Home / Legal

Privacy Policy

Effective date: November 9, 2026 · Last updated: November 9, 2026

Who we are

This policy covers the website at dmedesk.com and its demo pages (the "Site"). DMEDesk is operated by Darren Liu ("DMEDesk", "we", "us"). Contact: darrenliu@mail.grokbot.com · 249 S Leandro St, Anaheim, CA 92807.

What the Site collects today

The Site is a set of static pages. It has no account sign-up, no login that stores credentials, no checkout and no web form that sends information to us.

Booking a walkthrough. "Book a walkthrough" links open your own email app with a message addressed to us. Nothing is sent unless you send that email. We use what you send only to reply and arrange the walkthrough, and we do not add you to a mailing list. Please do not include patient information.

Product tour. The product tour workspace shows fictional records only. Buttons in the tour do not save or send data, and tour pages do not load Google Analytics.

We do not knowingly collect sensitive personal information, consumer health data or protected health information through the Site.

Google Analytics and cookies

Your choice comes first. On marketing, comparison and legal pages a cookie banner asks whether you accept analytics cookies. Until you click Accept, Google Analytics is not loaded, no request is sent to Google Analytics and no analytics cookie is set. We use Google Consent Mode v2 with analytics storage, ad storage, ad user data and ad personalization all denied by default. Accepting turns on analytics storage only; the advertising settings stay denied. Your choice is saved in your browser's local storage (not a cookie) under the name dmedesk-cookie-consent. You can change it at any time with Cookie settings in the footer. Choosing Reject after accepting deletes the Google Analytics cookies this site set.

If you accept, Google's GA4 tag sets first-party cookies, _ga (distinguishes users) and _ga_<container-id> (keeps session state), each with a default expiration of 2 years. Browsers may shorten this.^[6] Your browser then sends Google information such as the page URL and your IP address.^[7] Learn how Google uses this information: How Google uses information from sites or apps that use our services.^[7]

Analytics data is kept in Google Analytics according to the property's data-retention setting, currently [GA4 data-retention period, from GA Admin › Data retention]. We do not use Analytics data for advertising.

You can also install the Google Analytics Opt-out Browser Add-on,^[8] or block or delete cookies in your browser settings. The Site works the same without analytics cookies.

Third-party tracking across sites: if you accept analytics cookies, Google may collect information about your online activities over time and across different websites, as described in Google's policies.

How we use information

• To operate, secure and improve the Site
• To understand which pages are useful, in aggregate
• To comply with law and respond to lawful requests

No sale or sharing for advertising

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not sell consumer health data. Because we do not sell or share personal information, we do not offer a "Do Not Sell or Share" link. If that changes, we will update this policy first and provide the required opt-out methods, including honoring Global Privacy Control signals.^[1]

Your privacy rights

California

If the California Consumer Privacy Act, as amended by the CPRA, applies to us, California residents may request to know, delete and correct personal information, opt out of sale or sharing, limit the use of sensitive personal information, and not be discriminated against for exercising these rights.^[1] The CCPA applies to for-profit businesses meeting thresholds such as more than $25 million in annual revenue; we will honor these requests regardless.

Nevada

Nevada residents may submit a verified request directing us not to sell covered information (NRS 603A.345). We do not sell covered information, but you may still submit a request and we will respond within 60 days.^[2] Nevada's consumer health data law (NRS 603A.400 to 603A.550, added by SB 370) gives consumers rights to confirm, list third parties, stop collection or sharing, and delete consumer health data.^[2][3] The Site does not collect consumer health data.

Everyone

Anyone may ask what information we hold about them or ask us to delete it. Send requests to darrenliu@mail.grokbot.com with the subject "Privacy request". We may need to verify your identity, and you may use an authorized agent. If we deny a request, you may appeal by replying to our response.

Health information and HIPAA

The Site is not intended to receive health information. DMEDesk is not acting as a HIPAA business associate for anyone and has no BAA with any customer. Do not submit protected health information. If health information is sent to us by mistake, we will delete it and will not use it. See Security overview and BAA status.

If DMEDesk later offers consumer-facing health features, we will assess whether the FTC Health Breach Notification Rule (16 CFR Part 318) applies; it does not apply to HIPAA covered entities or to activities as a business associate.^[4]

Security

We use reasonable measures for a static website, including HTTPS for every page. No method of transmission or storage is completely secure. If a breach of personal information occurs, we will notify affected people as required by law, including NRS 603A.220.^[2] More detail: Security overview.

Children

The Site is a business tool for DME companies and is not directed to children under 16. We do not knowingly collect their personal information.

Changes to this policy

We will post changes on this page and update the effective date. For material changes we will also place a notice on the homepage before the change takes effect.

Contact

DMEDesk is operated by Darren Liu.
249 S Leandro St, Anaheim, CA 92807 · darrenliu@mail.grokbot.com