Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Service, including:

• Contact Information: Name, email address, phone number when you contact us or sign up for newsletters
• Search Queries: Healthcare provider searches, locations, specialties you search for
• Account Information: If you create an account, we collect username, password, and profile preferences
• Communications: When you contact us via email, contact forms, or customer support
• Feedback and Reviews: Any feedback, comments, or reviews you choose to provide

1.2 Information Collected Automatically

When you access our Service, we automatically collect certain information about your device and usage:

• Log Data: IP address, browser type, operating system, pages visited, time spent on pages, referring URLs
• Device Information: Device type, unique device identifiers, mobile network information
• Location Data: Approximate geographic location based on IP address (not precise GPS location)
• Cookies and Similar Technologies: See Section 3 below for detailed cookie information
• Analytics Data: Usage patterns, click-through rates, search patterns, feature usage

1.3 Information from Third-Party Sources

We collect healthcare provider information from publicly available sources:

• CMS NPI Registry: Provider names, NPI numbers, specialties, addresses, phone numbers
• Public Databases: Publicly available professional licensing information
• Healthcare Organizations: Information submitted by healthcare organizations for listing updates

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Provision

• To provide, maintain, and improve our healthcare provider directory services
• To process your searches and display relevant provider information
• To personalize your experience and provide customized search results
• To remember your preferences and settings

2.2 Communication

• To respond to your inquiries, comments, and customer service requests
• To send administrative information, updates, and security alerts
• To send newsletters and marketing communications (with your consent)
• To notify you about changes to our Service or policies

2.3 Analytics and Improvement

• To analyze usage patterns and trends
• To measure the effectiveness of our Service
• To develop new features and improve existing functionality
• To conduct research and statistical analysis

2.4 Legal and Security

• To comply with legal obligations and regulatory requirements
• To protect against fraud, abuse, and security threats
• To enforce our Terms of Use and other policies
• To respond to legal requests and prevent harm

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our Service.

3.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Service to function properly (e.g., session management, security)
• Preference Cookies: Remember your settings and preferences (e.g., language, location)
• Analytics Cookies: Help us understand how visitors use our Service (e.g., Google Analytics)
• Marketing Cookies: Track your browsing activity to show relevant advertisements (with consent)

3.2 Third-Party Cookies

We may use third-party services that set cookies:

• Google Analytics for website analytics
• Advertising networks for targeted advertising (if applicable)
• Social media platforms for social sharing features

3.3 Your Cookie Choices

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies (may impair functionality)
• Delete cookies when you close your browser

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Cloud hosting providers (e.g., AWS, Vercel)
• Analytics providers (e.g., Google Analytics)
• Email service providers
• Customer support tools
• Payment processors (if applicable)

4.2 Legal Requirements

We may disclose information if required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Government or regulatory investigations
• Requests from law enforcement
• Protection of our legal rights or safety

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may share information with your explicit consent for specific purposes not covered above.

5. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

5.1 General Rights

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

5.2 GDPR Rights (European Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to data portability
• Right to object to automated decision-making

5.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

5.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Data is encrypted in transit using SSL/TLS and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Infrastructure: Cloud hosting with enterprise-grade security
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff trained on data protection and privacy
• Incident Response: Procedures for detecting and responding to breaches

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active and for a period after closure
• Search History: Retained for analytics purposes, typically 12-24 months
• Communications: Retained for customer service and legal purposes
• Legal Requirements: Retained as required by applicable laws and regulations

When we no longer need your information, we securely delete or anonymize it.

8. Children's Privacy

Our Service is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ.

If you are located outside the United States and choose to use our Service, your information will be transferred to the United States. By using our Service, you consent to this transfer.

For EEA users, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission.

10. Do Not Track Signals

Our Service does not currently respond to "Do Not Track" (DNT) browser signals. We may implement DNT functionality in the future. You can control tracking through cookie settings and opt-out mechanisms described in this policy.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or healthcare provider websites. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Marketing Communications

With your consent, we may send you marketing communications about our services, updates, and related information. You can opt-out at any time by:

• Clicking the "unsubscribe" link in our emails
• Updating your communication preferences in your account settings
• Contacting us directly at [email protected]

Note: Even if you opt-out of marketing communications, we may still send you essential service-related communications.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending you an email notification (for significant changes)
• Displaying a prominent notice on our Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: