100% HIPAA Compliant
HIPAA Compliant

Privacy Policy

Last Updated: May 16, 2026

HIPAA-Compliant Privacy Protection

As a healthcare-focused web design company, we understand the critical importance of protecting sensitive information. We are fully HIPAA compliant and treat all client data with the highest level of security and confidentiality. Protected Health Information (PHI) is handled in strict accordance with HIPAA regulations.

Introduction

Infodots Digital, LLC(doing business as "Healthcare Web Designs"), a New York Limited Liability Company ("we," "our," or "us"), is committed to protecting your privacy and ensuring the security of any information you provide to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are HIPAA compliant and take our responsibilities regarding protected health information (PHI) seriously. This policy applies to information collected through our website at www.healthcarewebdesigns.com and any related services.

Company Information

Infodots Digital, LLC

1178 Broadway, 3rd Floor #3427

New York, NY 10001

United States

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

  • Name and contact information (email, phone number, address)
  • Business information (practice name, specialty, website URL)
  • Payment information (processed securely through Stripe)
  • Communication preferences
  • Project requirements and specifications
  • Any other information you choose to provide

Automatically Collected Information

When you visit our website, we may automatically collect:

  • Device and browser information
  • IP address and general location data
  • Pages visited and time spent on our site
  • Referring website information
  • Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Respond to your comments, questions, and requests
  • Send promotional communications (with your consent)
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and illegal activities
  • Comply with legal obligations
  • Enforce our Terms of Service

HIPAA Compliance & Protected Health Information

Why HIPAA Matters

The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that establishes national standards for protecting sensitive patient health information. For healthcare providers, HIPAA compliance is not optional—it is a legal requirement that carries significant penalties for non-compliance, including fines up to $1.5 million per violation category per year.

Your website is often the first point of contact between your practice and patients. Any forms, patient portals, or communication systems on your website that handle patient information must be HIPAA compliant to protect both your patients and your practice.

As a business associate to healthcare providers, we comply with HIPAA requirements. We implement appropriate administrative, physical, and technical safeguards to protect PHI:

Business Associate Agreements

We sign BAAs with all clients handling PHI

24-Hour Breach Notification

Prompt reporting of any security incidents

Employee Training

Regular HIPAA training for all staff members

Vendor Compliance

All subcontractors must also be HIPAA compliant

Security Assessments

Regular audits and vulnerability testing

Documentation

Comprehensive records of all compliance efforts

Clients are responsible for ensuring their own HIPAA compliance and for properly using the tools and systems we provide. We provide guidance and documentation to assist with your compliance obligations.

Data Security

We implement enterprise-grade technical and organizational security measures to protect your information:

SSL/TLS Encryption

All data in transit is encrypted

AES-256 Encryption

Data at rest uses military-grade encryption

Regular Audits

Security assessments and penetration testing

Access Controls

Role-based access and authentication

Incident Response

24/7 monitoring and response procedures

Activity Logging

Comprehensive audit trails maintained

Information Sharing

We may share your information with:

  • Service providers who assist in our operations (under appropriate confidentiality agreements and BAAs where applicable)
  • Professional advisors (lawyers, accountants) as necessary
  • Law enforcement or government agencies when required by law
  • Other parties with your explicit consent

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Ever.

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information (subject to legal retention requirements)
  • Opt out of marketing communications at any time
  • Request a copy of your data in a portable format
  • Lodge a complaint with a supervisory authority

Cookies & Tracking

We use cookies and similar technologies to enhance your experience on our website. These technologies help us understand how visitors use our site, remember your preferences, and improve our services.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. We do not use cookies to collect PHI.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. For HIPAA-covered information, we follow the retention requirements specified in applicable regulations (minimum 6 years from date of creation or last effective date).

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you via email. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact us:

Infodots Digital, LLC

1178 Broadway, 3rd Floor #3427

New York, NY 10001

United States