This Privacy Policy describes how Prefcor Consulting LLC collects, uses, discloses, and safeguards your personal information when you access or use our website located at www.prefcor.com and any related online services (collectively, the “Platform”). Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood and accept this Privacy Policy.
1. Introduction and Overview
1. Policy Introduction. Prefcor Consulting LLC (the “Company,” “we,” “us,” or “our”) is a management consulting firm serving the healthcare industry. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains who we are, what personal information we collect through the Platform, how and why we use and disclose it and the choices and rights available to you. It exists to provide you with transparent notice of our data practices and to describe how we comply with applicable privacy laws.
2. Effective Date. This Privacy Policy is effective as of the Last Updated Date set forth at the end of this page. We may revise this Privacy Policy from time to time as described in the section titled “Policy Changes and Updates,” and the Effective Date will be updated accordingly. The version in effect at the time you use the Platform governs our handling of your personal information.
3. Scope of the Policy. This Privacy Policy applies to personal information we collect through the Platform, including our website at www.prefcor.com and any associated webpages, online forms, and communications channels operated by the Company. It does not apply to information collected offline, to information collected through any third-party website or service that may be linked to from the Platform, or to the practices of companies we do not own or control. Your use of the Platform is also subject to our Terms of Use, which are incorporated herein by reference.
4. How to Contact Us. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact our privacy team at info@prefcor.com. Where we have appointed a Data Protection Officer or representative, their contact details are set forth in the “GDPR and International Compliance” section below.
2. Information We Collect
5. Information You Provide Directly. We collect personal information that you voluntarily provide to us, such as when you complete a contact or inquiry form, request a consultation, subscribe to communications, respond to a survey, or otherwise communicate with us. This information may include your name, business name, email address, telephone number, and any information you choose to include in the messages or materials you submit. You are not required to provide this information, but if you do not, we may be unable to respond to your inquiry or provide the service you request.
6. Automatically Collected Data. When you access or use the Platform, we and our service providers may automatically collect certain information about your device and your interaction with the Platform. This information may include your Internet Protocol (IP) address, device and hardware identifiers, browser type and version, operating system, referring and exit pages, the date and time of your visit, and other server log file information.
7. Cookies and Tracking Technologies. We and our service providers use cookies, web beacons, pixels, local storage, and similar tracking technologies to operate and secure the Platform, remember your preferences, and analyze how the Platform is used. Further detail regarding these technologies, their purposes, and your choices is provided in the “Cookie Policy” section of this Privacy Policy.
8. Location Data. We may collect approximate location information derived from your IP address or network information in order to understand the general geographic regions from which the Platform is accessed, to support security, and to improve the Platform. We do not collect precise GPS-based geolocation through the Platform.
9. Usage Data. We collect information about how you interact with the Platform, including the pages and content you view, the features you use, the links and buttons you click, the search queries you enter, the dates and times of your activity, and similar usage data. We use this information to understand engagement with the Platform and to improve its content and functionality.
10. Communications Data. When you contact us or communicate with us through the Platform, by email, or by telephone, we collect the contents of those communications together with associated metadata, such as the date, time, and your contact details. We retain this information to respond to and follow up on your inquiries and to maintain appropriate records of our communications.
11. Photos, Audio and Media. To the extent the Platform permits you, now or in the future, to upload or share files, images, recordings, or other media, we collect and store the content you choose to submit, along with any information contained within or associated with it. You should not submit any media containing sensitive personal information unless it is necessary for your inquiry, and you are responsible for ensuring you have the right to share any media you submit.
3. How We Use Your Information
12. To Provide and Operate the Service. We use your personal information to operate, maintain, and provide the Platform and its features; to respond to your inquiries and requests; to schedule and conduct consultations; to provide customer support; and to manage our relationship with you and the business you represent.
13. To Personalize Your Experience. We may use your information to personalize and improve your experience on the Platform, including by remembering your preferences, presenting content we believe may be relevant to you, and tailoring our communications and the information we provide.
14. To Communicate With You. We use your contact information to send you administrative and transactional communications, such as responses to your inquiries, confirmations, notices regarding your requests, and updates about the Platform or changes to our terms and policies. These communications are part of the service and are not promotional in nature.
15. Marketing and Promotional Communications. Where permitted by law and consistent with your choices, we may use your contact information to send you newsletters, updates, and information about our services that may be of interest to you. You may opt out of marketing communications at any time by following the unsubscribe instructions included in those communications or by contacting us at info@prefcor.com. Opting out of marketing does not affect our ability to send you non-promotional, service-related communications.
16. Analytics and Performance Improvement. We use usage and device data to understand how users interact with the Platform, to measure and analyze traffic and performance, to diagnose technical problems, and to develop, test, and improve the Platform’s content, features, and usability.
