Privacy Policy
Version 1.0
Last revised on: 22th of October, 2024
General
Your privacy is a priority for us at AllClinics. This Privacy Policy explains the types of personal information we collect when you interact with our website (allclinics.io, the “Website”), communicate with us via email, phone, or other channels, or use our services. It also outlines how and why we process your data, including how we handle Protected Health Information (“PHI”) as required by the Health Insurance Portability and Accountability Act (“HIPAA”). Additionally, it describes how you can manage your personal information and contact us with any privacy-related inquiries.
Your Consent
Please read this Privacy Policy carefully. By accessing and using the Website, you agree to the collection and processing of your personal information as outlined in this document. If you disagree with any part of the policy, please refrain from using the Website. If you receive our marketing communications, you can unsubscribe by clicking the ‘unsubscribe’ link in any email received from AllClinics. This Website does not offer services directly to children. If you are under the age of 16 and wish to contact us, please provide written consent from your parent or guardian for the processing of your personal information.
Third-Party Links
The Website may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling those connections may allow third parties to collect your personal information. AllClinics does not control third-party websites and is not responsible for their content or privacy practices. We recommend reviewing the privacy policies of any third-party sites you visit.
Collection of Data
AllClinics collects data to enhance user experience, provide relevant content to visitors, existing and potential clients, and business partners, and ensure compliance with legal requirements, including HIPAA. We may collect personal data when you:
- Submit information via the Website’s contact form.
- Provide information through email, phone, or messaging apps.
- Use our services, which may involve the collection of PHI as necessary for providing information related to treatment, payment, or healthcare operations, in strict compliance with HIPAA regulations.
The data we may collect includes:
- Personal identifiers such as name, email address, phone number, company, and job title.
- Browsing behavior on the Website, including IP address, location data, and visit statistics.
- Information obtained through our marketing, sales, and recruitment efforts.
- PHI, which may include health-related data necessary for services provided.
We do not intentionally collect sensitive personal data (e.g., race, religion, sexual orientation) unless required by law or necessary to provide services in compliance with HIPAA. Any personal data collected is used solely for purposes outlined in this policy, and we do not engage in profiling or automated decision-making.
HIPAA Compliance
AllClinics adheres to HIPAA regulations when handling PHI. We implement administrative, physical, and technical safeguards to protect PHI from unauthorized access, use, or disclosure. We only share PHI when necessary for treatment, payment, healthcare operations, or as required by law. You have the right to access, amend, and request restrictions on the use of your PHI in accordance with HIPAA. Please contact us at privacy@allclinics.io to exercise these rights.
Sharing of Data
We may share your personal information, including PHI, with:
- Service providers and business partners assist us with data processing and other activities, provided they are bound by appropriate confidentiality agreements and comply with HIPAA regulations regarding the handling and protection of PHI.
- Legal authorities if required by law, to protect our legal rights or for public health activities as permitted under HIPAA.
- Third parties in the event of a business merger or acquisition.
- Other parties with your explicit consent.
Your personal information will not be sold or disclosed to third parties for marketing purposes without your consent.
Legal Basis for Processing
AllClinics processes your personal data in accordance with applicable U.S. privacy laws, including HIPAA, the California Consumer Privacy Act (“CCPA”), and the General Data Protection Regulation (“GDPR”). The legal grounds for processing your data are based on:
- Legitimate Business Interest: We process personal data when necessary for our legitimate business interests, such as providing services, improving our Website, and communicating with you.
- Consent: We process personal data based on your consent, such as when you sign up for newsletters or marketing communications. You may withdraw your consent at any time.
- Contractual Obligation: We process data to fulfill our contractual obligations to you, such as when providing services.
- Compliance with Legal Requirements: We may process your personal data to comply with legal obligations, including those imposed by HIPAA, to ensure the confidentiality of PHI.
Location of Processing
Your data, including PHI, shall be processed within the U.S. Regardless of location, we take appropriate steps to ensure that your data is handled securely and in compliance with all applicable laws, including HIPAA and GDPR.
Data Retention
AllClinics will retain your personal data, including PHI, only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.
Your Rights
You have several rights regarding your personal data, including the right to:
- Be informed about how your data is collected and used.
- Access your personal data and request the correction of any inaccuracies.
- Request the deletion or restriction of your personal data.
- Object to the processing of your personal data.
- Withdraw consent at any time, where consent is the basis for processing.
- Request access to your PHI and seek amendments as allowed under HIPAA.
- Lodge a complaint with a data protection authority. To exercise these rights, contact us at privacy@allclinics.io.
Cookies
The Website uses cookies to improve your browsing experience. Cookies are small files stored on your device to recognize you on subsequent visits and collect non-identifiable data such as browser type, time of visit, and navigation patterns. By using the Website, you consent to the use of cookies. You can control cookie settings in your browser, but disabling cookies may affect your experience on the Website.
Contact Details
For any questions or requests regarding this Privacy Policy or HIPAA compliance, please contact us at privacy@allclinics.io with the subject line “Privacy Policy Request.” Address: 1111b South Governors Avenue Dover, DE, 19904 US Email: privacy@allclinics.io Tel: 15109965941
Data Controller
For the purposes of GDPR, the Data Controller is AllClinics, Inc. d/b/a AllClinics, registered in 1111b South Governors Avenue Dover, DE, 19904 US. AllClinics is responsible for handling and processing personal data in accordance with all applicable U.S. data privacy laws, including HIPAA and the CCPA.
Policy Version
This Privacy Policy was last updated on [22.10.2024]. We reserve the right to amend this policy at any time. Any changes will be posted on this page, and continued use of the Website indicates acceptance of the updated terms.