Privacy policy.

This policy explains what Pouls MedTech Insights collects, how we store it, and how to request deletion. It is written in plain English and should be read alongside our data disclaimer.

What we collect.

• Lead-form submissions. When you submit the contact form, we collect the fields you provide (name, email, company, role, what you're trying to figure out, marketing opt-in) plus the timestamp, the page you arrived from, and the UTM parameters in the URL. We also record an ISO country code derived from a Cloudflare or DigitalOcean header. We do not store your full IP address.
• Analytics cookies. If we have a Google Analytics 4 measurement ID configured, GA4 may set first-party cookies prefixed _ga* for visit attribution. We turn on anonymize_ip in the GA4 config.
• Google Ads conversion cookies. If we have a Google Ads conversion configured, the gtag library may set first-party cookies tied to the conversion event so the platform can attribute paid clicks to lead submissions.
• Anti-spam tokens. If our anti-spam provider (Cloudflare Turnstile or hCaptcha) is enabled, the provider sets its own cookie to prevent abuse.
• Server logs. Routine HTTP request metadata (path, status, user-agent, response time) for operational purposes. Free-text form payloads are scrubbed before archival.

What we don't collect.

• Your full IP address.
• Protected Health Information (PHI) or any patient-identifying data. Our form rejects payloads that look like NPIs, MRNs, or DOBs.
• Payment information. We invoice via human-issued PDFs.
• Behavioral fingerprints, third-party trackers, or session-recording tools.

How we use what we collect.

• To reply to your inquiry by email.
• To attribute the lead to its acquisition channel (so paid spend can be calibrated).
• To send you marketing updates only if you opted in on the form.

Third-party processors.

We share information only with the following processors, each in narrowly-scoped roles:

• Hosting: DigitalOcean App Platform (production hosting).
• CDN and DNS: Cloudflare (TLS termination, DNS, anti-spam).
• Mail provider: an SMTP / managed transactional provider (Mailgun, Postmark, or SendGrid via SMTP) routes the lead-notification email to us.
• Analytics: Google Analytics 4 (web analytics) and Google Ads (paid-media attribution), only when measurement IDs are configured in the deployment.
• Anti-spam: Cloudflare Turnstile (preferred) or hCaptcha (fallback).

Cookies.

Cookies are set only by the analytics, ads, and anti-spam processors named above when those features are enabled. None of them are used for cross-site tracking, ad retargeting against you personally, or behavioral profiling.

Right to access or delete.

Email us to request a copy of, or deletion of, any lead row tied to your email address. We respond within fifteen business days.

EU users.

Pouls MedTech Insights does not target users in the European Union or the United Kingdom for v1. If you submit a form from an EU/UK IP, we will treat the request like any other inquiry but we do not currently operate a cookie-consent banner. If you'd like the row deleted, see Right to access or delete above.

Updates to this policy.

We will date-stamp any update at the top of this page and keep the previous version available on request.