01Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you register an account, make a purchase, subscribe to our email content, or contact us for support, including:

• Full name and contact information (email address, mailing address, phone number);
• Billing and payment information (processed securely through our third-party payment processor);
• Organization name, title, and professional role;
• Email signup information, including your first name, email address, and whether you prefer to receive each post as it is published or a weekly digest, when you pre-register or subscribe to our email content;
• Communications and correspondence submitted through our contact forms or email.

1.2 Information Collected Automatically

When you visit our Site, we may automatically collect certain technical and usage data, including:

• IP address and approximate geographic location;
• Browser type, operating system, and device identifiers;
• Pages viewed, links clicked, and time spent on our Site;
• Referring URL and search terms used to locate our Site.

We may collect this information through cookies, web beacons, and similar tracking technologies. You may configure your browser to decline cookies, but certain features of our Site may not function properly as a result.

1.3 Cookies, Analytics, and Advertising Technologies

We and our third-party service providers use cookies, tags, pixels, and similar technologies on our Site. These technologies are used to operate the Site, remember your preferences, measure how the Site is used, and, where enabled, deliver and measure advertising. The categories we use include:

• Functional cookies, which are necessary for the Site to work, such as keeping items in your shopping cart;
• Statistics cookies, which help us understand how visitors use the Site, through services such as Google Analytics; and
• Marketing cookies, which may be used by advertising partners such as Google Ads to recognize your browser or device, measure the performance of our advertising, and show you our advertisements on other websites and services.

You can review and change your cookie choices at any time using the Manage Consent control on our Site or on our Opt-Out Preferences page.

1.4 Advertising and Remarketing

We use Google Ads and may use similar advertising services to promote our Products. When you visit our Site, our advertising partners may place or read cookies or use device identifiers to collect information about your visit, such as the pages you viewed, the products you viewed or added to your cart, and whether you completed a purchase. We use this information to measure advertising performance, to show our advertisements to people who have previously visited our Site (commonly called remarketing), and to reach people with similar characteristics. Google and other third-party vendors use cookies to serve advertisements based on a person’s prior visits to our Site and other sites on the internet.

If you arrive from a Google ad, we store the ad click identifier in a first-party cookie for up to 90 days so we can measure which ads lead to purchases. We do not set this cookie if your browser sends a Global Privacy Control or Do Not Track signal, or if you decline marketing cookies.

We do not knowingly collect protected health information through our Site, and we do not use health information about individuals to target advertising.

You can opt out of personalized advertising from Google by visiting Google Ads Settings. You can opt out of many third-party vendors’ use of cookies for personalized advertising through the Network Advertising Initiative or the Digital Advertising Alliance. You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on. To learn more about how Google uses information from sites that use its services, visit policies.google.com/technologies/partner-sites.

1.5 Email Signup and Marketing Emails

If you subscribe to our email content, we collect your first name, email address, and delivery preference (each post as it is published, or a weekly digest). We use a double opt-in process: we send a confirmation email, and we add you to our list only after you click the confirmation link. Our email service provider, Brevo, stores this information and sends our emails on our behalf. Brevo also records whether our emails are opened and which links are clicked. Every marketing email includes an unsubscribe link, and you can also unsubscribe by writing to support@hipaaessentialslibrary.com. We keep a record of your unsubscribe so that we honor it.

1.6 Google reCAPTCHA

Our signup forms use Google reCAPTCHA to help prevent spam and automated submissions. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. Google’s use of this information is governed by the Google Privacy Policy and Terms of Service.

02How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfill your orders and deliver purchased digital products;
• To create and manage your account and authenticate your identity;
• To respond to your inquiries, provide technical support, and administer your relationship with us;
• To send transactional communications, including order confirmations and product delivery notices;
• To send marketing communications, where permitted by applicable law and your preferences;
• To measure the effectiveness of our advertising and to show you relevant advertising, including remarketing, where permitted by applicable law and your cookie preferences;
• To analyze usage trends and improve the functionality and content of our Site and Products;
• To enforce our Terms of Service, this Privacy Policy, and our legal rights; and
• To comply with applicable legal obligations.

03Disclosure of Your Information

3.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Site and delivering our Products, including payment processors, email service providers (such as Brevo), analytics providers, advertising platforms, and hosting services. These providers are contractually obligated to use your information only as necessary to provide services to us and in accordance with applicable law.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in good-faith belief that such disclosure is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing, or protect the personal safety of users or the public.

3.3 No Sale of Personal Data

Except as described in Section 3.4, we do not sell, rent, trade, or otherwise transfer your personal information to third parties for their independent marketing or commercial purposes.

3.4 Advertising and “Sharing” Under State Privacy Laws

Some state privacy laws treat the use of advertising cookies and similar technologies to show targeted advertising based on activity across websites as a “sale” or as “sharing” of personal information for cross-context behavioral advertising. To the extent our use of advertising technologies is considered a sale or sharing under applicable law, you may opt out at any time using our Opt-Out Preferences page or the Manage Consent control on our Site.

04Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to maintain our business records, to comply with legal and regulatory obligations, and to resolve disputes and enforce our agreements. When information is no longer needed, we will securely delete or anonymize it in accordance with our internal data retention schedule.

05Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include encrypted transmission of sensitive data (SSL/TLS), access controls, and secure storage practices. However, no data transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

06Your Rights and Choices

Depending on your jurisdiction, you may have certain rights with respect to your personal information, including the right to:

• Access and obtain a copy of the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to certain legal limitations;
• Object to or restrict certain processing activities;
• Withdraw consent where processing is based on your consent; and
• Lodge a complaint with your applicable data protection authority.

To exercise any of these rights, please contact us at the information provided in Section 9. We will respond to your request within the timeframe required by applicable law.

To manage cookies and advertising technologies, you may use the Manage Consent control on our Site, our Opt-Out Preferences page, your browser settings, or the third-party opt-out tools described in Section 1.4.

07Children’s Privacy

Our Site and Products are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take prompt steps to delete such information.

08Changes to This Privacy Policy

We reserve the right to modify this Policy at any time. If we make material changes, we will provide notice by updating the effective date at the top of this Policy and, where appropriate, by sending a notification to the email address associated with your account. Your continued use of our Site or Products following the posting of changes constitutes your acceptance of the revised Policy.

09Contact Information

If you have questions, concerns, or requests relating to this Privacy Policy, please contact our Privacy Officer at: