Request an Appointment

Privacy Policy

Effective Date: January 1, 2025

Last Updated: February 17, 2026

1. Introduction

Short Hills Ophthalmology ("SHO," "the Practice," "we," "us," or "our") is a comprehensive eye care medical practice dedicated to providing patients in the Short Hills, New Jersey area with high-quality ophthalmological services, including routine eye examinations, advanced surgical procedures, and specialized ocular care.

This Privacy Policy describes the types of information we collect through our website located at shorthillseye.com (the "Website"), how we use that information, and the rights you may have regarding your information. This policy applies to information collected when you visit our Website, use our online forms, subscribe to our newsletter, or otherwise interact with us through digital channels.

Important Distinctions:

  • Website Data vs. Clinical/Patient Data: This Privacy Policy applies exclusively to information collected through our Website and related digital services. Clinical medical records, treatment information, diagnoses, prescriptions, imaging, laboratory results, insurance details, and other Protected Health Information (PHI) that you provide or that we collect during in-office patient care visits are NOT governed by this policy. Such information is governed by the Practice's separate HIPAA Notice of Privacy Practices, which is provided directly to patients and describes how we use and disclose PHI in accordance with federal HIPAA regulations.
  • HIPAA Notice of Privacy Practices: Short Hills Ophthalmology maintains a separate Notice of Privacy Practices as required by the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws. This Notice describes how we collect, use, disclose, and safeguard your Protected Health Information (PHI) in the context of patient care, treatment, payment, and healthcare operations. The HIPAA Notice is separate from this Website Privacy Policy and is provided directly to patients during their visits or upon request.
  • Jotform Scheduling Data: Appointment scheduling requests submitted through Jotform forms on this Website are processed on Jotform's HIPAA-compliant platform. We have executed a Business Associate Agreement (BAA) with Jotform Inc. Minimal information is collected through these forms, including your name, phone number, preferred appointment time, and general reason for visit (e.g., "annual eye exam" or "cataract consultation"). While this data collection is described in Section 2, Jotform's own privacy practices and platform terms also apply. Further information about Jotform's privacy practices is available at jotform.com/privacy.
  • Website is Not a HIPAA-Covered Portal: This Website does not function as a patient portal, EHR, or HIPAA-covered electronic system. It is designed primarily for informational, marketing, and limited appointment request purposes. Patients should not submit sensitive clinical information, medical histories, insurance details, or other PHI through contact forms or open text fields on this Website.

By accessing and using our Website, you agree to the terms of this Privacy Policy. If you do not agree with our data practices, please discontinue use of the Website. Please also review our Terms of Use and Cookie Policy for additional information about your use of this Website.

2. Information We Collect

2.1 Patient and Visitor Contact Information

We collect personal contact information that you voluntarily provide to us through various forms and channels on our Website:

  • Contact Form Submissions: When you complete a general contact form, we collect your name, email address, phone number, and the content of your message or inquiry.
  • Jotform Appointment Scheduling Requests: Our appointment scheduling request forms are hosted on Jotform's platform. Through these forms, we collect: your name, phone number, your preferred appointment date and time window, and a general reason for your visit (such as "annual comprehensive eye exam," "new patient consultation," "cataract surgery consultation," "diabetic retinopathy screening," or similar categories). We deliberately limit the information collected through scheduling forms to the minimum necessary to process your request.
  • Callback Request Forms: When you submit a callback request through our Elementor Pro forms, we collect your name, phone number, and preferred callback time or additional details about your inquiry.
  • Newsletter Subscription: If you subscribe to our email newsletter or eye health tips, we collect your email address and optionally your name.

2.2 Technical and Usage Information

When you visit our Website, we automatically collect certain technical and behavioral information, including:

  • IP address and general geographic location
  • Browser type, version, and language settings
  • Device type, operating system, and screen resolution
  • Pages viewed, time spent on pages, and navigation paths
  • Referring website or source
  • Date and time of access
  • Links clicked and interactions with Website elements

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior. These technologies are described in detail in Section 5 of this Privacy Policy and in our Cookie Policy.

