Privacy Policy

We collect only what is necessary to respond to inquiries and operate this website:

• Contact form submissions: name, email address, optional company, and the message you send us.
• Discovery call bookings: when you book through our Calendly link, Calendly collects your name, email, project type, timeline and budget range, and shares them with us.
• Server logs: IP address, user agent, referrer, and timestamp of each request — used solely for security, abuse prevention, and diagnostics. Logs are rotated regularly.

We do not run web analytics, advertising trackers, behavioral profiling, or third-party marketing pixels.

We use a small set of providers, each with their own privacy policy. By using this site you accept that data flows through them as described below:

• Cloudflare — DNS, CDN, DDoS protection.
• AWS (Amazon Web Services) — hosting infrastructure in the United States.
• Calendly — booking of discovery calls.
• Resend — outbound transactional email delivery.

LTG is not a Covered Entity under the U.S. Health Insurance Portability and Accountability Act (HIPAA). When we are engaged by Covered Entities or other Business Associates to build, host, or maintain systems that process Protected Health Information (PHI), we act as a Business Associate under a separate, written Business Associate Agreement (BAA).

Under such a BAA we implement Administrative, Physical and Technical Safeguards required by 45 CFR §164.308–164.312, including but not limited to: encryption at rest and in transit, role-based access control, audit logging, workforce training, breach notification procedures, and the right of the Covered Entity to inspect our controls. Public-website data collected via this site (contact forms, Calendly bookings) is not PHI and is governed exclusively by this Privacy Policy, not by HIPAA.

Our BAA template is available for review before any HIPAA engagement begins: Download BAA template (PDF, English) · Versión en español. To discuss a HIPAA engagement or request adjustments to the template, write to [email protected].

You may request access to, correction of, or deletion of the personal data we hold about you. Depending on your residence you may also have additional rights under regulations such as the EU General Data Protection Regulation (GDPR) — including the right to data portability, to object to processing, and to lodge a complaint with a supervisory authority — and under the California Consumer Privacy Act (CCPA) — including the right to know, the right to delete, and the right to opt out of sale (we do not sell personal data).

To exercise any of these rights, write to [email protected] from the email address on record. We respond within 30 days.