Privacy Policy
Last updated November 12, 2026.
Template notice for the site owner: review this policy with qualified counsel and complete the operator details before launch. It describes how the site is built to handle data; your actual practices (email provider, analytics, data sharing) must match it.
Who we are
This website is operated by the operator of fhir-vendors.com (“we”, “us”).
Information we collect
- Find a Vendor requests: name, business email, organization, required services, project description and optional budget range.
- Vendor submissions: company name, website, business email, optional contact name, services, company description and headquarters location.
- Contact messages: name, email, subject and message.
- Technical data: a one-way salted hash of your IP address, used only for rate-limiting and abuse prevention. We do not store raw IP addresses with submissions.
No patient health information
Our forms are for business enquiries only. Do not submit protected health information (PHI) or any information about patients. If we discover PHI in a submission, we delete it.
How we use information
- To respond to your request and suggest relevant vendors.
- To review and publish vendor listings (only company information is published — never submitter email addresses).
- To prevent spam and abuse.
We share a buyer's project details with a vendor only to fulfil the request, and share contact details only when the buyer asks for an introduction. We do not sell personal information.
Spam protection
Forms may use Cloudflare Turnstile to distinguish humans from bots. When enabled, Cloudflare processes limited technical data under its own privacy policy.
Retention
We keep requests and messages only as long as needed to handle them and for reasonable record-keeping, after which they are deleted. You may ask us to delete your data at any time.
Your rights
Depending on where you live, you may have rights to access, correct, delete or object to processing of your personal data. To exercise them, contact us.
Security
Data is transmitted over HTTPS and stored in an access-controlled database. Admin access is password-protected and limited to authorized staff.
Changes
We will update this page when our practices change and revise the “last updated” date above.