Privacy Policy

How we collect, use, and protect your information

Last reviewed: September 8, 2026

HIPAA Media LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, use our scanner tool, or engage our services. Please read this policy carefully.

Effective Date: September 8, 2026  |  Last Reviewed: September 8, 2026

Overview and Scope

HIPAAReport.com ("we," "us," or "our") provides automated security scanning tools that evaluate healthcare and medical websites to identify potential technical vulnerabilities in how web forms collect information. Our platform delivers actionable suggestions to help website owners improve their website's technical security posture.

Important Disclaimer: HIPAAReport.com does not collect, store, transmit, or process Patient Health Information (PHI) or personal health data on behalf of your patients. Furthermore, our services evaluate website technical security configurations only; HIPAAReport.com does not provide legal HIPAA compliance certifications, legal audits, or guarantees of regulatory compliance.

Information We Collect

  • Account and Registration Data: We collect contact and account details from website owners or administrators, including name, business email address, phone number, and payment information (where applicable).
  • Scanned Website Technical Data: We collect and store publicly available technical data regarding the domain names you submit for evaluation. This includes SSL/TLS certificate status, HTTP security headers, form action attributes, encryption protocols, and public server configurations.
  • Platform Usage Data: We collect standard analytical data (IP addresses, browser types, and platform interactions) to monitor system performance and secure our services.

Scan Frequency and Data Retention

  • Automated Updates: Scanned website data is stored in our secure database and refreshed automatically on a monthly schedule.
  • On-Demand Scans: Account holders may trigger manual website re-scans once every 24 hours per registered domain.
  • Data Retention: We retain historical scan logs to display security trends over time.

How We Use Your Data

We use collected data strictly to deliver and enhance our services, including:

  • Generating technical security evaluations and actionable recommendations for your website.
  • Maintaining website security history and tracking monthly performance changes.
  • Delivering specialized web support, security enhancements, and related digital services through our affiliated service, HIPAA Media.
  • Communicating administrative notifications, system alerts, and billing updates.

Data Sharing and Sales

  • No Data Sales: We do not sell, rent, trade, or monetize your account details or scanned website data to third parties under any circumstances.
  • Affiliate Operations: We share scanned technical data and user contact information with our parent service, HIPAA Media, to deliver complementary web development and security assistance.
  • Service Providers: We share data with trusted infrastructure providers (such as web hosting and payment processors) who process data on our behalf under strict data protection agreements.
  • Legal Disclosures: We may disclose data if required by law, court order, or governmental regulation.

Data Security

We implement commercial-grade administrative, technical, and physical security measures to protect your account information and stored scan data against unauthorized access, disclosure, or loss.

Contact Information

For questions regarding this Privacy Policy or our privacy practices, please contact us at: