A privacy policy link or reference was detected on this page.
Notice of Privacy Practices
Pass
A Notice of Privacy Practices (NPP) reference was detected — required under HIPAA §164.520.
Terms of Service
Pass
A Terms of Service / Terms of Use / Terms & Conditions link was detected.
HIPAA Notice
Pass
A HIPAA Notice or dedicated HIPAA policy page was detected.
Cookie Policy
Pass
A cookie policy, notice, or consent reference was detected.
Accessibility Statement
Pass
An accessibility statement, ADA compliance notice, or WCAG reference was detected.
Non-Discrimination Policy
Fail
No non-discrimination policy found. Section 1557 of the ACA requires healthcare entities receiving federal funds to post a notice of non-discrimination.
State Privacy Rights Notice
Fail
No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
5 external script(s) lack SRI integrity attributes: www.googletagmanager.com, static.nkpmedical.com, widgets.leadconnectorhq.com, cdn.elementor.com. A compromised CDN could inject malicious code into your pages.
Server Information Disclosure:
Server headers expose version/technology: cloudflare, WP Engine. Remove or redact to avoid leaking infrastructure details.
7
HTTP → HTTPS Redirect:
HTTP requests are not redirected to HTTPS. Visitors on http:// receive an unencrypted connection.
8
Tracking Scripts:
2 third-party tracker(s) detected on this page.
9
Google Analytics 4:
Third-party tracking script detected on this page.
10
Google Tag Manager:
Third-party tracking script detected on this page.
11
Contact Email Addresses:
Free/personal email(s) found: [email protected]. Use a @platinummedicalspa.com address.
12
Health Form Fields:
Health-related form content detected. Keywords: health, medical, patient, ssn, condition, hipaa, treatment, provider. Ensure HIPAA-compliant safeguards are in place.
13
Tracker Exposure on Health Page:
Health-sensitive form content found alongside 2 tracker(s): Google Analytics 4, Google Tag Manager. This may constitute a HIPAA/privacy violation.
14
Non-Discrimination Policy:
No non-discrimination policy found. Section 1557 of the ACA requires healthcare entities receiving federal funds to post a notice of non-discrimination.
15
State Privacy Rights Notice:
No state privacy rights notice found. Healthcare organizations should address state-level consumer privacy laws (CCPA/CPRA, VCDPA, Washington My Health MY Data Act, etc.) that may apply to their patients and website visitors.
16
Subresource Integrity (SRI):
5 external script(s) lack SRI integrity attributes: www.googletagmanager.com, static.nkpmedical.com, widgets.leadconnectorhq.com, cdn.elementor.com. A compromised CDN could inject malicious code into your pages.
17
DMARC Record:
No DMARC record. Add TXT record at _dmarc.platinummedicalspa.com: v=DMARC1; p=quarantine; rua=mailto:[email protected]
18
DKIM Record:
No DKIM record found on common selectors. Your mail provider may use a custom selector.
Ready to Fix These Issues?
Our specialists can remediate every finding, protect your patients, and keep your website secure.