Health Protect LLC, doing business as HealthProtect (“we,” “us,” or “our”), operates the public HealthProtect website, domain-verification register, and hosted verification badges. This policy explains the personal information we process for those services, why we process it, and your choices.
This policy is a notice about our practices. Visiting the website or reading this policy does not by itself give consent to processing for which applicable law requires separate consent.
1. Scope and responsibility
This policy covers visitors who use the public register, people whose browsers load a HealthProtect badge on another website, business representatives identified in register records, and people who contact us about these services. The operating company identified above is responsible for these processing activities, including as controller where that term applies.
This policy does not replace a healthcare provider’s privacy notice or cover that provider’s treatment, patient portal, payments, or records. A badge does not make us the operator of the site displaying it. Certification onboarding, document collection, identity checks, or other contracted services require their own applicable disclosures and agreements; this policy does not describe an unimplemented application portal.
2. Information we receive
- Lookup information: the domain or website address you submit, including a domain supplied by a link to the register. The lookup uses the domain; you should not submit a patient-portal link containing a name, access token, or medical details. Request infrastructure may receive an address before its path and other unnecessary parts are removed for the lookup.
- Technical request information: your IP address, requested page or resource, request time, browser and device information sent in HTTP headers, and response or error information. A referring website or page may be received when your browser and the referring site allow it. Our hosting and security providers process request information to deliver and protect the Service.
- Badge information: the domain specified by the site displaying the badge and display settings such as light or dark appearance and badge style, together with the technical request information described above.
- Register information: business or operator display name, associated public domains, certification status, and certification and expiry dates received from the source certification register. Business information can be personal information when it identifies an individual, such as a sole proprietor. Underlying certification records may be governed by additional notices.
- Communications: your name, email address or other contact details, the domain concerned, and the contents of a request, correction, or complaint you send us. Supply only information needed to address your request.
- Appearance preference: if you choose a light or dark theme, the website remembers that choice in your browser’s local storage. It is a display preference, not an account or advertising identifier.
3. When another website displays our badge
A site using our hosted badge causes your browser to request resources from HealthProtect. This happens when the badge loads, even if you never click it or visit our website directly. We receive the configured domain and technical request information so that we can check status, return the badge when appropriate, and limit abusive traffic.
The official badge frame is configured not to send the containing page’s referrer and is isolated from reading that page’s content. The initial script request is also a network request; its referrer behavior depends on the embedding site and browser. The badge does not need access to patient forms, purchase contents, or medical records on the containing site.
A request associated with a healthcare domain may reveal or suggest an interest in health services, particularly when linked to an IP address or other identifier. We do not treat such requests as anonymous merely because you have not provided a name. We use them for the operational and protective purposes described here, not to build health-interest advertising profiles.
The embedding website is responsible for its own privacy disclosures and any legally required permission before loading the badge. Read its privacy policy as well as this one. Browser content controls may prevent badge requests, but a badge will not display if its resources are blocked.
4. How we use information
- Provide requested pages and domain results, show the appropriate live badge, and remember appearance preferences.
- Protect availability and integrity, apply IP-based request limits, investigate misuse, and diagnose technical failures. Diagnostic logs may include a queried domain and related error information.
- Maintain and correct register information, communicate about reported errors, and respond to support, privacy, and legal requests.
- Comply with applicable legal obligations, establish or defend legal claims, and enforce reasonable restrictions on misuse.
6. Browser storage, analytics, and advertising
The public website uses a local-storage item named “theme” to remember the appearance you select. You can remove it by clearing site data in your browser; your chosen theme may then reset. Blocking local storage may prevent that preference from being remembered. Clearing browser storage does not delete records already held on a server.
We use lookup and badge-request information to deliver and protect the register. We do not sell personal information collected through the public register or disclose it for cross-context behavioral advertising. The public register and official badge do not use that information to build advertising profiles. Operational request processing and security limits still occur.
Because we do not engage in those sale or targeted-advertising activities, a Global Privacy Control signal does not need to disable such an activity in this version of the Service. We will honor legally applicable opt-out preference signals if our practices change. The Service does not otherwise change its operation in response to a browser’s Do Not Track setting.
If we introduce nonessential tracking or materially different uses, we will update the relevant disclosures and implement any required choices or consent before beginning that processing. Other sites displaying our badge may have their own cookies or trackers; those are governed by their practices.
7. Health and other sensitive information
The public register does not ask for symptoms, diagnoses, prescriptions, medical records, government identifiers, payment-card details, biometric identifiers, or precise device location. Do not put those details in a lookup or routine message. This does not mean that all information processed by the Service is nonsensitive: the domain-request information described in section 3 may be sensitive or health-related under applicable law.
