⚠ TEST MODE

Privacy Policy

Last Updated: October 14, 2026

Summary: Clinical Media Hub operates a HIPAA-aware website and patient-tools platform for healthcare practices. We collect information to provide our services. We do not sell your personal information or share it for targeted advertising, and we do not use advertising cookies or tracking pixels on our website. When a practice uses our patient tools, we handle patient information on the practice’s behalf as its Business Associate. Depending on where you live, you may have privacy rights described in Sections 6 and 6a.

1. Who We Are

Clinical Media Hub (“CMH,” “we,” “us,” or “our”) is a subscription-based website, marketing, and patient-communication platform designed for healthcare practices, including medical, dental, chiropractic, med spa, mental health, and optometry practices. CMH is Clinical Media Hub LLC, a Wyoming limited liability company.

This Privacy Policy applies to our marketing website at clinicalmediahub.com, our subscriber dashboard, and all related services (collectively, the “Services”). It explains how CMH handles information about subscribers, their staff, and visitors to our website. Information that patients and visitors give to a practice through the practice’s website is handled by CMH on the practice’s behalf; that practice’s own privacy notice describes how the practice uses it (see Section 4).

2. Information We Collect

2a. Information You Provide

2b. Information Collected Automatically

2c. Information From Third Parties

3. How We Use Your Information

We do not use your information for behavioral advertising, sell it to data brokers, or share it with third parties for their own marketing purposes.

Automated and AI-assisted features: Some features use automated tools, including generative artificial intelligence provided by the service providers listed in Section 5, to draft website text, social media and blog posts, and images; for AI-assisted drafting of suggested replies to online reviews (you review and approve every reply before it is posted); and to power our website chat assistant. These features are given practice and marketing information, not patient information. Nothing they produce is published until the subscriber approves it. We do not use these tools to make decisions that produce legal or similarly significant effects about anyone.

4. HIPAA and Protected Health Information

CMH operates HIPAA-aware infrastructure. Every subscriber practice — Foundation, Growth, and Complete alike — executes a Business Associate Agreement (BAA) with CMH, covering the infrastructure and services CMH controls. You sign the BAA in your dashboard before entering any patient information; you can sign it during your free trial.

Subscriber practices are independent HIPAA Covered Entities or Business Associates. They are responsible for their own HIPAA compliance, including how they collect, store, and transmit patient Protected Health Information (PHI) through their practice websites and connected third-party tools.

Where CMH creates, receives, maintains, or transmits PHI on a practice’s behalf — for example, through patient intake and consent forms, appointment requests, patient messages, video visits, and professional email mailboxes — it does so as that practice’s Business Associate under the BAA. CMH uses and discloses PHI only as the BAA permits, does not sell it, and does not use it for marketing or advertising. Subcontractors that handle PHI for CMH (such as our cloud hosting provider) do so under business associate agreements.

CMH’s content synthesis tools and our website chat assistant operate on marketing and operational data only. Patient PHI should not be entered into them. The optional feature that helps patients fill in a practice’s forms runs only on infrastructure covered by a business associate agreement.

Privacy requests concerning patient information collected by a practice through its website should be directed to that practice; CMH supports practices in fulfilling such requests. If a breach of unsecured PHI occurs at CMH, we notify the affected practice as the BAA and HIPAA require, so the practice can notify patients.

5. Sharing of Information

We share information only as described below:

We do not sell personal information to any third party.

6. California Privacy Rights (CCPA/CPRA)

To the extent the California Consumer Privacy Act applies to us, California residents have the following rights:

In the last 12 months we collected the categories of personal information described in Section 2: identifiers and contact details, commercial information (plan and billing history), internet and network activity, professional information, and the content of your communications with us. We collected them from you, your devices, and the third parties listed in Section 2c, for the purposes in Section 3, and disclosed them to the service providers listed in Section 5 for business purposes.

To exercise your rights, contact us at privacy@clinicalmediahub.com. We respond within 45 days, and if we need more time (up to another 45 days) we will tell you why. We may need to verify your identity before processing your request. You may use an authorized agent; we may ask the agent for proof of your permission and ask you to verify your identity directly.

Scope note: Medical information governed by HIPAA or the California Confidentiality of Medical Information Act (CMIA) is exempt from the CCPA/CPRA and is handled as described in Section 4 and the applicable BAA.

Opt-out signals: Because we do not sell or share personal information, no opt-out preference signal processing is required. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing, which we already do not do. As disclosed under California law (CalOPPA), we do not respond to legacy “Do Not Track” browser signals.

Shine the Light: We do not disclose personal information to third parties for their own direct-marketing purposes.

6a. Other U.S. State Privacy Rights

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) may have rights similar to those described above — to access, correct, delete, and obtain a copy of personal information, and to opt out of targeted advertising, sales, and certain profiling. We do not engage in targeted advertising, sales of personal information, or profiling with legal or similarly significant effects. To exercise rights, contact privacy@clinicalmediahub.com.

Appeals: If we decline your request, you may appeal by replying to our decision or emailing privacy@clinicalmediahub.com with the subject “Privacy Appeal.” We will respond in writing within the time your state’s law requires, and explain how to contact your state attorney general if you disagree with the result.

Consumer health data: CMH does not intend to collect consumer health data about visitors to its own website, and asks visitors not to share health information in forms or chat. For patient information collected by a medical practice through its website, the practice is the controller and CMH acts as its processor — including for state consumer-health-data laws such as Washington’s My Health My Data Act and Nevada’s consumer health data law; please direct requests to the practice.

7. Cookies and Similar Technologies

We use only essential session cookies required for platform operation (login state, CSRF protection). We do not use third-party advertising cookies, analytics trackers, or tracking pixels on our marketing site. Our bot-protection service (Cloudflare Turnstile) runs on our chat assistant and certain forms and processes device and browser signals to tell people from bots. Our pages load fonts and icon files from third-party content delivery networks (Google Fonts and Cloudflare), which receive your IP address and browser information when your browser requests those files. You may disable cookies in your browser but this may prevent some platform features from working.

8. Data Retention

To request earlier deletion, see our Data Deletion Policy.

9. Security

We implement industry-standard security including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, AWS KMS key management, a separate application service and database for each subscriber, role-based access controls, and comprehensive audit logging. No system is completely immune to security risks. Report any suspected unauthorized access to security@clinicalmediahub.com immediately. If a security incident affects your personal information, we will notify you as required by applicable law.

10. Children’s Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors through our own website. If you believe we have inadvertently collected such information, contact us immediately. Patient information about minors that a practice collects through its own website is handled on the practice’s behalf under Section 4.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will post the updated policy here with a revised “Last Updated” date. If we make a material change, we will notify active subscribers by email at least 30 days before it takes effect for them, on the same timing as changes to our Terms of Service (Section 12), and post a notice on our website. We will not use personal information we have already collected in a materially different way than this policy described when we collected it unless we first obtain your consent.

12. Contact Us

Clinical Media Hub LLC
Privacy: privacy@clinicalmediahub.com
Website: clinicalmediahub.com/contact