Privacy Policy

Updated and Effective as of June 17, 2026

1. About This Policy

This Privacy Policy (“Policy”) describes how Altea HC LLC and its affiliated entities (collectively, “Altea Healthcare,” “we,” “us,” or “our”) collect, use, disclose, and protect information when you visit alteahc.com (the “Site”) or otherwise interact with us in connection with our services for healthcare facilities and providers across the United States. This Policy is designed to comply with the privacy laws of every U.S. state in which we operate or in which our website is accessible, including the comprehensive consumer privacy statutes of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, as well as state wiretap and electronic surveillance laws and federal laws including the Health Insurance Portability and Accountability Act (“HIPAA”), the Telephone Consumer Protection Act (“TCPA”), and the CAN-SPAM Act.

This Policy applies only to information collected through alteahc.com. It does not apply to information collected through alteamedical.com (our patient-facing primary care site), which is governed by a separate privacy notice, or to Protected Health Information (“PHI”) we handle in the course of providing services, which is governed by HIPAA and our HIPAA Notice of Privacy Practices.

2. Information We Collect

We collect only the information you voluntarily provide to us through forms on the Site, and limited technical information necessary to operate the Site securely.

2.1 Information You Provide

When you complete the contact form on the Site, we collect the following: your first name, last name, business email address, telephone number, company name, organization type, and the substance of your inquiry.

2.2 Limited Technical Information

When you visit the Site, our web server automatically logs your Internet Protocol (IP) address, browser type, the date and time of your visit, and the pages you access. We use this information solely to operate the Site, prevent abuse, and diagnose technical issues. We do not associate this information with your identity unless you submit a form.

2.3 Cookies

We use essential cookies necessary for the Site to function and for our cookie-consent banner (provided by WPConsent) to record your preferences. With your consent, we also use analytics cookies set by Google Analytics 4 to measure aggregate website usage, as described in Section 2.4 below. We do not use cookies for advertising, retargeting, profiling, or any cross-site tracking purpose, and we do not place analytics cookies until you affirmatively consent through the banner.

2.4 Analytics and Tag Management

We use Google Analytics 4 (“GA4”) and Google Tag Manager, both services provided by Google LLC, to measure aggregate traffic and usage patterns on the Site. With your consent, these services place cookies on your device (such as _ga and related identifiers) and transmit information about your visit to Google’s servers, including your IP address (which is anonymized before storage), pages viewed, time spent on pages, and referring source. We do not provide Google with any personal information you enter into our contact form.

We use Google’s Consent Mode v2 framework so that, until you affirmatively accept analytics cookies, Google receives only a cookieless, aggregated measurement signal without identifiers. You may opt out of Google Analytics at any time by declining the analytics category in our consent banner, by clicking the cookie-preferences icon in the lower-left corner of any page on the Site, or by installing the Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout. For more information about how Google processes data, see https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.

3. What We Do Not Do

To be clear and across all U.S. jurisdictions:

  • We do not use Google Analytics or Google Tag Manager for any purpose other than measuring aggregate website traffic, and we do not place analytics cookies until you affirmatively consent. We do not use Google Analytics for advertising, audience targeting, or remarketing.
  • We do not use Meta Pixel (Facebook), the LinkedIn Insight Tag, TikTok Pixel, or any other third-party advertising or social-media tracking pixel.
  • We do not use session-replay, heatmap, or behavioral-tracking tools such as Hotjar, Microsoft Clarity, FullStory, or similar.
  • We do not run paid advertising campaigns that retarget visitors of this Site.
  • We do not sell your personal information for monetary or other valuable consideration.
  • We do not share your personal information for cross-context behavioral advertising or targeted advertising (as those terms are defined under applicable state laws).
  • We do not engage in profiling that produces legal or similarly significant effects on you.
  • We do not process Sensitive Personal Information (as defined under any applicable state law) for any purpose other than as necessary to respond to your inquiry.
  • We do not knowingly collect information from children under thirteen (13) years of age, and we do not knowingly process the personal data of any individual under the age of sixteen (16) for purposes of targeted advertising or sale.

