Hello Pediatrics privacy & data

HP acts as a data controller with respect to personal data of EU/UK residents processed through our Service.

Contact and identity information: name, postal address, email address, telephone number, date of birth, and government identification numbers (e.g., SSN when required for insurance)

Insurance and financial information: insurance ID, group number, credit/debit card, and billing information

Location data: approximate geographic location derived from IP address; precise geolocation only with your express consent

Usage data: pages visited, features used, links clicked, search queries, session duration, referring/exit pages

Device and connection information: IP address, device identifiers, operating system, browser type and version, screen resolution

Health information submitted outside of covered Patient Services (e.g., symptom checker, AI triage questionnaire)

Communications: records of emails, chat messages, forms, and feedback you send us

Provide, operate, and maintain the Service and Patient Services

Marketing and promotional communications (with consent)

Improve and develop our Service through analytics and research

Marketing and analytics data Up to 2 years, or as limited by cookie expiration settings

Financial/billing records 7 years per IRS requirements and applicable state law

HP is based in the United States.

Where HP has certified or will certify to the DPF, transfers will be made pursuant to such certification.

We use the European Commission-approved SCCs (2021/914/EU) in our Data Processing Agreements with EU/EEA-based processors and controllers.

Deletion: Request deletion of your personal information, subject to our legal obligations to retain certain information.

Access: Request a copy of the personal information we hold about you.

Correction/Rectification: Request correction of inaccurate or incomplete personal information.

Deletion: Request deletion of your personal information, subject to our legal obligations to retain certain information.

Objection: Object to certain processing of your personal information.

Portability: Request a machine-readable copy of personal information you provided to us.

Withdrawal of Consent: Where processing is based on your consent, withdraw consent at any time (without affecting prior lawful processing).

We do not sell your personal information.