Privacy Policy

Last updated: September 20, 2026

H&A Healthcare Consulting ("H&A," "we," "us," or "our") operates hahealthconsulting.com (the "Site"). This Privacy Policy explains what information the Site collects, how we use it, and the choices you have. It covers the Site itself, how we treat protected health information (PHI) in the course of a client engagement is addressed separately below and is governed by the terms of that engagement, not by this policy.

Information You Provide to Us

The Site collects the information you choose to give us in two places. The first is our consultation request form: your name, email address, phone number, the area of the business you're interested in, and any optional message. The second is the H&A chat assistant: the messages you type, and the assistant's replies. When you submit the form, it is emailed to our team and also saved in our customer relationship management (CRM) system so we can follow up with you. Chat conversations are saved in the same system. If you use the chat and later submit the form, we connect the two so our team can see what you asked about. This information is not shared with any third party for their own use.

Information Collected Automatically

Like most websites, our hosting and security providers automatically log standard technical information for every visit (such as IP address, browser type, referring page, and timestamps) for security and operational purposes (for example, detecting abuse or diagnosing outages). We do not run third-party advertising or tracking scripts on this Site. Cloudflare may also provide us with aggregated traffic and performance statistics.

In addition, the Site records basic visit activity in our own CRM so we can understand how the Site is used and follow up with people who contact us. For each visit this includes the pages viewed, roughly how long the page was in active use, how far down the page you scrolled, the website that referred you, your device type and browser, and your approximate location (city and region, worked out from your IP address at the time of the visit). We do not store your IP address in the CRM. This activity is tied to a random identifier, not to your name. It is only connected to you personally if you choose to submit the consultation form or give us your details in the chat, in which case we link your earlier visits to your inquiry.

Cookies & Local Storage

The Site does not set advertising cookies. It uses your browser's session storage to remember, for the length of your visit, whether you've already seen the entry animation, whether the "Get Your Free Consultation" popup has been shown to you, and a random visit identifier. It also keeps a random visitor identifier in your browser's local storage so we can recognize a returning visitor; that identifier stays until you clear your browser's site data. The entry-animation and popup settings stay in your browser. The random identifiers are sent to our CRM along with the visit activity described above.

The Site is served through Cloudflare, a security and content-delivery provider, which may set its own strictly necessary cookies to protect the Site from abuse (for example, distinguishing real visitors from automated bots). Google Fonts is used for the typefaces on this page, which involves your browser requesting font files directly from Google's servers.

How We Use Information

We use the information you submit to respond to your inquiry, schedule a consultation, and communicate with current and prospective clients about our services. We also use visit activity and chat conversations to understand what visitors are looking for and to improve the Site and our services. We do not sell your personal information, and we do not use it for advertising or share it with third parties for their own marketing purposes.

Who We Share Information With

We share submitted information only where necessary to operate the Site and respond to you: for example, with our email, hosting, and database providers, who process it on our behalf to deliver your message to our team and to store it in our CRM. The text of your chat messages is also sent to an AI service provider (Google) so the assistant can generate a reply. We do not sell, rent, or trade your information to third parties.

Data Retention

We retain submitted inquiries, chat conversations, and visit activity for as long as reasonably necessary to respond to you and maintain our business records, and delete or archive them when no longer needed for those purposes. You can ask us to delete your information at any time (see Your Choices).

Protected Health Information (PHI)

This website is not designed to collect or store protected health information, and you should not enter patient or other health information in the consultation form or the chat. Any PHI shared with H&A in the course of an actual client engagement (for example, during EHR implementation or medical billing work) is governed separately by the terms of that engagement, applicable Business Associate Agreements, and HIPAA, not by this website's Privacy Policy.

Your Choices

You can decline to submit the consultation form or use the chat; the Site remains fully browsable without them. If your browser sends a Do Not Track or Global Privacy Control signal, the Site does not create a visitor identifier, record your visit activity, or save your chat conversations. The chat still answers you, and the chat window tells you when a conversation is not being saved. If you choose to submit the consultation form, we still save that submission, but we do not link it to your visit or chat activity. You can also clear your browser's site data at any time to remove the identifiers stored on your device. To request a copy, correction, or deletion of information you've previously sent us, including chat conversations and visit activity linked to you, contact us using the details below.

Children's Privacy

This Site is intended for healthcare practice administrators and professionals and is not directed at, or knowingly collecting information from, children under 13.

Security

The Site is served over an encrypted (HTTPS) connection and sits behind Cloudflare's security network. No method of transmission or storage is completely secure, but we take reasonable, industry-standard measures to protect the information submitted to us.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Site or our practices. The "Last updated" date above reflects the most recent revision.

Contact Us

Questions about this policy, or requests regarding your information, can be sent to info@hahealthconsulting.com or (832) 800-4352.