4. How We Use Information

We use the personal information you provide solely to:

  • Respond to your inquiry, schedule a consultation, or provide the information you have requested;
  • Communicate with you about a potential or existing business relationship between your organization and Altea Healthcare;
  • Maintain records of our communications for legitimate business purposes; and
  • Comply with applicable legal obligations.

We do not use the information you provide to send unsolicited marketing communications, build advertising profiles, or train artificial-intelligence systems.

5. How We Share Information

We disclose personal information only in the following limited circumstances:

  • Service providers and processors. We share information with vendors that host our website, operate our email and customer-relationship-management systems, and provide aggregate website analytics. These vendors include Google LLC (operating Google Analytics 4 and Google Tag Manager). All such vendors operate under written contracts or service terms that restrict their use of the information to providing services to us and require them to maintain the confidentiality and security of the information consistent with this Policy and applicable law.
  • Legal requirements. We may disclose information if we believe in good faith that disclosure is required to comply with a subpoena, court order, or other legal process; to respond to a verified government request; or to protect the rights, property, or safety of Altea Healthcare, our personnel, our patients, or others.
  • Business transfers. If Altea Healthcare is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality obligations.

We do not sell personal information. We do not share personal information with third parties for those third parties’ own marketing purposes, for targeted advertising, or for cross-context behavioral advertising.

6. Data Retention

We retain personal information collected through the Site for as long as necessary to fulfill the purpose for which it was collected, to maintain an active or potential business relationship, to comply with our legal obligations, and to resolve disputes or enforce our agreements. We retain inquiry-form submissions indefinitely unless and until you request deletion in accordance with Section 9 of this Policy, at which point we will delete your information within the timeframes required by applicable law, except where we are required or permitted to retain it for legal, regulatory, or security reasons.

7. Information Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. No method of transmission over the internet or method of electronic storage is one hundred percent secure, and we cannot guarantee absolute security.

Where Protected Health Information is involved in our services to facilities and providers, we maintain safeguards consistent with the HIPAA Security Rule and applicable state laws governing health information, including Washington’s My Health My Data Act and Nevada SB 370 where applicable.

8. Your Choices and Communications Preferences

8.1 Cookie Choices

When you first visit the Site, our consent banner gives you the option to accept or decline non-essential cookies. We currently use only essential cookies; if that changes, the banner will reflect the additional categories and we will not place non-essential cookies until you affirmatively consent. You may revoke or update your cookie preferences at any time by clicking the cookie-icon preferences button displayed in the lower-left corner of every page on the Site, which will reopen the consent settings panel.

8.2 Email Communications (CAN-SPAM)

If you receive a marketing email from us and no longer wish to be contacted, you may reply with “Unsubscribe” or use the unsubscribe link contained in the email. We honor unsubscribe requests within ten (10) business days, as required by the CAN-SPAM Act.

8.3 Telephone Communications (TCPA)

By providing your telephone number through the contact form, you consent to receive calls and text messages from Altea Healthcare for the purpose of responding to your inquiry and discussing a potential or existing business relationship. We do not use automated dialing systems or pre-recorded messages for marketing without separate prior express written consent as required by the Telephone Consumer Protection Act. You may opt out of further telephone communications at any time by replying “STOP” to a text message or by emailing support@alteahc.com.

9. U.S. State Privacy Rights

If you are a resident of a U.S. state with a comprehensive consumer privacy law, you have specific rights regarding your personal information. This Section 9 describes the rights that are common across these laws and identifies state-specific provisions where they apply.

9.1 Rights Common to All Applicable State Laws

Subject to certain exceptions and verification requirements, residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia generally have the right to:

  • Right to know / access: request confirmation of whether we process your personal information, and to access the categories and specific pieces of personal information we have collected about you.
  • Right to delete: request that we delete personal information we have collected from you.
  • Right to correct: request that we correct inaccurate personal information we maintain about you (available in all listed states except Utah and Iowa).
  • Right to portability: obtain a copy of your personal information in a portable, readily usable format.
  • Right to opt out of sale: opt out of the sale of personal information. We do not sell personal information.
  • Right to opt out of targeted advertising or cross-context behavioral advertising: opt out of the use of personal information for targeted advertising. We do not engage in targeted advertising.
  • Right to opt out of profiling: opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in such profiling.
  • Right to limit the use of Sensitive Personal Information: where applicable. We do not collect Sensitive Personal Information through this Site.
  • Right to non-discrimination: we will not deny goods or services, charge different prices, or provide a different level of quality because you exercised your privacy rights.

