Last updated: October 21, 2026
Privacy policy
LASTpatient, Inc. (“LastPatient”, “we”, “our” or “us”) is committed to protecting your privacy and personal information. This policy explains how we collect, use, share and protect information when you visit our website or use our services.
When our products handle protected health information for practices and research teams, we do so as a business associate under HIPAA and under our agreements with those customers. See HIPAA compliance below. Please don’t send patient information through this website, including the Book a demo form.
1. Information we collect
Information you give us. When you book a demo, we collect your name, work email address, practice or institution, role and the number of surgeons at your practice, and your EMR if you choose to tell us. The form also records which page you came from, which part of the site sent you to it, and any numbers you carried over from an estimate on the site. If you use our services, we may also collect contact information and, under our customer agreements, health-related data.
Information collected automatically. We collect non-personal information such as browser type, device type and how the website is used. Our hosting provider keeps standard server logs, such as your IP address, the pages you request and when. When you submit the form, we use your IP address briefly to limit repeated submissions; we don’t store it with your request. We use Google Analytics to understand how the site is used; see the cookie policy.
2. How we use information
We use information to provide and improve our services, respond to your demo request and follow up with you about LastPatient, communicate with users, run and secure the website and our systems, and meet our legal obligations.
3. Sharing information
We don’t sell your data, and we don’t share it for targeted advertising. We share information with service providers who help us run the website and our services, only so they can provide those services to us. For the website today that’s Google, which hosts the site and the form service, provides the spreadsheet and email we use to receive demo requests, and provides Google Analytics. We may also share information with regulatory authorities or when the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.
4. How long we keep it
We keep demo request information for up to two years, then delete it, unless you become a customer or ask us to delete it sooner. Information we handle for customers is kept as their agreements with us require.
5. Your choices
You can ask us what information we hold about you, ask us to correct or delete it, and ask us to stop contacting you at any time. Depending on where you live, you may have additional rights under local law.
6. Data security
We use industry-standard administrative, technical and physical safeguards to protect personal information. No method of sending or storing data is completely secure, so we can’t guarantee absolute security.
7. Children
Our website is for healthcare professionals and isn’t directed to children under 16.
8. Where information is processed
Information collected through the website is processed in the United States.
9. Changes to this policy
If we change this policy, we’ll post the new version here and update the date at the top.
10. Contact us
Questions about this policy, or a request about your information? Email support at lastpatient dot io.
Terms of service
By accessing or using LASTpatient, Inc.’s website or services, you agree to these terms. If you don’t agree, please don’t use them. Use of our products is also governed by a separate agreement with each customer, including a business associate agreement where patient information is involved; if that agreement conflicts with these terms, the agreement applies.
1. Use of the website and services
You agree to use our website and services only for lawful purposes and in line with applicable regulations. Please don’t:
- send patient information through the website or its forms
- submit false information, or someone else’s information without permission
- try to break, overload or get around the security of the website or services
- scrape or harvest content or contact details from the website
2. Information on the website
The website describes LastPatient and its products. Some products and features are marked “Coming next” or “Coming later”: they aren’t available yet, and what we build may change. Examples, graphics, patients and values on the website are illustrative unless we say otherwise, and estimates aren’t promises of any result. See thedisclaimer.
3. Intellectual property
All content, trademarks and other intellectual property on the website, including the LastPatient name, logo and graphics, belong to LASTpatient, Inc. or its licensors. You may view and share it for your own information, but not copy, modify or reuse it commercially without our written permission. Other companies’ names and products mentioned on the website, including EMRs, belong to their owners, and mentioning them doesn’t mean they endorse LastPatient.
4. Limitation of liability
The website is provided “as is” and “as available”. To the fullest extent the law allows, we disclaim all warranties, express or implied, and we aren’t liable for any damages arising from your use of the website or services, including indirect, incidental, special, consequential or punitive damages, or any loss of data, profits or revenue.
5. Governing law
These terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-law rules.
6. Changes to these terms
We may update these terms. We’ll post the new version here and update the date at the top. Using the website or services after that means you accept the updated terms.
7. Contact us
Questions about these terms? Email support at lastpatient dot io.
HIPAA compliance
HIPAA privacy statement
LASTpatient, Inc. is committed to protecting personal health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA). We sign a business associate agreement with every practice and organization that uses LastPatient.
Our commitment. We safeguard protected health information (PHI) with administrative, physical and technical measures. We don’t sell PHI, and we don’t share it without authorization, except as HIPAA requires or permits.
Your rights. You have rights regarding your PHI, including access, amendment and a copy of the full Notice of Privacy Practices below.
Notice of Privacy Practices
Introduction. This notice describes how LASTpatient, Inc. may use and disclose your protected health information, and your rights regarding that information under HIPAA.
Our responsibilities. We’re required by law to maintain the privacy of your PHI, to provide you with this notice, and to notify you of any breach of unsecured PHI.
How we may use and disclose information. We may use or disclose your PHI for treatment, payment and healthcare operations. We may also use or disclose PHI without authorization in certain situations, such as public health activities, law enforcement, or when the law requires it.
Your rights. You have the right to access your PHI, request amendments, receive an accounting of disclosures, request restrictions, and get a paper copy of this notice at any time.
Contact. If you have questions or want to exercise your rights, email support at lastpatient dot io.
Data processing agreement
This data processing agreement governs how LASTpatient, Inc. (the “Processor”) processes personal data on behalf of its clients (each a “Controller”).
1. Subject matter
The Processor processes personal data on behalf of the Controller, in compliance with applicable data protection laws.
2. Processor obligations
The Processor keeps personal data confidential, uses appropriate security measures, and processes it only as the Controller instructs.
3. Sub-processors
The Processor engages sub-processors only with the Controller’s consent.
4. Data subject rights
The Processor helps the Controller respond to requests from people exercising their data protection rights.
Disclaimer
The information LASTpatient, Inc. provides on its website and in its services is for general informational purposes only.
1. No medical advice
Content isn’t a substitute for professional medical diagnosis, treatment or advice. Nothing on the website recommends treatment for any patient; clinical decisions remain with qualified clinicians. Examples and estimates on the website, including any analysis of what might have happened under a different decision, are illustrative.
2. No liability
To the fullest extent the law allows, we disclaim all liability for damages resulting from the use of our website or services.
3. External links
Our website may contain links to third-party websites, which we don’t control or endorse.