Privacy Policy

Last updated: October 10, 2026

Template draft. Replace the bracketed placeholders and have this policy reviewed by a qualified lawyer before launch. Turn this notice off with show_legal_draft_notice in the configuration.

1. Who we are

This site is operated by [Your legal entity name] (“we”, “us”), [Your business address]. You can contact us at hello@example.com or through the contact page.

2. What this site does today

In its current phase the site provides information pages, a preview of the HL7 Inspector, a contact form, and placeholder pages for logging in and registering. Accounts and payments are not available.

3. Information we handle

  • Text you paste into the Inspector. It is processed by JavaScript in your browser. It is not sent to our server and we do not receive it.
  • Contact form details. If you use the contact form, we receive your name, email address, chosen topic and message so that we can respond.
  • Server logs. Our hosting provider and web server record technical data such as IP address, browser type, pages requested and timestamps. This is used to operate and secure the site.
  • Login and registration placeholders. These forms do not read, validate or store what you type.

4. Health information

This site is not designed to receive protected health information or other personal health data. Please use synthetic or properly de-identified messages only, and do not include patient information in the contact form. If you send such information by mistake, contact us and we will delete it.

5. How we use information

We use contact details to answer your message. We use log data to run, secure and troubleshoot the site and to detect abuse. We do not sell personal information.

6. Cookies

Pages that contain a form (such as the contact page) set one session cookie, hl7tk_sid. It holds a security token that protects the form and is deleted when you close your browser. We do not currently use advertising or analytics cookies. If that changes, we will update this policy first.

7. Sharing

We use service providers, such as web hosting and email, who process data on our behalf. We may disclose information when the law requires it or to protect the rights and security of the site and its users.

8. Retention

We keep contact messages only as long as needed to handle your request and keep a reasonable record of it, unless the law requires a longer period. Server logs are kept for the period set by our hosting provider.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal information. To make a request, contact us using the details above.

10. Security

We apply reasonable technical measures, including a restrictive content security policy and protection of the contact form against cross-site request forgery. No method of transmission or storage is completely secure.

11. Children

The site is intended for professional users and is not directed to children under 16.

12. Changes

We may update this policy as the product develops. The date at the top shows the latest revision.