Legal

Privacy Policy

Effective date: September 25, 2025
Company: Ali Healthcare Consulting (“AHC,” “we,” “us,” or “our”)
Contact: info@alihealthcareconsulting.com

This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website and Services. This policy is not a substitute for a HIPAA Business Associate Agreement (BAA). Where AHC acts as a Business Associate, our BAA governs PHI handling.

1) Scope

This Policy covers:

  • Website visitors (e.g., contact form, newsletter).

  • Prospective and current clients and vendors.
    It does not cover workforce data (employees/contractors) or third-party sites we don’t control.

2) Personal Information We Collect

Depending on your interactions, we may collect:

A. Information you provide

  • Contact details (name, email, phone, organization, role).

  • Business information (project goals, systems, timelines).

  • Billing details (invoices, payment confirmations—payments are typically processed by third-party processors; we do not store full card numbers).

  • Any content you upload or send to us. Please do not submit PHI via our public website or email.

B. Information we collect automatically (site usage)

  • Device/usage data (IP address, browser, pages viewed, timestamps, referring URLs).

  • Cookies or similar technologies to enable core functionality and measure site performance.
    (We do not use sensitive fingerprinting or cross-site tracking beyond what is described here. See Section 6.)

C. Information from third parties

  • Lead sources/referrals, public records, and service providers (e.g., analytics, CRM, scheduling tools).

3) How We Use Personal Information

  • Provide, operate, and improve the website and Services.

  • Communicate with you (support, proposals, updates, marketing where permitted).

  • Perform and bill for contracted Services.

  • Maintain security, prevent fraud/misuse, debug, and comply with law.

  • PHI: Only as permitted under an executed BAA and applicable law.

4) When We Share Information

We may share information with:

  • Service providers under contract (hosting, email, analytics, CRM, invoicing, document management) who are bound to appropriate confidentiality and security obligations (and BAAs where applicable).

  • Business transfers (merger, acquisition, financing, or sale).

  • Legal compliance (to comply with law, enforce agreements, or protect rights/safety).
    We do not sell personal information. We do not share PHI for marketing or non-BAA purposes.

5) HIPAA; PHI Handling

AHC’s website and general communications are not intended for PHI. If our Services require PHI access, we will execute a BAA, implement appropriate safeguards, limit PHI to the minimum necessary, and use/disclose PHI only as permitted by the BAA and law.

6) Cookies & Similar Technologies

We use essential cookies to operate the site and may use measurement/analytics cookies to understand site performance. You can control cookies via your browser settings and, where required by law, through our cookie banner/preferences tool. Disabling cookies may affect site functionality.

7) Data Retention

We keep personal information only as long as needed for the purposes described or as required by law (e.g., tax, audit, contract recordkeeping). When retention ends, we delete or de-identify information.

8) Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is 100% secure. If a security incident affects your data, we will notify you as required by law and, for PHI, as required by the BAA.

9) Your Privacy Choices & Rights

Depending on your location, you may have rights to request:

  • access to and a copy of your personal information;

  • correction or deletion;

  • portability (in certain cases);

  • to withdraw consent or opt out of marketing;

  • to limit certain uses/disclosures of sensitive data (where applicable).

To exercise rights, contact info@alihealthcareconsulting.com. We may need to verify your identity. You may also designate an authorized agent as permitted by law.

U.S. state disclosures (e.g., CA/VA/CO/CT/UT): We honor applicable state privacy rights and do not sell personal information. We do not engage in targeted advertising beyond limited first-party analytics. If our practices change, we will update this Policy and provide applicable opt-out mechanisms.

EEA/UK/Switzerland: Where GDPR applies, AHC is typically a controller for website interactions and a processor/Business Associate for client PHI under a BAA/SOW. Our lawful bases include consent (where required), contract performance, legitimate interests (e.g., site security, B2B communications), and legal obligations. Data may be processed in the U.S. using appropriate safeguards (e.g., SCCs where required).

10) Children’s Privacy

Our site and Services are intended for business users. We do not knowingly collect personal information from children under 13 (or a higher age where required). If you believe a child provided information to us, contact us to delete it.

11) International Transfers

If you access the site from outside the U.S., you understand your information may be processed in the United States (and other countries) where laws may differ from those in your location. We use appropriate safeguards where required.

12) Third-Party Links

Our site may contain links to third-party websites/services. We are not responsible for their privacy practices. Review their policies before providing information.

13) Changes to This Policy

We may update this Policy periodically. We will revise the “Effective date” and, for material changes, provide more prominent notice or seek consent where required.

14) How to Contact Us

Questions, requests, or complaints: privacy@alihealthcareconsulting.com or legal@alihealthcareconsulting.com (replace), or write to us at 53 Calle Palmeras, Suite 601, San Juan, PR 00901. You may also have the right to contact your local data protection authority.

15) Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Puerto Rico. Where permitted by law, disputes relating to this Policy may be brought in the state courts of the Commonwealth of Puerto Rico sitting in San Juan or the U.S. District Court for the District of Puerto Rico (San Juan).