CALIFORNIA PRIVACY RIGHTS
Effective Date: November, 2025
Last Updated: November, 2025
ABOUT THIS NOTICE
This page explains the privacy rights available to California residents under California law (including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)). It supplements our Privacy Policy and applies only to personal information collected on our public website (https://drkim.com).
HIPAA / PHI EXCLUSION (IMPORTANT)
We maintain a separate, secure electronic medical record (EMR) system that is not integrated with this website. Protected Health Information (PHI) handled for treatment, payment, or healthcare operations is governed by HIPAA and our HIPAA Notice of Privacy Practices—not this page. Do not submit PHI through general website forms. If you need to share PHI, use the secure portal link we provide.
WHO CAN USE THESE RIGHTS
California residents acting for themselves or through an authorized agent. We will take reasonable steps to verify your identity (and your agent’s authority) before fulfilling requests.
YOUR RIGHTS (CALIFORNIA)
Right to Know/Access
You can request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, purposes, categories of third parties we disclose to, and the categories of disclosures.
Right to Delete
You can request that we delete personal information we collected from you, subject to exceptions (for example, security, legal obligations, or to complete a transaction you requested).
Right to Correct
You can request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of “Sale” or “Sharing”
We do not “sell” or “share” personal information for cross-context behavioral advertising. If our practices change, we will update this page and provide a “Do Not Sell or Share My Personal Information” mechanism.
Right to Limit Use of Sensitive Personal Information
We do not use sensitive personal information for purposes that require a “limit” option under California law. If that changes, we will provide a way to limit such use.
Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
Right to Opt Out of Automated Decision-Making (When Available)
If we begin using automated decision-making covered by California regulations, we will disclose that and provide a way to opt out if required.
GLOBAL PRIVACY CONTROL (GPC)
Where feasible, we treat a valid Global Privacy Control signal as a request to opt out of “sale” or “sharing.” Because we do not sell or share personal information, GPC generally results in no change to your experience.
HOW TO SUBMIT A REQUEST
Choose one of the options below and include your full name, email address used on our site, and the specific request type (Access, Delete, Correct). For agent requests, include the agent’s name and signed authorization.
Email: info@drkim.com
Phone: (415) 362-1846
Mail: Roy Kim, MD – Privacy Requests, 450 Sutter Street, Suite 1440, San Francisco, CA 94108
VERIFICATION
For your security, we will verify your identity. Depending on the request, we may ask you to confirm control of an email address, provide limited identifying details we already hold, or submit a signed declaration. If you use an authorized agent, we may require proof of signed permission or a valid power of attorney, and we may ask you to verify your own identity directly with us.
TIMING
We aim to respond within 45 days. If we need more time (up to an additional 45 days), we will inform you of the reason and extension period.
CATEGORIES WE MAY COLLECT VIA THIS WEBSITE
(See our Privacy Policy for details.) Typical categories may include:
Identifiers (e.g., name, email, phone) that you provide in a general inquiry form.
Internet/technical information (e.g., IP address, device/browser data, pages viewed) generated by your visit.
Limited inferences drawn from the above to operate and secure the site.
We do not collect PHI on this website and do not use advertising cookies or sell/share personal information.
PURPOSES FOR COLLECTION/USE
Respond to inquiries and operate our website.
Maintain security, prevent fraud, debug, and improve performance.
Comply with law and enforce our Terms of Use.
DISCLOSURES
We may disclose personal information to service providers who assist with hosting, security, or website operations under written contracts. We do not sell personal information and do not share it for cross-context behavioral advertising.
MINORS
Our website is intended for adults. We do not knowingly sell or share personal information of consumers under 16 years of age.
CHANGES TO THIS PAGE
We may update this page to reflect changes in our practices or applicable law. The “Last Updated” date shows the most recent revision. Material changes will be posted here.
CONTACT
Questions about your California privacy rights?
Email: info@drkim.com
Phone: (415) 362-1846
Mail: Roy Kim, MD – Privacy Requests, 450 Sutter Street, Suite 1440, San Francisco, CA 94108