What this site collects, and what it doesn't.

Visiting a page about endometriosis surgery says something private about you before you have typed anything. That is the reason this site is built the way it is, and this page describes it in enough detail to be checked rather than taken on trust.

This site does not track you

There is no Google Analytics, no Meta pixel, and no advertising or marketing tag of any kind. There are no cookies, and nothing is written to your browser's storage. We do not build a profile of you, and we do not know which pages you read.

Nothing on these pages is loaded from another company's servers. The fonts, the images and the diagrams are all served from this site. That matters because a request to a third party carries your IP address and the address of the page you are reading, so a single embedded font can tell an outside company that someone at your address is reading about endometriosis surgery. We would rather that request never happened.

What the contact form collects

Only what a coordinator needs to call you back. In full, and there is nothing else:

• Your name
• Your phone number
• Your email address, if you give one
• The state you live in
• How you heard about us
• The best time to reach you
• A short free-text note, limited to 600 characters

The note is capped in the software, not just asked for politely, because it is the one field that could otherwise turn into a medical history. Please keep medical details out of it. We take your history properly by phone.

Alongside those fields we record the country the request came from, which tells us when a wave of junk arrives from one place. We do not store your IP address and we do not store your browser's user agent.

Where it goes

Straight into our own Microsoft 365 mailbox, inside the practice's own account. No mailing service, no marketing platform, no customer database belonging to someone else.

The reason is that even with no clinical detail, a form submission still says "this person contacted an endometriosis surgery practice, and here is their name and number." That is the same sensitive fact the rest of this page is built to protect, so we did not want to hand it to an additional company. Microsoft already holds the practice's correspondence, so this adds nobody new.

Your details are used to contact you about your enquiry and to arrange care. They are not sold, and they are not shared with anyone else for marketing. We never send marketing email from this form.

Health information is a separate thing

This website is not a channel for medical information, and that is deliberate. It is why the form asks for contact details only, why the note field is short, and why the first real conversation happens on the phone.

Once you are our patient, the information you give us is medical record information and is protected under HIPAA, along with Massachusetts medical privacy law. That is governed by the practice's Notice of Privacy Practices, which is a separate document and covers your records, not this website. Ask us for a copy at any point.

If we ever need detailed history or documents from you before a visit, we will send you a secure route to do it. Please do not email medical records or images to us, and please do not put them in the form. Ordinary email is not a private channel, ours or anyone's.

The technical part

These pages are hosted by Cloudflare, which serves them and keeps short-lived operational logs of requests, as any web host does. That is a normal part of running a website and it is not used for analytics or advertising here.

Pages on this site link out to other places from time to time, such as a hospital. Once you follow a link you are on somebody else's site, under their privacy policy rather than this one.

Children

This site is written for adults. Our surgeons do treat patients under 18, at Winchester Hospital, but those arrangements are made by a parent or guardian by phone rather than through this website.

Your information, and how to reach us

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. For medical records the process is the one in the Notice of Privacy Practices, because those records have retention rules we are required to follow. For a contact form submission that did not become a patient record, we can simply delete it.

Write to info@bostonendocare.com or call(617) 716-7000. Please do not include medical details in an email to that address.

Changes

If we change how any of this works, we will change this page with it. It was last updated on August 17, 2026. If something here does not match what the site actually does, that is a mistake and we would like to know about it.