2.4 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

  • Referral sources (e.g., another healthcare provider, online directory listings)
  • Analytics and attribution platforms that help us understand how visitors find our Website
  • Advertising platforms that help measure the effectiveness of our marketing campaigns

We do NOT purchase or utilize B2B lead generation databases or similar commercial data sources to supplement visitor information.

2.5 Information We Do NOT Collect Through This Website

It is critical to understand that the following sensitive information is NOT collected through this Website's forms, contact pages, or data collection mechanisms:

  • Social Security numbers or other government-issued ID numbers
  • Insurance policy numbers, claims information, or payment details
  • Detailed medical histories, diagnoses, or clinical assessments
  • Current medications, prescriptions, or drug allergies
  • Laboratory test results or medical imaging reports
  • Financial account information or payment methods
  • Family medical history or genetic information
  • Vision prescriptions or detailed eye health conditions

If you need to share any of this information with Short Hills Ophthalmology, please contact the Practice directly by phone at (973) 379-2544 or visit us in person. Such sensitive information should never be submitted through the Website and will be governed by our HIPAA Notice of Privacy Practices when collected during patient care.

3. How We Use Your Information

3.1 Appointment Scheduling and Patient Communication

  • Processing and fulfilling your appointment scheduling requests
  • Contacting you to confirm appointment times or provide scheduling details
  • Responding to your questions or requests related to appointment availability
  • Sending appointment reminders or updates regarding office hours, cancellations, or rescheduling

3.2 Marketing and Communications

  • Sending email newsletters containing eye health tips, practice updates, and educational content
  • Informing you about new services, seasonal eye care awareness campaigns, or treatment options
  • Conducting targeted digital advertising across platforms such as Google Ads, Facebook, Microsoft Advertising, and LinkedIn
  • Measuring the effectiveness of marketing campaigns and optimizing advertising spend
  • Responding to general inquiries and providing information about our services

3.3 Website Functionality and Improvement

  • Analyzing how visitors use our Website to identify areas for improvement
  • Optimizing Website performance, load times, and user experience
  • Detecting and fixing technical errors, bugs, and security vulnerabilities
  • Testing new features and functionality
  • Understanding which pages and content are most popular

3.4 Legal Compliance and Protection

  • Complying with applicable laws, regulations, and legal processes
  • Protecting the rights, privacy, safety, and security of SHO, our patients, employees, and the public
  • Detecting, investigating, and preventing fraudulent transactions and unauthorized access
  • Enforcing our Terms of Use and other agreements

3.5 Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA), UK, or Switzerland, our legal bases for processing include:

  • Legitimate Interests: Operating, improving, and promoting our Website and services; understanding how patients find and interact with us; protecting our business from fraud and abuse
  • Consent: Where you have voluntarily opted into marketing communications, newsletter subscriptions, or other optional data processing
  • Performance of a Contract: Processing your appointment scheduling request to fulfill that request
  • Legal Obligation: Complying with applicable laws and legal processes

4. Data Sharing and Third-Party Service Providers

4.1 Service Providers and Technology Partners

We share information with trusted third-party service providers who help us operate our Website, process scheduling requests, conduct analytics, and run marketing campaigns. These partners are contractually obligated to use your information only for the purposes for which we provide it and to maintain appropriate security measures:

Form Hosting and Patient Communication:

  • Jotform Inc. — Hosts our appointment scheduling request forms. Jotform is HIPAA-compliant and maintains a Business Associate Agreement (BAA) with SHO. Data submitted through Jotform forms is encrypted in transit using TLS and at rest using AES-256 encryption. Visit jotform.com/privacy for Jotform's privacy practices.

