EHR Resources, LLC ("EHR Resources," "we," "us," or "our") is a veteran-owned healthcare IT compliance and security advisory firm. This policy describes how we collect, use, and protect information when you visit ehrresources.com or communicate with us through it.
We take privacy seriously in our own practice for the same reasons we ask our clients to take it seriously in theirs. If anything in this policy is unclear, we would rather you ask than guess. Our contact details are at the end of this page.
When you submit our contact form or email us, we collect the information you choose to share. This typically includes your name, organization, email address, phone number, the service area you are interested in, your timeline, and the contents of your message.
When you visit our website, certain technical information is collected automatically, including:
We use the information described above to:
We do not sell your personal information, and we do not use it for purposes unrelated to those described here.
We use Google Analytics to understand how visitors use our website. Google Analytics places cookies on your device and collects the automatically gathered information described in Section 2. We use this data in aggregate to see which pages are visited, how visitors arrive, and how long they stay.
Google's handling of this information is governed by its own privacy policy, available at policies.google.com/privacy. You may prevent Google Analytics from collecting your information by installing the browser add-on available at tools.google.com/dlpage/gaoptout.
You can also control cookies through your browser settings, including blocking them entirely or deleting existing cookies. Some website features may not function correctly if cookies are disabled.
We use a third-party service that attempts to identify the organization associated with a visitor's IP address, such as a hospital system, clinic, or business associate. This service works by matching IP addresses against publicly registered network information. It identifies organizations, not individual people, and it does not tell us the name of the person visiting.
We use this information for marketing and business development purposes. That includes understanding which types of organizations are interested in our services and, where appropriate, reaching out to organizations that appear to be evaluating compliance or security support.
Visitors on home internet connections or mobile networks are generally not identifiable through this method, because those IP addresses are registered to internet service providers rather than to specific organizations.
When you submit our contact form, we collect the information you enter along with your IP address, approximate geographic location, browser details, and the time of submission. We also apply automated checks designed to detect spam, bots, and abusive traffic.
Your submission is delivered to us by email, and an automated acknowledgement is sent to the email address you provide. We retain form submissions as business records for as long as needed to respond to your inquiry and maintain a history of our communications.
Submissions that our security checks flag as automated or abusive may be blocked and logged, including the IP address from which they originated.
We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:
We use reasonable administrative, technical, and physical safeguards designed to protect the information we collect. Our website is served over an encrypted connection, and our contact form includes protections against automated abuse. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
We retain analytics data for the period configured in Google Analytics, currently up to 14 months for user-level data. We retain contact form submissions and related correspondence as business records for as long as reasonably necessary to serve the purposes described in this policy.
This website is not a secure channel for protected health information.
Please do not include patient names, medical record numbers, diagnoses, or any other individually identifiable health information in contact form submissions or in email correspondence with us. Our website and general email are appropriate for business inquiries only.
If your engagement with EHR Resources requires the exchange of protected health information, we will establish an appropriate secure method and, where required, execute a Business Associate Agreement before any such information is shared.
You have the following options regarding your information:
Our website and services are intended for healthcare organizations and business professionals. We do not knowingly collect information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.
We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be noted prominently on the page. Your continued use of the website after a change takes effect indicates your acceptance of the revised policy.
If you have questions about this policy or about how we handle your information, please contact us: