Privacy policy

Last updated 25 August 2026.

This policy covers the Halcora corporate website at halcora.com. It does not cover the Halcora platform or the work we do on claims, which are governed by the agreement between Halcora and the customer and, where protected health information is involved, by a signed business associate agreement. Where the two ever appear to conflict, the customer agreement governs the platform and this policy governs only the website.

What this website collects

This site has no analytics, no advertising trackers and no embedded content from anyone else. It sets no cookies and has no sign-in or visitor account.

The contact form asks for your name, work email, company and message. Submitting it delivers those details to Halcora's mailbox. The website does not create a separate lead profile or store a second copy elsewhere on the website, but the message and our replies remain in the mailbox as correspondence.

What is unavoidable is the record any web host keeps in order to serve a page and keep the site up: the address the request came from, the page requested, the time, and what your browser said it was. We use those records to operate the site and to investigate abuse, and for nothing else. We do not use them to build a profile of you, and we do not try to work out who you are from them.

What happens to messages you send us

The form and the address published on this site reach the same mailbox. We read your message, we reply, and we keep the exchange as the record of a conversation we may need to pick up again.

We do not sell what you send us and we do not hand it to anyone else to use for their own purposes. We do not add you to a mailing list because you emailed us once. If we ever want to send you something you did not ask for, we will ask first.

Never send protected health information here

Do not send protected health information — anything identifying a person and their care, treatment or payment — through this website or to the address published on it. Ordinary email is not a protected medium and this address is not covered by a business associate agreement.

If you need us to look at real claims, say so without attaching them. We will put a signed business associate agreement in place first and arrange a protected way for you to send them. If protected health information reaches us here by accident, tell us; we will delete it and confirm that we have.

Cookies and tracking

This site sets no cookies, uses no local storage, and carries no pixel, tag or beacon belonging to an advertiser, a social network or an analytics vendor. There is no consent banner because there is nothing to consent to. If that ever changes, this page changes with it, before the change is made rather than after.

How long we keep things

Server records are kept for a short operational period — on the order of weeks, not years — and then discarded. Correspondence is kept while there is a live reason to hold it: an open conversation, a contract being negotiated, or an obligation that requires us to be able to produce it. When the reason ends, the correspondence is deleted.

Your rights over what we hold

Wherever you are, you can ask us what we hold about you, ask for a copy of it, ask us to correct it if it is wrong, and ask us to delete it. If you are in California, or in the United Kingdom, the European Union or another place with comparable rules, those requests are rights rather than favours, and this is how you exercise them.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not make automated decisions about you. We will not treat you worse for asking us to do any of the above.

Note the boundary: information we hold as a service provider for a customer — anything inside the platform, including protected health information — is the customer's to answer for. If you are a person whose information a Halcora customer holds, ask that customer. If they route the request to us, we act on their instruction.

How to ask for deletion

Email hello@halcora.com and tell us what to delete. We will confirm what we found, delete what we are not required to keep, and tell you plainly if something has to stay and why. We may need to ask you something to be sure the request is yours, and we will ask for as little as will do.

Children

This site is a business website and is not directed at children. We do not knowingly collect anything about them, and if we learn that we have, we delete it.

Changes to this policy

When this policy changes, the date at the top changes with it and the new version replaces this one on this page. We do not change it quietly and backdate it.

Contact

Questions about privacy, or a request under any of the rights above: hello@halcora.com. Halcora is based in California, United States.