Visitors: search terms and locations (not tied to you), and the name, contact details, and short message you choose to send in an appointment request. We ask you not to include health information.
Clinicians: account details, license and identity documents (stored encrypted), profile content, and billing handled by Stripe.
Technical: standard server logs, and Google Analytics as described in "Cookies, analytics and advertising measurement" below.
How we use it
To run the directory, verify clinicians, send appointment requests to the clinician you chose, and improve coverage in places patients search. We do not sell personal information.
Your rights
You can ask for a copy of your data, ask us to delete it, or ask us to remove an unclaimed profile of you at doctordirectory.ai/privacy-requests. We confirm every request by email and act quickly, usually the same day and always within 30 days. Signed-in clinicians and sponsors can download or delete their data instantly from the Account page.
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon or other states with consumer privacy laws), you may have the right to:
know what personal information we collect, use and disclose, and get a copy of it;
ask us to correct or delete it;
opt out of the sale or sharing of your personal information and of targeted advertising (use Your Privacy Choices or a Global Privacy Control signal);
appeal our decision on your request.
You can also email [email protected]. We will verify your request before acting on it, and we will not treat you differently for using these rights. You may use an authorized agent. EU and UK residents also have the rights of portability and to complain to their data protection authority.
Clinicians in the public registry can request removal of an unclaimed profile at any time, and removed records are never re-imported.
Cookies, analytics and advertising measurement
What we use
DoctorDirectory.ai uses the following on doctordirectory.ai:
Site analytics. Google Analytics 4 (Google LLC) records the pages you view, how you arrived (for example a search, a social post or an ad), your general location (city or region, estimated from your IP address), and your device and browser type.
Before you choose. Until you pick an option in the cookie banner, Google Analytics runs in a cookieless mode: it sets no analytics or advertising cookies, but your browser still sends Google basic, cookieless measurement pings about the page you are on.
If you choose "Allow analytics". Google Analytics may set cookies, and we allow Google's advertising and personalization signals for those visits. Google may use identifiers that recognize the same browser across different websites.
Advertising pixels. We do not currently use any advertising pixel (such as the Meta Pixel or the TikTok Pixel) or Google Ads conversion tags. The site is built so that a pixel could only ever load after you choose "Allow analytics", and never when you choose "Essential only" or your browser sends a Global Privacy Control signal. If we add one, this policy will name it.
Server-side reporting. Our servers do not report your actions to Google, Meta, TikTok or any other advertising platform. Sponsored placements are counted on our own servers without identifying you, and we never place tracking cookies on behalf of sponsors.
Why we use them
To understand which pages and content people find useful.
To see how people find us (for example through search, social posts or our own ads), so we can stop paying for what does not work.
What we do not do
We do not sell your personal information for money, and we do not sell or rent our contact lists.
We do not send Google or any advertising platform your name, the content of appointment requests or messages, form answers, or payment card details.
We do not place advertising pixels on any page, including provider pages that have an appointment request form, condition and guideline pages, and search results. Google Analytics does run on those pages (cookieless until you allow it, and not at all if you opt out), so Google receives the address of the pages you view. That address can include the specialty, condition or place you searched for, or the name of the clinician whose page you opened. It never includes what you type into an appointment request.
We do not use these tools to target ads at children under 13.
Please note: some U.S. state privacy laws treat letting a technology company such as Google collect information through tags on our site as a "sale" or "sharing" of personal information, even when no money changes hands. Where those laws apply, you have the right to opt out, as described below.
Your choices
Opt out. Use Your Privacy Choices (also in the footer of every page) and choose "Essential only (do not sell or share)". When you opt out, Google Analytics does not load at all in your browser, not even in cookieless mode, and no pixel ever loads. We also treat a Global Privacy Control signal sent by your browser as a request to opt out.
Browser controls. You can block or delete cookies in your browser settings. Blocking them does not stop the site from working.
Google uses the information it receives under its own privacy policy, which we do not control: policies.google.com/privacy.
If you are in the European Economic Area or the United Kingdom, we ask for your consent before setting non-essential cookies, and you can withdraw it at any time through Your Privacy Choices.
How long we keep things
Accounts and profiles: until you delete them. Appointment requests: 24 months, then deleted. "Notify me" requests: until you unsubscribe or we email you about a match, whichever is later, plus 12 months. Unclaimed registry profiles: six months from import unless claimed. Server logs and rate-limit counters: 30 days. Records we must keep for billing or legal reasons (invoices, deletion receipts) are kept only as long as the law requires. Google keeps the analytics data it receives for as long as its own policies and our account settings allow.