9.2 How to Submit a Request

To exercise any right under your state’s privacy law, email us at support@alteahc.com with the subject line “Privacy Rights Request” and identify the state of your residence and the right you wish to exercise. We will verify your identity by matching the information you provide against records we already maintain.

We will respond within forty-five (45) days, or such shorter period as required by your state’s law. We may extend the response period by an additional forty-five (45) days (or, in Utah, ninety (90) days) where reasonably necessary, and we will notify you of any extension. You may designate an authorized agent to make a request on your behalf by providing written authorization that we can verify.

9.3 Right to Appeal

If we decline to take action on your request, you have the right to appeal our decision in any state whose law provides for such an appeal, including Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, and Virginia. To appeal, reply to our denial within thirty (30) days with the subject line “Privacy Rights Appeal.” We will respond to the appeal within sixty (60) days, or such shorter period as required by your state’s law. If your appeal is denied, you may contact your state’s Attorney General to submit a complaint.

9.4 California-Specific Provisions

In addition to the rights described in Section 9.1, California residents are entitled to the following disclosures under the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, the “CCPA”). In the preceding twelve (12) months, we have collected the following categories of personal information from California consumers through the Site:

  • Identifiers: first name, last name, email address, telephone number, IP address.
  • Commercial information: company name, organization type, and the substance of inquiries you submit.
  • Internet or other electronic network activity: information about your visit such as pages viewed, date and time of visit, and browser type.

As described in Section 2.4, our use of Google Analytics 4 may result in the collection of additional Internet or other electronic network activity information by Google LLC on our behalf, subject to your consent.

We have not collected any category of “Sensitive Personal Information” as defined by the CCPA through this Site. We have disclosed personal information to the following categories of recipients for the business purposes described in this Policy in the preceding twelve (12) months: website hosting and security providers, email service providers, customer-relationship-management providers, and Google LLC as a service provider for aggregate website analytics, in each case under written contracts or service terms. We have not sold or shared personal information for cross-context behavioral advertising in the preceding twelve (12) months.

9.5 Washington My Health My Data Act

Washington residents have additional rights under the Washington My Health My Data Act (“MHMDA”) with respect to “consumer health data,” defined broadly to include any personal information linked or reasonably linkable to a consumer that identifies past, present, or future physical or mental health status. The Site does not solicit consumer health data from visitors, and the contact form is intended for business inquiries only; you should not submit personal health information through the Site. If you nevertheless submit information that may constitute consumer health data, we will treat it consistent with the MHMDA, including by limiting collection to what is necessary to respond to your inquiry, restricting sharing to processors under written contract, and providing you with rights to access and delete that information upon verified request to support@alteahc.com.

We do not sell consumer health data. We do not use, disclose, or share consumer health data for any purpose other than as expressly authorized by you or as required by law. Washington residents may exercise these rights by emailing support@alteahc.com with the subject line “Washington Health Data Request.”

9.6 Other State-Specific Disclosures

  • Colorado, Connecticut, Texas, Oregon, Montana, Delaware, New Jersey, Minnesota, Maryland, Rhode Island, and New Hampshire: we honor universal opt-out preference signals (including the Global Privacy Control signal described in Section 9.7) as required by your state’s law.
  • Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Delaware (DPDPA), New Hampshire (NHPA), Nebraska (NDPA), New Jersey (NJDPA), Tennessee (TIPA), Minnesota (MCDPA), Maryland (MODPA), Indiana (ICDPA), Kentucky (KCDPA), and Rhode Island (RIDTPPA): the rights described in Section 9.1 apply to residents of these states. State-specific procedures and timelines are observed in accordance with each state’s law.
  • Nevada SB 370 and Connecticut SB 3 (consumer health data amendments): the protections described in Section 9.5 with respect to consumer health data also extend to residents of Nevada and Connecticut to the extent required by those laws.

