How We Keep Healthcare Marketing Compliant
We are a marketing agency, not a HIPAA covered entity. But healthcare marketing intersects with HIPAA in meaningful ways - and we take those intersections seriously so your practice is never exposed by your marketing activities.
No PHI in Campaign Tracking
We never pass protected health information through Google Ads, Meta Pixel, or any analytics platform. Conversion tracking is configured to capture appointment intent signals only - not patient health data.
HIPAA-Compliant Testimonials Policy
We only use patient testimonials and before/after images that come with explicit written HIPAA authorization from the patient. We help you design authorization workflows if needed.
Server-Side Tracking Implementation
Where available, we implement server-side tag management (Google Tag Manager server-side) to keep health-related data off client-side scripts that could be read by third parties.
Retargeting Guardrails
We do not build retargeting audiences from pages that could indicate a patient health condition (e.g., specific disease or condition pages). We use general health interest audiences instead.
BAA Readiness
For healthcare clients that require a Business Associate Agreement, we are prepared to enter into a BAA covering our handling of any incidental PHI encountered during the course of our marketing work.
Healthcare Ad Policy Compliance
We operate within Google and Meta healthcare advertising policies, including required certifications for sensitive health categories, appropriate disclaimers, and prohibited claim restrictions.
Important Disclaimer
Whizzybly is a marketing agency and does not provide legal or compliance advice. This page describes our internal practices and policies, not a guarantee of HIPAA compliance. Healthcare organizations are responsible for their own HIPAA compliance programs. We recommend consulting with a healthcare compliance attorney or compliance officer before making compliance determinations. If your organization requires a Business Associate Agreement, please contact us before beginning work.