This privacy notice governs the ProtokolIQ marketing website (this site). It does not govern the ProtokolIQ clinical platform, which is a separate product covered by its own agreements (including a master services agreement, and a Business Associate Agreement and data processing agreement where applicable). This site is for business professionals — owners and operators of cash-pay clinical practices — and is PHI-free by construction.
What this site collects
- No patient health information (PHI). This marketing site is PHI-free by construction. Please do not submit patient information through any form on this site. The details we collect are your business contact information, not patient or health data.
- Lead details you provide. When you submit the inquiry form, we collect your work email (required) and, optionally, your name, practice name, role, practice type, and anything you write in the free-text message field. The form also records a hidden source field noting which page you submitted from.
- Cookieless, aggregate analytics. We use Cloudflare Web Analytics, a cookieless measurement tool. It does not set cookies, does not fingerprint your device, and does not track you across other websites. We see only aggregate page metrics.
- Bot protection. The inquiry form is protected by Cloudflare Turnstile, a privacy-preserving alternative to a CAPTCHA that helps us block automated spam. To do that, Turnstile shares standard connection data (such as your IP address and browser type) with Cloudflare and may store strictly-necessary technical data on your device. It is verified on our server, is cookieless, and is not used for cross-site advertising.
How we use it
We use the details you submit to:
- respond to your inquiry;
- evaluate fit for the founding-practice program; and
- send you occasional, related follow-ups about ProtokolIQ and the founding-practice program.
We do not sell your information, and we do not share it with advertising networks. Submitting the form is your consent to be contacted about your inquiry. You can opt out of follow-up emails at any time — every commercial email includes a working unsubscribe link, or you can email us at privacy@protokoliq.com. We will honor your request and stop sending follow-ups.
Cookies and tracking technologies
The site itself sets no first-party cookies and no advertising, analytics, or cross-site tracking cookies. The only cookies that may appear are a small number of strictly-necessary platform cookies set by Cloudflare — for example to keep the site secure and to tell humans from bots (Turnstile). These are essential to run and protect the site and are not used to track you or to advertise. Our analytics, as noted above, are cookieless and aggregate.
Because we use only strictly-necessary cookies and no advertising, analytics, or tracking cookies, we do not display a cookie consent banner.
Service providers, and who sees your inquiry
The entire site runs on Cloudflare, Inc. (a United States company operating a global edge network), which provides the infrastructure we use to operate the site and processes data on our behalf. Cloudflare provides:
- Hosting and compute (Workers), which processes standard request metadata such as your IP address and browser type to operate and secure the site, and may set strictly-necessary edge/security cookies;
- Lead storage (D1), where your inquiry is stored with a submission timestamp;
- Notification delivery (Email Routing), which emails your inquiry to a single internal inbox so we can respond;
- Bot protection (Turnstile); and
- Aggregate analytics (Cloudflare Web Analytics).
When you submit the form, your inquiry is also emailed to our internal inbox so we can respond. If saving your inquiry or sending that notification fails, our system records an error message in Cloudflare (Workers) logs so we can detect and fix the problem. We log only an error message, not your submitted details — though in rare cases an error message could include one of the values you entered. Your inquiry itself is stored in our lead database, so a failed notification does not lose it. We do not sell your data or share it with advertising networks, and there is no CRM, ad platform, or other non-Cloudflare third party involved.
Where your data is processed
Your data is processed in the United States (Cloudflare is a US company operating a global edge network). If you are in Canada or Mexico, your information is transferred to and processed in the United States.
How long we keep it
We keep your inquiry for up to 24 months from the date you submitted it, after which it is deleted automatically. A daily process purges lead records older than that period, keyed to the submission date. We will delete your information sooner on request — just email privacy@protokoliq.com.
Your privacy rights
You can ask us to provide access to, correct, or delete the information you submitted, and you can opt out of follow-up emails — at any time, by emailing privacy@protokoliq.com. We may verify your identity using the details you provided before acting on a request. We are a small B2B operator and we honor reasonable requests regardless of any legal threshold.
United States. We do not “sell” your personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined under California law (CCPA/CPRA). California residents may exercise their rights to access, correct, and delete their information, and to opt out of follow-up emails, via the contact email above. Colorado residents (our home state) and residents of other US states with comparable privacy laws have similar rights, all exercisable the same way.
Canada. Under PIPEDA, you may request access to and correction of your information. The information we collect here is business-contact information that you give us so we can communicate with you about your practice. For follow-up email, we comply with CASL: we identify ourselves as the sender and include a working unsubscribe link in every commercial message. We treat your inquiry as your consent to be contacted, honored until you opt out.
Mexico. Under the LFPDPPP, the data controller is ProtokolIQ, and your information is collected for the purposes described in this notice. Residents of Mexico may exercise their ARCO rights — Access, Rectification, Cancellation, and Opposition — via the contact email above.
Children
This site is intended for business professionals and is not directed to children. We do not knowingly collect information from children.
Changes to this notice
We may update this notice from time to time. The “Last updated” date shown on this page reflects the current version.
Contact
To ask about this notice, to exercise any of the rights above, to opt out of follow-ups, or to request deletion of your inquiry, email us at privacy@protokoliq.com. You can also use the contact form on this site as a fallback.