9.7 Universal Opt-Out Preference Signals

Our Site recognizes and honors the Global Privacy Control (“GPC”) browser signal and any other universal opt-out preference signal recognized under applicable state law as a valid request to opt out of the sale and sharing of personal information and the use of personal information for targeted advertising. When the GPC signal is detected on your browser, we treat it as a denial of consent for analytics cookies and any other non-essential tracking, and Google Analytics will operate only in cookieless, denied-consent mode for your session. Because we do not sell personal information and do not engage in targeted advertising, GPC signals do not have additional effects beyond gating analytics cookies.

10. State Wiretap and Electronic Surveillance Notice

Several U.S. states require all parties to a communication to consent before the contents of that communication may be intercepted, recorded, or shared with a third party. These laws include but are not limited to the California Invasion of Privacy Act (Cal. Penal Code §§ 630 et seq.), the Florida Security of Communications Act (Fla. Stat. §§ 934.01 et seq.), the Massachusetts Wiretap Statute (Mass. Gen. Laws ch. 272 § 99), the Pennsylvania Wiretapping and Electronic Surveillance Control Act (18 Pa. Cons. Stat. §§ 5701 et seq.), the Washington Privacy Act (Wash. Rev. Code §§ 9.73 et seq.), the Maryland Wiretap and Electronic Surveillance Act (Md. Code Ann., Cts. & Jud. Proc. §§ 10-401 et seq.), the Illinois Eavesdropping Statute (720 ILCS 5/14), the Connecticut wiretap statute (Conn. Gen. Stat. § 52-570d), the Michigan eavesdropping statute (Mich. Comp. Laws § 750.539a et seq.), the New Hampshire wiretap statute (N.H. Rev. Stat. § 570-A), the Nevada wiretap statute (Nev. Rev. Stat. § 200.620), and the Delaware wiretap statute (Del. Code tit. 11, § 2402).

Consistent with these laws, we do not record, intercept, or share the contents of communications you have with the Site. We do not use third-party tracking technologies (including but not limited to advertising pixels, session-replay scripts, or third-party analytics) that would receive, intercept, or process the contents of your interactions with the Site. The contact form is the only mechanism through which we collect information from you, and information you submit through the contact form is transmitted only to Altea Healthcare and the limited service providers described in Section 5.

11. HIPAA and Protected Health Information

Altea Healthcare is a HIPAA-covered entity and/or business associate in the course of providing services to healthcare facilities and providers. The information you submit through this Site is not generally Protected Health Information (“PHI”) because it is submitted in the context of a business inquiry rather than the provision of healthcare. However, to the extent any information you submit constitutes PHI, we will treat it in accordance with HIPAA, the HIPAA Privacy Rule, the HIPAA Security Rule, and our HIPAA Notice of Privacy Practices, which is available on request from our Privacy Officer at support@alteahc.com.

12. Children’s Privacy

The Site is not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under thirteen in violation of the Children’s Online Privacy Protection Act (“COPPA”). Several states, including California (CCPA) and Connecticut (CTDPA), additionally restrict the processing of personal information of individuals under sixteen (16) for purposes of sale or targeted advertising; we do not engage in such processing. If you believe a child has provided personal information to us, please contact us at support@alteahc.com and we will delete it.

13. Third-Party Links

The Site contains links to third-party websites and services that we do not operate or control, including our LinkedIn and Facebook pages and our patient-facing site at alteamedical.com. We are not responsible for the privacy practices of any third-party site, and we encourage you to review the privacy policy of any site you visit.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the “Last Updated” date at the top of the Policy and, for material changes, provide additional notice (for example, by posting a notice on the Site or by email where appropriate). Your continued use of the Site after the effective date of any updated Policy constitutes your acknowledgment of the updated Policy.

15. Contact Us

If you have questions about this Policy or our privacy practices, or wish to exercise any right described in this Policy, please contact:

Altea HC LLC

Attn: Privacy

Email: support@alteahc.com

For questions concerning Protected Health Information handled by Altea Healthcare in the course of providing services, please contact our Privacy Officer at the address above or refer to our HIPAA Notice of Privacy Practices.