Your information and how we use it

This notice describes Health Site Works’ website inquiry and optional analytics practices. For a privacy question or request, use our contact form and describe what you need.

Information you share

Our inquiry form asks for your name, company email, organization, role, organization type, preferred platform and project requirements. You can also provide a website, budget range and timing. We use this information to respond, discuss your project and manage the relationship. Please leave out patient information, health records, passwords and payment details.

Inquiry handling and security

An accepted inquiry is stored before we show confirmation. An internal identifier helps reconcile retries. A keyed hash of the connection address supports rate limiting; it is not used for advertising. Hosting providers may process technical access logs to operate and protect the service.

Optional analytics and design testing

When enabled with your permission, Google Analytics and PostHog help us understand visits, page interactions and completed inquiries. Analytics identifiers can connect those interactions and help compare website design treatments. We exclude names, email addresses and free-text inquiry contents from analytics and do not enable session replay. You can decline optional analytics and still use the inquiry form.

If you allow analytics, we store a limited record of your first visit source and your latest campaign or referring website in this browser. We use a 30-day window and replace expired history when you return. We remove URL query details and use only controlled campaign labels. This record helps us understand how people find us and return. Choose Privacy choices and decline analytics to clear this browser history and stop optional measurement.

While analytics consent is active, these source details may accompany your inquiry, along with a verified design-test assignment when available. Withdrawing analytics consent stops that optional information from being sent on a retry. It does not automatically delete information already received with an inquiry; you can use the contact form to request deletion.

Service providers

Our website and inquiry systems use Vercel for the frontend, Cloudways for WordPress hosting, Cloudflare for domain services, Supabase for inquiry storage and Airtable for relationship management. Slack provides internal lead notifications. Google and PostHog provide optional analytics when enabled. These providers may process information outside your location, including in the United States.

Retention and requests

We keep information for the purposes described here, including responding to inquiries, managing active relationships and meeting recordkeeping or security needs. You can request access, correction or deletion through the contact form. The rights and exceptions that apply depend on your location and the records involved.

Updates

We will update this notice when our practices change. Engagement-specific confidentiality or data-processing arrangements are addressed separately in the relevant agreement.