Privacy Policy

Last updated: 2026-10-13. This is a template policy and must be reviewed by qualified counsel before publication.

1. Information we collect

We collect information you provide directly — such as your name, organisation, role, email address, telephone number and the content of your enquiry. Where we provide services, we may process Protected Health Information (PHI) and financial information on behalf of our clients as a Business Associate.

2. How we use information

We use information to respond to enquiries, deliver and improve our services, meet contractual and legal obligations, and maintain the security and integrity of our systems. We do not sell personal information.

3. Protected Health Information

Where we handle PHI, we do so under a written Business Associate Agreement and in accordance with the Health Insurance Portability and Accountability Act (HIPAA). PHI is accessed only by workforce members with a business need, under role-based access controls, on encrypted systems, with activity monitoring.

4. Disclosure

We disclose information only to service providers bound by confidentiality obligations, where required by law, or with your instruction. Subcontractors who may access PHI are covered by downstream Business Associate Agreements.

5. Security

We maintain administrative, physical and technical safeguards including secure access controls, encryption in transit and at rest, continuous monitoring, vulnerability management, and documented disaster recovery protocols.

6. Retention

We retain information only as long as necessary to fulfil the purposes described here, to satisfy contractual requirements, or to comply with applicable law, after which it is securely destroyed.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete or restrict the processing of your personal information. Requests may be submitted to privacy@medaccsolutions.com.

8. Contact

Questions about this policy may be directed to privacy@medaccsolutions.com.