Privacy Policy

Your privacy and the security of your healthcare data is our top priority. This policy explains how we collect, use, and protect your information.

Last updated: December 8, 2024
HIPAA Compliant

Healthcare Data Protection

Rinova is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable healthcare privacy regulations. We implement administrative, physical, and technical safeguards to protect your protected health information (PHI).

Information We Collect

  • Personal Information: Name, email address, phone number, professional credentials, and healthcare organization details when you register or contact us.
  • Health Information: Patient data, medical records, diagnostic information, and treatment data processed through our platform (handled in accordance with HIPAA regulations).
  • Usage Data: Information about how you use our platform, including log files, IP addresses, browser type, and access times.
  • Device Information: Information about the devices you use to access our services, including device identifiers and operating system information.

How We Use Your Information

  • Provide and improve our healthcare platform services and functionality.
  • Process and analyze medical data to support clinical workflows and documentation.
  • Communicate with you about our services, updates, and support matters.
  • Ensure platform security and prevent unauthorized access or misuse.
  • Comply with legal obligations and regulatory requirements in healthcare.
  • Conduct research and development to enhance platform features (using de-identified data only).

Data Security & Protection

  • End-to-end encryption for all data transmission and storage.
  • SOC 2 Type II certified infrastructure with regular security audits.
  • Multi-factor authentication and role-based access controls.
  • Regular security training for all personnel with access to systems.
  • Incident response procedures and breach notification protocols.
  • Data backup and disaster recovery systems to ensure continuity.

Information Sharing

  • We do not sell, rent, or trade your personal or health information to third parties.
  • Information may be shared with authorized healthcare providers within your organization.
  • De-identified, aggregated data may be used for research and platform improvement.
  • We may share information when required by law or to protect rights and safety.
  • Service providers and vendors who assist in platform operations (under strict confidentiality agreements).
  • In case of business transfer, information may be transferred to the acquiring entity.

Your Privacy Rights

You have the following rights regarding your personal information

  • Access your personal information and request copies of your data
  • Correct inaccurate or incomplete personal information
  • Request deletion of your personal information (subject to legal requirements)
  • Object to processing of your personal information in certain circumstances
  • Request restriction of processing your personal information
  • Data portability - receive your data in a structured, machine-readable format
  • Withdraw consent where processing is based on consent

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

Healthcare data is retained in accordance with applicable medical record retention requirements and regulatory guidelines. When data is no longer needed, it is securely deleted or anonymized.

You may request deletion of your personal information at any time, subject to legal and regulatory requirements that may require us to retain certain information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer your information internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this privacy policy and applicable laws.

We use standard contractual clauses approved by regulatory authorities and ensure all service providers meet our strict data protection standards.

Contact Us About Privacy

If you have questions about this privacy policy or our privacy practices, please contact our Data Protection Officer:

Email: privacy@rinova.health

Phone: +1 (555) 123-4567

Address: Rinova Privacy Office
123 Healthcare Drive
Medical District, TX 75201

We will respond to your privacy-related inquiries within 30 days of receipt.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors

When we make material changes to this policy, we will notify you by email (if you have provided an email address) and/or by posting a notice on our platform.

We encourage you to review this privacy policy periodically to stay informed about how we protect your information.