If you need to raise a concern that involves sensitive information, first contact us without including those details so that an appropriate process can be identified. We handle unexpectedly received sensitive information only as appropriate to respond, protect people, comply with law, or securely remove information that is not needed.
This policy is not a HIPAA Notice of Privacy Practices, and a badge is not a representation that a provider or this public website is HIPAA certified. The privacy obligations of a healthcare provider and any separately contracted service depend on their actual activities and relationships.
8. How long information is kept
We retain personal information only for as long as reasonably necessary for the purposes described here, including a justified legal, security, or recordkeeping need. The relevant criteria include the type and sensitivity of the information, its purpose, the duration of a request or investigation, applicable limitation periods, and obligations to preserve records.
Request-limit records serve a short-lived security function; they are distinct from hosting and diagnostic logs. A one-minute rate-limit window is not a promise that all request information is erased after one minute. The application does not maintain a dedicated database of visitor search histories, but infrastructure or failure logs may contain request or domain information.
Register records are kept to operate and maintain the register and address certification history, corrections, and legitimate disputes. Communications are kept for the duration needed to handle the matter and any justified follow-up. Browser appearance preferences remain until replaced or cleared by you or your browser. Backups and legally preserved records may follow a different, justified deletion schedule.
9. Security
We use safeguards appropriate to the information and the service, including controls intended to limit access to register data and protect against abusive requests. No website, transmission, or storage system can be guaranteed secure. If an incident triggers a legal notification obligation, we will provide the required notices.
10. Your privacy rights and requests
Depending on where you live, which law applies, and our role, you may have rights to access or obtain a copy of personal information, learn its sources and recipients, correct inaccuracies, request deletion, restrict or object to processing, receive portable data, withdraw consent, or appeal a refusal. You may also have rights to opt out of sale, targeted advertising, or certain profiling and to limit certain uses of sensitive information. Rights are subject to the conditions and exceptions in the applicable law.
To make a request, contact certification@healthprotect.ai. Identify your relationship to the Service and the request. Do not send a password, patient record, or government ID with an initial request. We will seek only verification reasonably needed to protect the information and comply with law. Where permitted, an authorized agent can act for you after appropriate verification of authority.
We will respond within the period required by applicable law and explain an extension or refusal where required. If you have an appeal right, reply using the same contact method and state that you are appealing. We will explain the applicable review and further complaint options. You may contact the relevant privacy regulator or attorney general without first contacting us.
We do not discriminate against someone for exercising a protected privacy right. Withdrawal of consent does not affect the lawfulness of earlier processing based on that consent. A request may affect a service that needs the information. Deletion may be limited by lawful recordkeeping, legal claims, or the rights of others; we will explain an applicable exception rather than promise that every record can be deleted.
11. Regional privacy rights
If California privacy law applies to your information and our activities, you may exercise the applicable rights described in section 10. The information described in section 2 includes identifiers and contact information, internet or other electronic network activity, and professional or business information. Healthcare-domain requests may also contain sensitive personal information depending on the context. The same sections of this policy explain the sources, purposes, recipients, and retention criteria for these categories.
Where European Economic Area, United Kingdom, or Swiss data-protection law applies, we process ordinary personal information on the applicable grounds of providing and protecting the register and responding to requests, subject to the required balance with your rights; complying with law; performing a contract with you when processing is necessary for that contract; or obtaining consent when required. A business’s agreement does not automatically authorize processing of its visitors’ information. Health-related or other specially protected data may require an additional lawful condition.
You may object to processing based on legitimate interests, withdraw a consent on which processing relies, and complain to the relevant privacy authority where those rights apply. We do not use public domain lookups to make solely automated decisions about individual visitors with legal or similarly significant effects. A visit to the site is not consent to processing that requires a separate consent.
12. Processing locations and international transfers
Our service providers may process information in countries other than the country where you live. Privacy laws and access rights may differ between countries. Contact us for information about the processing locations and arrangements relevant to your information.
Where applicable law requires safeguards for an international transfer, the transfer is subject to those requirements. Using this website does not waive your protections or provide a separate consent to an international transfer.
13. Children
The public register is intended for a general audience and is not directed to children under 13. We do not knowingly solicit personal information from children under 13. If you believe a child has provided information through our Service, contact us so that we can investigate and take appropriate action. Age-related protections required by applicable law remain in place.
14. Policy updates
We will update this policy when our practices or legal requirements change and show the new effective date. We will provide additional notice and obtain consent where required before using previously collected information for a materially different purpose. A policy update alone does not supply a consent required by law.
15. Contact
Responsible company: Health Protect LLC, doing business as HealthProtect.
Privacy questions, rights requests, and appeals: certification@healthprotect.ai.
If you need this notice in an accessible alternative format, contact us using these details.