Last updated: July 25, 2025
This privacy policy (“Privacy Policy”) describes how and why MANHATTAN CARDIOLOGY, P.C. (DBA MANHATTAN CARDIOLOGY) and its subsidiaries and affiliated companies and/or brands (collectively, “Company,” “we,” “us,” “our” or the like) might collect, store, use, and/or share (“process”) your information when you use our services, including without limitation when you visit www.manhattancardiology.com (the “Website”) and/or applications available at the Website and/or engage with us in other related ways (collectively, the “Services”).
BY USING THE SERVICES, YOU AGREE YOU (1) HAVE READ OUR TERMS OF SERVICE AND THIS PRIVACY POLICY IN THEIR ENTIRETY; AND (2) UNDERSTAND, AND FULLY ACCEPT OUR TERMS OF SERVICE AND THIS PRIVACY POLICY (COLLECTIVELY, THE “TERMS”). IF YOU DO NOT AGREE TO BE BOUND BY THE TERMS, YOU ARE NOT AUTHORIZED TO ACCESS OR USE OUR SERVICES AND MUST PROMPTLY DISCONTINUE USING AND EXIT THE SERVICES.
Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with either the Terms or our policies and practices, you must discontinue using and exit the Services promptly.
Manhattan Cardiology maintains a separate policy in connection with the Health Portability and Accountability Act (“HIPAA”) that can be viewed here: HIPAA NOTICE OF PRIVACY PRACTICES.
We collect personal information that you voluntarily provide to us or which is collected automatically when you express an interest in obtaining information about us or our products and Services, when you visit or otherwise participate in activities on the Services, such as booking an appointment or paying your bill, or when you contact us.
Personally Identifiable Information (“PII”) you disclose to us.
The personally identifiable information (“PII”), which may specifically identify an individual or business, that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
Non-Personally Identifying Information (“Non-PII”) automatically collected.
We automatically collect certain information when you visit, use, or navigate the Services. This non-personally identifying information (“Non-PII”) does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics and history, operating system, language preferences, referring URLs, device name, country, geolocation, behavioral consumer profile, information about how and when you use our Services, time spent on the Website and third party sites, pages visited, links clicked, payment methods used, the pages that led you to our Services, and other technical information. This information is primarily used to maintain the security and operation of our Services, for our internal analytics and reporting purposes, and for assisting us in providing you with targeted marketing and promotional content, including, without limitation, related to your order.
The information we collect includes:
For information regarding what are cookies and how they are used, please refer to our Cookie Notice.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
If you are located in Canada, this section applies to you: We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:
Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work. The categories of third parties we may share personal information with are as follows:
We also may need to share your personal information with third parties, including, without limitation, in the following situations:
THE WEBSITE AND/OR SERVICES MAY CONTAIN LINKS TO THIRD PARTY OWNED AND/OR OPERATED WEBSITES. WE ARE NOT RESPONSIBLE FOR THE PRIVACY PRACTICES OR THE CONTENT OF ANY THIRD-PARTY WEBSITE. We suggest that you contact these third parties directly for information regarding their privacy, security, and data collection and distribution policies prior to providing them with any information.
When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives or because we are required by law, such as HIPAA and patient-related laws, or insurance carriers, to maintain information), we will securely store your personal information.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or wireless medium, or information storage technology, can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, TRANSMISSION OF PERSONAL INFORMATION TO AND FROM OUR SERVICES IS AT YOUR OWN RISK.
The safety and security of your information also depends on you. Our Services do not always require a password, but may allow you to create one to access certain parts of our Website and/or Services. You are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Services like message boards. The information you share in public areas may be viewed by any user of the Website and/or Services.
All PII that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
We do not knowingly solicit data from or market to children under eighteen (18) years of age. By using the Services, you represent that you are at least eighteen (18) years old or that you are the parent or guardian of a minor at least thirteen (13) years old and you consent to such minor dependent’s use of the Services. Children under the age of 13 years of age must not use and must promptly exit the Services. By using the Services, you represent and warrant that you are of legal age to form a binding contract with us and meet all the foregoing eligibility requirements. If we learn we have collected or received personal information from a child under the legal age without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under the age of 13, please contact us at privacy@manhattancardiology.com with “Minor Data Collected Notification” in the subject line.
The types of personal data we collect are listed in “WHAT INFORMATION DO WE COLLECT” above. If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. Please refer to our contact information below. However, please note that this will not affect the lawfulness of the processing of your personal information before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. Additionally, it will not affect further processing through subsequent interactions by you.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.
If you do not want us to share your information with nonaffiliated or non-agent third parties for promotional purposes, contact us using the details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or portions of our Services. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. Most web browsers maintain a “help” section on the toolbar that provides more information about cookies. Please refer to this “help” section for information on how to receive notifications when you are receiving a new cookie and how to turn cookies off. Please refer to our Cookie Notice for additional information.
Residents of certain states, such as California, Maryland, Montana, Nevada, and Texas, may have additional personal information rights and choices. Residents of certain States may have additional rights. Contact us at [insert email] if you have questions about this. If you have questions or comments about your privacy rights, you may email us at privacy@manhattancardiology.com.
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.
Under applicable law, you or someone legally authorized to act on your behalf (your “authorized agent”), may make a request to access, correct or delete your PII. You may, under applicable law, also make a request to know or delete PII on behalf of your child (however, please note, we do not knowingly collect any PII of anyone under the age of eighteen (18)). Requests or exercise of your right(s) can be made by:
Manhattan Cardiology, P.C.
Attn: Administrative Office
969 3rd Avenue, 3rd Floor, Suite 3-1, New York, NY 10022
A request or exercise of your right(s) must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized agent, and should include: (i) the state of which you are a resident; (ii) a description of your request/exercise of your right, with sufficient detail that allows us to properly understand, evaluate, and respond; and (iii) identifying personal information.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm your information.
We will only use your information provided in the request to verify the requestor’s identity or authority to make said request. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
We control and operate the Website and provide the Services from the United States. The Services are not intended to subject us to the laws or jurisdiction of any state, country, or territory other than that of the United States. We do not represent or warrant that the Services are appropriate for use in any particular jurisdiction. Those who choose to access the Services do so at their own initiative and are responsible for complying with all applicable international, federal, state, and local laws, rules, and regulations.
This section is applicable only to users who access, use, or interact with the Services in countries outside the United States, including without limitation the European Economic Area (“EEA”), and supplements certain sections of this Privacy Policy and provides additional information that should be read together with all other sections of this Privacy Policy. To the extent there is any conflict between this section and the other sections of the Privacy Policy, this section shall govern.
The laws of some jurisdictions, such as the European Union, require companies to tell you about the legal basis for using, sharing, or disclosing your information. To the extent those laws apply, we may rely on the following legal bases:
When this Privacy Policy mentions the “Company”, “we”, “our”, “us” or the like, it refers collectively to Company and its subsidiaries and affiliated companies and/or brands responsible for your information under this Privacy Policy (or “Data Controller”).
The laws of some jurisdictions, such as the European Union, require companies to tell you about the legal basis for using, sharing, or disclosing your information. To the extent those laws apply, we may rely on the following legal bases:
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “last updated” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are using and protecting your information.
We welcome your comments and questions regarding our privacy policies. If you have any questions about this Privacy Policy, please contact us at:
Manhattan Cardiology, P.C.
Attn: Administrative Office
969 3rd Avenue, 3rd Floor, Suite 3-1, New York, NY 10022