The short version
This website is a public education site. It does not ask for, store, or transmit your medical information. Signing up for our newsletter gives us one thing: an email address, used to send you health education. Nothing you type into any tool on this site leaves your own device.
Care you receive at a CureRays clinic is a separate matter, governed by HIPAA and by our Notice of Privacy Practices. That relationship begins in the clinic, not on this page.
Last updated: August 2026.
What we collect — and what we don't
What we collect
Only when you choose to give it
- Your email address, if you sign up for health education updates.
- Your name, email and message, if you use a contact or appointment-request form.
- Standard web server logs kept by our hosting provider — IP address, browser type, pages requested — used to keep the site running and secure.
What we do not collect
By design, not by omission
- No protected health information (PHI) through any form on this site.
- No diagnoses, test results, medications, or treatment history.
- No advertising trackers, and no data sold or rented to anyone, ever.
- No accounts, no passwords, no patient portal here — there is nothing on this site to log into.
Please do not send health information through this website
Email and website forms are not secure channels. A message can be intercepted in transit, sit unencrypted on a mail server, or be delivered to the wrong inbox. For that reason we ask you not to include health details — your diagnosis, symptoms, test results, images of a lesion, medications, or insurance and identification numbers — in a newsletter signup, a contact form, or an email to us.
Tell us only that you would like to be contacted. Our staff will then reach you by telephone, or through a secure channel we establish with you, and we can discuss your care safely there.
If you have already sent health information to us this way, nothing is lost — we will handle it with the same care as any other record. We simply cannot promise that the journey it took to reach us was a private one.
How this interface protects your information
These are properties of how the site is actually built, not aspirations.
Everything runs in your browser
Calculators, planners and interactive tools
Every interactive tool on this site computes locally, on your own device. What you type is never sent to us, never written to a server, never logged, and disappears when you close the tab. The site contains no analytics or telemetry code inside any of these tools.
Encrypted in transit
HTTPS everywhere
Every page and every form submission travels over TLS. The site is served as static files with no application database attached to it, which means there is no patient database on this website to breach.
Minimum necessary
We ask for as little as will work
A newsletter needs an email address, so that is the only required field. Forms do not ask for a date of birth, an address, a Social Security number, or an insurance ID, because a website has no legitimate need for them.
Separate from your medical record
The website is not the chart
Nothing you do on this site is written into your clinical record, and nothing from your clinical record is shown on this site. The two systems are not connected.
What you agree to when you sign up
When you submit your email address for health education updates, you are agreeing to the following. This is a consent to receive email — it is not a HIPAA authorization, and it does not permit us to use or disclose any medical information about you.
- We may send you plain-language cancer and arthritis education, screening reminders, survivorship resources, and news about CureRays.
- We will use your email address for that purpose only. We will not sell it, rent it, or share it with advertisers.
- You may withdraw your consent at any time using the unsubscribe link in any message we send, or by emailing office@curerays.com. Withdrawal takes effect promptly and has no bearing whatsoever on the care you receive.
- Signing up does not create a physician–patient relationship, and nothing we send is medical advice about your situation.
- You confirm you are 18 or older, or that a parent or guardian is signing up on your behalf.
Your email address is processed by our website host in order to deliver the message to us. Because that provider is not a HIPAA business associate, this pathway is appropriate for an email address alone and is another reason we ask you never to include health information with it.
HIPAA and your rights as a patient
If you are treated at a CureRays clinic, the health information created there is protected by the Health Insurance Portability and Accountability Act. Our Notice of Privacy Practices describes in full how that information may be used and disclosed, and the rights you hold over it — including the right to inspect and copy your record, to request a correction, to ask for an accounting of disclosures, to request confidential communications, and to file a complaint without retaliation.
We will give you a copy of the Notice of Privacy Practices at your first visit. You may also request one at any time by calling (530) 802-6400 or emailing office@curerays.com, and we will send it to you.
Questions, corrections and complaints
If you want to know what we hold, have it corrected, have it deleted, or you believe your privacy has been mishandled, contact us and a person will answer you.
CureRays Radiation Medicine®
300 Sierra College Drive, Suite 150
Grass Valley, CA 95945-5723
Phone: (530) 802-6400
Email: office@curerays.com
Want to talk to us instead?
For anything involving your diagnosis or your care, call us rather than writing it down here.