HIPAA and patient privacy
Patient privacy matters to the clinics we work with, and to us. We adapt our approach to the rules in each market, including HIPAA for clinics in the US.
Last reviewed October 2026
Business Associate Agreements
For US clinics, we’re happy to sign a BAA where our work involves protected health information, or to work from yours.
Privacy-aware tracking
We set up analytics and call tracking with patient privacy in mind, following the guidance that applies in each market.
Simple forms
Our lead forms ask for contact details and the treatment someone is interested in, rather than medical history.
Access you control
We ask for the access the work needs, and the accounts we set up stay in your name.
Working together. Each clinic is responsible for its own compliance. We’re happy to follow your policies, work with your compliance lead and help with vendor or security questionnaires.
Are you HIPAA certified?
There’s no official HIPAA certification for agencies or software. What matters is how data is handled, and we’re happy to talk your team through our approach.
Do you sign Business Associate Agreements?
Yes, where our work involves protected health information. We can work from your agreement or provide ours.
Can you review our current tracking?
Yes. We can look at the tracking on your website and booking pages and suggest any changes.
Is this legal advice?
No. We’re a marketing agency, so for legal questions we’d always point you to your compliance lead or counsel.
Questions about privacy?
We’re happy to talk through how we’d set things up for your clinic.
Let’s talk