies or similar technologies. Financing applications are handled by the financing provider, not the website enquiry form.

External links, including review and social-media links, lead to services with their own privacy policies. Review the relevant provider’s policy before submitting personal, financial, or health information.

Sharing and security

Website submissions are used for practice communications, not sold or supplied to advertising networks by the website’s form handlers. Hosting, analytics, and email providers process information to deliver their services. Information may also need to be disclosed where required by law.

No website or email system can guarantee absolute security. Ordinary email and these forms should not be used to send confidential medical records. For clinical documents or photographs, call the office to arrange an approved secure method.

Retention and your choices

Website correspondence may be retained in the practice’s email systems for handling your enquiry, follow-up, and applicable legal or recordkeeping needs. This website does not automatically delete email correspondence after a fixed period.

You can choose not to use the forms and call the office instead. To ask about information you have submitted, request access or a correction, or request deletion where applicable, contact the practice below. The office may need to verify your identity, and legal or medical-record obligations may limit what can be deleted. Please do not send identity documents or sensitive records by ordinary email.

Medical privacy and policy changes

This website policy is not a HIPAA Notice of Privacy Practices and does not describe all rights or duties relating to patient medical records. Contact the office for the practice’s Notice of Privacy Practices and questions about medical-record privacy.

Changes to this website policy will appear on this page with an updated date.

Contact