Privacy

This Policy applies as between you, the User of this Website, and The HIPAA Journal, the owner and provider of this Website. This Policy applies to our use of any and all Data collected by us in relation to your use of the Website and any Services or Systems therein.

1. Definitions and Interpretation

In this Policy the following terms shall have the following meanings:

"Account": means collectively the personal information, Payment Information and credentials used by Users to access Material and/or any communications System on the Website.

"Content": means any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being stored in a computer that appears on or forms part of this Website.

"Cookie": means a small text file placed on your device by The HIPAA Journal when you visit certain parts of this Website and/or when you use certain features. Cookies enable us to recognise returning visitors and analyse browsing within the Website.

"Data": means collectively all information that you submit to the Website. This includes, but is not limited to, Account details and information submitted using any of our Services or Systems.

"The HIPAA Journal": means The HIPAA Journal, Unit #292, 110 North Akard Street, Dallas, Texas 75201, USA.

"Service": means collectively any online facilities, tools, services or information that The HIPAA Journal makes available through the Website either now or in the future.

"System": means any online communications infrastructure that The HIPAA Journal makes available through the Website either now or in the future. This includes, but is not limited to, web-based email, message boards, live chat facilities and email links.

"User" / "Users": means any third party that accesses the Website and is not employed by The HIPAA Journal and acting in the course of their employment.

"Website": means the website that you are currently using (courses.hipaajournal.com) and any sub-domains of this site unless expressly excluded by their own terms and conditions.


2. Data Collected

Without limitation, any of the following Data may be collected:

2.1 name;
2.2 date of birth;
2.3 job title & profession;
2.4 contact information such as email addresses and telephone numbers;
2.5 demographic information such as postal code, preferences and interests;
2.6 payment information such as credit/debit card numbers and related billing details (processed by our payment processor; we do not store full card numbers);
2.7 IP address (automatically collected);
2.8 web browser type and version (automatically collected);
2.9 operating system (automatically collected);
2.10 a list of URLs starting with a referring site, your activity on this Website, and the site you exit to (automatically collected); and
2.11 Cookie information (see Clause 10 below).
2.12 training activity, progress, and assessment interaction related to the Services;
2.13 communications you send to us (support requests, feedback, surveys).

3. Our Use of Data

3.1 Any personal Data you submit will be retained by The HIPAA Journal for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.
3.2 Unless we are obliged or permitted by law to do so, and subject to Clause 4, your Data will not be disclosed to third parties other than service providers acting on our behalf.
3.3 We store personal Data using reasonable administrative, technical, and physical safeguards designed to protect it (see Clause 9).
3.4 Data may be used by us for the following purposes:
3.4.1 internal record keeping;
3.4.2 improvement of our products/services and the Website;
3.4.3 sending you promotional materials (you may opt out at any time);
3.4.4 contacting you for market research or feedback (email, telephone, or mail);
3.4.5 providing, operating, and supporting the Services, including training progress and certificates;
3.4.6 detecting, preventing, and addressing fraud, security, and technical issues; and
3.4.7 complying with applicable laws and enforcing our Terms.

4. Third Party Websites and Services

The HIPAA Journal may, from time to time, employ the services of other parties for purposes including, but not limited to, payment processing, hosting, analytics, advertising, customer support, email delivery, and learning management. These providers may process personal Data only as needed to perform services for us and are contractually obligated to protect such Data and use it solely for the specified purpose. Any Data used by such parties is used only to the extent required by them to perform the services that The HIPAA Journal requests.

5. Changes of Business Ownership and Control

5.1 The HIPAA Journal may, from time to time, expand or reduce its business and this may involve the sale and/or transfer of control of all or part of the business. Data relevant to any part so transferred may be transferred along with that part and the new owner or controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was supplied.
5.2 In the event that your Data will be transferred in such a manner and where required by law, you will be contacted in advance and informed of the changes and offered choices regarding your Data.

6. Controlling Access to your Data

6.1 Wherever you submit Data, you may be given options to restrict our use of that Data, including for direct marketing.
6.2 You may opt out of marketing emails by using the unsubscribe link in those emails or by contacting us.

7. Your Right to Withhold Information

7.1 You may access certain areas of the Website without providing any Data at all. However, to use all Services and Systems available on the Website you may be required to submit Account information or other Data.
7.2 You may restrict your browser’s use of Cookies. For more information see Clause 10 below.

8. Accessing your own Data

8.1 You may access your Account at any time to view or amend the Data. You should keep your information accurate and up to date.
8.2 You may request a copy of your personal Data that we hold, subject to verification requirements and applicable law.

9. Security

Data security is of great importance to The HIPAA Journal and, to protect your Data, we have put in place reasonable physical, electronic and managerial procedures designed to safeguard and secure Data collected online. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

10. Cookies

10.1 We use Cookies and similar technologies (e.g., pixels, local storage) to: (a) enable core site functionality (authentication, preferences), (b) understand usage and improve performance (analytics), and (c) support our marketing.
10.2 You can manage Cookies via your browser settings. If you disable some Cookies, parts of the Website may not function properly.
10.3 We may use analytics and advertising partners that set Cookies to provide audience measurement and, where applicable, interest-based ads. You can learn more about controlling ad personalisation at industry pages such as aboutads.info or through your device settings.
10.4 We do not knowingly use Cookies to collect sensitive categories of information.

11. Changes to this Policy

The HIPAA Journal reserves the right to change this Privacy Policy as we may deem necessary from time to time or as may be required by law. Any changes will be posted on the Website and will apply from the date posted. Your continued use of the Website after changes are posted constitutes acceptance of the updated Policy.

12. Contacting Us

If there are any questions regarding this Privacy Policy you may contact us via the contact methods provided on the Website or by mail at:

The HIPAA Journal
Unit #292
110 North Akard Street, Dallas, Texas 75201, USA

13. State Privacy Notices (United States)

Depending on your U.S. state of residence, you may have certain rights over your personal information (e.g., to request access, deletion, or correction; to opt out of certain targeted advertising or disclosures). To exercise these rights, contact us using the methods above and indicate your state of residence. We will verify and respond as required by applicable law. We do not sell personal information as “sell” is defined under California law.

14. Governing Law; Dispute Resolution

This Policy is governed by the laws of Ireland. Any disputes relating to this Policy or our handling of Data are subject to the dispute resolution terms in our Terms and Conditions (including arbitration and class-action waiver), which are incorporated here by reference.