Privacy Policy
The Nightingale Standard ("we," "us," or "the firm") is committed to protecting the privacy of individuals who visit our website and interact with our firm. This Privacy Policy explains what information we collect, how we use it, and the choices available to you. It applies to information collected through thenightingalestandard.com and any direct communications with the firm.
This policy does not govern the handling of protected health information (PHI) collected in connection with a client engagement. PHI is governed exclusively by the Business Associate Agreement (BAA) executed at the commencement of each engagement and applicable HIPAA regulations.
Information We Collect
We collect information in two ways: directly from you when you voluntarily provide it, and automatically through your use of our website.
Information you provide directly
- Name, title, and organization when you submit a contact or consultation request form
- Email address and any other contact information you choose to include
- Information you provide in written correspondence, consultation scheduling, or direct email communication
Information collected automatically
- Browser type, operating system, and device type
- Pages visited, time spent on pages, and referring URL
- IP address and general geographic location (country or region)
- Cookies and similar tracking technologies as described in Section 5 below
We do not collect protected health information (PHI) through this website. Clinical records, patient data, and any documentation shared in connection with an engagement are handled exclusively under the terms of a signed BAA and are not subject to this Privacy Policy.
How We Use Your Information
We use the information we collect solely for the following purposes:
- To respond to consultation requests, inquiries, and direct communications
- To schedule and conduct strategic consultations
- To prepare and deliver written engagement proposals
- To maintain records of professional correspondence
- To improve the content and usability of our website
- To comply with applicable legal and professional obligations
We do not use your information for advertising, automated profiling, or sale to third parties. We do not send unsolicited marketing communications.
How We Share Your Information
We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:
- Service providers: We use third-party platforms to operate our website (Squarespace) and manage scheduling and file transfer (Google Workspace). These providers process data on our behalf and are bound by their own privacy and security terms. Google Workspace is operated under a signed Google BAA for HIPAA compliance purposes.
- Legal compliance: We may disclose information if required to do so by law, court order, or regulatory authority, or to protect the rights, property, or safety of the firm or others.
- Professional obligations: In rare circumstances, disclosure may be required under applicable nursing licensure or professional standards rules.
No information collected through this website or in pre-engagement communications is disclosed to other clients, referenced in case studies, or shared with third parties for any commercial purpose.
Data Retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or resolve disputes.
- Contact and consultation inquiries that do not result in an engagement: retained for up to 12 months, then deleted
- Correspondence and records related to a completed engagement: retained in accordance with the terms of the applicable BAA and engagement agreement
- Website analytics data: retained per the data retention settings of our analytics provider
Cookies & Website Analytics
Our website is hosted on Squarespace, which uses cookies and similar technologies to operate the site and collect basic analytics. These may include session cookies (deleted when you close your browser) and persistent cookies (which remain on your device for a set period).
We use analytics data to understand how visitors interact with our website — which pages are visited, how long visitors spend on them, and how they arrived. This data is aggregated and does not identify individual visitors.
You may disable cookies through your browser settings. Doing so may affect certain functionality of the website but will not prevent you from accessing content or submitting inquiries.
Security
We implement reasonable administrative, technical, and physical safeguards to protect the personal information we hold. Our website is served over HTTPS. Communications and file exchanges related to engagements are conducted through Google Workspace, which provides encryption in transit and at rest, access controls, and audit logging.
No method of transmission over the internet or electronic storage is completely secure. While we take appropriate precautions, we cannot guarantee the absolute security of information transmitted to or from this website.
Your Rights
Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or request deletion of information we hold about you. To exercise any of these rights, contact us directly at the email address below.
We will respond to verifiable requests within a reasonable timeframe and in accordance with applicable law. We do not discriminate against individuals who exercise their privacy rights.
Third-Party Links
Our website may contain links to third-party websites, including scheduling platforms or professional resources. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acceptance of the revised policy.
Contact
Questions, requests, or concerns regarding this Privacy Policy may be directed to:
The Nightingale Standard
Attn: Privacy Inquiries
[Madison@TheNightingaleStandard.com]
We will acknowledge receipt of your inquiry within two business days and respond fully within ten business days.
The Nightingale Standard — Nurse-Led Clinical Documentation Auditing