17. Security and Fraud Prevention. We use personal information to protect the security and integrity of the Platform and our users, including to detect, investigate, prevent, and respond to fraud, abuse, unauthorized access, security incidents, and other harmful or unlawful activity, and to enforce our terms and policies.
18. Legal Compliance and Obligations. We use and retain personal information as necessary to comply with applicable laws, regulations, legal processes, and governmental requests; to establish, exercise, or defend legal claims; and to satisfy our recordkeeping, accounting, and regulatory obligations.
19. Research and Development. We may use information, generally in aggregated and de-identified form, for internal research and development purposes, including to analyze trends, evaluate and improve our services, and develop new features and offerings. We do not use your personal information to train third-party artificial intelligence or machine-learning models.
20. Advertising and Ad Targeting. We may use cookies and similar technologies to support limited interest-based or measurement activities relating to our own services. Where such activities involve advertising or analytics partners, we describe them in the Cookie Policy below, and you may exercise the choices described there. We do not sell your personal information for advertising purposes.
4. How We Share Your Information
21. Service Providers and Vendors. We share personal information with third-party service providers and vendors that process information on our behalf and under our instructions, such as providers of website hosting, data storage, email delivery, analytics, and customer support. These providers are authorized to use your personal information only as necessary to provide services to us and are contractually obligated to protect it.
22. Business Partners. From time to time, we may share information with business partners with whom we collaborate to deliver or offer services, but only as reasonably necessary for those purposes and consistent with this Privacy Policy and applicable law.
23. Advertising and Analytics Partners. We may share certain usage and device information with analytics and, where applicable, advertising partners that help us understand and measure how the Platform is used. These partners may use cookies and similar technologies as described in the Cookie Policy. We do not share your name or the contents of your inquiries with these partners for their own independent marketing purposes.
24. Business Transfers. If the Company is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of all or a portion of its assets, your personal information may be transferred or disclosed as part of that transaction, subject to reasonable confidentiality protections and consistent with applicable law. We will take reasonable steps to ensure that any recipient honors the commitments made in this Privacy Policy.
25. With Your Consent. We may share your personal information with third parties when you direct us to do so or otherwise provide your consent to the sharing.
26. Aggregated / De-Identified Data. We may create and share aggregated, anonymized, or de-identified information that does not reasonably identify you for research, analytics, benchmarking, and other lawful business purposes. We maintain and use such information in a manner intended to prevent its re-identification.
27. Affiliated Companies. We may share personal information with companies within our corporate family, including parents, subsidiaries, and affiliates under common ownership or control, for the purposes described in this Privacy Policy and consistent with applicable law. 28. No Sale of Personal Data. We do not sell your personal information, and we do not exchange your personal information with third parties for monetary consideration. We also do not share your personal information for cross-context advertising in a manner that would constitute a “sale” under applicable law.
5. Cookie Policy — Cookies and Tracking
29. Types of Cookies Used. We may use several categories of cookies and similar technologies on the Platform: (i) essential cookies, which are necessary for the Platform to function and cannot be switched off in our systems; (ii) functional cookies, which enable enhanced functionality and personalization, such as remembering your preferences; (iii) analytics cookies, which help us understand how visitors interact with the Platform; and (iv) advertising cookies, which, where used, support measurement and interest- based activities. A summary of the specific cookies we use is set forth in the Cookie Chart below.
30. Cookie Consent and Preferences. Where required by applicable law, we will request your consent before placing non-essential cookies on your device, and we will provide you with tools to accept, reject, or customize your cookie preferences. You may change or withdraw your consent at any time through any cookie-management tool we make available on the Platform or through your browser settings.
31. Third-Party Cookies. Some cookies may be placed by third parties that provide services to us, such as analytics and, where applicable, advertising providers (for example, providers comparable to Google). These third parties may collect information about your online activities over time and across different websites. Their use of information is governed by their own privacy policies, and we encourage you to review them.
32. Do Not Track Signals. Some browsers offer a “Do Not Track” (“DNT”) setting that sends a signal to websites you visit. Because there is not yet a common industry or legal standard for recognizing and responding to DNT signals, the Platform does not currently respond to DNT signals. We will continue to monitor developments in this area.
33. Cookie Duration and Expiry. Cookies may be either “session” cookies or “persistent” cookies. Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a set period of time or until you delete them. The approximate duration of each cookie we use is indicated in the Cookie Chart below.
34. How to Opt Out of Cookies. You can manage or disable cookies through your browser settings, which typically allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are set. You may also use any cookie-management tool we provide on the Platform, as well as industry opt-out tools offered by certain analytics and advertising providers. Please note that disabling certain cookies may affect the functionality and availability of parts of the Platform.
Cookie Chart
The following chart summarizes the cookies used on the Platform. We will update this chart as our use of
cookies changes.
