Privacy Policy
Last Updated: January 2025
Personal Information:
- Name, email address, and phone number
- Account credentials (securely encrypted)
- Profile information and preferences
Health-Related Information (PHI):
- Diagnosis information (optional, provided by users)
- Service needs and preferences
- Appointment and booking details
- Communication with providers
⚕️ All Protected Health Information (PHI) is handled in accordance with HIPAA regulations.
Provider Information:
- Professional credentials and licenses
- Business information and services offered
- Practice details and availability
- Verification documents
Automated Information:
- Device and browser information
- IP address and location data (city/county level)
- Usage patterns and feature interactions
- Cookies and similar technologies
We use your information to:
- Provide Services: Connect families with providers, manage appointments, and facilitate communications
- Improve Platform: Analyze usage patterns to enhance user experience and features
- Communications: Send notifications about bookings, provider updates, and platform news
- Verification: Verify provider credentials and maintain platform quality
- Compliance: Meet legal and regulatory requirements, including HIPAA
- Security: Detect and prevent fraud, abuse, and security incidents
We may share information with:
- Service Providers: When you request contact or book appointments (with your explicit consent)
- Business Associates: HIPAA-compliant vendors who help operate the platform (under BAA)
- Legal Requirements: When required by law, court order, or to protect rights and safety
- With Your Consent: Any other sharing requires your explicit permission
Provider Access:
Providers only see information you explicitly share through contact requests, bookings, or reviews. They cannot access your broader platform activity.
We implement industry-standard security measures:
- Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest
- Access Controls: Role-based permissions limit who can access your information
- Secure Infrastructure: HIPAA-compliant hosting and data storage
- Regular Audits: Ongoing security assessments and vulnerability testing
- Staff Training: All team members trained on HIPAA and data protection
- Incident Response: Protocols for breach detection and notification
Note: While we implement robust security measures, no system is 100% secure. We continuously work to enhance our protections.
You have the right to:
- Access: Request a copy of all personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data (subject to legal retention requirements)
- Portability: Receive your data in a structured, machine-readable format
- Restrict Processing: Limit how we use your information
- Opt-Out: Unsubscribe from marketing communications at any time
- Withdraw Consent: Revoke permissions previously granted
To exercise these rights, contact us at: carespottr@gmail.com
We use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences
- Analyze platform usage and performance
- Improve user experience
You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.
We retain your information for as long as:
- Your account is active
- Needed to provide services
- Required by law (minimum 6 years for HIPAA-covered records)
- Necessary to resolve disputes or enforce agreements
After deletion, we may retain anonymized data for analytics and platform improvement.
Carespottr is intended for use by parents, guardians, and adult users. We do not knowingly collect information from children under 13 without parental consent.
If you believe a child has provided information without consent, please contact us immediately at carespottr@gmail.com.
Our platform may contain links to provider websites and other third-party services. We are not responsible for the privacy practices of these external sites.
We recommend reviewing the privacy policies of any third-party services you visit.
We may update this Privacy Policy periodically to reflect:
- Changes in our practices
- Legal or regulatory requirements
- Platform updates and new features
We will notify you of significant changes via email or platform notice. Continued use after changes constitutes acceptance.
For questions about this Privacy Policy or to exercise your privacy rights:
Email: carespottr@gmail.com
Privacy Officer: Carespottr Privacy Team
Subject Line: "Privacy Request" or "HIPAA Request"
We will respond to all requests within 30 days as required by applicable privacy laws.
I Acknowledge and Accept
By clicking below, you confirm that you have read and agree to this Privacy Policy.
By using Carespottr, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. This policy is part of our Terms of Service.
