Privacy policy
Who we are and scope
HQL Solutions LLC is a Texas company with its registered address at 4502 Riverstone Blvd., Ste. 701, Missouri City, Texas 77459, United States.
This notice describes our website enquiries, business relationships and lead-generation activities, and explains the separate arrangements for medical billing and custom CRM services. BuiltAbility’s medical billing offering is now under HQL. This notice is not a clinical notice or a substitute for a client-specific processing agreement.
Website enquiries
We collect the name, work email, company, selected service area and project brief you submit.
Depending on your selection, the form also asks for campaign audiences and objectives, practice specialty and location, billing support and software, or CRM industry, workflows and integrations. Tally hosts and stores submissions and sends notifications to our private Zoho mailbox. Your submission is used to respond, evaluate requirements and discuss a possible engagement; it is not an automatic subscription to marketing. Do not include patient records, insurance identifiers, credentials or confidential client information.
Lead-generation data and sources
We obtain professional contact information from LinkedIn, other websites, client instructions and information generated during campaigns.
This can include names, business contact details, employer, professional role, account information, qualification responses, campaign interactions and preferences. Lead records are stored in our CRM. We provide clients with both contact lists and qualified leads. The source, permitted purpose, recipient geography and required notices or consent must be assessed for each campaign. Publicly available information does not itself establish consent to every use.
Why information is used
We use information to respond to enquiries, assess and deliver services, maintain business relationships, qualify and deliver campaign leads, manage preferences, protect systems and fulfil legal obligations.
Where EU or UK data-protection rules apply, processing needs an applicable lawful basis: consent where required, legitimate interests following the required assessment, contractual necessity where the individual is party to the contract, or a legal obligation. Marketing-channel permission is assessed separately. Canadian consent requirements or applicable statutory exceptions must also be assessed for the activity.
Sharing and service providers
Enquiry data is processed by Tally and Zoho.
Our website is hosted through Sites infrastructure, and Google Fonts supplies typography. Hosting and font providers can receive connection information such as IP addresses, browser details and request metadata. Campaign clients receive the contact lists or qualified leads agreed for their engagement; this is a disclosure of personal information, and applicable restrictions must be assessed before delivery. Such delivery may constitute sale or sharing under some privacy laws depending on the arrangement. We do not make a blanket claim that we never sell or share information. We may also disclose information to contracted providers, professional advisers or authorities where appropriate and lawful. Exact operational suppliers, CRM hosting regions and applicable transfer arrangements are reviewed per service.
Medical billing
Our medical billing clients are US clients.
Staff based in Morocco and India access patient records and insurance information for contracted billing work. BAA terms are included in the medical billing contract or signed separately, as confirmed by HQL management. Processing is subject to the client’s permitted instructions, agreed BAA and applicable requirements. The website form must not be used to send patient information. See our medical billing privacy notice for the service boundary; patient requests should normally be directed to the healthcare provider.
Custom CRM development and hosting
Clients can commission development only, hosting, or both.
HQL’s development team does not have access to clients’ live production data under the current operating arrangement confirmed by management. Hosting arrangements and the responsibilities of infrastructure providers are defined per client engagement. Hosting can involve storage or processing even where developers cannot view live records. Any change involving support access, migration or production data requires an agreed scope and appropriate processing arrangements.
Retention
Lead-generation contact records and website enquiries are retained for up to five years from collection, with earlier deletion where no longer necessary or required by applicable rights or law.
Submitting another enquiry does not reset the collection date of an older record. The enquiry period covers the relevant Tally submission and Zoho notification copies. Tally’s free plan does not automatically delete submissions, so deletion must be performed manually. A written schedule and deletion checks are needed to apply this period consistently. Minimal suppression records, required legal records and legal holds are treated separately. The five-year period does not establish a patient-record retention rule; medical data follows client instructions, the BAA and applicable requirements. CRM hosting retention and return/deletion are agreed with the client.
International processing and security
Medical billing staff access from Morocco and India forms part of the service’s international processing footprint; it does not establish where the underlying software servers are located.
Other storage locations and vendor regions depend on the selected system. Where international-transfer rules apply, the relevant agreements and safeguards must be established. Security controls must match the actual system and engagement. This notice does not assert an unverified certification, encryption configuration or universal legal compliance.
Public team chat
FAQ answers are prepared text displayed locally; they do not use an AI service. Selecting “Chat with our team” loads tawk.to inside the website. The chat provider is not loaded merely by opening the FAQ panel. This optional public enquiry channel is separate from CRM case messages and does not automatically receive your CRM account, client records or documents.
HQL uses chat messages and any name or contact details you voluntarily provide to answer business enquiries and arrange follow-up. Tawk.to processes the conversation and technical information such as IP address, browser/device information, timestamps and chat-session identifiers. Authorized HQL team members can access conversations through the tawk dashboard or mobile app. Sending a chat does not subscribe you to marketing.
Do not send patient or immigration-client information, identity documents, passwords or other confidential material. Use the agreed secure service channel for case-specific support. HQL determines the purposes of public business-enquiry processing; tawk provides the chat service as a processor under its applicable terms. This is not authorization to process CRM customer records through tawk.
Chat records are kept for enquiry handling and necessary follow-up, subject to applicable rights, legal requirements and holds. Tawk states that chats remain stored until deleted; no automatic chat-deletion period is verified for this account. HQL must review and delete records when no longer necessary, including any exported or email copies. Closing the chat or clearing browser data does not delete the stored conversation. Use the privacy-request route below and identify the chat date and any contact details supplied, without sending sensitive documents.
Tawk describes processing in the United States and uses its own service providers. Its privacy notice and data-processing terms describe international-transfer arrangements. These provider statements do not establish that every safeguard required for a particular HQL activity has been verified. Selecting chat requests that service; it is not blanket consent to analytics, advertising or unrelated processing.
Your choices, requests and complaints
Prasad Bhange handles HQL privacy requests. Use the HQL website enquiry form and begin the brief with “Privacy request” or “Marketing opt-out”. Identify the contact details and activity involved; do not upload identity documents or patient records. Rights may include access, correction, deletion, restriction, portability, consent withdrawal and objection, depending on applicable law. Marketing objections should stop the relevant marketing and be reflected in suppression records. Legal exceptions may limit deletion. See the regional rights page for response periods and complaint routes. Patient requests concerning a healthcare provider’s records should be directed to that provider; HQL assists as required by its agreement.
Children and updates
The website is intended for professional business enquiries. Do not submit children’s or sensitive health information through it. Material changes to practices require an updated notice and any additional notice or consent required by applicable law.
References
Optional website analytics
After analytics consent, Google Analytics measures website visits, service interest and completed embedded enquiries. We do not send enquiry field contents to Google Analytics. Technical information and pseudonymous identifiers can be processed by Google, including outside your country. You can refuse or withdraw analytics consent through Cookie settings. See our cookie notice for collection, retention and controls.
Immigration enquiries
General immigration enquiries are handled through the same website enquiry providers to respond and explain next steps. Send contact details and the service you want to discuss only. Do not send passports, financial records, medical information or detailed case files through public forms or chat. Any subsequent case-document processing or sharing with a lawyer requires separately agreed arrangements and applicable privacy notices.