Our Privacy Policy | Princeton, NJ

Brunner MD | Eugenie Brunner, MD, FACS

Last updated: June 8, 2026

HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Brunner MD 256 Bunn Drive, Suite 4 Princeton, NJ 08540

This Notice of Privacy Practices describes how we may use and disclose your protected health information to carry out treatment, payment or health care operations and for other purposes that are permitted or required by law. It also describes your rights to access and control your protected health information. “Protected health information” (PHI) is information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services.

We are required to abide by the terms of this Notice of Privacy Practices. We may change the terms of our notice, at any time. The new notice will be effective for all protected health information that we maintain at that time. Upon your request, we will provide you with any revised Notice of Privacy Practices. You may request a revised version by accessing our website, or calling the office and requesting that a revised copy be sent to you in the mail or asking for one at the time of your next appointment.

1. Uses and Disclosures of Protected Health Information

Your protected health information may be used and disclosed by your physician, our office staff and others outside of our office who are involved in your care and treatment for the purpose of providing health care services to you. Your protected health information may also be used and disclosed to pay your health care bills and to support the operation of your physician’s practice.

Following are examples of the types of uses and disclosures of your protected health information that your physician’s office is permitted to make. These examples are not meant to be exhaustive, but to describe the types of uses and disclosures that may be made by our office.

Treatment: We will use and disclose your protected health information to provide, coordinate, or manage your health care and any related services. This includes the coordination or management of your health care with another provider. For example, we would disclose your protected health information, as necessary, to a home health agency that provides care to you. We will also disclose protected health information to other physicians who may be treating you. In addition, we may disclose your protected health information from time-to-time to another physician or health care provider who, at the request of your physician, becomes involved in your care by providing assistance with your health care diagnosis or treatment.

Payment: Your protected health information will be used and disclosed, as needed, to obtain payment for your health care services provided by us or by another provider. This may include certain activities that your health insurance plan may undertake before it approves or pays for the health care services we recommend for you such as: making a determination of eligibility or coverage for insurance benefits, reviewing services provided to you for medical necessity, and undertaking utilization review activities.

Health Care Operations: We may use or disclose, as needed, your protected health information in order to support the business activities of your physician’s practice. These activities include, but are not limited to, quality assessment activities, employee review activities, training of medical students, licensing, fundraising activities, and conducting or arranging for other business activities.

We will share your protected health information with third party “business associates” that perform various activities (for example, billing or transcription services) for our practice. Whenever an arrangement between our office and a business associate involves the use or disclosure of your protected health information, we will have a written contract that contains terms that will protect the privacy of your protected health information.

Other Permitted and Required Uses and Disclosures That May Be Made Without Your Authorization

We may use or disclose your protected health information without your authorization in the following situations: as required by law; for public health activities; for communicable disease reporting; for health oversight activities; in cases of abuse or neglect; to the Food and Drug Administration; in legal proceedings; for law enforcement purposes; to coroners, funeral directors, and for organ donation; for research approved by an institutional review board; to prevent serious threats to health or safety; for military activity and national security; and for workers’ compensation.

Uses and Disclosures Based upon Your Written Authorization

Other uses and disclosures of your protected health information will be made only with your written authorization, unless otherwise permitted or required by law. You may revoke this authorization in writing at any time.

2. Your Rights

You have the right to inspect and copy your protected health information; to request a restriction of your protected health information; to receive confidential communications by alternative means or at an alternative location; to request amendment of your protected health information; to receive an accounting of certain disclosures; and to obtain a paper copy of this notice upon request.

3. Complaints

You may complain to us or to the Secretary of Health and Human Services if you believe your privacy rights have been violated. You may file a complaint with us by notifying our Privacy Officer. We will not retaliate against you for filing a complaint. Contact us for further information about the complaint process. This notice was published and becomes effective on 09/6/2018.

Website & Marketing Privacy Policy

This section governs data collected through our website and marketing communications and is separate from the HIPAA Notice of Privacy Practices above.

Information We Collect Through Our Website

When you visit brunnermd.com, we may automatically collect certain information about your device and browsing activity, including your IP address, browser type, operating system, pages visited, and referring URLs. This information is collected through cookies and third-party analytics tools including Google Tag Manager and Google Analytics.

You can disable cookies through your browser settings, though doing so may affect certain features of our website.

Email Marketing & Tracking Technologies

Our marketing emails may contain email tracking technologies, also known as tracking pixels or web beacons. These are small, invisible image files that, when an email is opened, may automatically collect the following information:

Whether and when the email was opened
How many times the email was opened
Your IP address
Approximate geographic location derived from your IP address
Device type, operating system, and email client used
Whether links in the email were clicked

This information is collected by our email marketing service provider and is used solely to measure campaign performance and improve the relevance of future communications. You may opt out of marketing emails at any time by clicking the unsubscribe link in any email we send or by contacting us at 609.921.9497.

Disclosure to Third Parties

We do not sell your personal information. We may share information collected through our website and marketing activities with third-party service providers who assist us in operating our website, sending communications, and analyzing performance. These providers are contractually obligated to use your information only as directed by us.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

New Jersey Residents – Your Rights Under the New Jersey Data Privacy Act (NJDPA)

If you are a New Jersey resident, you have the following rights regarding personal information we collect through our website and marketing activities:

Right to Know: You may request confirmation of whether we process your personal data and access to that data, including the categories collected, the purposes of processing, and any third parties with whom it is shared.
Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions.
Right to Correct: You may request correction of inaccurate personal information we hold about you.
Right to Data Portability: You may request a copy of your personal data in a portable, readily usable format.
Right to Opt-Out: You may opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data or use it for targeted advertising.
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
Right to Appeal: If we decline to act on your request, you have the right to appeal our decision. We will respond to appeals within 60 days.

To submit an NJDPA request, contact us at 609.921.9497. We will respond within 45 days and may extend by an additional 45 days where reasonably necessary with prior notice.

California Residents – Your Rights Under CCPA/CPRA

If you are a California resident, you have the following rights regarding personal information we collect:

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the third parties with whom it has been shared.
Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising purposes.
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To submit a CCPA/CPRA request, contact us at 609.921.9497. We will respond within 45 days.