Privacy Policy

Effective date: [DATE — e.g. April 1, 2026] · Operated by ClinicalPulse LLC [PLACEHOLDER]

1. Introduction

ClinicalPulse ("we," "us," or "our") is operated by ClinicalPulse LLC [PLACEHOLDER] and accessible at clinicalpulse.net. This Privacy Policy explains what personal information we collect, how we use it, when we share it, and what rights you have. It applies to all visitors to our website and all newsletter subscribers.

This policy is designed to comply with applicable privacy laws in the United States (including the California Consumer Privacy Act / CPRA) and Canada (including the Personal Information Protection and Electronic Documents Act / PIPEDA, and Canada's Anti-Spam Legislation / CASL).

2. Information We Collect

Information you provide directly

First name and email address — collected when you subscribe to our newsletter. Required.
NPI (National Provider Identifier) number — collected optionally at signup for healthcare professional verification. Never shared with third parties in identifiable form.
Medical specialty preferences — the topics you select when subscribing, used to personalize your newsletter digest.

Information collected automatically

Page URLs and referrer URLs — recorded when you visit pages on our site.
Anonymized IP address — your IP address is immediately converted to an irreversible cryptographic hash (SHA-256). We never store your raw IP address.
Device and browser type — derived from your browser's User-Agent string (e.g., "mobile," "desktop," "tablet"). We do not store the full User-Agent string beyond 500 characters.
Newsletter opens — when your email client loads images in our newsletters, we record that the email was opened (one event per newsletter per subscriber).
Newsletter link clicks — when you click a link in our newsletter, we record the click and the destination URL before redirecting you.
Session identifier — a randomly generated ID stored in your browser's sessionStorage (not a cookie). It is cleared when you close your browser tab. It is not linked to your identity and is used only for aggregate site analytics.

From third parties

Google Analytics — we use Google Analytics (GA4) to measure site traffic. Google may collect additional data per their own Privacy Policy. We have enabled IP anonymization in our GA configuration.

3. How We Use Your Information

To deliver and personalize your newsletter digest based on your specialty preferences and frequency selection
To confirm your subscription via double opt-in email
To measure newsletter engagement (open and click rates) to improve email content and design
To analyze site usage patterns and improve content quality
To serve advertising — we share only aggregated, de-identified audience data with advertising partners (e.g., "our audience is 40% cardiologists"). Individual profiles are never shared with advertisers.
To comply with applicable laws and regulations

4. Data Sharing and Disclosure

      We do not sell your personally identifiable information (name, email address, or NPI number) to third parties.
    

We may share information in the following circumstances:

Service providers

We share data with vendors who help us operate the service, including our email delivery infrastructure. These providers access only the data necessary to perform their services and are contractually prohibited from using it for other purposes.

Aggregated and de-identified data

We may share or publish aggregated, de-identified analytics data with advertising partners, sponsors, potential investors, or publicly. For example: total subscriber counts, geographic distribution, specialty breakdown, or engagement benchmarks. This data cannot reasonably be used to identify any individual subscriber.

Legal requirements

We may disclose information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of ClinicalPulse LLC, our users, or the public.

Business transfers

If ClinicalPulse LLC is acquired, merged, or undergoes a sale of assets, subscriber data may be transferred to the acquiring entity. We will notify active subscribers by email before any such transfer takes effect, and subscribers will have the opportunity to delete their accounts.

5. Email Tracking

Our newsletter emails contain a tracking pixel — a 1×1 invisible image — that tells us when an email has been opened and on what type of device. Links in our emails route through our server so we can measure which links are clicked. This data is used solely to measure and improve our newsletter. If you prefer not to be tracked, you can disable automatic image loading in your email client; this will prevent open tracking (links will still work normally).

6. Cookies and Local Storage

We use sessionStorage (not cookies) for our own first-party analytics. This data is automatically cleared when you close your browser tab and is never linked to your identity. Google Analytics sets cookies per Google's standard practices — you can opt out using the Google Analytics Opt-out Browser Add-on. We do not use advertising cookies, third-party tracking pixels, or cross-site behavioral tracking beyond Google Analytics.

7. Data Retention

Newsletter subscriber data (name, email, NPI, preferences): retained while your subscription is active. Deleted within 90 days of unsubscribing.
Email engagement events (opens, clicks): retained for 24 months, then permanently deleted.
Page analytics events: retained for 24 months, then permanently deleted.
Backup copies may retain data for up to 30 additional days beyond the above periods.

8. Your Rights — California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to Know: You may request a copy of the personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties we share it with.
Right to Delete: You may request that we delete your personal information, subject to certain exceptions (e.g., legal obligations).
Right to Correct: You may request that we correct inaccurate personal information.
Right to Opt Out of Sale/Sharing: We do not sell your personal information. If you wish to opt out of your data being included in any aggregated data shared with third parties, contact us at the address below.
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise these rights, email privacy@clinicalpulse.net [PLACEHOLDER] with the subject "CCPA Request." We will respond within 45 days.

9. Your Rights — Canadian Residents (PIPEDA / CASL)

If you are a Canadian resident, we collected your email address with your express consent via a confirmed double opt-in process, as required by CASL. Every commercial email we send includes an unsubscribe mechanism that takes effect within 10 business days of your request.

Under PIPEDA, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Withdraw consent to our collection or use of your information at any time (which may mean we can no longer provide the newsletter service to you)
File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, email privacy@clinicalpulse.net [PLACEHOLDER]. We will respond within 30 days.

10. Children's Privacy

ClinicalPulse is intended for healthcare professionals and adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

11. Security

We implement industry-standard security measures including TLS encryption for all data transmission, hashed (non-reversible) storage of IP addresses, and access controls on our database. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. International Data Transfers

Our servers are located in the United States. If you are accessing our site from Canada or elsewhere, your information will be transferred to and processed in the United States. By using our service, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to active newsletter subscribers by email at least 14 days before taking effect. The effective date at the top of this page reflects the date of the most recent update. Continued use of the site after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

For privacy questions, requests, or complaints:
ClinicalPulse LLC [PLACEHOLDER]
[ADDRESS PLACEHOLDER — required for CASL compliance]
privacy@clinicalpulse.net [PLACEHOLDER]