Email Marketing and Communications:

  • MailChimp (Intuit Inc.) — Newsletter delivery, marketing automation, and email campaign management

Analytics and Performance Monitoring:

  • Google Analytics 4 (Google LLC) — Website traffic analysis, user behavior tracking, and conversion measurement (implemented via server-side Google Tag Manager through Taggrs.io subdomain)
  • Google Tag Manager (Google LLC) — Tag management and analytics deployment

Advertising and Marketing Platforms:

  • Google Ads (Google LLC) — Targeted advertising campaigns and conversion tracking
  • Microsoft Advertising (Microsoft Corporation) — Targeted advertising campaigns and conversion tracking via Universal Event Tracking (UET)
  • LinkedIn Marketing Solutions (LinkedIn Corporation) — Professional audience targeting and Insight Tag analytics
  • Facebook Pixel (Meta Platforms, Inc.) — Advertising measurement and audience building (when activated)

Website Hosting and Infrastructure:

  • Rocket.net — Website hosting on U.S.-based servers
  • Perfmatters — Site speed optimization
  • Redis Object Cache — Database caching for improved performance

Other Services:

  • All in One SEO Pro — Search engine optimization functionality
  • Site Mailer — Transactional email delivery
  • WP 2FA (Melapress) — Two-factor authentication security
  • Google reCAPTCHA — Spam and bot protection on Elementor Pro callback request forms. reCAPTCHA collects limited technical data to determine whether you are human. See the Google Privacy Policy for more information.

4.2 Business Transfers

If SHO is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.3 Legal Requirements and Protection

We may disclose your information when required by law or when we believe disclosure is necessary to:

  • Comply with legal obligations, court orders, or government requests
  • Enforce our Terms of Use or other agreements
  • Detect, prevent, or address fraud, security, or technical issues
  • Protect the rights, property, or safety of SHO, our patients, or the public

4.4 With Your Consent

We may share your information with other third parties when you provide specific consent to do so.

No Sale of Personal Information: SHO does not sell personal information to third parties for monetary consideration. However, the use of advertising technologies may constitute "sharing" or "targeted advertising" under certain state privacy laws. See Section 8 for information about opting out.

5. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to enhance your Website experience and gather analytics. This section provides an overview; see our Cookie Policy for full cookie tables and detailed information.

5.1 Types of Cookies We Use

Strictly Necessary Cookies

These cookies are essential for our Website to function properly and cannot be disabled without affecting site functionality:

  • WordPress session cookies (PHPSESSID and other session identifiers)
  • Security features and fraud prevention cookies
  • Form functionality cookies

Analytics and Performance Cookies

These cookies help us understand how visitors interact with our Website:

  • Google Analytics 4: Deployed through Taggrs.io server-side Google Tag Manager, these first-party cookies track page views, user interactions, traffic sources, and conversion events. Data is processed in accordance with Google's privacy policies available at policies.google.com/technologies/partner-sites.
  • Perfmatters: Performance optimization cookies to improve site speed and loading times.

Marketing and Advertising Cookies

These cookies are used to deliver relevant advertising and measure campaign effectiveness:

  • Google Ads: Enables conversion tracking, remarketing, and audience targeting
  • Microsoft Advertising (UET): Tracks conversions and measures Microsoft advertising campaign effectiveness
  • LinkedIn Insight Tag: Measures advertising effectiveness and enables professional audience targeting
  • Facebook Pixel: (When activated) Enables conversion measurement and custom audience creation
  • All in One SEO Pro: Internal tracking and SEO optimization

5.2 Tracking Protection on HIPAA-Compliant Form Pages

Short Hills Ophthalmology implements enhanced privacy protections on pages containing HIPAA-compliant appointment scheduling forms:

Third-party analytics and advertising tracking technologies are restricted on pages containing HIPAA-compliant appointment scheduling forms. This ensures that scheduling form interactions are not observed, tracked, or shared with third-party analytics or advertising providers.

