Home / Legal

Privacy Policy

Effective date: November 9, 2026 · Last updated: November 9, 2026

Who we are

This policy covers the website at dmedesk.com and its demo pages (the "Site"), operated by [Legal entity name] ("DMEDesk", "we", "us"). Contact: [Contact email] · [Mailing address].

What the Site collects today

The Site is a static design preview. It has no account sign-up, no login that stores credentials, no checkout and no form that sends information to us.

Walkthrough form. The "Get a walkthrough" email field on the homepage is a local preview. When JavaScript is enabled, your entry is checked and cleared in your browser; it is not stored, sent to us, or added to a CRM or mailing list. Please do not enter patient information.

Demo workspaces. The Acme and PlatinumMED example workspaces show fictional records only. Buttons in the demo do not save or send data.

We do not knowingly collect sensitive personal information, consumer health data or protected health information through the Site.

Google Analytics and cookies

The Site uses Google Analytics 4. Google's GA4 tag sets first-party cookies, _ga (distinguishes users) and _ga_<container-id> (keeps session state), each with a default expiration of 2 years. Browsers may shorten this.^[6] When you visit a page that uses Google Analytics, your browser sends Google information such as the page URL and your IP address.^[7] Learn how Google uses this information: How Google uses information from sites or apps that use our services.^[7]

Analytics data is kept in Google Analytics according to the property's data-retention setting, currently [GA4 data-retention period, from GA Admin › Data retention]. We do not use Analytics data for advertising.

Opt out: install the Google Analytics Opt-out Browser Add-on,^[8] or block or delete cookies in your browser settings. The Site still works without analytics cookies.

Third-party tracking across sites: Google may collect information about your online activities over time and across different websites when you visit the Site, as described in Google's policies.

How we use information

• To operate, secure and improve the Site
• To understand which pages are useful, in aggregate
• To comply with law and respond to lawful requests

No sale or sharing for advertising

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not sell consumer health data. Because we do not sell or share personal information, we do not offer a "Do Not Sell or Share" link. If that changes, we will update this policy first and provide the required opt-out methods, including honoring Global Privacy Control signals.^[1]

Your privacy rights

California

If the California Consumer Privacy Act, as amended by the CPRA, applies to us, California residents may request to know, delete and correct personal information, opt out of sale or sharing, limit the use of sensitive personal information, and not be discriminated against for exercising these rights.^[1] The CCPA applies to for-profit businesses meeting thresholds such as more than $25 million in annual revenue; we will honor these requests regardless.

Nevada

Nevada residents may submit a verified request directing us not to sell covered information (NRS 603A.345). We do not sell covered information, but you may still submit a request and we will respond within 60 days.^[2] Nevada's consumer health data law (NRS 603A.400 to 603A.550, added by SB 370) gives consumers rights to confirm, list third parties, stop collection or sharing, and delete consumer health data.^[2][3] The Site does not collect consumer health data.

Everyone

Anyone may ask what information we hold about them or ask us to delete it. Send requests to [Contact email] with the subject "Privacy request". We may need to verify your identity, and you may use an authorized agent. If we deny a request, you may appeal by replying to our response.

Health information and HIPAA

The Site is not intended to receive health information. DMEDesk is not acting as a HIPAA business associate for anyone and has no BAA with any customer. Do not submit protected health information. If health information is sent to us by mistake, we will delete it and will not use it. See Security & HIPAA and BAA status.

If DMEDesk later offers consumer-facing health features, we will assess whether the FTC Health Breach Notification Rule (16 CFR Part 318) applies; it does not apply to HIPAA covered entities or to activities as a business associate.^[4]

Security

We use reasonable measures for a static preview site, including HTTPS for every page. No method of transmission or storage is completely secure. If a breach of personal information occurs, we will notify affected people as required by law, including NRS 603A.220.^[2] More detail: Security & HIPAA.

Children

The Site is a business tool for DME companies and is not directed to children under 16. We do not knowingly collect their personal information.

Changes to this policy

We will post changes on this page and update the effective date. For material changes we will also place a notice on the homepage before the change takes effect.

Contact

[Legal entity name] · [Mailing address] · [Contact email]