This Privacy Policy describes how Soraca Med, operating across Europe and America (collectively, the “Clinic”), collects, uses, and discloses your personal information when you use our website (the “Site”) and the healthcare services we provide.
Compliance with Regulations:
Soraca Med recognizes the importance of protecting your privacy and adheres to the following data protection regulations:
- General Data Protection Regulation (GDPR): Applicable to personal information of individuals located in the European Economic Area (EEA).
- Health Insurance Portability and Accountability Act (HIPAA): Applicable to protected health information (PHI) of individuals in the United States.
Information We Collect:
We collect various types of information depending on your interaction with the Clinic:
- Website Information: We may collect data about your browsing activity on the Site, including visited pages, actions taken, and device information (IP address, browser type). This information helps us improve website functionality and user experience.
- Personal Identification Information (PII): When you register, request appointments, or utilize our services, we may collect PII such as name, email address, phone number, mailing address, date of birth, and medical history. This information is essential for providing healthcare services and communication.
- Payment Information: We may collect credit card or other payment information for billing purposes. We utilize secure payment gateways to protect this sensitive data.
- Medical Records: We collect and maintain detailed medical records during your treatment, including diagnoses, medications, test results, and treatment notes. This information is vital for providing quality care.
Use of Information:
We use the information we collect for the following purposes:
- Provide Healthcare Services: We utilize your information to diagnose, treat, and manage your healthcare needs. This includes scheduling appointments, sending appointment reminders, and coordinating care with other providers.
- Website Management: We analyze website usage data to improve the Site’s functionality, user experience, and content relevance.
- Communication: We may use your contact information to send appointment reminders, clinic updates, and health information resources you might find helpful.
- Marketing (Limited): We may use anonymized website data for targeted advertising related to healthcare services (subject to your consent, where applicable). We will never sell your personal information for marketing purposes.
- Compliance: We may use your information to comply with legal and regulatory requirements, including medical record retention and reporting obligations.
Data Sharing and Disclosure
We will only share your personal information with third parties under the following circumstances:
- Healthcare Providers: We may share your medical records with other healthcare providers involved in your treatment, with your prior authorization.
- Business Associates: We may share limited information with business associates who assist us in providing services, such as appointment scheduling or billing companies. These associates are contractually obligated to maintain the confidentiality and security of your data.
- Legal Requirements: We may disclose your information if compelled by law or court order, to protect our legal rights, or in response to a legitimate public health threat.
Data Security
Soraca Med takes all reasonable steps to ensure the security of your personal information, including:
- Secure storage facilities (physical and electronic)
- Access controls and encryption
- Regular security audits and employee training
Your Rights:
Depending on your location, you may have various rights regarding your personal information:
- Right to Access: You have the right to request a copy of your personal information held by the Clinic.
- Right to Rectification: You have the right to request the correction of any inaccurate personal information.
- Right to Restriction: You may request to restrict the processing of your personal information under certain circumstances.
- Right to Erasure (Right to be Forgotten): You may request the deletion of your personal information under certain circumstances.
Children’s Privacy
The Clinic does not knowingly collect information from children under the age of 13. We encourage parents and guardians to be involved in their children’s online activities and to contact us if they believe their child has provided personal information to the Clinic.
Changes to this Privacy Policy
We reserve the right to update this Privacy Policy periodically. We will notify you of any significant changes by posting the revised policy on the Site and through other communication channels.
Contact Us
If you have any questions about this Privacy Policy or your privacy rights, please contact us at [email protected] or by phone at +90 534 686 16 28.
Additional Considerations
- For European users, you will need to specify how you obtain consent for data collection and processing according to GDPR requirements.
- For US users, you may want to clarify the specific types of PHI collected under HIPAA.
- You may want to include a section on data retention policies, outlining how long you