Purpose and Impact:

  • No Third-Party Observation: No advertising network, analytics platform, or marketing service provider can observe, collect, or transmit data from HIPAA-compliant scheduling form interactions
  • No Retargeting Based on Scheduling: Visitors who submit scheduling requests through HIPAA-compliant forms are NOT added to retargeting audiences based on that interaction
  • No Health-Related Inference: No third party can infer appointment confirmations, scheduling patterns, or health-related intent from HIPAA-compliant form page activity
  • Data Isolation: Information submitted through HIPAA-compliant scheduling forms cannot be combined with advertising data to infer health information
  • Strictly Necessary Only: Only strictly necessary cookies for form functionality and security remain active on HIPAA-compliant form pages

Standard website forms (such as general contact and callback request forms) operate under the normal tracking practices described in Section 5.1 of this policy. These forms collect limited contact information and are not subject to the same enhanced restrictions as HIPAA-compliant scheduling forms.

5.3 Cookie Duration

Cookies may be "session cookies" (automatically deleted when you close your browser) or "persistent cookies" (remain on your device until expiration or manual deletion). Our marketing cookies typically persist for 30–90 days, while analytics cookies may persist up to 26 months to enable year-over-year performance analysis.

5.4 How to Control and Opt-Out of Cookies

You have several options to control cookies on our Website:

Browser Settings:

Most web browsers allow you to control cookies through their settings. You can typically view, block, or delete cookies. Note that blocking essential cookies may impair Website functionality. For instructions, visit allaboutcookies.org.

Analytics Opt-Out:

Advertising Opt-Outs:

Industry Opt-Out Tools:

Opting out of advertising cookies does not mean you will no longer see advertisements — it means the ads you see will be less relevant to your interests. For full cookie details, see our Cookie Policy.

6. Data Security

We implement industry-standard technical, administrative, and physical security measures to protect your information from unauthorized access, disclosure, alteration, and destruction:

  • Encryption: Data transmitted to and from our Website is encrypted using Transport Layer Security (TLS 1.2 or higher). Stored data is encrypted using AES-256 encryption standards.
  • Jotform Security: All data submitted through Jotform appointment scheduling forms is protected by Jotform's enterprise-grade security measures, including SOC 2 Type II compliance, HIPAA compliance, 256-bit SSL encryption, and U.S.-based data centers. A Business Associate Agreement (BAA) is in place between SHO and Jotform Inc.
  • Access Controls: We limit access to personal information to authorized employees and service providers who need access to perform their job functions. All personnel are bound by confidentiality obligations.
  • Multi-Factor Authentication: Our team uses two-factor authentication (WP 2FA) to access administrative systems.
  • Security Monitoring: We conduct regular security assessments, vulnerability scans, and monitoring for suspicious activity.
  • Vendor Security: Our service providers are contractually required to maintain appropriate security measures and comply with applicable data protection laws.
  • Incident Response: We maintain procedures to respond to data breaches and security incidents in accordance with applicable breach notification laws.
  • Employee Training: Our staff receives regular training on data protection, security best practices, and confidentiality obligations.
  • Form Page Isolation: The exclusion of third-party tracking scripts on form pages (described in Section 5.2) provides an additional layer of data isolation, ensuring that scheduling data cannot be cross-referenced with advertising or analytics platforms.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security practices.

7. Your Privacy Rights and Choices

7.1 General Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request information about the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your information (subject to legal retention obligations)
  • Opt-Out of Marketing: Unsubscribe from marketing emails using the "unsubscribe" link in any email or by contacting us directly
  • Cookie Control: Manage cookie preferences through browser settings and advertising platform opt-outs as described in Section 5
  • Data Portability: In some jurisdictions, receive your information in a portable format
  • Object to Processing: Object to processing of your information for certain purposes

7.2 Email Marketing Opt-Out (CAN-SPAM Compliance)

All marketing emails from SHO include a clear unsubscribe mechanism. We will process your opt-out request within 10 business days. Note that you may continue to receive transactional communications (e.g., appointment confirmations, scheduling updates) even after opting out of marketing emails.

