1. Introduction
BMRAO ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
2. Information We Collect
We collect information that you provide directly to us:
- Contact Information: Name, email address, phone number
- Business Information: Clinic name, size, location
- Service Data: Information needed to provide our services
- Communication Data: Messages and correspondence with us
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Comply with legal obligations
4. Patient Data Protection
For OpenEMR hosting services, we implement strict data protection measures:
- All patient data is encrypted at rest and in transit
- Access is restricted to authorized personnel only
- We maintain HIPAA-aligned security practices
- Regular security audits and vulnerability assessments
- You retain full ownership of all patient data
5. Data Sharing
We do not sell, trade, or rent your personal information. We may share information only:
- With your consent
- To comply with legal obligations
- With service providers who assist in our operations
- To protect our rights and safety
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. Upon service termination, we will provide a data export and securely delete your data within 30 days.
7. Data Security
We implement appropriate security measures including:
- SSL/TLS encryption for all data transmission
- Encrypted data storage
- Regular security updates and patches
- Automated daily backups
- Access controls and authentication
8. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Export your data in a portable format
- Opt out of marketing communications
9. International Data Transfers
We offer data hosting in multiple regions (India, US, EU, UAE) to comply with local data residency requirements. Your data will be stored in the region you select.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our services.
11. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: bmrao.office@gmail.com