Privacy Policy

Last Updated: August 19, 2026

Bloomington HIPAA ("we," "our," or "us") operates the website bloomingtonhipaa.com and test.bloomingtonhipaa.com (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

1. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you:

  • Account Registration & Client Data: While registering or using our Service, we collect information including your name, practice name, business email address, phone number, and mailing address. We use this data to provision training, manage your SRA compliance portal, and communicate notifications.
  • Compliance & Assessment Answers: To generate your SRA (Security Risk Assessment) report, we process the answers, documentation logs, and choices you submit through our templates. This information is treated as strictly confidential and is never shared with third parties.
  • Hosting Account Data: If you use our hosting service, we store server configuration details (e.g. domain names, cPanel usernames, and encrypted passwords) required to manage your hosting space.

2. Data Security & Storage

We take security seriously and implement administrative, physical, and technical safeguards:

  • All communication with our servers is encrypted using Secure Socket Layer (SSL/TLS) technology.
  • Access credentials, passwords, and sensitive keys are encrypted at rest.
  • We perform periodic vulnerability scanning and monitor systems for unauthorized access.

However, please note that no method of transmission over the Internet is 100% secure. You are responsible for safeguarding your login credentials and ensuring the security of the devices you use to access our Service.

3. Use of Third-Party Services

We use trusted third-party billing processors (such as PayPal) to process payments securely. We do not store or collect your payment card details on our servers; that information is provided directly to our third-party payment processors whose use of your personal information is governed by their own Privacy Policy.

4. Compliance with Laws

We will disclose your Personal Information where required to do so by law or subpoena or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement.

5. Contact Us

If you have any questions about this Privacy Policy, please contact us: