WEBSITE PRIVACY POLICY
IQRP
Integrated Quality & Risk Partners
https://iqrp.org
825A North Lessing Street
Chicago, Illinois 60642
Effective Date: 5-14-2026
Last Updated: 5-14-2026
Version 1.0
This Privacy Policy applies to information collected through IQRP's public website at iqrp.org. It does not apply to Protected Health Information that IQRP handles as a Business Associate, which is governed separately by the IQRP Notice of Privacy Practices.
Two policies, two purposes. This Privacy Policy describes how IQRP collects and uses information from visitors to our public website at iqrp.org. A separate Notice of Privacy Practices describes how IQRP handles Protected Health Information (PHI) received from healthcare clients in our role as a HIPAA Business Associate. The two documents cover different information and different obligations.
1. Introduction
IQRP — Integrated Quality & Risk Partners (“IQRP,” “we,” “us,” or “our”) operates the website located at https://iqrp.org (the “Website”). This Privacy Policy explains how we collect, use, share, and protect information when you visit our Website, contact us, or interact with us through the Website.
By using the Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use the Website.
This Privacy Policy does NOT apply to:
• Protected Health Information (PHI) that IQRP handles on behalf of healthcare clients in its role as a HIPAA Business Associate. PHI handling is governed by the IQRP Notice of Privacy Practices and by Business Associate Agreements with the applicable Covered Entities.
• Information collected by third-party websites linked from the Website.
• Information collected through channels other than the Website (e.g., email correspondence outside of contact forms, direct phone calls).
2. Information We Collect
2.1 Information You Provide Directly
We collect information you voluntarily provide when interacting with the Website, including:
• Contact form submissions: name, email address, organization, phone number (if provided), and the content of your message
• Inquiries about IQRP’s services, including any information you choose to share about your organization or needs
• Other information you may choose to send us through the Website
2.2 Information Collected Automatically
When you visit the Website, certain information is collected automatically through standard web technologies, including:
• IP address and approximate geographic location derived from your IP address
• Browser type and version, operating system, and device type
• Pages viewed, time spent on pages, and navigation patterns within the Website
• Date and time of your visit
• Referring website or source (e.g., search engine, social media, direct link)
• Information collected through cookies and similar technologies (see Section 3 below)
2.3 Information from Third Parties
Our Website is hosted on the Squarespace platform. Squarespace and any analytics, security, or service providers we engage may collect information about your visit on our behalf. We do not knowingly purchase or receive personal information about Website visitors from data brokers or other third-party data sources.
2.4 Categories of Personal Information (California Disclosure)
For purposes of the California Consumer Privacy Act (“CCPA”) and California Privacy Rights Act (“CPRA”), the categories of personal information we may collect include:
CCPA Category
Examples Collected by IQRP
Identifiers
Name, email address, IP address (from contact form and analytics)
Personal records
Phone number, organization name (if provided in contact form)
Commercial information
Inquiries about services (if you express interest in retaining IQRP)
Internet activity
Pages viewed, time spent, referring source, browser type
Geolocation data
Approximate location derived from IP address
Inferences
General interest in healthcare analytics services (drawn from form submissions)
We do NOT collect: biometric information; sensitive personal information as defined by the CPRA (e.g., precise geolocation, racial/ethnic origin, religious beliefs, sexual orientation, health information from website visitors, financial account information); or information about children under the age of 13.
3. Cookies and Tracking Technologies
The Website uses cookies and similar technologies to function properly and to understand how visitors interact with our content.
Types of cookies and similar technologies we may use:
• Strictly necessary cookies: required for the Website to function (e.g., session management, security, form submission)
• Functional cookies: enable enhanced functionality (e.g., remembering display preferences)
• Analytics cookies: help us understand how visitors use the Website (e.g., which pages are most viewed, how visitors navigate)
• Performance cookies: monitor Website performance and identify technical issues
We do NOT use:
• Advertising or marketing cookies for behavioral retargeting
• Third-party advertising trackers
• Cross-site tracking pixels intended for advertising purposes
Most web browsers allow you to control cookies through browser settings. You can typically configure your browser to refuse all cookies, accept only certain cookies, or notify you when cookies are being set. Refusing or disabling cookies may affect the functionality of the Website.
Do Not Track signals: Some browsers transmit “Do Not Track” signals to websites. The Website does not currently respond to Do Not Track signals because no industry standard has been finalized.
4. How We Use Information
We use information collected through the Website for the following purposes:
• Responding to inquiries, questions, and contact form submissions
• Communicating with prospective clients about IQRP’s services
• Improving the Website’s content, design, and functionality
• Analyzing Website traffic and visitor behavior in aggregate
• Detecting, preventing, and addressing technical issues, fraud, or security threats
• Complying with legal obligations, court orders, and regulatory requirements
• Protecting the legal rights, property, and safety of IQRP, our clients, and the public
Legal basis for processing (relevant for visitors subject to GDPR):
• Legitimate interest in operating our business, responding to inquiries, and protecting the Website
• Performance of pre-contractual measures when you contact us about potential services
• Consent (where applicable, for non-essential cookies)
• Compliance with legal obligations
5. How We Share Information
We share information collected through the Website only as described below. We do NOT sell personal information to third parties.
Service Providers.
We share information with third-party service providers that help us operate the Website and our business, subject to contractual confidentiality obligations. Current service providers include:
• Squarespace, Inc. — website hosting and form processing
• Microsoft Corporation — email and productivity (Microsoft 365)
• Other service providers as needed for analytics, security, and operations
Legal Disclosures.
We may disclose information when required by law or regulatory authority, including in response to subpoenas, court orders, or government investigations. We may also disclose information to protect the rights, property, or safety of IQRP, our clients, or others.
Business Transfers.
In the event of a merger, acquisition, sale of assets, or similar corporate transaction, information may be transferred to the successor entity. Any such transfer will remain subject to commitments made in this Privacy Policy unless and until a new policy is adopted and disclosed.
Aggregated and De-Identified Information.
We may share aggregated or de-identified information (information that cannot reasonably be used to identify you) for any lawful business purpose.
No Sale or Sharing of Personal Information.
IQRP does not sell personal information to third parties, and does not share personal information for cross-context behavioral advertising, as those terms are defined under the California Privacy Rights Act and similar state laws.
6. Data Retention
We retain information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:
• Contact form submissions: retained for up to three (3) years from the date of submission, unless ongoing communications with you require longer retention
• Website analytics data: retained in aggregated form; identifying information typically retained for no longer than fourteen (14) months
• Cookie data: as described in Section 3, varies by cookie type
• Information required for legal compliance: retained for the period required by applicable law
7. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect information collected through the Website. Our security measures include:
• Hosting on the Squarespace platform with built-in security controls and HTTPS/TLS encryption for data in transit
• Limited access to information collected through the Website on a need-to-know basis
• Multi-factor authentication on IQRP accounts that have administrative access to the Website
• Regular review of security configurations and practices
No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security of information transmitted through the Website. If we become aware of a security incident affecting your information, we will notify you in accordance with applicable law.
8. Your Privacy Rights
8.1 General Rights
Depending on your jurisdiction, you may have certain rights with respect to your personal information, including:
• The right to access the personal information we hold about you
• The right to correct inaccurate personal information
• The right to request deletion of your personal information
• The right to object to or restrict certain processing
• The right to data portability (receive your information in a portable format)
• The right to withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the information in Section 11. We will respond to your request within the timeframe required by applicable law (typically 30 to 45 days, depending on jurisdiction). We may need to verify your identity before fulfilling certain requests.
8.2 California Residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
• Right to know what personal information we collect, use, disclose, and (where applicable) sell or share
• Right to delete personal information we have collected from you, subject to certain exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (IQRP does not sell or share personal information; there is no opt-out required)
• Right to limit the use and disclosure of sensitive personal information (IQRP does not collect sensitive personal information from Website visitors)
• Right to non-discrimination for exercising any of these rights
Authorized agents: California residents may designate an authorized agent to make rights requests on their behalf. We may require written authorization from the consumer and may verify the identity of both the consumer and the agent.
Shine the Light: California Civil Code Section 1798.83 permits California residents to request information about disclosures of personal information to third parties for those third parties’ direct marketing purposes. IQRP does not disclose personal information to third parties for their direct marketing purposes.
8.3 Virginia, Colorado, Connecticut, Utah, and Texas Residents
Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive consumer privacy laws have rights similar to those under the CCPA, including the right to access, correct, delete, and obtain a portable copy of personal information, and the right to opt out of targeted advertising and the sale of personal information. IQRP does not engage in targeted advertising or the sale of personal information.
Appeals: If we decline a rights request, you have the right to appeal that decision. To file an appeal, contact us using the information in Section 11 with the subject line “Privacy Rights Appeal.” We will respond to appeals within the timeframe required by applicable law.
8.4 European Visitors (GDPR)
If you are visiting the Website from the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent laws:
• Right of access, rectification, erasure, restriction, portability, and objection
• Right to withdraw consent at any time where processing is based on consent
• Right to lodge a complaint with a supervisory authority in your country of residence
IQRP is a U.S.-based company and does not target services to European residents. Where data is transferred from the European Economic Area to the United States, we rely on appropriate safeguards under applicable data protection law.
9. Children’s Privacy
The Website is intended for use by professionals in healthcare and related industries. We do not knowingly collect personal information from children under the age of 13 (or under the age of 16 in jurisdictions where that higher age applies). If you believe a child has provided personal information to us through the Website, please contact us using the information in Section 11 and we will take steps to delete the information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
• Update the “Last Updated” date at the top of this Privacy Policy
• Post the revised Privacy Policy on the Website
• Where required by law, provide additional notice or seek consent
We encourage you to review this Privacy Policy periodically to stay informed of our practices.
11. How to Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:
Privacy Contact
IQRP — Integrated Quality & Risk Partners
Mailing Address
825A North Lessing Street
Chicago, Illinois 60642
Website
For PHI-related privacy matters:
If your question or concern relates to Protected Health Information (PHI) that IQRP handles on behalf of a healthcare client, please refer to the IQRP Notice of Privacy Practices, or contact the Covered Entity from whom your PHI was originally obtained (typically your health plan, healthcare provider, or treating clinician).
12. Additional Information
Governing Law.
This Privacy Policy is governed by the laws of the State of Illinois, without regard to its conflict of law principles. Notwithstanding the foregoing, where required by applicable consumer privacy law (e.g., California, Virginia, Colorado, Connecticut, Utah, Texas, or other state laws), the rights and remedies of residents of those states shall be governed by such state’s law to the extent of such requirements.
Severability.
If any provision of this Privacy Policy is found to be unenforceable, the remaining provisions shall continue in full force and effect.
Entire Notice.
This Privacy Policy constitutes the entirety of IQRP’s privacy commitments with respect to information collected through the Website at iqrp.org. It does not supersede or modify the IQRP Notice of Privacy Practices governing PHI, or any Business Associate Agreement between IQRP and a healthcare Covered Entity.
© 2026 Integrated Quality and Risk Partners (IQRP) LLC. All rights reserved.