Privacy Policy

ClearPath Medical RE ("we," "us," or "our") operates the Dr.Deal website at drdeal.clearpathmedicalre.com (the "Site"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our Site and services.

1. Information We Collect

Information you provide directly:

• Email address — when you subscribe to our newsletter or create an account
• Password — when you create an account (stored as a secure hash; we never store or see your actual password)
• Communications — when you contact us via email

Information collected automatically:

• Usage data — pages visited, features used, and browsing activity on the Site
• Device information — browser type, operating system, and screen resolution (via analytics)
• Authentication cookies — necessary cookies to keep you logged in

We do not collect payment information, social security numbers, government ID numbers, or any other sensitive personal data.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain your account and access to the deal database
• Send our periodic newsletter with medical office deal opportunities and industry news
• Respond to your inquiries about specific deals or our service
• Improve our service, content curation, and user experience
• Ensure the security and integrity of our Site

We process your data based on: (a) your consent (newsletter subscription), (b) the performance of our service agreement with you (account access), and (c) our legitimate interest in improving our service (analytics).

3. We Do Not Sell Your Data

We do not sell, rent, trade, or share your personal information with third parties for their marketing purposes. We do not participate in data broker services. Your email address and personal data are used solely for the purposes described in this Privacy Policy.

4. Third-Party Service Providers

We use the following third-party services to operate Dr.Deal. These providers may process your data on our behalf:

• Kit (kit.com) — email newsletter delivery and subscriber management
• Supabase — authentication, database hosting, and data storage
• Vercel — website hosting and analytics

These services have their own privacy policies and are contractually bound to protect your data. We encourage you to review their respective privacy policies.

We do not share your personal information with any other third parties except as required by law or to protect our rights.

5. Cookies

We use minimal, essential cookies only:

• Authentication cookies — necessary to keep you logged into your account. These are session-based and expire when you log out or after a period of inactivity.
• Analytics — we use Vercel Web Analytics, which collects anonymized, aggregate usage data without using tracking cookies or collecting personal identifiers.

We do not use advertising cookies, third-party tracking cookies, or cross-site tracking of any kind.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Account data — retained while your account is active. If you request deletion, we will remove your data within 30 days.
• Newsletter subscription — retained until you unsubscribe. Upon unsubscribing, your email is removed from our active mailing list.
• Usage analytics — anonymized and aggregated; not tied to individual users.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Deletion — request deletion of your personal data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Opt-out — unsubscribe from marketing communications at any time
• Withdrawal of consent — withdraw your consent for data processing at any time

To exercise any of these rights, contact us at deals@clearpathmedicalre.com. We will respond to your request within 30 days.

8. How to Unsubscribe

You can unsubscribe from our newsletter at any time by:

• Clicking the unsubscribe link at the bottom of any email we send
• Emailing us at deals@clearpathmedicalre.com

We honor all unsubscribe requests within 10 business days as required by the CAN-SPAM Act.

9. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect and how it is used
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

To make a request, email us at deals@clearpathmedicalre.com with "CCPA Request" in the subject line.

10. International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with data protection laws, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation. These rights include those listed in Section 7 above.

Our legal bases for processing your data are: consent (newsletter), contract performance (account services), and legitimate interest (analytics and service improvement).

Your data is stored on servers in the United States. By using our Site, you consent to the transfer and processing of your data in the United States.

11. Data Security

We take reasonable measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS) on all pages
• Secure password hashing (passwords are never stored in plain text)
• Access controls limiting who can view your data
• Regular security reviews of our third-party service providers

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Children's Privacy

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also notify you via email. We encourage you to review this page periodically.

14. Contact Us

For any privacy-related questions or to exercise your data rights, contact us at:

• Email: deals@clearpathmedicalre.com