Privacy Policy

DEOCAs LLC is, first, a web design and development company, and also a digital engineering lab registered in the State of Florida, United States. We provide professional services including, among others, custom software for the healthcare sector, clinical tools, web platform design, application development, digital consulting, domain and DNS management, and related digital services.

Legal entity: DEOCAs LLC
Principal address: Tampa, Florida, United States
Primary contact: contact@deocas.us
Phone: +1 (813) 393-9412

DEOCAs LLC is a limited liability company. Its members and managers are not personally liable for the obligations of the company, except where Florida law provides otherwise.

2.1 Who this Policy applies to: (a) visitors to deocas.com and its subdomains; (b) anyone who sends us an inquiry, a quote request, or a form; (c) clients who have a service agreement with DEOCAs LLC; and (d) users of any tool, application, or platform operated by DEOCAs LLC for its own business; tools we build for a practice run under that practice's policies, not this one. Together with our Terms of Service it forms the "Agreement" referred to below.

2.2 How you accept: You accept this Policy by using the website or by hiring our services. If you accept on behalf of a practice, company, or other entity, you confirm that you have the authority to do so.

2.3 Clients with a signed agreement: When a proposal, service agreement, or contract with DEOCAs LLC refers to our Terms of Service, this Policy is included with them, and the version in effect on the signing date, identified by the version date at the top of this page, is the one that applies to that project. Later changes to this page do not alter your agreement unless we both agree in writing.

3.1 Information you provide directly: When you submit a form on this website we collect exactly what the form shows: your name, email address, the answers you choose, and any optional fields you decide to fill in (such as phone, practice or specialty, a website address, or a message). When you engage our services we additionally collect the project details and billing information needed to do the work. Please do not include patient information in any form, email, or call: this website and our contact channels are not meant to receive it, as our Terms of Service explain.

3.2 Automatically collected information: Our hosting provider processes your IP address to serve the site and we use it transiently to limit automated abuse of our forms. The only cookies on this site are the first-party measurement cookies of Google Analytics, described in Section 7; we do not use advertising cookies or fingerprinting. There are no visitor accounts.

3.3 The free scan: If you use the free website scan, the website address you type is fetched by our server and sent to Google's PageSpeed service to measure its speed. We do not scan anything you did not ask for.

3.4 Communications: Email and message records with clients and prospects are kept as part of our business records, for the periods described in Section 8.

We use collected information for the following purposes:

• Responding to inquiries and providing services you have requested
• Processing payments and managing billing
• Sending project updates, proposals, invoices, and service communications
• Improving our website, services, and user experience
• Complying with legal, regulatory, and tax obligations
• Applying this Agreement and protecting our legal rights
• Preventing fraud, unauthorized access, and illegal activity
• Maintaining and improving the security of our systems

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes without your explicit consent.

For users located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, our legal bases for processing personal data include:

• Contractual necessity: Processing required to perform our services or prepare to enter a contract with you
• Legitimate interests: Processing necessary for our legitimate business interests, provided they are not overridden by your rights
• Legal obligation: Processing required to comply with applicable law
• Consent: Processing based on your explicit consent, which you may withdraw at any time

For California residents, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant additional rights described in Section 10.

We do not share your personal information except in the following circumstances:

6.1 Service providers: Form submissions are delivered to us as messages through Telegram and our website runs on Vercel, whose server logs may briefly hold submission data when a delivery fails or looks automated. Payments are processed by Stripe on Stripe's own hosted pages: your card details go to Stripe directly and never touch our systems. The website address you submit to the free scan is sent to Google's PageSpeed service, Google Analytics receives the visit measurements described in Section 7, and Google Ads receives the cookieless conversion signals described there. If you call us, our automated telephone answering service receives your phone number and records and transcribes the call, so that a member of the team can call you back with the context you gave. The greeting says so before you speak. The line is meant for physicians and healthcare professionals asking about our services; please do not share patient information on it. These are the only external services that receive visitor data, each under its own privacy policy.

6.2 Legal compliance: We may disclose information when required by law, court order, subpoena, or government authority, or when we believe in good faith that disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of persons or property.

6.3 Business transfers: In the event of a merger, acquisition, sale of assets, or other business transfer involving DEOCAs LLC, user information may be transferred as part of such transaction, subject to continued protection under this Agreement.

