1. Introduction
Sozo Digicare is committed to protecting the privacy and security of our users and their data. This policy outlines how we collect, store, and use personal data in compliance with GDPR and HIPAA.
2. Data Collection
- Personal Identification Information (PII): Name, address, date of birth, email, phone, SSN.
- Medical Information: Health history, treatment records, prescriptions, lab results.
- Financial Information: Insurance details, billing info, payment history.
- Technical Data: IP address, browser, device info, usage data.
Data is collected through registration forms, consultations, EHR integrations, cookies, and tracking technologies.
3. Data Storage
- Storage Locations: Secure, compliant data centers and cloud services.
- Security Measures: AES-256 encryption, role-based access, regular audits, backups.
4. Data Usage
- Providing and improving medical care
- Communicating with patients
- Processing billing and insurance claims
- Analyzing service usage and improving offerings
- Meeting legal and regulatory requirements
4.2 Data Sharing
- Healthcare providers for coordinated care
- Insurance companies for claims processing
- Legal authorities if required by law
- Authorized service providers under confidentiality
4.3 User Rights
- Access: View your personal data
- Correction: Fix incorrect/incomplete data
- Deletion: Request removal, where legally applicable
- Objection: Object to certain processing activities
- Portability: Transfer data to another provider
5. Data Retention
We retain data only as long as necessary for service delivery and legal compliance. When no longer needed, data is securely deleted or anonymized.
6. Policy Updates
This policy may be updated to reflect changes in our practices or regulations. We'll notify users of significant changes via our website or direct communication.
