Privacy Policy

1. Introduction

At HEP.PRO ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. HIPAA Compliance

HEP.PRO is designed to be compliant with the Health Insurance Portability and Accountability Act ("HIPAA") and serves as a Business Associate to healthcare providers who use our Service. We maintain appropriate safeguards to ensure the security and privacy of protected health information ("PHI") in accordance with HIPAA requirements.

Healthcare providers who use our Service are responsible for obtaining appropriate authorization from their patients (clients) before sharing their information with us and for complying with their obligations as Covered Entities under HIPAA.

3. Information We Collect

3.1 Information You Provide to Us

We may collect the following types of information from you:

• Account Information: When you register for an account, we collect your name, email address, profession, organization name, phone number, and password.
• Payment Information: When you subscribe to our Service, we collect payment information, including billing address and credit card details. Note that payment processing is handled by secure third-party payment processors, and we do not store complete credit card information on our servers.
• Profile Information: You may provide additional information for your profile, such as a profile picture, professional credentials, and practice information.
• Client Information: If you are a healthcare provider using our Service, you may provide information about your clients, including their names, contact information, medical conditions, treatment plans, and exercise programs.
• Communications: When you communicate with us or other users through the Service, we collect the content of your communications and any information you provide.
• Feedback and Support: When you provide feedback or contact our support team, we collect the information you share with us.

3.2 Information We Collect Automatically

When you access or use our Service, we may automatically collect certain information, including:

• Device Information: We collect information about the device you use to access the Service, including the hardware model, operating system and version, unique device identifiers, and mobile network information.
• Log Information: We collect log information when you use the Service, including the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Service.
• Usage Information: We collect information about your interactions with the Service, such as the features you use, the actions you take, and the time, frequency, and duration of your activities.
• Location Information: We may collect information about your approximate location based on your IP address.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your interactions with our Service. Please see our Cookie Policy for more information.

3.3 Information from Third Parties

We may receive information about you from third parties, such as other users, partners, and public databases. For example, if you are a client of a healthcare provider who uses our Service, the provider may share your information with us to create and manage your exercise programs.

4. How We Use Your Information

We may use your information for the following purposes:

• Provide, maintain, and improve the Service: We use your information to provide the functionality of the Service, fulfill your requests, process transactions, and maintain and improve the quality of the Service.
• Personalize your experience: We use your information to personalize your experience, including remembering your preferences and settings, and customizing content based on your usage patterns.
• Communicate with you: We use your information to communicate with you about the Service, respond to your inquiries, provide customer support, and send you technical notices, updates, security alerts, and administrative messages.
• Marketing and promotions: We may use your information to send you promotional communications about new features, offerings, and special events, unless you opt out of such communications.
• Analyze usage and trends: We use information about how you use the Service to analyze and improve the Service, develop new products and features, and understand user behavior and trends.
• Security and protection: We use your information to detect, investigate, and prevent fraudulent transactions, unauthorized access to the Service, and other illegal activities, as well as to protect the rights, property, and safety of HEP.PRO, our users, and others.
• Comply with legal obligations: We use your information to comply with applicable legal obligations, including responding to legal requests and enforcing our terms and policies.

5. How We Share Your Information

We may share your information in the following circumstances:

• With your consent: We may share your information when you give us explicit consent to do so.
• With healthcare providers: If you are a client, we may share your information with the healthcare provider who created your account and manages your exercise programs.
• With clients: If you are a healthcare provider, we may share your information with your clients to whom you assign exercise programs.
• With service providers: We may share your information with third-party vendors, consultants, and service providers who need access to your information to perform services on our behalf, such as hosting, data analytics, payment processing, email delivery, and customer service. These service providers are contractually obligated to protect your information and may only use it to provide services to us.
• For legal reasons: We may share your information if we believe it is necessary to comply with applicable laws, regulations, legal processes, or governmental requests; to enforce our terms of service and other agreements; to protect the security or integrity of our Service; or to protect the rights, property, or safety of HEP.PRO, our users, or others.
• Business transfers: If HEP.PRO is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred or disclosed as part of that transaction. We will notify you of any change in ownership or the use of your information and provide choices regarding your information.
• Aggregated or de-identified information: We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

We do not sell, rent, or lease your personal information to third parties.