6. Data Retention
35. How Long We Keep Your Data. We retain personal information for only as long as is reasonably necessary to fulfill the purposes for which it was collected, including to respond to and follow up on your inquiries, to provide and improve the Platform, and to comply with our legal, accounting, and regulatory obligations. Different categories of information may be retained for different periods depending on their nature and the purpose of processing.
36. Criteria for Determining Retention. In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process the information and whether those purposes can be achieved by other means; the existence of an ongoing relationship or inquiry; and applicable legal, regulatory, tax, accounting, or reporting requirements.
37. Data Deletion upon Account Closure. Because the Platform does not maintain user accounts, retention is governed by the purposes described above rather than by account closure. Where you ask us to delete information we hold about you, we will do so in accordance with the section titled “Your Rights and Choices” and applicable law, subject to any information we are permitted or required to retain.
38. Backup and Archival Data. Following deletion of personal information from our active systems, residual copies may persist for a limited period within our routine backup, disaster-recovery, or archival systems. Such copies are protected by appropriate security measures and are deleted or overwritten in the ordinary course of our backup cycles, after which they are no longer accessible for everyday use.
39. Legal Hold Exceptions. We may retain personal information for periods longer than otherwise described where required to do so by applicable law or where the information is subject to a legal hold, litigation, investigation, audit, or other legal or regulatory requirement. In such cases, we will retain only the information reasonably necessary for the applicable purpose and for as long as the obligation persists.
7. Data Security
40. Security Measures Overview. We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, loss, or destruction. These measures include access controls, secure system configurations, and ongoing review of our security practices, taking into account the nature of the information and the risks involved.
41. Encryption in Transit and at Rest. We use industry-standard encryption protocols, such as Transport Layer Security (TLS/SSL), to protect personal information transmitted to and from the Platform, and we employ encryption and other protective measures for personal information stored within our systems where appropriate.
42. Access Controls and Authentication. We limit access to personal information to those personnel and service providers who have a legitimate need to access it in order to perform their functions, and we employ role-based access controls and authentication measures, which may include multi-factor authentication. Personnel with access to personal information are subject to confidentiality obligations. 43. Security Audits and Testing. We periodically review, assess, and test our security controls and practices, which may include vulnerability assessments and penetration testing, and we work to remediate identified issues in a timely manner consistent with the level of risk.
44. Data Breach Notification. In the event of a security incident that compromises the security, confidentiality, or integrity of your personal information, we will investigate the incident and notify you and any applicable regulators or authorities as and when required by applicable law, including within any legally mandated timeframes, and will describe the measures we are taking in response.
45. No Absolute Security Disclaimer. While we take reasonable measures to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You acknowledge that you provide your personal information at your own risk and are responsible for maintaining the confidentiality of any credentials or sensitive information within your control.
8. Your Rights and Choices
46. Right to Access Your Data. Subject to applicable law, you have the right to request confirmation of whether we process personal information about you and to request a copy of the personal information we hold about you, together with information about how we process it.
47. Right to Correct / Rectify. You have the right to request that we correct or update personal information about you that is inaccurate, incomplete, or out of date.
48. Right to Delete / Erasure. You have the right to request that we delete personal information we hold about you, subject to certain exceptions, such as information we are required or permitted to retain for legal, regulatory, or legitimate business purposes.
49. Right to Data Portability. Where applicable, you have the right to receive certain personal information you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit that information to another controller where technically feasible.
50. Right to Restrict Processing. In certain circumstances, you have the right to request that we restrict or limit the processing of your personal information, such as while we verify the accuracy of information you have contested.
51. Right to Object to Processing. You have the right, in certain circumstances, to object to our processing of your personal information, including processing based on our legitimate interests and processing for direct-marketing purposes.
52. Right to Withdraw Consent. Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew it.
53. Opt Out of Marketing. You may opt out of receiving marketing or promotional communications from us at any time by following the unsubscribe instructions in those communications or by contacting us at info@prefcor.com. We will continue to send you service-related communications as necessary.
54. How to Submit a Request. To exercise any of your rights, you may submit a request to us at info@prefcor.com or by using the contact details set forth in this Privacy Policy. To protect your privacy and security, we may take reasonable steps to verify your identity before responding to your request, and we may decline requests where required or permitted by law. 55. Response Timeframe. We will respond to verifiable privacy requests within the timeframe required by applicable law, generally within thirty (30) days of receipt, although this period may be extended where permitted by law and where reasonably necessary, in which case we will inform you of the extension and the reasons for it.
9. GDPR and International Compliance
56. Legal Basis for Processing. Where the European Union General Data Protection Regulation (“GDPR”) or comparable laws apply, we process personal information only where we have a lawful basis to do so. Depending on the circumstances, our lawful bases include: your consent; the performance of a contract with you or steps taken at your request prior to entering into a contract; compliance with a legal obligation to which we are subject; and our legitimate interests, such as operating, securing, and improving the Platform, provided those interests are not overridden by your rights and freedoms.
