1. Introduction
This site is operated by an Indiana limited liability company (the "Operator"). Contact and registered-agent information appears in Section 12. Questions about this policy may be sent to webmaster@giready.com.
This site is designed to collect as little information as possible while still being able to operate.
2. What We Collect
- Pageviews and dwell time on every page (via an analytics script we host).
- Interaction events: weight-band selections, language toggles, section expansions, print actions, and PDF downloads.
- Browser, operating system, and device type (derived; the full user agent string is not stored).
- Country and region (state-level only) provided by Cloudflare's geolocation headers.
- Cloudflare's standard request logs (per Cloudflare's policy).
- When voluntarily submitted: patient-feedback survey responses.
3. What We Do NOT Collect
This website does not collect, store, transmit, or process any Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). The system does not collect: names, dates of birth, medical record numbers, contact information (email, phone, address), payment information, full IP addresses (IP is used transiently for rate-limiting only and is not stored), or full user agent strings. The system does not use cookies. No cross-session identifier is generated; closing the browser tab severs the session.
If you personalize a handout page with a procedure date and time, or download a calendar (.ics) file of the prep schedule, those dates are processed entirely on your device — they are never transmitted to our servers.
4. Patient Feedback Survey
The website offers an optional patient feedback survey that opens after extended page dwell or when a feedback QR code is scanned. The survey is anonymous, dismissible, and consists of up to five short questions about clarity, confidence, and ease of use, plus one optional free-text comment field. Above the free-text field, the survey explicitly asks families not to include patient names, dates of birth, or medical record numbers.
Submitted free-text comments are processed by a server-side scrubber that automatically redacts patterns resembling dates of birth, medical record numbers, phone numbers, Social Security numbers, email addresses, and any 6-or-more-digit numeric run, before the comment is stored. Submissions can be hidden or deleted by the operator at any time.
The survey does not require account creation, login, or any other personally identifiable information.
5. Do Not Track
Passive analytics (page-view and dwell tracking) silently disable when your browser sends the Do Not Track signal (navigator.doNotTrack). The feedback survey, because it represents an explicit user action, will still function if you choose to submit it.
6. Cookies and Local Storage
This website does not set any cookies. To group page views within a single visit, the analytics script writes a randomly generated session identifier to your browser's sessionStorage, which is automatically cleared when you close the browser tab. This identifier is not persistent and cannot be used to recognize you across visits.
7. Third-Party Services
The website's infrastructure relies on three external service providers:
- Cloudflare (Pages, Workers, D1 database, and edge routing) — hosts the website and stores analytics data within Cloudflare's North American infrastructure.
- Google Cloud Platform (Cloud Run) — runs the personalized handout generation service for the scheduling portal.
- GitHub (private repositories) — stores the source code of the website.
The website does NOT use Google Analytics, Mixpanel, Amplitude, Sentry, Hotjar, or any other third-party analytics, advertising, or session-recording service. No data is shared with any third party for marketing, advertising, or analytics purposes.
8. Data Retention
- Page view and interaction event data: automatically purged 2 years after collection.
- Patient feedback survey responses: retained indefinitely for clinical quality improvement, unless individually deleted by the operator.
- Soft-deleted records: permanently purged 30 days after deletion.
- Cloudflare request logs and Google Cloud Logging entries: retained according to those providers' standard policies.
9. Children's Privacy
giready.com is built for parents, guardians, and clinical staff caring for pediatric patients — it is not designed for direct use by children. In keeping with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. The medical instructions on this site are intended for the adults responsible for a child's care.
10. Your Rights
Users in jurisdictions covered by the GDPR (European Union) or CCPA (California) have rights including access, correction, deletion, and the right to object to processing of personal information about them. Requests may be sent to webmaster@giready.com.
Because the system is engineered to collect no personally identifying information by default (no accounts, no cookies, no cross-session identifiers, no stored IPs, no stored user-agent strings), most rights requests are answered by confirming what the system holds about you — typically nothing tied to identity — and, for patient-feedback survey submissions, removing any submission you can point us to.
11. Changes to This Policy
This policy may be updated as the site evolves. The "Last updated" date at the top of this page reflects the most recent revision. For changes that materially affect how information is collected or used, a brief notice will be shown on giready.com for at least 30 days.
12. Contact
GI Ready, LLC
c/o Northwest Registered Agent LLC
5534 Saint Joe Road
Fort Wayne, IN 46835
Email: webmaster@giready.com
See also: Terms of Use.