Effective May 5, 2026
Privacy Policy
This Privacy Policy explains how Heepsters Creative LLC ("Heepsters," "we," "us") handles information collected through heepsterspractice.com and the Heepsters Practice application (the "Service"). Protected Health Information (PHI) processed inside the Service under an executed Business Associate Agreement (BAA) is governed by that agreement, not this policy.
1. What we collect
- Account data: name, email, practice name, role.
- Usage data: pages visited, features used, anonymized device and browser metadata.
- Lead data: info you submit on the demo or signup forms.
- Cookies: strictly-necessary cookies for auth and session. Optional analytics cookies require consent.
2. How we use it
- To run, secure, and improve the Service.
- To respond to demo requests and support customer onboarding.
- To send transactional email (account, billing, security).
- To send marketing email — only if you opted in. You can unsubscribe at any time.
3. PHI handling
PHI placed into the Service by a Covered Entity is handled under the applicable executed agreements and configured deployment controls. Product controls include staff MFA, role-based access, row-level data rules, audit trails, and consent gates. See Security & controls for the current product overview.
4. Sharing
We share data only with subprocessors necessary to operate the Service (cloud hosting, transactional email, payments, customer support tooling). The current vendor disclosures and contractual requirements are reviewed during onboarding. We do not sell personal data.
5. Your rights
You can request access, correction, export, or deletion of your account data by emailing privacy@heepsterspractice.com. For PHI, requests are handled by your Covered Entity per HIPAA.
6. Retention
Marketing leads are retained for 24 months unless you ask us to delete sooner. Customer and account data retention follows the applicable agreement, configured retention policy, and legal requirements.
7. Children
The Service is for clinical professionals and is not directed to children under 13. We don't knowingly collect data from children directly.
8. Changes
We'll post updates here and notify account holders via email at least 14 days before material changes take effect.
9. Contact
Privacy questions: privacy@heepsterspractice.com
Heepsters Creative LLC · Provo, Utah