1. Scope and entity
UHIQ ("we," "our," "us") explains here its handling of personal information collected through its public website, product inquiries, demonstrations and marketing communications. Verify and publish the registered legal entity if UHIQ is a trade name. This notice is not a healthcare provider's HIPAA Notice of Privacy Practices and does not replace customer BAAs.
2. Information collected
Depending on actual use, we may collect names, business email addresses, telephone numbers, job titles, organization name, specialties, provider counts, product interests, messages, consent choices and technical information such as IP address, device/browser data and website interaction records. The exact categories depend on enabled forms and tracking technologies. Do not submit PHI through public marketing forms.
3. Sources and purposes
Information may come from visitors, authorized business contacts and configured service providers. Permitted purposes include responding to inquiries, arranging demos, providing requested materials, maintaining relationships, website functionality and security, complying with law and lawful marketing.
4. Disclosures and providers
We may disclose necessary information to contracted hosting, CRM, communication, analytics and security providers, as actually deployed, and to advisers or authorities where required. Provider categories and any sale/share/targeted-advertising practices must be confirmed in the company data inventory before public publication.
6. Data retention
Personal information is retained only as reasonably necessary for the stated purposes, applicable agreements, security needs and legal requirements. Inquiry and demo information is kept for the established prospect-management period; marketing records until unsubscribe or defined inactivity-based removal, with limited suppression records as necessary; technical logs and analytics for approved operational schedules. Customer PHI retention follows the customer agreement and applicable laws rather than a universal HIPAA medical-record period. Publish category-specific retention periods or meaningful criteria only after the schedule is implemented.
7. International processing
Information may be accessed or processed by authorized personnel and providers in jurisdictions supported by actual infrastructure and operations. Cross-border transfers are evaluated under applicable legal and contractual safeguards; processing locations, offshore access and any US-only residency promises must be verified. Additional contractual mechanisms, including standard contractual clauses where applicable, are used only where required and established.
8. Security
We consider technical and organizational measures appropriate to the information and processing risks. No website or electronic transmission is completely risk-free. Product-specific security and PHI obligations are addressed by applicable agreements.
9. Individual rights
Subject to jurisdiction and exemptions, eligible individuals may request access, correction, deletion, portability and relevant opt-outs. Identity verification, response periods and appeal procedures depend on law. Contact the verified UHIQ privacy channel to submit a request.
10. State privacy disclosures
California residents may have rights under the CCPA/CPRA where applicable, including access, correction, deletion, opt-out of defined sale/sharing and rights related to sensitive data. Colorado, Connecticut, Virginia, Texas and other states may provide access, correction, deletion, portability and relevant opt-outs subject to thresholds/exemptions. Washington's My Health My Data Act can apply to qualifying non-exempt consumer health data, potentially requiring a separate consumer health data notice. Illinois biometric rules apply only if covered biometric identifiers/information are processed. A generic summary does not replace the specific lookback, categories, purposes, retention and advertising disclosures required where each law applies.
11. Children and healthcare information
The public website is for professional/business audiences and is not directed to children under 13. Patient data, where processed for customers, follows applicable healthcare law and customer agreements. Individuals seeking healthcare records ordinarily contact the relevant provider or organization.
12. Policy updates and contact
We may update this notice with an effective date and any additional notice required by law. Company: UHIQ. Privacy inquiries and rights requests: privacy contact pending verification. Registered address: registered address pending approval.