Effective date: 9 September 2026
Last updated: 9 September 2026

About this policy

This policy explains what information this website collects, how it is used, and the choices you have. It applies to instituteofneurosurgery.com.

This policy is not our Notice of Privacy Practices. Health information created or received in the course of your care as a patient is governed by a separate Notice of Privacy Practices under the Health Insurance Portability and Accountability Act (HIPAA), which is available from our office on request. This website policy covers only information collected through the website.

Who we are

Institute of General and Endovascular Neurosurgery
1187 W Bristol Rd, Suite 1
Flint, Michigan 48507

Phone: (810) 212-4100
Fax: (810) 250-4514
Email: clinics@instituteofneurosurgery.com

Please do not send medical records or clinical details through this website

The forms and chat feature on this website are not a secure channel for health information. Please do not use them to send medical records, imaging, test results, a detailed symptom history, insurance identifiers, or any other sensitive health information.

To share clinical information with us, bring it to your appointment, arrange delivery through your current practice, or contact the office by telephone at (810) 212-4100 and we will tell you the safest way to send it. Physicians referring a patient should use the fax number and process set out on our Referrals page.

If you are experiencing a medical emergency, call 911. Do not use this website to seek urgent care.

Information you provide to us

Enquiry and appointment forms. When you submit a form on this website, we collect the name, email address, telephone number, inquiry type and message that you enter. These submissions are stored in the database of this website and are also sent to our office by email so we can respond.

Chat. This website carries an automated chat assistant that answers general questions about the practice. Messages you type into it are transmitted to and processed by our chat provider, Brain Buddy, and a copy of the conversation may be stored in your own browser so the conversation persists while you browse. Conversations are retained by our chat provider for up to 12 months. The assistant is not a clinician, does not give medical advice, and is not a way to reach Dr. Khan. Please do not enter personal health details into it.

Direct contact. If you email or telephone us, we keep a record of that correspondence so we can respond and maintain continuity.

Information collected automatically

When you visit this website, the following is collected automatically:

This is collected through Google Analytics, which we use to understand how people find and use the site so we can improve it.

We also use Google reCAPTCHA on our forms to prevent automated spam. reCAPTCHA collects hardware and software information from your device and sends it to Google for analysis. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

Cookies and similar technologies

Cookies are small files stored by your browser. This website uses them to:

We do not use advertising cookies, retargeting pixels, or tracking for behavioural advertising on this website.

You can control or delete cookies through your browser settings. You can opt out of Google Analytics specifically by installing the Google browser opt-out add-on. Blocking cookies may affect how parts of the site work.

How we use information

We do not sell your personal information, and we do not share it for the marketing purposes of anyone else.

When we share information

Service providers. Companies that operate parts of this website on our behalf, including our website hosting provider, our email delivery provider, Google (analytics and spam protection), and our chat provider. They may only use the information to provide their service to us.

Professional and clinical coordination. If your enquiry concerns your care, information you send may be added to your clinical record and handled under our Notice of Privacy Practices rather than this policy.

Legal requirements. Where we are required to disclose information by law, regulation, subpoena or court order, or where disclosure is necessary to protect the safety, rights or property of a patient, the public, or the practice.

Business transfer. If the practice is reorganised, merged or transferred, information may pass to the successor entity, subject to this policy.

How long we keep information

We keep website enquiries for 24 months after our last contact with you, unless the enquiry has become part of your clinical record, in which case it is retained under our clinical records retention policy and applicable Michigan and federal requirements.

Chat conversations are retained by our chat provider for up to 12 months.

Google Analytics data is retained for the period configured in our Google Analytics account.

How we protect information

This website is served over an encrypted connection (HTTPS). Access to the administrative area of this website, and to stored form submissions, is limited to authorised personnel.

No website or internet transmission is completely secure, which is why we ask you not to send health information through this site. We cannot guarantee the security of information you choose to send us through the website.

Your choices

You can:

To make any of these requests, email clinics@instituteofneurosurgery.com or call (810) 212-4100. We may need to verify your identity before acting.

These choices apply to information collected through this website. Your medical record is different. HIPAA gives you the right to inspect and obtain a copy of your medical record, and to request that it be amended, and those requests are handled under our Notice of Privacy Practices rather than this policy. Records that form part of your medical record are kept for the period required by Michigan and federal law and cannot be deleted on request. Contact the office and we will direct you to the right process.

Privacy of children

This website is intended for adults. We do not knowingly collect personal information from children under 13 through this website. If you believe a child has provided information through this site, contact us and we will delete it. Information about paediatric patients provided by a parent or guardian in the course of care is handled under our Notice of Privacy Practices.

Links to other websites

This website links to other sites, including professional profiles, hospital pages and reference sources. We are not responsible for the privacy practices or content of those sites. Please read their privacy policies.

Changes to this policy

We may update this policy from time to time. The current version and its effective date will always appear on this page. Material changes will be noted here.

How to contact us

Questions about this policy, or about how the website handles your information:

Institute of General and Endovascular Neurosurgery
1187 W Bristol Rd, Suite 1, Flint, Michigan 48507
Phone: (810) 212-4100
Email: clinics@instituteofneurosurgery.com