Privacy Policy
Last Updated: May 16, 2026
HIPAA-Compliant Privacy Protection
As a healthcare-focused web design company, we understand the critical importance of protecting sensitive information. We are fully HIPAA compliant and treat all client data with the highest level of security and confidentiality. Protected Health Information (PHI) is handled in strict accordance with HIPAA regulations.
Introduction
Infodots Digital, LLC(doing business as "Healthcare Web Designs"), a New York Limited Liability Company ("we," "our," or "us"), is committed to protecting your privacy and ensuring the security of any information you provide to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We are HIPAA compliant and take our responsibilities regarding protected health information (PHI) seriously. This policy applies to information collected through our website at www.healthcarewebdesigns.com and any related services.
Company Information
Infodots Digital, LLC
1178 Broadway, 3rd Floor #3427
New York, NY 10001
United States
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide, including:
- Name and contact information (email, phone number, address)
- Business information (practice name, specialty, website URL)
- Payment information (processed securely through Stripe)
- Communication preferences
- Project requirements and specifications
- Any other information you choose to provide
Automatically Collected Information
When you visit our website, we may automatically collect:
- Device and browser information
- IP address and general location data
- Pages visited and time spent on our site
- Referring website information
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Respond to your comments, questions, and requests
- Send promotional communications (with your consent)
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and illegal activities
- Comply with legal obligations
- Enforce our Terms of Service
HIPAA Compliance & Protected Health Information
Why HIPAA Matters
The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that establishes national standards for protecting sensitive patient health information. For healthcare providers, HIPAA compliance is not optional—it is a legal requirement that carries significant penalties for non-compliance, including fines up to $1.5 million per violation category per year.
Your website is often the first point of contact between your practice and patients. Any forms, patient portals, or communication systems on your website that handle patient information must be HIPAA compliant to protect both your patients and your practice.
As a business associate to healthcare providers, we comply with HIPAA requirements. We implement appropriate administrative, physical, and technical safeguards to protect PHI:
Business Associate Agreements
We sign BAAs with all clients handling PHI
24-Hour Breach Notification
Prompt reporting of any security incidents
Employee Training
Regular HIPAA training for all staff members
Vendor Compliance
All subcontractors must also be HIPAA compliant
Security Assessments
Regular audits and vulnerability testing
Documentation
Comprehensive records of all compliance efforts
Clients are responsible for ensuring their own HIPAA compliance and for properly using the tools and systems we provide. We provide guidance and documentation to assist with your compliance obligations.
Data Security
We implement enterprise-grade technical and organizational security measures to protect your information:
SSL/TLS Encryption
All data in transit is encrypted
AES-256 Encryption
Data at rest uses military-grade encryption
Regular Audits
Security assessments and penetration testing
Access Controls
Role-based access and authentication
Incident Response
24/7 monitoring and response procedures
Activity Logging
Comprehensive audit trails maintained
Information Sharing
We may share your information with:
- Service providers who assist in our operations (under appropriate confidentiality agreements and BAAs where applicable)
- Professional advisors (lawyers, accountants) as necessary
- Law enforcement or government agencies when required by law
- Other parties with your explicit consent
We do not sell, rent, or trade your personal information to third parties for marketing purposes. Ever.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal retention requirements)
- Opt out of marketing communications at any time
- Request a copy of your data in a portable format
- Lodge a complaint with a supervisory authority
Cookies & Tracking
We use cookies and similar technologies to enhance your experience on our website. These technologies help us understand how visitors use our site, remember your preferences, and improve our services.
You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. We do not use cookies to collect PHI.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. For HIPAA-covered information, we follow the retention requirements specified in applicable regulations (minimum 6 years from date of creation or last effective date).
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you via email. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your rights, please contact us:
Infodots Digital, LLC
1178 Broadway, 3rd Floor #3427
New York, NY 10001
United States
Related Documents:
