Privacy Policy

1. Introduction

HIPAA Trainer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. We understand the critical importance of data privacy, especially in the healthcare industry.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, your choice is not to use our Service.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information, such as:

• Name and contact information (email address, phone number)
• Organization and job title
• Account credentials and authentication information
• Training progress and completion records
• Communication preferences

2.2 Usage Data

We automatically collect certain information when you visit our service:

• IP address and browser type
• Pages visited and time spent on our service
• Device information and operating system
• Referral sources and exit pages

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns. You can control cookie settings through your browser preferences.

3. How We Use Your Information

We use the information we collect for various purposes:

• To provide, operate, and maintain our service
• To improve, personalize, and expand our service
• To understand and analyze how you use our service
• To develop new products, services, features, and functionality
• To communicate with you, including customer service and support
• To send you updates, marketing communications, and other information
• To process your transactions and manage your account
• To comply with legal obligations and protect our rights

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except as described in this policy:

4.1 Service Providers

We may share your information with third-party service providers who assist us in operating our service, conducting our business, or serving our users.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Compliance with industry standards and regulations

6. HIPAA Compliance

As a healthcare compliance platform, we understand the importance of HIPAA compliance. While HIPAA Trainer itself is a compliance training tool and not a covered entity under HIPAA, we maintain high standards for data protection:

• We do not collect or store Protected Health Information (PHI)
• Our platform is designed to help organizations achieve HIPAA compliance
• We maintain appropriate safeguards for all data we process
• Business Associate Agreements are available for enterprise customers when applicable

7. Your Rights and Choices

You have certain rights regarding your personal information:

• Access: You can request access to your personal information
• Correction: You can request correction of inaccurate information
• Deletion: You can request deletion of your personal information
• Portability: You can request a copy of your data in a portable format
• Opt-out: You can opt-out of marketing communications at any time

To exercise these rights, please contact us using the information provided in the Contact section below.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Training records may be retained for compliance and certification purposes as required by applicable regulations.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: