Effective date: August 01, 2025
Who we are: Thrive Comprehensive Medical Group
Program in scope: SMS Billing Notifications sent to existing patients located in California, USA.
Contact: (818) 600-1472 · helpdesk@thrivecmg.com · 18607 Ventura Blvd #102
Tarzana, CA 91356, USA
Website Privacy Policy (for portal/web tracking)
HIPAA Notice of Privacy Practices
SMS Privacy (Program-specific)
We respect your privacy. The information you provide is used only to send messages and respond to you. This may include sharing with service providers (such as carriers and vendors) that help deliver the service.
- Mobile opt-in information won’t be shared with third parties for marketing purposes.
- Text messaging opt-in data and consent will never be shared with third parties.
- We may disclose information if required by law, regulation, or government request, or to protect our rights and property.
- SMS content is limited to minimal account details (e.g., balance, last-4 digits) and links to our secure portal.
- We do not request or send PHI via SMS.
- Tapping links will direct you to our website/portal, governed by our Privacy Policy and Terms of Use.
- We maintain records of your consent and opt-out status for compliance.
This policy covers SMS billing communications only. It does not replace our HIPAA Notice of Privacy Practices, which governs use/disclosure of protected health information (PHI).
1) What we collect
We limit SMS data to what’s needed for billing notifications and consent management.
Categories of personal information (CPRA terms in parentheses):
- Identifiers: name, mobile number, patient/account ID (last-4 where needed).
- Account/Billing info: balance amount, due date, last-4 of account identifier; no diagnoses or clinical details in SMS.
- Message metadata: your opt-in/opt-out status (START/STOP/HELP), timestamps, delivery results, and SMS content we send/you reply.
- Technical data when you click our link (collected on our portal/payment page): IP address, device/browser info, cookies, and analytics events (Internet/Network Activity). See WebsitePrivacy
- Payment details: processed by our PCI-compliant processor. We receive limited information (e.g., success/fail, last-4 of card, token/transaction ID), not full card numbers (Financial Information).
Sensitive personal information (SPI): We do not send PHI by SMS. We avoid collecting SPI via SMS. Any health data we handle is governed by HIPAA.
2) Sources of information
- You (number you provide, replies like STOP/HELP).
- Our systems (EHR/PM/CRM) that store your contact and account status.
- Messaging providers/carriers (delivery receipts, routing).
- Payment processor (confirmation of payment status; no full card data).
- Our portal/website when you follow links (cookies/analytics per WebsitePrivacyURL).
3) How we use consumer data
- To send billing/account texts (balance notices, reminders, failed-payment alerts, payment confirmations).
- To manage consent (record opt-in/STOP/START) and maintain an audit trail.
- To provide support when you text HELP or contact us.
- To prevent fraud/abuse, secure our systems, debug and improve the program.
- To secure and improve the service (fraud prevention, troubleshooting) and meet legal/carrier requirements.
- Tov comply with law, regulatory, and carrier rules; respond to lawful requests.
We do not use SMS program data for marketing or cross-context behavioral advertising.
4) How data is shared
We share data only as needed to run the SMS program:
- Service providers (“processors”) that deliver messages (platforms, carriers), run our portal, process payments, or provide IT/security. They may use data only to perform services for us.
- Compliance/legal recipients when required by law or to protect rights/safety.
- Carriers and telecommunications partners: to deliver SMS.
We do not sell personal information. Mobile opt-in information won’t be shared with third parties for marketing purposes.
5) Your choices & controls
- STOP to opt out anytime (we’ll confirm and stop messages from that number).
- START to re-enroll (where supported) or re-consent via portal/intake.
- HELP for help or contact helpdesk@thrivecmg.com / (818) 600-1472.
- You can also update your number or preferences through our portal or support.
6) Security & retention
SMS is not end-to-end encrypted. We minimize SMS content and use branded HTTPS links to our portal for sensitive actions. We retain consent and message logs for our compliance period and then delete or de-identify them per policy.
7) Your choices & CA privacy rights
California residents have the right to:
- Know/Access the categories and specific pieces of personal information we collected.
- Delete personal information (subject to legal/regulatory exceptions, e.g., required records).
- Correct inaccurate personal information.
- Opt-out of sale/share (we don’t sell/share, but you can still submit a request).
- Limit use of Sensitive PI (not applicable—we don’t use SPI for unrelated purposes).
- Non-discrimination for exercising rights.
How to submit a request:
Use WebForm or contact helpdesk@thrivecmg.com/ (818) 600-1472. We’ll verify your identity (match with records; we may request additional info). You may use an authorized agent; we require proof of authorization and still verify you directly as required by law.
8) Opt-out of SMS (program-specific)
- Text STOP to end messages. We will stop texting you from that number/program promptly and log your opt-out.
- To re-enroll (where supported), text START or re-consent via our portal/intake.
- Text HELP for help, or contact helpdesk@thrivecmg.com/ (818) 600-1472
- You can also change preferences in the patient portal or contact us to revoke consent.
9) Children and minors
This program is intended for patients and account holders. For patients under 13 (or minors generally), consent must be provided by a parent/guardian as permitted by law and our clinical policies. Do not use SMS for emergencies.
10) Location & cross-border
The SMS program is offered to patients located in California, USA. Information is processed and stored in the United States.
11) Do Not Track & cookies
SMS itself doesn’t use cookies. Our portal/website may use cookies/analytics when you click a link. See WebsitePrivacy for cookie choices and “Do Not Track” handling.
12) Changes to this policy
We may update this policy to reflect operational, legal, or regulatory changes. We’ll post the revised date at the top and, if changes are material, notify you via the portal/SMS or other reasonable means. Your continued participation after changes means you accept the updated policy.
Contact us
Questions or requests about this policy or your data?
Thrive Comprehensive Medical Group — SMS Billing Privacy
Phone: (818) 600-1472 · Email: helpdesk@thrivecmg.com · Address: 18607 Ventura Blvd #102
Tarzana, CA 91356, USA