6.4 Protection of rights: We may disclose information to enforce this Agreement, protect DEOCAs LLC, its members and officers, our clients, or third parties from harm, or to investigate potential violations.

6.5 Consent: We may share information with your explicit consent.

This website sets no advertising cookies. The only cookies it sets are the first-party measurement cookies of Google Analytics (names beginning with _ga), which tell us that the same browser came back, so that visits and pages are counted once. They belong to deocas.com only, hold a random identifier and no personal data, and Google Analytics is configured with advertising features and Google signals turned off, so they are not used to follow you across other websites.

We measure visits with two aggregate counters: Vercel Web Analytics, which is cookieless, and Google Analytics, which uses the cookies above. Both record that a page was viewed, the referring site, coarse device and country categories, and the actions described in Section 3.1 when you take them, such as sending a form. Neither identifies you by name. You can block Google Analytics with your browser's settings or with Google's opt-out extension, and the site works exactly the same.

We run a small Google Ads campaign, and to learn which ads lead to real inquiries the same Google tag also reports conversions to Google Ads, with advertising storage denied. In that mode Google Ads sets no cookies, does not identify you and does not follow you across other websites. It sends Google an anonymous signal that a page was viewed and, if you send a form or tap our phone number, that a contact happened. Click identifiers are redacted from those signals and are never added to our links.

The site keeps one small value in your browser's session storage, which disappears when you close the tab: the campaign or referring site that brought you here, attached to a form only if you send one. It is not a cookie and is never read by anyone else.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specifically:

• Client project files and communications: minimum 5 years from project completion, in accordance with standard business and tax record-keeping requirements
• Payment and billing records: 7 years, as required by US tax law
• Inquiry data (non-clients): for as long as it is useful to answer you; we review and delete unconverted inquiries periodically

Upon expiration of applicable retention periods, data is securely deleted or anonymized.

We implement commercially reasonable technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, access controls and authentication requirements, secure data storage practices, and regular security reviews.

No method of transmission over the internet or of electronic storage is completely secure. We protect your information with industry-standard practices, but we cannot guarantee absolute security, and DEOCAs LLC is not liable for unauthorized access, disclosure, or loss of data that occurs despite reasonable security measures, unless it is caused by our gross negligence or willful misconduct. The limits in our Terms of Service apply.

In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, within the timeframes mandated by such law.

Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at contact@deocas.us. We will respond within 30 days, and may request verification of your identity before processing your request.

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to deletion: Request deletion of your personal data, subject to legal retention requirements
• Right to restrict processing: Request limitation of how we use your data in certain circumstances
• Right to data portability: Request transfer of your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for consent-based processing at any time
• California rights (CCPA/CPRA): Right to know, right to delete, right to opt-out of sale, right to non-discrimination, and right to correct

We may decline requests that are clearly unfounded or excessive, or that conflict with our legal obligations, and we will tell you why.

Our website and services are not directed to, and we do not knowingly collect personal information from, children under the age of 13, or under the age of 16 for users in the EEA. If you believe we have inadvertently collected information from a minor, please contact us at contact@deocas.us and we will promptly delete it.

DEOCAs LLC is based in the United States. If you access our website or use our services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using our website or engaging our services, you agree to that transfer and processing. We take appropriate safeguards so that such transfers comply with applicable data protection law.

Our website contains links to third-party websites, platforms, and services. DEOCAs LLC does not control them and is not responsible for their content, privacy practices, or terms.

The external services this website actually uses are: Vercel (hosting), Telegram (delivery of form submissions to us), Stripe (payment processing on Stripe's hosted pages), Google PageSpeed (speed measurement for the free scan), Google Analytics (visit measurement, Section 7), Google Ads (cookieless conversion signals, Section 7), and our automated telephone answering service (which records and transcribes calls and keeps the caller's number). Links you choose to follow, such as client websites in our portfolio, take you to services we do not operate. Each such service works under its own privacy policy and terms, which we encourage you to review.

We may update this Policy from time to time. Changes apply from the date they are posted on this page, and the version date at the top reflects the latest revision. If a change is significant, we will let active clients know by email. Clients with a signed agreement keep the version that was in effect when they signed, as explained in Section 2.3.

For questions, requests, or notices about this Policy, contact us at:

For data protection inquiries specific to GDPR rights, please include "GDPR Request" in your subject line. For CCPA inquiries, please include "CCPA Request." We aim to respond to all legitimate requests within 30 calendar days.