What we collect
Visitor consent choices, category preferences, and the minimum technical data (IP hash, timestamp, user agent) needed to prove a choice was made and enforce it.
How practices use it
Consent state syncs to the practice's own CRM so their marketing respects a patient's choice. Consential does not sell or share this data.
Retention
An append-only audit trail is kept for the HIPAA-required minimum (spec target: 6 years) and can't be edited or deleted, by design.
Your rights
How to view, change, or revoke your consent — see the Privacy Hub.
Subprocessors
Infrastructure runs on AWS, using HIPAA-eligible services under AWS's Business Associate Addendum (via AWS Artifact). A full subprocessor list will be published here before launch.