Privacy Policy | NPIPublicData.org

1. INTRODUCTION AND DATA CONTROLLER

NPIPublicData.org (hereinafter referred to as "the Service," "we," "us," or "our") is a free NPI Registry lookup website. This Privacy Policy governs your use of NPIPublicData.org and all associated tools, including our NPI search, lookup results, and contact form.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you don't agree with any part of this policy, you must discontinue use of the Service immediately.

Data Controller: The operator of NPIPublicData.org. For privacy-related inquiries, please use our Contact Page or email [email protected].

2. INFORMATION COLLECTION AND USE

2.1 Log Data

When you access the Service, our servers automatically collect certain technical information ("Log Data"). This Log Data may include:

Your device's Internet Protocol (IP) address
Browser type and version
Operating system and device type
Pages visited within our Service, including search and result pages
Time and date of your visit
Time spent on each page
Referring URL (the website that directed you to our Service)
Screen resolution and device identifiers (where applicable)

This information is used to analyze usage trends, maintain site performance, and gather broad demographic information in aggregate. How long Log Data is kept depends on our hosting and analytics configuration. Where we use Google Analytics (Google LLC), user-level event data retention follows the settings in our analytics property. For Google Analytics 4, common options are 2 or 14 months (see Google's current documentation). We may retain server logs separately as needed for security, troubleshooting, and legal compliance.

2.2 NPI Search Queries

NPI lookups use the public CMS NPPES API. When you search, our server requests matching records from NPPES and returns them to your browser. We do not maintain our own copy of the NPPES database on our servers for these lookups. Search activity may be logged for performance or analytics (e.g., which search types are used), but we do not sell search query data to advertisers. NPI data shown is public record as published by NPPES.

After a successful search, your browser may store the latest result in local storage so you can open the results page on our site. That data stays on your device until you clear site data or run a new search. It is not used for advertising.

2.3 Contact Form Data

If you use our contact form, we collect your name, email address, subject, and message content. This data is used solely to respond to your inquiry. We don't use contact form submissions for marketing or share them with advertisers. Messages are typically delivered by email to our team; they may remain in our mail systems as long as needed to respond and for reasonable follow-up, or longer if required by law.

2.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to improve your experience. Cookies are small text files placed on your device that help us:

Understand how you interact with our Service
Improve our tools based on usage patterns
Deliver relevant advertisements through our advertising partners
Browser local storage may hold your last NPI search result on your device only (see NPI Search Queries above)

You can control cookies through your browser settings. Disabling cookies may affect certain functionality of the Service, including personalized ad delivery. You can clear local storage for this site through your browser’s site-data or storage settings.

3. GOOGLE ADSENSE AND THIRD-PARTY ADVERTISING

The Service uses Google AdSense, a third-party advertising network operated by Google LLC, to display advertisements. This section explains how advertising data is collected and used.

3.1 The DART Cookie

Google uses the DoubleClick DART cookie to serve advertisements based on your visit to NPIPublicData.org and other websites on the Internet. The DART cookie enables Google and its partners to serve ads to you based on your browsing history across various websites.

3.2 Personalized Advertising

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our Service and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.

3.3 Opting Out of Personalized Advertising

You may opt out of personalized advertising by visiting:

Google Ad Settings: https://adssettings.google.com/
Network Advertising Initiative: https://optout.networkadvertising.org/
Digital Advertising Alliance: https://optout.aboutads.info/

3.4 Third-Party Disclaimer

We do not control the content of advertisements or the cookies placed by third-party advertisers.

NPIPublicData.org has no access to or control over cookies used by third-party advertisers. Third-party ad servers or ad networks use technology to display advertisements and links that appear on our site. They automatically receive your IP address when this occurs. Other technologies (such as cookies, JavaScript, or web beacons) may also be used by third-party ad networks to measure the effectiveness of their advertisements and/or to personalize the advertising content you see.

You should consult the respective privacy policies of these third-party ad servers for more detailed information on their practices. We do not sell your personal information to advertisers.

4. SPECIAL NOTICE TO PARENTS AND GUARDIANS (COPPA)

The Children's Online Privacy Protection Act (COPPA) requires that online service providers obtain parental consent before knowingly collecting personally identifiable information from children under the age of 13. This section addresses our compliance with COPPA.

