Privacy Policy

1. Who We Are

INCARE CyberSecure ("we," "us," or "our") is a cybersecurity and HIPAA compliance advisory firm serving rural and community hospitals across the United States. Our principal place of business is in the United States, and our website is located at www.incarecyber.com (the "Site").

This Privacy Policy describes how we collect, use, disclose, and protect information we receive when you visit our Site or contact us through it.

2. Information We Collect

Information You Provide Directly

When you submit the contact form on our Site, we collect the following:

• Name — so we know how to address you
• Email address — so we can reply to your inquiry
• Message content — the details you share about your hospital or inquiry

We do not ask for, and you should not submit, any protected health information (PHI), patient data, or sensitive clinical information through our website contact form.

Information Collected Automatically

Like most websites, our server may automatically log standard technical data when you visit, including:

• Your IP address and general geographic region
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URL (the site that sent you here)
• Date and time of your visit

This data is used solely for security monitoring, diagnosing technical issues, and understanding general website traffic patterns. It is not linked to your personally identifiable information.

Cookies and Similar Technologies

Our Site may use cookies — small text files stored on your device — for basic functionality such as remembering your preferences and keeping navigation consistent. We do not use third-party advertising cookies or behavioral tracking cookies. You may disable cookies in your browser settings, though some site features may not function as intended.

3. How We Use Your Information

We use the information you provide exclusively to:

• Respond to your inquiry or service request
• Schedule and conduct discovery calls or consultations
• Send you information you specifically request (such as resources or guides)
• Maintain records of our communications for service continuity
• Comply with applicable legal obligations

We will not add you to a marketing list, newsletter, or email campaign without your explicit consent. Our promise: one reply to your inquiry, not a drip campaign.

4. Legal Basis for Processing (If You Are in the EU/EEA)

If you are located in the European Union or European Economic Area, we process your personal data under the following lawful bases as defined by the General Data Protection Regulation (GDPR):

• Legitimate interests — to respond to your business inquiry and provide the advisory services you contacted us about
• Consent — where you have freely provided information to initiate contact with us
• Legal obligation — where applicable law requires us to retain certain records

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:

• Service providers: We use third-party tools (such as email hosting and website hosting providers) that may process data on our behalf under confidentiality agreements. These providers are not permitted to use your data for their own purposes.
• Legal requirements: We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of INCARE CyberSecure or others.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

6. Data Retention

We retain contact form submissions and related correspondence for as long as reasonably necessary to fulfill the purpose for which they were collected — typically for the duration of any business relationship or engagement, plus a reasonable period afterward for record-keeping. When information is no longer needed, we delete or anonymize it.

7. Data Security

We take data security seriously — it is, after all, our business. We use industry-standard security measures to protect the information you share with us, including encrypted email transmission, access controls, and secure hosting environments. However, no method of transmission over the internet is 100% secure. If you have reason to believe your interaction with us has been compromised, please contact us immediately at contact@incarecyber.com.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to legal retention requirements
• Object to or restrict certain types of processing
• Request a portable copy of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at contact@incarecyber.com. We will respond within 30 days.

9. Children’s Privacy

Our Site is intended for healthcare and business professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.

10. Third-Party Links

Our Site may contain links to external websites (such as regulatory resources, framework documentation, or professional references). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be noted prominently. Continued use of the Site after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please reach out:

• Email: contact@incarecyber.com
• Website: www.incarecyber.com

We are committed to resolving any concerns about your privacy promptly and transparently.