Effective Date: March 1, 2025
Last Updated: March 1, 2025
Protecting your data — and your clients’ data — is our highest priority.
LeadCalculators Inc. was built with security, privacy, and compliance at its core. Our platform helps health and wellness professionals generate leads with interactive calculators while ensuring that sensitive information is handled with the utmost care. We maintain compliance with the Health Insurance Portability and Accountability Act (HIPAA) in the United States and the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada.
Shared Responsibility Model
We follow the HIPAA Shared Responsibility Model :
-
LeadCalculators (Business Associate): We provide a secure, compliant environment for hosting, processing, and transmitting limited ePHI data entered into calculators.
-
Our Customers (Covered Entities): As health professionals, you control how calculators are used, what information is collected, and how that data is managed, stored, or exported from the platform.
This model ensures that both LeadCalculators and our customers share responsibility for protecting ePHI.
Data Security Practices
We apply industry-leading safeguards to protect all data, including personally identifiable information and ePHI:
-
Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
-
Access Controls: Strict role-based access controls and audit logging.
-
Data Hosting: Hosted on AWS HIPAA-eligible services with Business Associate Agreements in place.
-
Backups & Redundancy: Regular backups and disaster recovery measures to ensure data availability.
-
Monitoring & Alerts: Continuous monitoring for unauthorized access or security incidents.
-
Minimum Necessary Data: We only store user-provided inputs (e.g., contact details and calculator responses). We do not store full medical records, diagnostic images, or clinician notes.
HIPAA & PIPEDA Alignment
-
HIPAA (U.S.):
-
Adheres to the Privacy Rule, Security Rule, and Breach Notification Rule.
-
Provides administrative, technical, and physical safeguards for ePHI.
-
Business Associate Agreements (BAAs) available upon request.
-
-
PIPEDA (Canada):
-
Ensures personal health information is collected with consent, used for its intended purpose, and protected with appropriate safeguards.
-
Data can be accessed, corrected, or deleted in accordance with Canadian privacy law.
-
Business Associate Agreements (BAAs)
LeadCalculators Inc. enters into manual BAAs upon request. If your organization requires an executed BAA for your records, please contact us at:📧 **support@leadcalculators.com **By default, all customers using the platform are covered under our standard compliance framework.
Commitment to Compliance
Compliance is not a one-time certification — it’s an ongoing commitment. We continuously review and improve our policies, technical safeguards, and procedures to meet evolving standards in data protection.
With LeadCalculators, you can confidently use interactive health calculators to generate leads while knowing that your clients’ information is protected under HIPAA and PIPEDA standards.
👉 Questions? For compliance documentation or to request a signed BAA, reach out to support@leadcalculators.com