Privacy policy
Who we are and scope
HQL Solutions LLC is a Texas company with its registered address at 4502 Riverstone Blvd., Ste. 701, Missouri City, Texas 77459, United States. This notice describes our website enquiries, business relationships and lead-generation activities, and explains the separate arrangements for medical billing and custom CRM services. BuiltAbility’s medical billing offering is now under HQL. This notice is not a clinical notice or a substitute for a client-specific processing agreement.
Website enquiries
We collect the name, work email, company, selected service area and project brief you submit. Depending on your selection, the form also asks for campaign audiences and objectives, practice specialty and location, billing support and software, or CRM industry, workflows and integrations. Tally hosts and stores submissions and sends notifications to our private Zoho mailbox. Your submission is used to respond, evaluate requirements and discuss a possible engagement; it is not an automatic subscription to marketing. Do not include patient records, insurance identifiers, credentials or confidential client information.
Lead-generation data and sources
We obtain professional contact information from LinkedIn, other websites, client instructions and information generated during campaigns. This can include names, business contact details, employer, professional role, account information, qualification responses, campaign interactions and preferences. Lead records are stored in our CRM. We provide clients with both contact lists and qualified leads. The source, permitted purpose, recipient geography and required notices or consent must be assessed for each campaign. Publicly available information does not itself establish consent to every use.
Why information is used
We use information to respond to enquiries, assess and deliver services, maintain business relationships, qualify and deliver campaign leads, manage preferences, protect systems and fulfil legal obligations. Where EU or UK data-protection rules apply, processing needs an applicable lawful basis: consent where required, legitimate interests following the required assessment, contractual necessity where the individual is party to the contract, or a legal obligation. Marketing-channel permission is assessed separately. Canadian consent requirements or applicable statutory exceptions must also be assessed for the activity.
Sharing and service providers
Enquiry data is processed by Tally and Zoho. Our website is hosted through Sites infrastructure, and Google Fonts supplies typography. Hosting and font providers can receive connection information such as IP addresses, browser details and request metadata. Campaign clients receive the contact lists or qualified leads agreed for their engagement; this is a disclosure of personal information, and applicable restrictions must be assessed before delivery. Such delivery may constitute sale or sharing under some privacy laws depending on the arrangement. We do not make a blanket claim that we never sell or share information. We may also disclose information to contracted providers, professional advisers or authorities where appropriate and lawful. Exact operational suppliers, CRM hosting regions and applicable transfer arrangements are reviewed per service.
Medical billing
Our medical billing clients are US clients. Staff based in Morocco and India access patient records and insurance information for contracted billing work. BAA terms are included in the medical billing contract or signed separately, as confirmed by HQL management. Processing is subject to the client’s permitted instructions, agreed BAA and applicable requirements. The website form must not be used to send patient information. See our medical billing privacy notice for the service boundary; patient requests should normally be directed to the healthcare provider.
Custom CRM development and hosting
Clients can commission development only, hosting, or both. HQL’s development team does not have access to clients’ live production data under the current operating arrangement confirmed by management. Hosting arrangements and the responsibilities of infrastructure providers are defined per client engagement. Hosting can involve storage or processing even where developers cannot view live records. Any change involving support access, migration or production data requires an agreed scope and appropriate processing arrangements.
Retention
Lead-generation contact records and website enquiries are retained for up to five years from collection, with earlier deletion where no longer necessary or required by applicable rights or law. Submitting another enquiry does not reset the collection date of an older record. The enquiry period covers the relevant Tally submission and Zoho notification copies. Tally’s free plan does not automatically delete submissions, so deletion must be performed manually. A written schedule and deletion checks are needed to apply this period consistently. Minimal suppression records, required legal records and legal holds are treated separately. The five-year period does not establish a patient-record retention rule; medical data follows client instructions, the BAA and applicable requirements. CRM hosting retention and return/deletion are agreed with the client.
International processing and security
Medical billing staff access from Morocco and India forms part of the service’s international processing footprint; it does not establish where the underlying software servers are located. Other storage locations and vendor regions depend on the selected system. Where international-transfer rules apply, the relevant agreements and safeguards must be established. Security controls must match the actual system and engagement. This notice does not assert an unverified certification, encryption configuration or universal legal compliance.
Your choices, requests and complaints
Prasad Bhange handles HQL privacy requests. Use the HQL website enquiry form and begin the brief with “Privacy request” or “Marketing opt-out”. Identify the contact details and activity involved; do not upload identity documents or patient records. Rights may include access, correction, deletion, restriction, portability, consent withdrawal and objection, depending on applicable law. Marketing objections should stop the relevant marketing and be reflected in suppression records. Legal exceptions may limit deletion. See the regional rights page for response periods and complaint routes. Patient requests concerning a healthcare provider’s records should be directed to that provider; HQL assists as required by its agreement.
Children and updates
The website is intended for professional business enquiries. Do not submit children’s or sensitive health information through it. Material changes to practices require an updated notice and any additional notice or consent required by applicable law.
References
Optional website analytics
After analytics consent, Google Analytics measures website visits, service interest and completed embedded enquiries. We do not send enquiry field contents to Google Analytics. Technical information and pseudonymous identifiers can be processed by Google, including outside your country. You can refuse or withdraw analytics consent through Cookie settings. See our cookie notice for collection, retention and controls.