1. Who we are
HMC Health Management Consulting, SRL ("HMC", "we", "us") is a public health systems consultancy and digital innovation firm incorporated in the Dominican Republic. We are the party responsible for the personal information described in this policy.
You can reach us at:
- [email protected]
- +1 809 877 8776
- Residencial Eli 1, Apt. 2B, Calle Tomás Rodríguez de Sosa, El Cacique IV, Santo Domingo, Dominican Republic
This policy explains what we collect through this website. It does not govern information we process under a signed client engagement; that is governed by the contract for that engagement.
2. What this website collects
Information you choose to give us. When you use our contact form we receive your name, your email address, your organization (optional) and the message you write (optional).
Information collected automatically. Like any website, ours is delivered by infrastructure providers that process limited technical data in order to serve the page and keep it secure:
- IP address
- browser and device type
- pages requested and time of request
- security and server logs
We do not use this technical data to identify you personally, and we do not combine it with your contact-form submission to build a profile.
As of the date above, this site sets no cookies, uses no local storage, and runs no advertising, behavioural tracking, retargeting or session recording.
We do use cookieless audience analytics, which counts page views, country and referring site in aggregate. It creates no identifier, follows no one across sites, and builds no profiles. Section 12 explains it.
3. Do not send health or patient information through this website
Our contact form is a general business enquiry channel. It is not a secure or authorized channel for health information.
Please do not include in this form:
- patient names or any patient identifiers
- medical records or clinical histories
- diagnoses, treatment information or laboratory results
- case-level epidemiological records
- Protected Health Information as defined under U.S. HIPAA rules
- sensitive personal health data under Dominican Law No. 172-13
- confidential institutional datasets
- credentials, passwords or access keys
If you send it anyway, we will not use it, we will not incorporate it into our records, and we will delete it as soon as we reasonably can, subject to any legal obligation that requires otherwise. Where appropriate we will tell the sender that we have done so.
If your institution needs to share health data with HMC, that happens under a separate written agreement, through an authorized secure channel, with the contractual and security safeguards the data requires. Contact us and we will set that up properly. It never happens through this form.
4. Why we process this information
We use what you send us to:
- respond to your enquiry
- evaluate a potential professional relationship
- keep a record of our correspondence with you
- operate, maintain and secure this website
- prevent fraud and abuse
- comply with legal obligations
- establish, exercise or defend legal claims, where that becomes necessary
We do not sell your personal information, use it for advertising, or share it for anyone else’s marketing.
5. On what legal basis
Under Dominican Law No. 172-13 on the Protection of Personal Data, we rely on your consent, which you give deliberately when you submit the contact form; on our legitimate interest in responding to enquiries about our services and keeping this website operational and secure; and on compliance with legal obligations, where applicable.
You may withdraw your consent at any time using the contacts in section 1. Withdrawal does not affect processing that already took place while consent was in force.
6. Who else processes this information
We rely on a small number of providers to run this website. They act on our behalf and only for the purposes described here:
- Cloudflare — hosting, content delivery and cookieless audience analytics. Receives IP address, request headers and security logs on every visit.
- Formspree — contact form processing and delivery. Receives your name, email, organization and message, only when you submit the form.
- Sanity — content management and image delivery. Receives your IP address when your browser loads images.
- Google Fonts — web typefaces. Receives your IP address when your browser requests the fonts.
Links are not transfers. This site links to LinkedIn profiles and to a map of our address. Those services receive nothing about you unless you choose to click, at which point their own privacy policies apply.
We do not sell or rent your information, and we do not disclose it to third parties except as described here or where required by law or competent authority.
7. International processing
The providers listed above operate infrastructure located in the United States and other countries. This means that when you visit this site or contact us, the information described in section 2 is processed outside the Dominican Republic.
The purpose is solely to operate this website: hosting it, delivering its images and fonts, and processing the contact form. There is no other purpose.
We select established providers that publish their own data-protection commitments, and we use their services under their terms.
8. Your rights
Under Dominican Law No. 172-13 you have the right to access, rectify, update, and request the deletion or suppression of your personal information, to object to its processing, and to withdraw your consent. Dominican law also provides a judicial remedy known as Habeas Data if a request is not properly addressed.
If you are in the United States, your statutory rights depend on the state where you live, and not every U.S. resident has the same ones. Independently of that, HMC voluntarily extends the rights above to anyone who asks, regardless of location.
To exercise them, write to [email protected] describing what you want. We may need to confirm your identity before acting, to avoid disclosing your information to someone else.
We will respond within the period required by applicable law, and where no period applies, as promptly as we reasonably can.
9. How long we keep it
We apply the following periods:
- Enquiries that do not lead to a relationship: 12 months from the last exchange, then deleted.
- Active business-development correspondence: the duration of the discussion, plus 24 months.
- Records relating to a signed engagement: as required by the contract and by Dominican commercial and tax law.
- Website security and server logs: as retained by our infrastructure providers under their standard settings.
- Health information received by mistake: deleted as soon as reasonably possible, per section 3.
10. Security
We apply reasonable administrative, technical and organizational measures to protect personal information against loss, misuse, and unauthorized access. This site is served over an encrypted connection (HTTPS).
We do not claim that any system is completely secure. Encryption in transit protects data while it travels; it does not by itself make a channel appropriate for sensitive health information, which is why section 3 exists.
11. Children
This website is directed at institutions and professionals: ministries, laboratories, public health programmes, NGOs and similar organizations. It is not directed to children, and we do not knowingly collect information from children.
12. Cookies and similar technologies
This website sets no cookies and uses no local storage. It runs no advertising, retargeting or session recording.
We use Cloudflare Web Analytics to see how many people visit the site, which pages they read, which country they arrive from and which link brought them. It works without cookies and without writing anything to your browser: it creates no identifier, does not follow you to other sites, and builds no profile of you. The figures exist only in aggregate, so neither Cloudflare nor we can single out your visit.
Because nothing is stored on or read from your device, no consent is legally required, which is why this site shows no cookie banner. We chose this over more detailed analytics that would have made one necessary.
If we later introduce cookies, or any technology that does require consent, we will update this policy and implement the consent mechanism or opt-out that applicable law requires, before the technology goes live.
13. Changes to this policy
We may update this policy. The current version is always available on this page with its date. If a change materially affects how we handle your information, we will make that clear.
14. Contact
Questions or requests about this policy or your personal information:
- [email protected]
- +1 809 877 8776
- Residencial Eli 1, Apt. 2B, Calle Tomás Rodríguez de Sosa, El Cacique IV, Santo Domingo, Dominican Republic