Legal

Privacy policy

Last updated August 2026

This site is run by Michael Guirguis, MD. It exists to describe my work in executive protection medicine and to let people reach me about it.

I collect very little. There are no accounts, no comments, and nothing to buy. The one place you can hand over information is the contact form, and you only reach that if you choose to.

What the contact form collects

Your name and email address. So I can answer you.
Your organization, if you give it. Optional. It tells me whether I'm talking to a family office, a corporate program, or a vendor.
What you're looking for, and your message. The substance of your inquiry.
Your IP address and browser string. Captured automatically by the form plugin to catch spam. I don't look at it.

I use what you send to reply to you and, if we end up working together, to run the engagement. I don't sell it, rent it, or hand it to anyone for marketing.

Do not send clinical information

This form is for business inquiries. It is not a clinical channel, and nothing sent through it creates a physician and patient relationship.

Please keep patient names, medical records, and any protected health information out of it. The form runs over the public internet through a third-party plugin, and it is not built for that kind of data.

If you have an active engagement and a clinical question, use the contact details in your program documentation. If it's an emergency, call 911.

Cookies and measurement

The site sets cookies for two reasons. Some keep it working and fast. Others tell me how many people visited a page and roughly where they came from.

Analytics data is aggregated. I can see that 40 people read a post last week. I can't see that you were one of them.

You can block or delete cookies in your browser settings. The site still works if you do.

Services the site runs on

Each of these touches data in the course of keeping the site up. Each has its own privacy policy.

Bluehost. Hosting. Keeps server logs, including IP addresses.
Cloudflare. Delivery and security. Filters traffic before it reaches the site and obscures email addresses from scrapers.
Google Analytics. Visitor counts and page traffic, in aggregate.
WPForms. Runs the contact form and stores submissions.
Email delivery. Form notifications are sent to my inbox through a mail service.

How long I keep it

Inquiries that go nowhere get deleted within a year.

Correspondence tied to actual work is kept as long as the business or professional record requires, then deleted. Analytics data expires on Google's own schedule.

Your rights over your data

If you're in California, the CCPA gives you the rights below. I extend them to everyone who writes in, wherever you are.

Ask what information I hold about you, and get a copy of it.
Ask me to correct anything that's wrong.
Ask me to delete it, unless I'm required to keep it.
Be treated the same either way. Asking costs you nothing.

I don't sell personal information and never have, so there's nothing to opt out of.

Children

This site is for professional audiences and isn't directed at children under 13. I don't knowingly collect their information. If you think a child has sent something through the form, write to me and I'll delete it.

Reaching me about your data

Email [email protected] with what you want to know, corrected, or deleted. I answer within one business day.

Other ways to get in touch are on the contact page.

Changes

If I add a service that handles your information, or change what I collect, I'll update this page and move the date at the top.