Privacy Policy

1) Scope

This Policy applies to personal information we collect through our public websites, client portals (including WG-Connect), and any other online or offline interactions where this Policy is provided. It does not replace any confidentiality, HIPAA, or Business Associate Agreement terms that may separately govern certain client data.

2) Information We Collect

• Information you provide: name, contact details, organization, role, account credentials, messages, uploaded files, and other information you choose to share with us.
• Automatically collected information: IP address, browser type, operating system, device identifiers, pages viewed, and similar usage data via cookies and analytics tools.
• Client-submitted data: documentation, policies, or other content submitted through the Services (subject to applicable agreements).

3) How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Services;
• Authenticate users and secure accounts;
• Communicate with you, including responding to inquiries and sending service-related updates;
• Perform analytics to understand usage and improve user experience;
• Comply with legal obligations and enforce our agreements, rights, and policies.

4) How We Share Information

We do not sell your personal information. We may share it only:

• With service providers who assist us in delivering the Services and who are bound by confidentiality obligations;
• As required by law, regulation, legal process, or governmental request;
• In connection with a merger, acquisition, reorganization, or sale of assets, subject to confidentiality protections;
• With your consent or at your direction, including where features require sharing with third-party integrations.

5) Cookies & Tracking

We use cookies, pixels, and similar technologies to operate the Services, measure performance, and understand usage patterns. You may control cookies through your browser settings. Disabling cookies may affect some functionality.

6) Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the nature of the data and applicable regulations.

7) Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. However, no method of transmission or storage is completely secure. You use the Services at your own risk.

8) Your Rights & Choices

Depending on your jurisdiction, you may have rights to access, update, or delete your personal information, restrict or object to certain processing, and request data portability. To exercise these rights, contact us at contact@thewoundgroup.com. We may verify your identity before fulfilling your request.

9) HIPAA & PHI

• Where a Business Associate Agreement (“BAA”) is in place, PHI will be handled in accordance with that agreement and HIPAA regulations.
• Where no BAA exists, you agree not to transmit PHI through the Services.

10) Third-Party Services

The Services may link to or integrate with third-party services. We are not responsible for the privacy practices or content of those services. Your use of them is governed by their own policies.

11) Children’s Privacy

The Services are not directed to or intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If we learn we have collected personal information from a child without consent, we will delete it promptly.

12) Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice (such as posting on our website) and update the “Last updated” date above. Your continued use of the Services after changes are posted constitutes acceptance of the updated Policy.

13) Contact Us

If you have questions about this Policy or our privacy practices, contact us at contact@thewoundgroup.com.