Under lock and key
How this website protects your privacy
Exactly what this website does, and doesn't do, with your information, in plain language.
What this website will and won't do
Most practice websites have never been asked these questions. This one answers them in a table.
| Your information | This websitePublic information and a call-back form | Patient portalThe practice's HIPAA-covered system |
|---|---|---|
| Collects | ||
Name and phone for a call back | ||
Symptoms or reason for visit | ||
Insurance and medical history | ||
| Handles | ||
Messages with your care team | ||
Test results and records | ||
Telehealth video visits | ||
| Protections | ||
Advertising trackers | None by default | None |
Who can sign in | Staff with a website role | You and your care team |
The security under the hood
Encrypted in transit
Every page is served over HTTPS.
Private admin and closed API
Anonymous visitors can read pages, not the site's data.
Spam-proofed forms
Honeypot, same-site check and rate limits on every form.
Analytics only by choice
Traffic analytics run only when the practice turns them on.
Monthly review, reported
A person checks the site's security every month and the practice gets the report.
Privacy questions
Is this website HIPAA compliant?
A website on its own can't be "HIPAA compliant"; compliance is about how a practice handles health information. This site is built so health information never reaches it: forms ask only for contact details, and anything about your health goes through the practice's secure patient portal.
Why can't I describe my symptoms in the contact form?
Does this website track me for advertising?
Who can change what this website says?
What does Loam's healthcare compliance review check?
Is this website HIPAA compliant?
A website on its own can't be "HIPAA compliant"; compliance is about how a practice handles health information. This site is built so health information never reaches it: forms ask only for contact details, and anything about your health goes through the practice's secure patient portal.
InfoNotice of Privacy Practices
A note on HIPAA
Loam & Key is fictional, and nothing here is legal advice. HIPAA compliance belongs to a practice's whole operation, not to a website. A Loam site's job is to stay out of the way: keep health information off the web and point patients to the systems built to protect it.