Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Last updated: January 1, 2024
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include:
- Personal information (name, email address, phone number)
- Account credentials and preferences
- Care provider and client data (when using our platform)
- Communication records and support requests
- Usage data and analytics
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activities
- Comply with legal obligations and protect our rights
As a healthcare technology provider, we are committed to HIPAA compliance. We implement appropriate safeguards to protect Protected Health Information (PHI) and ensure:
- Encryption of data in transit and at rest
- Access controls and user authentication
- Regular security assessments and audits
- Business Associate Agreements with covered entities
- Staff training on privacy and security requirements
We implement industry-standard security measures to protect your information:
- SOC 2 Type II certification
- End-to-end encryption
- Multi-factor authentication
- Regular security monitoring and incident response
- Secure data centers with physical access controls
We do not sell, trade, or otherwise transfer your personal information to third parties except:
- With your explicit consent
- To trusted service providers who assist in our operations
- When required by law or to protect our rights
- In connection with a business transfer or acquisition
All third-party service providers are bound by confidentiality agreements and HIPAA requirements where applicable.
You have the right to:
- Access and review your personal information
- Request corrections to inaccurate data
- Request deletion of your personal information
- Opt-out of certain communications
- Data portability (receive your data in a structured format)
To exercise these rights, please contact us at privacy@carelumi.com
We retain your information for as long as necessary to provide our services and comply with legal obligations. Specific retention periods include:
- Account information: Duration of account plus 7 years
- Transaction records: 7 years from transaction date
- Support communications: 3 years from last contact
- Usage logs: 2 years from collection date
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Email: privacy@carelumi.com
Mail: CareLumi Privacy Officer
123 Healthcare Way
Chicago, IL 60601
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Providing notice through our platform
Your continued use of our services after any changes indicates your acceptance of the updated policy.