6. Data Retention

We retain your information for as long as necessary to provide the Service, fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

If you request deletion of your account, we will delete or anonymize your personal information, unless we are required to retain it for legal, accounting, or regulatory reasons. We may retain de-identified or aggregated data derived from your information after your account is deleted.

7. Data Security

We implement appropriate technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, use, and modification. These safeguards include encryption of sensitive data, access controls, regular security assessments, and employee training.

While we strive to protect your information, no security system is impenetrable, and we cannot guarantee the absolute security of your information. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

8. Your Rights and Choices

Depending on your location and applicable laws, you may have certain rights regarding your personal information. These may include:

• Access: You may request access to the personal information we hold about you.
• Correction: You may request that we correct incomplete or inaccurate information about you.
• Deletion: You may request that we delete your personal information, subject to certain exceptions.
• Restriction: You may request that we restrict the processing of your personal information in certain circumstances.
• Data portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Objection: You may object to our processing of your personal information for direct marketing purposes or based on our legitimate interests.
• Withdrawal of consent: If we process your personal information based on your consent, you may withdraw your consent at any time.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below. We may request specific information to confirm your identity and ensure your right to access or control your personal information.

8.1 Account Information

You can review, update, and delete certain account information by logging into your account settings. If you cannot access certain information or have questions about the information we have on file about you, please contact us using the information provided in the "Contact Us" section below.

8.2 Communications Preferences

You can opt out of receiving promotional communications from us by following the unsubscribe instructions included in those communications or by updating your communication preferences in your account settings. Even if you opt out, we may still send you non-promotional communications, such as those about your account, the Service, or our ongoing business relations.

8.3 Cookie Preferences

Most web browsers are set to accept cookies by default. If you prefer, you can set your browser to block or alert you about cookies. Please note that certain features of the Service may not function properly if you disable cookies. For more information about cookies and how to manage them, please see our Cookie Policy.

8.4 Do Not Track

Some browsers offer a "Do Not Track" ("DNT") signal that indicates a preference not to be tracked online. We currently do not respond to DNT signals because there is no common industry standard for compliance.

9. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us.

10. International Data Transfers

We may transfer your information to countries other than the one in which you reside, including to the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we will ensure that transfers of your personal information are made in accordance with applicable data protection laws, including by implementing appropriate safeguards such as standard contractual clauses.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page with a new effective date. We encourage you to review the Privacy Policy whenever you access the Service to stay informed about our information practices.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

HEP.PRO
Attn: Privacy Officer
1234 Health Avenue
San Francisco, CA 94105
Email: privacy@hep.pro
Phone: (800) 123-4567

13. For California Residents

If you are a California resident, the California Consumer Privacy Act ("CCPA") provides you with specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.

13.1 Right to Know

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months, including:

• The categories of personal information we collected about you.
• The categories of sources from which the personal information was collected.
• The business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you.

13.2 Right to Delete

You have the right to request that we delete any of your personal information that we have collected from you and retained, subject to certain exceptions.

13.3 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

13.4 Exercising Your Rights

To exercise your rights under the CCPA, please submit a verifiable consumer request to us by contacting us using the information provided in the "Contact Us" section above.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.

14. For European Economic Area (EEA) Residents

If you are located in the EEA, the United Kingdom, or Switzerland, the General Data Protection Regulation ("GDPR") and similar data protection laws provide you with certain rights regarding your personal information.

14.1 Legal Basis for Processing

We will only process your personal information when we have a lawful basis to do so. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you, such as when you use our Service), and our legitimate interests (such as to protect the security and integrity of our Service).

14.2 Data Protection Rights

In addition to the rights described in the "Your Rights and Choices" section, you may have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

14.3 Data Controller

HEP.PRO is the data controller responsible for your personal information. For information about how to contact us, please see the "Contact Us" section above.