Privacy

Summary

We collect only what we need to review your clinic's security. Your answers are not public, are not shared with other clinics, and are not sold.

What this covers

This policy covers the Compliance Clinic website, clinic accounts, and assessment. A signed agreement may add terms for paid work.

What we collect

• Account details: your name, clinic name, phone, email, practice type, and clinic address. Your password is handled by our sign-in system, and we cannot read it.
• Assessment answers, including any later changes.
• Contact messages.
• Technical information, such as your browser, device, internet address, and pages visited, to run and protect the site.

Cookies

We use cookies or similar browser storage to keep you signed in and keep the site working.

Our hosting provider counts visits to the site so we can see overall traffic. This count sets no cookies and stores nothing in your browser. We do not use advertising or tracking cookies.

What not to enter

Do not enter patient information, passwords, network addresses, or security keys. The assessment does not ask for them. If you enter any by mistake, contact us and we will remove it.

How we use information

• Run your account.
• Review your assessment and contact you about it.
• Plan your visit and prepare your written risk analysis.
• Protect the site and prevent misuse.
• Meet legal duties.

AI tools

We may use an AI service to help prepare internal review drafts. We send your practice type, staff range, assessment questions and answers, and calculated risk flags. We do not send your clinic name, contact details, or address. A person checks every draft before anything is shared with your clinic.

How we protect your answers

• Information travels over encrypted connections.
• Each clinic account can see only its own information.
• Only our admin can see all clinics, and that area requires a second login step.
• We do not ask for passwords or patient information.

No website can promise perfect security. If an incident affects your information, we will notify you as the law requires.

Who else sees information

Service providers that run hosting, the database, sign-in, email, and AI process information for us. With your approval, we share what your IT company needs to know to make fixes. We may also share information when the law requires it, to protect people or the site, as part of a business transfer, or when you ask us to. We do not sell your information or share it for advertising.

How long we keep it

We keep your information while your account is active and as long as needed to provide our services and meet legal duties. Copies in backups may take time to clear.

Your choices

You can change your answers from your account. To see, correct, or delete your information, write to us through the contact page. We may need to confirm who you are, and we may keep what the law requires.

Children

This site is for clinic staff and is not directed to children.

Changes

We may update this policy. We will change the date above and tell account holders about important changes.

Contact

Questions? Write to us through the contact page.