Privacy Policy
Last updated
Scope of this policy
This policy covers information collected through this website. It does not cover protected health information handled during a client engagement. PHI is governed exclusively by the business associate agreement executed with each client and by the Health Insurance Portability and Accountability Act, not by this policy.
Do not submit protected health information through any form on this site.
What we collect
When you submit a form, we collect the information you provide, which may include your name, work email address, phone number, organization, role, the systems you use, and a description of the workflow you want to discuss.
We also collect standard technical information automatically:
- Pages visited, referring URL, and time on site
- Approximate location derived from IP address
- Browser, operating system, and device type
- Marketing attribution data such as campaign and source parameters
How we use it
We use submitted information to respond to your enquiry, schedule and prepare for calls, and maintain a record of our correspondence. We use technical information to understand how the site is used and to attribute enquiries to their source.
We do not sell personal information. We do not share it with third parties except the service providers described below, or where required by law.
Service providers
This site uses the following processors, each of which receives only what is necessary for its function:
- GoHighLevel (HighLevel, Inc.) for customer relationship management, form submissions, scheduling, and website analytics
- Our hosting provider, which processes standard server request logs
Where a processor could receive protected health information during a client engagement, that processor is covered by a business associate agreement, and its role is documented in the subprocessor register we produce as part of the engagement.
Cookies and tracking
This site uses first-party and vendor cookies to attribute enquiries to their marketing source and to maintain session continuity between visits. These are set by the GoHighLevel tracking script.
You can block or delete cookies through your browser settings. Doing so does not prevent you from using the site or submitting a form.
Retention
Enquiry records are retained for as long as we have an active or reasonably anticipated business relationship, and thereafter for the period required by our own legal and accounting obligations. Technical logs are retained on a shorter cycle.
You can request deletion of your enquiry record at any time using the contact details below.
Your rights
Depending on where you are located, you may have the right to access, correct, delete, or restrict processing of your personal information, and to object to processing or request portability. To exercise any of these rights, contact us using the details below. We will respond within the period required by applicable law.
Security
Information submitted through this site is transmitted over TLS and stored in access-controlled systems. Our security practices for client systems, which are materially stricter, are described on our HIPAA and compliance page.
Changes to this policy
We will update this page when our practices change and revise the last updated date above. Material changes affecting existing clients are communicated directly rather than only posted here.
Contact
Questions about this policy can be directed to contact@healthcareworkflowautomation.com or (307) 454-0600. Our mailing address is 30 N Gould St Ste R, Sheridan, WY 82801.