Privacy You Can Read in One Sitting
This page explains what Synkrew collects on this website, how that information is used, and how HIPAA obligations are handled inside client engagements. It is written to be understood, not endured.
Last updated: September 23, 2026
Who This Policy Covers
Scope matters, so here it is in plain terms.
Synkrew Solutions ("Synkrew", "we", "us") builds software for healthcare organizations across the United States. This policy applies to information handled through this website, including forms you submit, email you send us, and basic usage data collected as you browse.
Software we build for clients operates under separate project agreements and, where PHI is involved, a signed Business Associate Agreement. Those documents govern that work, and where they conflict with this page, they prevail. Nothing on this website is a repository of patient records, and no protected health information is collected from site visitors.
Information We Collect
Two narrow categories, both ordinary.
Contact information you choose to give us: your name, email address, phone number, practice or organization name, and anything you write in a form or an email. We receive it only when you act, for example by requesting a quote, booking a call through our scheduling partner, or writing to [email protected].
Basic usage information collected as the site runs: pages viewed, approximate region, browser and device type, and the referring page. This data is aggregate and does not identify you. We do not ask site visitors for patient information, insurance details, or any clinical data, and you should never send such information through this website.
How We Use It
For the purposes you would expect, and nothing surprising.
We use contact information to reply to inquiries, prepare proposals, schedule calls, and deliver materials you request. We use aggregate usage data to learn which pages help visitors and which need work, and to keep the site fast and secure.
We do not sell personal information, and we do not rent or trade contact details. We do not build advertising profiles, and we do not send marketing email unless you asked for it. If you ever want us to stop, one message to [email protected] ends it.
HIPAA and Client Data
Where the Business Associate Agreement takes over.
When a client engages Synkrew to build software that touches protected health information, Synkrew acts as a business associate under HIPAA. Before any PHI moves, both sides sign a Business Associate Agreement that defines permitted uses, safeguards, breach notification, and subprocessor rules.
Our BAA page describes how that process works and why the agreement is executed during planning rather than after delivery. Client data handled inside an engagement stays inside the engagement: it is used to deliver the project, protected by the safeguards the BAA names, and never reused for our own marketing.
Cookies and Local Storage
The website equivalent of a light switch, not a tracking lattice.
This site uses a small number of browser storage entries to remember interface choices and to measure aggregate traffic. These are functional and analytical in nature. We do not run cross-site advertising trackers, and we do not participate in retargeting networks.
You can clear cookies and local storage through your browser settings at any time, and the site will keep working. If you use a private browsing window, nothing persistent is stored on your device at all.
Sharing and Disclosure
Limited to the helpers who make the site and business run.
We share information with a short list of service providers that host this website, deliver email, and process scheduling requests, each bound by contract to handle it only on our instructions. We may also disclose information when the law requires it, for example in response to a valid legal process.
If that ever happens and we are permitted to tell you, we will tell you. We do not otherwise share personal information, and corporate transactions such as a merger would be handled with notice to affected individuals before any transfer.
Retention and Security
Kept only as long as it serves you and us.
Contact correspondence is retained while a conversation is active and archived afterwards in line with ordinary business records. Aggregate analytics persists in summary form. When information is no longer needed, it is deleted or anonymized.
This website is served over encrypted connections, and access to correspondence is limited to team members who need it. Our security practices for client software, including encryption, access control, and monitoring, are described on the Security and HIPAA hub.
Your Rights and Choices
Your information, your call.
You can ask us to access, correct, or delete the contact information we hold about you, and we will honor verified requests within a reasonable window. Residents of US states with their own privacy laws may have additional rights, such as confirmation of processing or portability, and we apply those rights where they apply.
This website is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has sent us personal information, contact us and we will delete it. To exercise any right, write to [email protected] and include enough detail for us to verify the request.
Changes to This Policy
Updates land here, with a new date.
If our practices change, this page changes with them, and the updated date at the top moves. Material changes that affect how we handle existing contact information will be communicated directly to affected contacts where we have a way to reach them.
The current version always lives at this URL, and past behavior is governed by the policy that was posted when the information was collected.
Questions About This Policy
Write to us and a person, not a ticket queue, will read it.