Legal
Privacy Policy
How Sapphire Health handles information on our website and in the course of providing healthcare IT consulting services.
Overview
Sapphire Health (“Sapphire,” “we,” “us”) provides healthcare IT consulting focused on Epic environments, cloud migration, resiliency, and managed infrastructure. This Privacy Policy describes how we handle information when you visit www.sapphirehealth.org, contact us, or work with us as a client or partner.
We treat healthcare-adjacent data with care. We do not sell personal information and we limit collection to what supports our business, security, and communications.
Information we collect
Website visitors: We may collect information you voluntarily provide—such as name, email, organization, phone number, and message content—when you submit a contact form or email us.
Automatically collected data: Like most websites, we may receive technical information such as IP address, browser type, device identifiers, referring URLs, and pages viewed. We use Vercel Analytics to understand site usage. If Google Analytics is also enabled, that usage data may be processed according to Google’s policies.
Client and partner engagements: In the course of consulting work, we may process business contact details, project communications, and technical information necessary to deliver services under contract. Protected health information (PHI) is handled only when explicitly required by an engagement and governed by applicable agreements.
How we use information
Respond to inquiries and schedule conversations about our services.
Operate, secure, and improve our website and marketing communications.
Deliver contracted consulting, managed services, and related support.
Comply with legal obligations and enforce our agreements.
Sharing and disclosure
We do not sell or rent personal information. We may share data with trusted service providers who assist with hosting, email, analytics, or security—bound by confidentiality and data-processing terms.
We may disclose information when required by law, to protect rights and safety, or in connection with a merger or acquisition with appropriate notice where required.
Data retention and security
We retain information only as long as needed for the purposes described above, unless a longer period is required by law or contract.
We apply administrative, technical, and organizational measures appropriate to a healthcare IT consulting firm, including access controls and secure transmission where applicable. No method of transmission or storage is completely secure.
Your choices
You may opt out of non-essential marketing emails by using unsubscribe links or contacting us directly.
Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your personal information. Contact us to make a request.
Contact us
Privacy questions or requests: spencer.osborn@sapphirehealth.org or info@sapphirehealth.org.
Mailing addresses: 1600 Aspen Commons, Suite 110, Middleton, WI 53562; 1340 Poydras Street, Suite 1970, New Orleans, LA 70112.
We may update this policy from time to time. The effective date of the current version is shown below.
Effective date: January 1, 2026