Privacy Policy for Via Cura

Last Updated: 01/30/2025

1. Introduction

Welcome to Via Cura, a secure and compliant platform for managing electronic health records (EHR). We value the privacy and security of your health information and are committed to safeguarding it in accordance with applicable laws and regulations, including HIPAA (Health Insurance Portability and Accountability Act) in the United States. This Privacy Policy explains how we collect, use, store, and protect your personal health data when you use our services.

By using our platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you are a healthcare provider, we expect you to manage your patients' data responsibly, in compliance with healthcare laws and best practices.

2. Information We Collect

We collect the following types of information:

• Personal Health Information (PHI): We collect sensitive health data, including:
  • Medical history
  • Diagnosis details
  • Prescription information
  • Laboratory results
  • Treatment plans
  • Other health-related information as needed
• Personal Information: We may collect personal information such as:
  • Name
  • Email address
  • Phone number
  • Billing information (such as credit card details)
  • Account information (username, password, user preferences)
• Usage Data: We collect information on how you access and use the service, including:
  • IP addresses
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on the platform
  • Referring URLs
  • Interaction data (e.g., clicks, form submissions)
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance the user experience, analyze usage patterns, and provide personalized content. You can control the use of cookies through your browser settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our EHR services
• To facilitate communication between healthcare providers and patients
• To process billing and payments for healthcare services
• To ensure the security of sensitive health data in compliance with HIPAA and other regulations
• To comply with legal obligations and industry standards
• To analyze usage trends and improve the user experience

4. Data Sharing and Disclosure

We are committed to maintaining the confidentiality of your health information. We do not sell or share your personal health information with third parties, except in the following circumstances:

• Service Providers: We may share data with trusted third-party vendors who help us provide and maintain the service (e.g., payment processors, cloud hosting providers). These vendors are bound by confidentiality agreements and are required to protect your data in accordance with applicable laws.
• Legal Requirements: We may disclose your information if required to do so by law, such as responding to subpoenas, court orders, or regulatory requests.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your health data may be transferred, but we will ensure that your privacy is protected under the terms of this policy.
• With Your Consent: We may share your information with your explicit consent, such as when you authorize us to share your data with a healthcare provider or third party.

5. Data Security

We take the security of your personal health information very seriously. We implement strong security measures to protect against unauthorized access, use, or disclosure of your data, including encryption, firewalls, and access controls. However, no method of electronic transmission or storage is completely secure, and while we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal health information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Once the information is no longer needed, we will securely delete or anonymize it in accordance with industry standards and legal requirements.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal health information, including:

• The right to access and obtain a copy of your health data
• The right to request corrections to inaccurate or incomplete information
• The right to request the deletion of your data (subject to certain legal exceptions)
• The right to restrict or object to the processing of your data
• The right to data portability

To exercise these rights, please contact us at [email address or support link].

8. Compliance with HIPAA and Other Laws

[Your EHR Software Name] is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) and other relevant privacy and security regulations. We ensure that all health information is handled with the utmost care and in accordance with legal standards that protect patient privacy.

9. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal health information from children. If we learn that we have inadvertently collected such information, we will take steps to delete it as soon as possible.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make significant changes, we will notify you via email or through a notice on our website. The "Last Updated" date at the top of this policy will indicate when it was last revised.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: support@viacura.net
• Address: Via Cura, LLC 313 East Main Street Ste 8 Hendersonville, TN 37075