4.1 Age Restrictions

NPIPublicData.org is not directed at children under the age of 13. We do not knowingly collect, maintain, or use Personally Identifiable Information (PII) from children under 13 years of age. If we learn that we have collected personal information from a child under 13 (for example, through our contact form), we will take immediate steps to delete that information.

4.2 How Our Service Handles Minor Users

Our NPI lookup does not require account creation or any personal information to use. When anyone (including minors) uses our search tool, no personally identifiable information is collected beyond standard Log Data. The NPI data displayed is public record from CMS NPPES.

4.3 Parental Rights

If you are a parent or guardian and believe that your child under 13 has provided personal information to us (for example, through our contact form), please contact us immediately via our Contact Page or at [email protected]. We will take steps to remove that information from our systems.

Parents have the right to:

Review any personal information we may have collected from their child
Request deletion of such information
Refuse to allow any further collection or use of their child's information

4.4 Contact Form Disclaimer

Our contact form collects name, email address, subject, and message content. Children under 13 should not submit information through our contact form without parental consent. If we discover that a child under 13 has submitted personal information through the contact form, we will delete such information promptly.

5. YOUR PRIVACY RIGHTS (GDPR AND CCPA)

Depending on your location, you may have specific rights regarding your personal data under applicable privacy laws, including the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

5.1 Rights Under GDPR (European Economic Area)

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

Right to Access: You have the right to request copies of your personal data held by us.
Right to Rectification: You have the right to request correction of any information you believe is inaccurate or incomplete.
Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Right to Object: You have the right to object to our processing of your personal data, under certain conditions.
Right to Withdraw Consent: Where we rely on consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us through our Contact Page or email [email protected]. We will respond without undue delay and in any event within one month of receipt, as required by the GDPR (that period may be extended by two further months where necessary, in which case we will inform you).

5.2 Rights Under CCPA (California Residents)

If you are a California resident, you have specific rights under the California Consumer Privacy Act:

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a request under the CCPA, use our Contact Page or email [email protected].

5.3 Do Not Sell My Personal Information

NPIPublicData.org does not sell personal information to third parties.

We do not engage in the sale of personal information as defined under the CCPA. The personal information we collect is used solely for the purposes described in this Privacy Policy, including operating our Service and displaying relevant advertisements through Google AdSense.

6. SECURITY OF YOUR DATA

The security of your data is important to us. We implement industry-standard security measures to protect your information, including:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS encryption (HTTPS).
Secure Hosting: Our website is hosted on secure servers with regular security updates and monitoring.
Access Controls: Access to any collected data is restricted to authorized personnel only.
Regular Audits: We periodically review our data collection, storage, and processing practices.

While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. No method of transmission over the internet or method of electronic storage is 100% secure.

Therefore, while we endeavor to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet which are beyond our control; and (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through this Service cannot be guaranteed.

7. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will revise the "Last Updated" date at the top of this page. We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information.

Material Changes: If we make material changes to this Privacy Policy that affect your rights or how we handle your personal data, we will provide prominent notice on our website prior to the change becoming effective.

Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.

8. THIRD-PARTY LINKS AND SERVICES

Our Service may contain links to third-party websites (e.g., the official NPPES NPI Registry, CMS, and opt-out tools). If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. INTERNATIONAL DATA TRANSFERS

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us (for example, through our contact form), please note that any submitted data may be transferred to and processed in a jurisdiction where our servers are located. Your use of the Service and submission of any information represents your agreement to that transfer.

10. CONTACT US

Questions about this Privacy Policy, data access or deletion requests, or GDPR/CCPA/COPPA inquiries? Use our Contact Form or write to [email protected]. We aim to respond within 24–48 business hours for general inquiries (often sooner). For formal privacy rights requests, we will respond within the timeframes required by applicable law (for example, within one month for many GDPR requests, subject to any permitted extensions).

TECHNICAL STATEMENT: NPI DATA PROCESSING

For transparency and to demonstrate our commitment to data accuracy, we provide the following technical statement regarding how our NPI lookup processes data:

Our NPI lookup queries publicly available data from the CMS National Plan and Provider Enumeration System (NPPES). We do not create, modify, or store provider records. We display NPPES data as published. NPI records are public information. Search queries may be logged for analytics and performance purposes, but we do not sell or share search data with third parties for advertising. Contact form submissions are processed for response only and are not used for marketing.