7.3 Distinction from HIPAA Patient Rights

This section describes your rights regarding information collected through our Website. Your rights regarding clinical medical records and Protected Health Information (PHI) are governed separately by HIPAA and the Practice's Notice of Privacy Practices. Those HIPAA rights include:

  • Right to Access Medical Records: Inspect and receive a copy of your medical records
  • Right to Amendment: Request amendment of medical records you believe are inaccurate
  • Right to Accounting of Disclosures: Request an accounting of all disclosures of your PHI
  • Right to Request Restrictions: Request restrictions on how your PHI is used and disclosed
  • Right to Confidential Communications: Request alternative means of communication about your health information
  • Right to File a Complaint: File a complaint with the Practice or with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights

To exercise HIPAA rights regarding your clinical records, contact Short Hills Ophthalmology directly at (973) 379-2544 or info@shorthillseye.com.

8. California Residents' Privacy Rights

This section applies to California residents and describes rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). While SHO is based in New Jersey, visitors to our Website may include California residents.

8.1 Your California Privacy Rights

Under the CCPA and CPRA, California residents have the right to:

  • Right to Know: Request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom we share information
  • Right to Delete: Request deletion of personal information, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt-out of the "sale" or "sharing" of personal information. While we do not sell information for monetary consideration, the use of advertising technologies may constitute "sharing" under CPRA definitions.
  • Right to Limit Use of Sensitive Personal Information: Limit the use of sensitive personal information to purposes permitted by law
  • Right to Non-Discrimination: Exercise your rights without receiving discriminatory treatment

8.2 How to Exercise Your California Rights

To submit a privacy rights request:

  • Email us at info@shorthillseye.com with subject line "California Privacy Request"
  • Mail: Short Hills Ophthalmology, Attn: Privacy, 551 Millburn Ave, Short Hills, NJ 07078

We will verify your identity before responding. We will respond within 45 days (with a possible 45-day extension if necessary). You may designate an authorized agent to make requests on your behalf.

8.3 Categories of Information Collected (Past 12 Months)

  • Identifiers: Name, email address, phone number, IP address
  • Internet Activity: Website browsing behavior, interaction data
  • Geolocation Data: General location based on IP address
  • Inferences: Preferences and characteristics derived from your activity

8.4 "Do Not Sell or Share My Personal Information"

While SHO does not sell personal information for monetary consideration, we use advertising technologies (Google Ads, Microsoft Ads, LinkedIn Insight Tag, Facebook Pixel) that may constitute "sharing" for targeted advertising purposes under California law. California residents may opt out by:

  • Using the advertising opt-out links provided in Section 5.4
  • Adjusting your browser settings to block third-party cookies
  • Contacting us directly at info@shorthillseye.com

8.5 California "Shine the Light" Law

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. SHO does not share personal information with third parties for their direct marketing purposes. To verify or ask questions, contact info@shorthillseye.com.

9. Other U.S. State Privacy Rights

9.1 Applicable State Laws

Several U.S. states have enacted comprehensive privacy laws. Because SHO collects data primarily from individual patients and website visitors, these laws may apply depending on your state of residence. States with enacted privacy laws include Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island.

If you are a resident of one of these states, you may have rights including:

  • Confirm whether we process your personal information
  • Access your personal information
  • Correct inaccurate information
  • Delete personal information
  • Obtain a copy of your information in portable format
  • Opt out of targeted advertising, sale of personal information, or profiling

9.2 New Jersey Residents

Short Hills Ophthalmology is based in New Jersey and primarily serves New Jersey patients. As of the effective date of this Privacy Policy, New Jersey does not have a comprehensive consumer privacy law comparable to the CCPA. However, New Jersey residents have privacy protections under applicable federal laws, including HIPAA for healthcare-related information. SHO monitors legislative developments in New Jersey regarding data privacy and will update this policy accordingly.

9.3 How to Exercise State Privacy Rights

To exercise rights under applicable state laws, please email info@shorthillseye.com or call (973) 379-2544. We will respond within the timeframes required by applicable law (typically 45 days).

