1. Introduction
Crimson Scientific (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy and being transparent about how we collect, use, and safeguard your information. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you visit our website at crimsonscientific.com (the “Site”) or interact with our services.
By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Site.
2. Scope of This Policy
This Privacy Policy applies to:
- Information collected through crimsonscientific.com
- Inquiries submitted via our contact forms or email
- Automated data collection through cookies and analytics services
3. Information We Collect
3.1 Information You Provide Directly
We collect information that you voluntarily provide to us, including:
- Name and email address (when you contact us via our Contact Us page or email [email protected])
- Message content and any additional information you choose to share
- Professional affiliation or organization information, if provided
3.2 Automatically Collected Information
We automatically collect certain information when you visit our Site using cookies and similar tracking technologies, including:
- Device information: IP address, browser type, operating system, device identifiers
- Usage information: Pages visited, time spent on pages, links clicked, referring URLs
- Location data: General geographic location based on IP address
- Analytics data: Session duration, bounce rate, and other website performance metrics
3.3 Third-Party Analytics Services
We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to help us understand how visitors interact with our Site. Google Analytics uses cookies to collect information in an aggregated, anonymous form, including:
- Number of visitors to the Site
- Geographic regions of visitors
- Pages visited and navigation patterns
- Traffic sources and referral information
Information collected by Google Analytics is transmitted to and stored by Google on servers in the United States and other countries. Google may also transfer this information to third parties where required by law or where such third parties process information on Google’s behalf. For more information about Google’s privacy practices, please visit: https://policies.google.com/privacy
4. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your inquiries, questions, and requests
- To communicate with you about our products, services, and company updates
- To analyze website traffic and improve user experience
- To optimize Site performance, functionality, and content
- To detect, prevent, and address technical issues and security threats
- To comply with legal obligations and protect our legal rights
5. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:
- Service Providers: With trusted third-party service providers who assist us in operating our Site, conducting our business, or servicing you (e.g., web hosting, analytics services), provided they agree to keep this information confidential
- Legal Requirements: When required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of others
- Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, where your information may be transferred as part of the transaction
- With Your Consent: When you explicitly authorize us to share your information with third parties
6. Cookies and Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files that are placed on your device when you visit our Site. They help us recognize your browser and capture certain information about your preferences and usage patterns.
6.2 Types of Cookies We Use
- Essential Cookies: Necessary for the Site to function properly
- Analytics Cookies: Used to understand how visitors interact with our Site (e.g., Google Analytics)
- Functional Cookies: Enable enhanced functionality and personalization
6.3 Managing Cookies
By using our Site, you consent to the use of cookies as described in this Privacy Policy. You have the right to manage cookie preferences through your browser settings. Most browsers allow you to:
- View and delete cookies
- Block third-party cookies
- Block all cookies
Note that disabling cookies may impact your ability to use certain features of our Site. To opt out of being tracked by Google Analytics across all websites, visit: https://tools.google.com/dlpage/gaoptout
7. Data Security
We implement commercially reasonable technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Secure socket layer (SSL) encryption for data transmission
- Access controls and authentication procedures
- Regular security assessments and updates
- Secure data storage and backup procedures
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any passwords or account information.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.
9. Medical Device Development and HIPAA Compliance
Crimson Scientific develops medical diagnostic hardware, including our SimpleECG™ technology.
This Website Does Not Collect or Process Patient Health Information: The Site crimsonscientific.com is informational only and does not collect, store, or process any Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or patient medical data.
Future Medical Device Usage: When our SimpleECG technology or other medical devices are deployed in clinical settings, any patient data collected through those devices will be handled in strict accordance with:
- HIPAA Privacy and Security Rules
- FDA regulations for medical devices (21 CFR Part 11)
- Applicable state and international medical privacy laws
- Industry best practices for electronic health information security
Healthcare providers and institutions using our medical devices will be responsible for ensuring HIPAA compliance in their implementation and use of our technology. Separate Business Associate Agreements (BAAs) will govern the handling of PHI in those contexts.
10. Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information, including:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal requirements
- Opt-Out: Opt out of certain data processing activities
- Data Portability: Request a copy of your information in a structured format
To exercise these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
11. International Data Transfers
Our Site is hosted in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Site, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
12. Children’s Privacy
Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately at [email protected].
13. Third-Party Links
Our Site may contain links to third-party websites, including links to clinical studies, research publications, or partner organizations. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.
14. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information is collected, used, shared, or sold
- The right to delete personal information held by us
- The right to opt-out of the sale of personal information (note: we do not sell personal information)
- The right to non-discrimination for exercising your CCPA rights
To exercise your California privacy rights, contact us at [email protected] with “California Privacy Request” in the subject line.
15. Do Not Track Signals
Some browsers have a “Do Not Track” feature that lets you tell websites you do not want your online activities tracked. We do not currently respond to browser “Do Not Track” signals. You may, however, disable certain tracking by adjusting your browser settings or using the Google Analytics opt-out tools mentioned in Section 6.3.
16. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. When we make changes, we will update the “Effective Date” at the top of this page. If we make material changes, we may provide additional notice, such as adding a statement to our homepage or sending you an email notification. Your continued use of the Site after changes are posted constitutes your acceptance of the revised Privacy Policy.