Privacy Policy

BlackPoint Diagnostics ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at blackpointdiagnostics.com or use our services.

Important: This Privacy Policy governs general website usage and marketing communications. If you are a patient, the collection and use of your Protected Health Information (PHI) is governed separately by our Notice of Privacy Practices, which is incorporated herein by reference.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

Information You Provide Directly:

• Name and contact information (email, phone number) submitted through contact or newsletter signup forms
• Name, date of birth, and health history provided when scheduling an appointment through Acuity Scheduling
• Payment information submitted at checkout (processed securely by Stripe — we do not store card data)
• Messages and communications you send to us directly

Information Collected Automatically:

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on site
• Referring URLs

Information from Third Parties: If you interact with our content on social media platforms, we may receive information in accordance with those platforms' privacy policies.

We use the information we collect for the following purposes:

• To schedule and deliver cardiovascular screening services
• To process payments and manage billing
• To send appointment confirmations, reminders, and follow-up communications
• To send the BlackPoint Diagnostics newsletter and health education emails — only to subscribers who have opted in
• To deliver the free guide and follow-up email sequence requested by subscribers
• To respond to inquiries and provide customer support
• To improve our website and services
• To comply with legal obligations
• To protect the security and integrity of our services

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We share information with trusted third-party service providers who assist us in operating our website and delivering services. Each provider is bound by data processing agreements and applicable law:

• Acuity Scheduling (Squarespace) — appointment scheduling and patient intake. A Business Associate Agreement (BAA) is in place for HIPAA compliance.
• Stripe — payment processing. A BAA is in place. Stripe does not store full card numbers on our behalf.
• Resend — email delivery for newsletter and marketing communications. Used only for non-PHI marketing content.
• Airtable — newsletter subscriber database. Contains only name and email of marketing subscribers — no health information.
• N8n — marketing automation workflow. Processes only name and email for newsletter delivery.
• Netlify — website hosting and form processing.
• Anthropic (Claude AI) — powers our website chatbot. Conversations may be processed by Anthropic in accordance with their privacy policy. Do not submit sensitive health information through the chatbot.

We do not use Airtable, Resend, or N8n for any communications containing PHI. All health-related communications flow through HIPAA-compliant Acuity and Stripe only.

Our website may use cookies and similar tracking technologies to enhance your experience. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, some portions of our site may not function properly.

We do not currently use third-party advertising cookies or behavioral tracking pixels on our website. If we run advertising campaigns through platforms such as Meta (Facebook) or Google, those platforms may set their own cookies in accordance with their privacy policies.

If you subscribe to the BlackPoint Diagnostics Heart Health Brief newsletter or download our free patient guide, your name and email address will be stored in our marketing database and used to deliver the requested content and weekly newsletter.

Every marketing email we send includes an unsubscribe link. You may opt out at any time. Unsubscribing from marketing emails does not affect appointment confirmation or service-related communications if you are an active patient.

Marketing emails contain only general health education content. We do not reference individual health information, scan results, or conditions in any marketing communication.

If you provide your mobile number and affirmatively opt in, BlackPoint Diagnostics may send you text messages relating to appointment scheduling, appointment reminders and confirmations, responses to inquiries you initiate, and occasional service updates.

We do not sell, rent, lease, or share your mobile number, or the fact that you consented to receive text messages, with any third party for their marketing purposes. Mobile opt-in data is never shared with third parties or affiliates for marketing or promotional purposes. We share mobile numbers only with the messaging service providers that deliver messages on our behalf, and only for that purpose.

Consent is not a condition of purchase or of receiving any service. You may book a screening, contact us, or use our services without ever agreeing to receive text messages.

Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out at any time, or HELP for assistance. Opting out of text messages does not affect your ability to book appointments or to receive email or telephone communication from us.

Text messages are not a channel for health information. We do not send scan results, clinical findings, diagnoses, or any information about your health conditions by text message. If you send us health information by text, please be aware that standard text messaging is not a secure or encrypted channel. Clinical questions should be directed to us by telephone or through the secure channels identified in our Notice of Privacy Practices.

If you call us and we are unable to answer, you may receive an automated text message acknowledging your call and offering to help. This reply is sent because you contacted us first.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Patient scheduling and health records retained through Acuity are subject to applicable Maine state law requirements for medical record retention.

Newsletter subscribers who unsubscribe will have their information removed from active mailing lists within 10 business days. Residual data may remain in backup systems for a limited period.

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information, subject to legal retention requirements
• The right to opt out of marketing communications at any time

To exercise any of these rights, contact us at emanuel@blackpointdiagnostics.com.

If you are a patient seeking to exercise rights related to your Protected Health Information, please refer to our Notice of Privacy Practices.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated effective date. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy, please contact:

BlackPoint Diagnostics
Email: emanuel@blackpointdiagnostics.com
Phone: (207) 409-7797
Southern Maine