Cloud Healthcare Manager – Privacy Policy
At Cloud Healthcare Manager, we respect your privacy and are committed to protecting the personal and health information you share with us. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our website, platform, and related services (the “Services”).
1. Information We Collect
We may collect the following types of information when you interact with our Services:
Personal Information: Name, email address, phone number, and practice details.
Patient Data: Health records, appointment history, billing information, and other data you upload to our platform.
Payment Information: Transaction details, merchant account details, and payment history.
Technical Data: IP address, device type, browser information, and cookies for analytics and security.
2. How We Use Your Information
We use collected information to:
Provide and maintain our free, HIPAA-compliant practice management platform.
Facilitate scheduling, billing, and payment processing.
Improve functionality, security, and user experience.
Ensure compliance with legal and regulatory obligations.
Communicate with you regarding updates, security notices, and support.
3. HIPAA Compliance & Patient Data
Cloud Healthcare Manager is HIPAA-compliant by design.
We implement administrative, technical, and physical safeguards to protect Protected Health Information (PHI).
We act as a Business Associate (BA) under HIPAA and will enter into a Business Associate Agreement (BAA) with Covered Entities (your practice) as required by law.
You, as the healthcare provider, remain the “Covered Entity” responsible for ensuring lawful use of PHI.
4. Sharing of Information
We do not sell or rent your personal or patient information. We may share information only in the following circumstances:
With Service Providers: Such as payment processors, analytics tools, and hosting providers, bound by confidentiality and compliance obligations.
For Legal Reasons: When required to comply with laws, regulations, or valid legal processes.
Business Transfers: In case of a merger, acquisition, or sale of assets, your information may be transferred under strict confidentiality protections.
5. Data Security
All data is encrypted in transit and at rest.
Access is restricted based on role and necessity.
Regular audits, penetration testing, and monitoring are conducted.
In case of a data breach, we will notify affected users and authorities in compliance with applicable laws.
6. Your Rights
Depending on your location, you may have the following rights:
Access and obtain a copy of your personal data.
Request correction or deletion of your data.
Restrict or object to data processing.
Opt out of non-essential cookies or marketing communications.
Request a signed Business Associate Agreement (BAA) for HIPAA compliance.
7. Cookies & Tracking Technologies
We use cookies and similar technologies for website functionality, analytics, and security. For more details, please review our Cookie Policy.
8. International Users
Our Services are primarily intended for users in the United States. If you access the platform from outside the U.S., you agree that your information may be transferred and stored in the U.S., where data protection laws may differ.
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any updates will be posted here with a revised “Last Updated” date. Continued use of our Services after changes indicates acceptance of the updated policy.
10. Contact Us
For any questions or concerns regarding this Privacy Policy, please contact us at:[email protected]