Privacy Policy

Effective date: November 6, 2026 Last updated: November 6, 2026 Website operator: GF Investment Group LLC d/b/a Healthcare Marketing Partners Address: 3044 Bardstown Rd #148, Louisville, KY 40205 Privacy contact: hello@healthcaremarketingpartners.com

1. Scope and important distinction

This policy describes information handled through the public Healthcare Marketing Partners website at https://healthcaremarketingpartners.com, business inquiries, free-audit requests, and related business communications.

It distinguishes website business-contact data from protected health information (PHI) held by a healthcare practice. A practice's EHR, scheduling records, clinical records, patient communications, and appointment notes are not ordinary website marketing data. HMP's reporting design uses business-level aggregates and is intended to avoid receiving PHI for marketing reporting.

Do not submit PHI through the public website or enter it into the chat assistant. If a separate client workflow could involve PHI, that workflow remains inactive unless the parties complete an appropriate legal and security analysis, execute any required business associate agreement, approve the systems, and authorize the limited scope.

2. Information the website may collect

The website may collect:

• Business contact information: name, business email, business telephone number, practice or organization name, role, and communication preferences.
• Practice qualification information: country or state of operation, vertical, practice size range, ownership or authorized-buyer status, advertising platform, and high-level service needs.
• Audit-request information: business account identifiers or access instructions necessary to arrange a read-only review, provided through an approved secure workflow. Do not submit patient lists, patient-level reports, clinical details, or EHR access.
• Communications: business correspondence, requests, feedback, and records of consent or suppression where applicable.
• Transaction records: invoice, payment status, and agreement records. Full payment-card details are handled only by the approved payment processor when one is used.
• Technical information: IP address, device and browser information, requested pages, timestamps, and security logs needed to operate and protect the site.

3. Information the public site must not collect

Do not use public website forms or chat to submit patient or client names, contact details, appointment reasons, diagnoses, treatment information, clinical notes, patient lists, personal-level scheduling exports, or EHR credentials.

HMP does not request TherapyNotes or other EHR access for its marketing audit. The free audit is read-only and aggregate. Do not provide personal-level search, appointment, or patient reports.

If a visitor submits prohibited information, we will restrict access and delete it where legally permitted and technically feasible, subject to documented retention and legal obligations.

4. Sources of information

Information may come directly from a visitor or client, from a client's authorized business systems, from service providers supporting the site, and from automatic security logs. Any advertising-platform data must be business-level and obtained under appropriate permissions.

5. Purposes for use

Business information may be used to:

• Respond to inquiries and administer the free audit.
• Qualify business fit and authorized decision-maker status.
• Provide proposals, agreements, onboarding, and customer support.
• Manage client accounts, billing, security, and service records.
• Send service-related communications.
• Send promotional communications only with an appropriate legal basis and required consent, and honor unsubscribe and suppression requests.
• Maintain security, prevent abuse, debug the site, and comply with law.
• Produce internal business-level service reporting.

6. Aggregate appointment reporting

Client reports distinguish gross booked new clients or patients, cancellations, net booked, attended, and paid. The practice performs identity-level deduplication inside its own systems and supplies only approved aggregate counts.

HMP's default report does not require names, email addresses, telephone numbers, clinical details, appointment notes, or personal-level exports. Advertising spend divided by net booked new clients is reported as cost per net booked new client; management fees are shown separately.

No report guarantees bookings, attendance, payment, revenue, or clinical outcomes.

7. Disclosure to service providers and other parties

We may share business-contact information with service providers that help operate the website and business, such as hosting, security, forms and database storage, CRM or email tools, payment processing, and professional advisers, and with advertising platforms when a client authorizes access for campaign management.

We disclose information only as needed for those purposes, subject to appropriate contracts, legal process, protection of rights and security, a business transaction reviewed as needed, or the person's direction or consent.

HMP does not sell PHI or use PHI for unauthorized marketing. Whether website business-contact data is "sold" or "shared" under applicable state privacy laws depends on the actual advertising and analytics arrangements in use.

8. Cookies, analytics, and advertising technologies

The site may use cookies or similar technologies that are necessary for security, session management, and basic site operation. Specific third-party analytics or advertising vendors are disclosed only if actually deployed on this public site. The design excludes patient-list uploads, health-based remarketing, and PHI in advertising pixels or URLs.

9. Retention

Information is retained only as long as needed for the purposes above and legal obligations. In general:

• Inquiry, audit, and chat-lead records: kept while active outreach is ongoing and for a reasonable period afterward for follow-up and dispute handling.
• Agreements, invoices, and payment status: kept for the life of the commercial relationship and as required for tax and accounting records.
• Marketing consent and suppression records: kept as needed to honor opt-outs.
• Security logs: kept for a limited operational period unless a security or legal review requires longer retention.
• Prohibited information submitted inadvertently: restricted and deleted where legally permitted and technically feasible.

10. Security

We use reasonable administrative and technical safeguards appropriate to a small business website, including limited access to submission records, multifactor authentication for business accounts where available, and review of security incidents. No method of transmission or storage is guaranteed secure.

11. Choices and rights

You may opt out of promotional messages through the mechanism supplied in the message. Service or transactional messages may still be sent where appropriate.

Depending on your jurisdiction, you may have rights to request access, correction, deletion, portability, restriction, or objection. To make a privacy request, email hello@healthcaremarketingpartners.com. We will verify and respond as required by applicable law.

12. Children and clinical services

The HMP website is intended for business users and practice representatives, not for obtaining clinical care or collecting children's information.

HMP marketing communications are not medical, dental, veterinary, or mental health advice. People seeking care should contact an appropriate provider.

13. External links and third-party services

The website may link to third-party resources. Their policies and practices are separate. A link does not imply endorsement of every third-party statement.

14. Changes and contact

We may update this policy by posting a revised version with a new effective date. Privacy questions may be sent to hello@healthcaremarketingpartners.com or 3044 Bardstown Rd #148, Louisville, KY 40205.