Privacy Policy

Effective Date: April 9, 2026 · Last Updated: April 9, 2026

    CardioNexa provides managed lipid management services to cardiology practices. This Privacy Policy explains how we collect and use information on our public website (cardionexa.com). Patient health information processed through LipidNova is governed separately by our HIPAA Business Associate Agreements with client practices.
  

1. Information We Collect

When you visit cardionexa.com, we may collect:

Usage data: Pages visited, referring URLs, browser type, and approximate geographic location (country/region level), collected automatically via Google Analytics.
Contact information: If you submit an inquiry via our contact form, we collect your name, email address, and message content.
Cookies: We use cookies for analytics and site functionality. See our Cookie Policy for details. You may manage cookie preferences via the consent banner.

We do not collect patient health information through this website. Protected Health Information (PHI) is only processed through our HIPAA-compliant clinical platform under separate agreements.

2. How We Use Information

To analyze website traffic and improve our content (Google Analytics)
To respond to contact form submissions
To comply with legal obligations

We do not sell your personal information to third parties.

3. Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as page views, session duration, and approximate location. This data is aggregated and de-identified. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by declining analytics cookies in our consent banner.

4. Cookies and Consent

We use Cookiebot to manage cookie consent. Analytics cookies (including Google Analytics) are only activated after you provide consent. You can withdraw consent at any time by clicking "Cookie Settings" in the footer of any page.

5. Data Sharing

We share information with:

Google Analytics: Aggregated website usage data
Cookiebot: Cookie consent management
AWS: Website hosting and infrastructure

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

6. Your Rights

Depending on your location, you may have rights including:

California (CCPA/CPRA): Right to know what personal information is collected, right to delete, right to opt out of sale (we do not sell personal information). See our Do Not Sell or Share My Personal Information page.
EU/UK (GDPR): Right of access, rectification, erasure, restriction, portability, and objection.

To exercise your rights, contact us at privacy@cardionexa.com.

7. Data Retention

Contact form submissions are retained for up to 2 years. Analytics data is retained per Google's default retention settings (26 months). You may request deletion at any time.

8. Security

This website is served over HTTPS. We use industry-standard security practices for our infrastructure. For information about security of our clinical platform, see the Security section of our website.

9. Children's Privacy

This website is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will post the updated policy with a revised effective date. Continued use of the website after changes constitutes acceptance.

11. Contact

For privacy-related questions or requests:
CardioNexa, Inc.
privacy@cardionexa.com