Your Privacy Matters

Privacy Policy

Last Updated: January 2025

1. Information We Collect

Personal Information:

  • Name, email address, and phone number
  • Account credentials (securely encrypted)
  • Profile information and preferences

Health-Related Information (PHI):

  • Diagnosis information (optional, provided by users)
  • Service needs and preferences
  • Appointment and booking details
  • Communication with providers

⚕️ All Protected Health Information (PHI) is handled in accordance with HIPAA regulations.

Provider Information:

  • Professional credentials and licenses
  • Business information and services offered
  • Practice details and availability
  • Verification documents

Automated Information:

  • Device and browser information
  • IP address and location data (city/county level)
  • Usage patterns and feature interactions
  • Cookies and similar technologies
2. How We Use Your Information

We use your information to:

  • Provide Services: Connect families with providers, manage appointments, and facilitate communications
  • Improve Platform: Analyze usage patterns to enhance user experience and features
  • Communications: Send notifications about bookings, provider updates, and platform news
  • Verification: Verify provider credentials and maintain platform quality
  • Compliance: Meet legal and regulatory requirements, including HIPAA
  • Security: Detect and prevent fraud, abuse, and security incidents
3. Information Sharing and Disclosure

We may share information with:

  • Service Providers: When you request contact or book appointments (with your explicit consent)
  • Business Associates: HIPAA-compliant vendors who help operate the platform (under BAA)
  • Legal Requirements: When required by law, court order, or to protect rights and safety
  • With Your Consent: Any other sharing requires your explicit permission

Provider Access:

Providers only see information you explicitly share through contact requests, bookings, or reviews. They cannot access your broader platform activity.

4. Data Security and HIPAA Compliance

We implement industry-standard security measures:

  • Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest
  • Access Controls: Role-based permissions limit who can access your information
  • Secure Infrastructure: HIPAA-compliant hosting and data storage
  • Regular Audits: Ongoing security assessments and vulnerability testing
  • Staff Training: All team members trained on HIPAA and data protection
  • Incident Response: Protocols for breach detection and notification

Note: While we implement robust security measures, no system is 100% secure. We continuously work to enhance our protections.

5. Your Privacy Rights

You have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data (subject to legal retention requirements)
  • Portability: Receive your data in a structured, machine-readable format
  • Restrict Processing: Limit how we use your information
  • Opt-Out: Unsubscribe from marketing communications at any time
  • Withdraw Consent: Revoke permissions previously granted

To exercise these rights, contact us at: carespottr@gmail.com

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your login session
  • Remember your preferences
  • Analyze platform usage and performance
  • Improve user experience

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

7. Data Retention

We retain your information for as long as:

  • Your account is active
  • Needed to provide services
  • Required by law (minimum 6 years for HIPAA-covered records)
  • Necessary to resolve disputes or enforce agreements

After deletion, we may retain anonymized data for analytics and platform improvement.

8. Children's Privacy

Carespottr is intended for use by parents, guardians, and adult users. We do not knowingly collect information from children under 13 without parental consent.

If you believe a child has provided information without consent, please contact us immediately at carespottr@gmail.com.

9. Third-Party Links and Services

Our platform may contain links to provider websites and other third-party services. We are not responsible for the privacy practices of these external sites.

We recommend reviewing the privacy policies of any third-party services you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

  • Changes in our practices
  • Legal or regulatory requirements
  • Platform updates and new features

We will notify you of significant changes via email or platform notice. Continued use after changes constitutes acceptance.

Contact Us

For questions about this Privacy Policy or to exercise your privacy rights:

Email: carespottr@gmail.com

Privacy Officer: Carespottr Privacy Team

Subject Line: "Privacy Request" or "HIPAA Request"

We will respond to all requests within 30 days as required by applicable privacy laws.

I Acknowledge and Accept

By clicking below, you confirm that you have read and agree to this Privacy Policy.

By using Carespottr, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. This policy is part of our Terms of Service.