57. Data Controller Information. For the purposes of applicable data protection law, the data controller responsible for your personal information is Prefcor Consulting LLC. You may contact the controller using the details set forth in the “How to Contact Us” Section at the end of this page.
58. Data Protection Officer. You may direct any data-protection inquiries to our privacy team at info@prefcor.com, and we will route them appropriately within the Company.
59. International Data Transfers. The Platform is intended for users located in the United States, and we store and process personal information in the United States. If you access the Platform from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States. Where we transfer personal information that is subject to the GDPR or comparable laws across borders, we implement appropriate safeguards to the extent required by applicable law. 60. Right to Lodge a Complaint. If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal information infringes applicable law. We would, however, appreciate the opportunity to address your concerns directly before you do so, and we encourage you to contact us first.
10. Additional U.S. State Privacy Rights
61. Virginia VCDPA / Colorado CPA. If you are a resident of Virginia or Colorado, you may have additional rights under the Virginia Consumer Data Protection Act (“VCDPA”) and the Colorado Privacy Act (“CPA”), respectively. Subject to the conditions and exceptions set forth in those laws, these rights may include the right to confirm whether we process your personal data and to access it; the right to correct inaccuracies; the right to delete personal data; the right to obtain a portable copy of personal data you previously provided; and the right to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or certain profiling. As stated elsewhere in this Privacy Policy, we do not sell personal data. To exercise any of these rights, you may contact us at info@prefcor.com, and we will respond within the timeframe required by applicable law.
62. Connecticut / Utah Privacy Rights. If you are a resident of Connecticut or Utah, you may have additional rights under the Connecticut Data Privacy Act (“CTDPA”) and the Utah Consumer Privacy Act (“UCPA”), respectively. Subject to the conditions and exceptions set forth in those laws, these rights may include the right to confirm whether we process your personal data and to access it; the right to delete personal data; the right to obtain a portable copy of personal data you previously provided; and the right to opt out of the processing of personal data for purposes of targeted advertising or the sale of personal data. Connecticut residents additionally may have the right to correct inaccuracies in their personal data and, where applicable, to appeal a refusal to act on a request. To exercise any of these rights, please contact us at info@prefcor.com, and we will respond within the timeframe required by applicable law.
11. Third-Party Services and Links
63. Third-Party Links Disclaimer. The Platform may contain links to third-party websites, services, or resources that are not operated or controlled by the Company. This Privacy Policy does not apply to those third parties, and we are not responsible for their content, privacy practices, or data-handling activities. We encourage you to review the privacy policies of any third-party website or service you visit.
64. Analytics Providers. We may use third-party analytics providers, such as services comparable to Google Analytics and similar measurement tools, to help us understand how the Platform is used. These providers may collect information through cookies and similar technologies as described in the Cookie Policy and process it in accordance with their own privacy policies. Where available, you may use the opt-out mechanisms offered by these providers.
12. Policy Changes and Updates
65. Right to Update the Policy. We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we do, we will revise the Last Updated date at the end of this Privacy Policy.
66. Notification of Material Changes. If we make material changes to this Privacy Policy, we will provide notice through reasonable means, which may include posting a prominent notice on the Platform, displaying a banner, or, where appropriate and where we have your contact information, sending you a notice by email.
67. Continued Use as Acceptance. Your continued access to or use of the Platform after any updated Privacy Policy becomes effective constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any change, you should discontinue use of the Platform.
13. General Terms
68. Entire Privacy Agreement. This Privacy Policy constitutes the entire agreement between you and the Company regarding our collection, use, and disclosure of your personal information through the Platform, and supersedes and replaces all prior privacy statements or representations regarding the same subject matter.
69. Conflict with Terms of Use. This Privacy Policy should be read together with our Terms of Use. In the event of a conflict between this Privacy Policy and the Terms of Use specifically with respect to the collection, use, or disclosure of personal information, this Privacy Policy shall control; in all other respects, the Terms of Use shall govern.
70. Severability. If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable, that provision shall be deemed modified to the minimum extent necessary to make it enforceable or, if it cannot be so modified, severed, and the remaining provisions shall continue in full force and effect.
71. Governing Law. This Privacy Policy and any dispute arising out of or relating to it or our data practices shall be governed by and construed in accordance with the laws of the State of New Jersey, without regard to its conflict-of-laws principles, except to the extent that mandatory data protection laws of another jurisdiction apply to you.
72. Contact Process. If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact our privacy team using the details below. We will review and respond to your inquiry and work in good faith to resolve any concern.
Prefcor Consulting LLC
Telephone: 201.772.1502
Email: info(at)prefcor(dotted)com
Website: www.prefcor.com
Last updated: June 15, 2026