10. International Visitors and Data Transfers

SHO is based in New Jersey, United States, and our services are designed primarily for patients in the New Jersey area. Our Website is hosted on U.S.-based servers operated by Rocket.net. If you access our Website from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country of residence.

10.1 European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and UK GDPR, including:

  • Right of Access: Obtain confirmation of whether we process your data and receive a copy of your personal information
  • Right to Rectification: Request correction of inaccurate or incomplete personal information
  • Right to Erasure: Request deletion of your personal information under certain circumstances
  • Right to Restriction: Request that we limit processing of your personal information
  • Right to Data Portability: Receive your personal information in a structured, commonly used, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: File a complaint with your local supervisory data protection authority

10.2 International Data Transfers

When we transfer personal data from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Our service providers' participation in recognized data transfer frameworks (such as the EU-U.S. Data Privacy Framework)
  • Your explicit consent where applicable

10.3 Contact for International Privacy Inquiries

For questions about international data transfers or to exercise your rights under GDPR, please contact us at info@shorthillseye.com. We will respond within one month as required by GDPR.

11. Data Retention

We retain your personal information for different periods depending on the purpose for which it was collected and legal requirements:

  • Jotform Scheduling Form Data: Retained for appointment coordination purposes. Jotform retains data per their retention policies and BAA terms.
  • Contact Form Submissions: 3 years from last contact
  • Newsletter Subscribers (Active): Until you unsubscribe or 3 years of inactivity (no email opens or clicks), whichever comes first
  • Unsubscribed Email Addresses: Maintained on suppression list to honor opt-out preferences and comply with CAN-SPAM
  • Website Analytics Data: 26 months (Google Analytics 4 setting)
  • Server Logs and Security Data: 90–180 days for security monitoring and incident investigation

Upon expiration of the retention period, we securely delete or anonymize personal information using industry-standard methods including secure overwriting, cryptographic erasure, or physical destruction. Cloud-hosted data deletion includes removal from all backups and replicas, typically completed within 30–90 days.

We may retain certain information longer when required by law, necessary for legal proceedings, or to protect our rights and interests.

12. Children's Privacy

Our Website is designed for adult patients (18 years of age and older). We do not knowingly collect personal information from individuals under 18, and our Website is not directed to children under 13.

If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us immediately at info@shorthillseye.com.

Pediatric Patients: Parents or legal guardians seeking to schedule appointments for minor patients should submit the scheduling request using their own (parent/guardian) contact information. Do not submit detailed medical information about your child through Website forms. Clinical information about minor patients is governed by the Practice's HIPAA Notice of Privacy Practices. Parents and legal guardians have rights to access and control their child's health information in accordance with HIPAA and state law.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a new "Last Updated" date.

For material changes that significantly affect your privacy rights or how we process your information, we will provide prominent notice through one or more of the following:

  • Email notification to newsletter subscribers
  • Prominent banner or notice on our Website
  • Direct communication to recent scheduling requestors

Your continued use of our Website after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Short Hills Ophthalmology
Privacy Inquiries
551 Millburn Ave
Short Hills, NJ 07078
Email: info@shorthillseye.com
Phone: (973) 379-2544
Website: shorthillseye.com

Privacy Rights Requests: All requests to exercise privacy rights should be directed to info@shorthillseye.com. We will respond within 45 days or as otherwise required by applicable law.

Related Legal Documents:

  • Terms of Use — Terms governing your use of our Website
  • Cookie Policy — Information about cookies and tracking technologies
  • Legal Disclaimer — Important disclaimers regarding website content and use
  • HIPAA Notice of Privacy Practices: Available at the Practice or upon request

© 2026 Short Hills Ophthalmology. All Rights Reserved.

This Privacy Policy was last updated on February 17, 2026, and is effective as of January 1, 2025. SHO is committed to protecting your privacy and maintaining transparency about our data practices.