Privacy Policy
How we handle your data with the same care we recommend for your practice.
Practice Flow · thepracticeflow.com
Last updated: April 15, 2026
Practice Flow ("we," "us," or "our") operates thepracticeflow.com (the "Site"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
We work with healthcare practices, which means privacy isn't a checkbox for us — it's how we operate. We collect only what we need, we don't sell your data, and we don't share it beyond the vendors required to run this site and communicate with you.
1. Information We Collect
Information you give us directly
- Email address — when you download a resource, subscribe to our newsletter, or fill out a contact form
- Name and contact details — if you reach out to us directly via a contact form or email
- Business information — practice name, specialty, or other details you choose to share when inquiring about services
Information collected automatically
When you visit the Site, certain data is collected automatically through analytics tools and your browser:
- Usage data — pages visited, time on page, clicks, and navigation paths
- Device and browser data — browser type, operating system, screen resolution, language settings
- Referral source — how you arrived at the Site (e.g., Google search, a LinkedIn post)
- IP address — used to determine approximate geographic location
- Cookies and similar technologies — small files placed on your device to support analytics and site functionality
We use third-party analytics services to measure site traffic and understand how visitors use the Site. All are engaged under agreements that restrict their use of your data to analytics purposes only.
What we do not collect
We do not collect, store, or process any Protected Health Information (PHI) or patient data of any kind. This Site is a business and marketing website — it is not a clinical platform and has no integration with any EHR, patient portal, or health records system.
2. How We Use Your Information
We use the information we collect to:
- Deliver resources you've requested (e.g., our AI Time Audit guide)
- Send email newsletters and updates about Practice Flow services (only if you've opted in)
- Respond to inquiries and schedule consultations
- Understand how visitors use the Site so we can improve it
- Identify technical issues or errors on the Site
- Comply with applicable legal obligations
3. Email Communications
If you subscribe to our email list, you'll receive content related to AI adoption in healthcare practices, workflow improvement, and Practice Flow services and events.
We use a third-party email marketing platform to manage our subscriber list. Your email address is stored on that platform under an agreement that restricts their use of your data to delivering our communications on our behalf.
You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any email we send.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:
- Service providers — Third-party vendors (analytics, email delivery, hosting) who process data on our behalf
- Legal compliance — If required by law, subpoena, or court order
- Business transfers — If Practice Flow is acquired or merges with another entity
- With your consent — for any other purpose, with your explicit permission
5. Cookies
We use cookies and similar tracking technologies for analytics purposes. These are not used for advertising or to track you across other websites.
Most browsers let you manage cookie preferences in their settings. You can also typically opt out of analytics tracking through your browser's privacy controls.
6. Data Retention
We retain your information for as long as necessary to fulfill the purposes described in this policy:
- Email subscribers — retained until you unsubscribe
- Contact form submissions — retained for up to 24 months
- Analytics data — retained per provider defaults (typically 14–26 months)
- Server logs — typically retained for 30–90 days
7. Your Rights (California Residents — CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know — request categories and specific pieces of personal information collected
- Right to delete — request deletion of your personal information
- Right to non-discrimination — we will not discriminate against you for exercising your rights
To exercise these rights, contact us at the address in Section 9.
8. Security
We take reasonable measures to protect your information from unauthorized access, disclosure, or loss. Our Site is served over HTTPS. No method of transmission over the internet is completely secure, but we take the protection of your information seriously.
9. Contact Us
10. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.
Note: This Privacy Policy is a disclosure document, not a service agreement. For questions about our consulting or training services, please contact us.