Privacy Policy

    Your privacy and data security are our top priorities. Learn how we protect and handle your information.

    Last Updated: December 2024
    HIPAA Compliant

    Privacy Policy Summary

    Data Minimization

    We only collect data necessary for service delivery

    No Sale of Data

    We never sell your personal or patient data

    User Control

    You can access, modify, or delete your data anytime

    Encrypted Storage

    All data encrypted with 256-bit AES encryption

    Compliance

    HIPAA and ISO certified

    Transparent Sharing

    Clear disclosure of any data sharing practices

    1. Information We Collect

    Personal Information

    When you use Birlamedisoft healthcare solutions, we may collect:

    • Name, email address, phone number, and job title
    • Healthcare facility information and role
    • Account credentials and authentication data
    • Billing and payment information

    Patient Health Information (PHI)

    As a healthcare management system, we process:

    • Patient demographics and contact information
    • Medical records, diagnoses, and treatment data
    • Laboratory results and imaging data
    • Insurance and billing information
    • Appointment and scheduling data

    System Usage Data

    To improve our services, we collect:

    • Login times, feature usage, and system performance data
    • Error logs and technical support interactions
    • Anonymized usage analytics and trends

    2. How We Use Your Information

    Service Delivery

    • Providing and maintaining the HIMS platform
    • Processing healthcare workflows and patient care
    • Generating reports and analytics for healthcare management
    • Facilitating communication between healthcare providers

    System Improvement

    • Analyzing usage patterns to enhance functionality
    • Identifying and fixing technical issues
    • Developing new features based on user needs
    • Optimizing system performance and security

    Legal and Compliance

    • Meeting healthcare regulatory requirements
    • Responding to legal requests and audits
    • Maintaining required records and documentation
    • Ensuring HIPAA and other compliance standards

    3. Data Security & Protection

    Encryption & Access Controls

    • 256-bit AES encryption for data at rest and in transit
    • Role-based access controls and multi-factor authentication
    • Regular security audits and penetration testing
    • Secure data centers with 24/7 monitoring

    Compliance Certifications

    • HIPAA Business Associate Agreement compliance
    • ISO 27001:2022 security management standards

    Incident Response

    • 24/7 security monitoring and threat detection
    • Documented incident response procedures
    • Immediate breach notification protocols
    • Regular backup and disaster recovery testing

    4. Data Sharing & Disclosure

    We DO NOT Share Data With:

    • Third-party advertisers or marketing companies
    • Data brokers or analytics firms
    • Social media platforms
    • Non-healthcare related businesses

    Limited Sharing When Required:

    • Healthcare providers within your organization (with proper authorization)
    • Authorized third-party integrations you explicitly approve
    • Legal authorities when required by law
    • Business associates under signed BAAs for service delivery

    5. Your Rights & Choices

    Data Access & Control

    • Access and export your data at any time
    • Correct or update personal information
    • Request deletion of data (subject to legal requirements)
    • Control data sharing preferences

    Communication Preferences

    • Opt out of non-essential communications
    • Choose preferred contact methods
    • Control marketing and promotional messages
    • Manage notification settings

    6. Contact Information

    If you have questions about this Privacy Policy or how we handle your data, please contact us:

    Privacy Enquiries

    info@birlamedisoft.com

    HIPAA Privacy Policy Notice

    BIRLAMEDISOFT PVT LTD.

    NOTICE OF PRIVACY PRACTICES

    THIS NOTICE OF PRIVACY PRACTICES DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

    Please review it carefully.

    Last Updated On: 29-07-2025

    Overview

    Your access to and use of the Birlamedisoft Pvt Ltd. services, which includes this website https://www.birlamedisoft.com/ and the information, community, products, and services (collectively, the “Birlamedisoft Pvt Ltd. Services”) that we provide to you, are subject to the Birlamedisoft Pvt Ltd. Services Terms of Use and this Privacy Policy.

    Birlamedisoft Pvt Ltd. has created this Privacy Policy to explain what information we gather from you when you visit any Birlamedisoft Pvt Ltd. Service, how we may use this information, the security approaches we use to protect your information, and how you can access and request modification of certain information that we may store about you.

    Please note that this Privacy Policy applies only to information collected via the Birlamedisoft Pvt Ltd. Services. It does not apply to information you disclose to Birlamedisoft Pvt Ltd. through other means. This Privacy Policy is incorporated and made part of the Birlamedisoft Pvt Ltd. Services Terms of Use.

    Your Acceptance of This Privacy Policy and Changes to It

    By accessing, viewing, or otherwise using any Birlamedisoft Pvt Ltd. Service, you consent to the collection and use of your information by Birlamedisoft Pvt Ltd. in accordance with this Privacy Policy. If you do not agree to this Privacy Policy, you may not use any Birlamedisoft Pvt Ltd. Service.

    Birlamedisoft Pvt Ltd. reserves the right to change, modify, add, or remove portions of this Privacy Policy at any time, without prior notice. Changes take effect on the date that appears on the revised Privacy Policy.

    If you use the Birlamedisoft Pvt Ltd. Service following a change in this Privacy Policy, your use will be understood to signal that you accept and agree to be bound by the changes. Accordingly, we urge you to review this Privacy Policy frequently for changes.

    What Information Do We Collect?

    We collect personally identifiable information (“Personal Information”) and other non-individually identifiable information from you when you register on the Birlamedisoft Pvt Ltd. Services, respond to communications such as email, or otherwise use the Birlamedisoft Pvt Ltd. Services in any manner.

    For purposes of these services, please note that Personal Information includes information you provide about yourself or other family members on whose behalf you are using the Birlamedisoft Pvt Ltd. Services. “You” and “your” include you and these family members.

    To participate in certain features of the Birlamedisoft Pvt Ltd. Services, you will be required to provide such Personal Information. For example, when registering as a user on any Birlamedisoft Pvt Ltd. Service, we may ask for your name, email address, mailing address, phone number, credit card information (if additional services requiring fees are added), or other information such as date of birth, sex at birth, ethnicity, zip code, relevant personal medical history, and family history, which enables us to provide the Services. You may, however, visit portions of the Birlamedisoft Pvt Ltd. Services without providing any Personal Information.

    We may collect and use mobile device identifiers, IP addresses, and session identifiers to analyze trends, administer the Birlamedisoft Pvt Ltd. Services, track user activities, infer user interests, and otherwise induce, deduce, and gather information about individual users and market segments.

    We use “cookies” to enhance your experience and gather information about visitors and visits to the Birlamedisoft Pvt Ltd. Services. Please refer to the "Do we use ‘cookies’?" section below for information about cookies and how we use them.

    We may also collect and store certain other personally non-identifiable information. This information is collected passively using various technologies and cannot presently be used to specifically identify you.

    How Do We Use Your Information?

    We may use the Personal Information and other data we collect from you when you register, respond to a survey or marketing communication, access or view the Birlamedisoft Pvt Ltd. Services, or use certain other Birlamedisoft Pvt Ltd. Service features in the following ways:

    • To provide any legitimate business service.
    • To personalize your Birlamedisoft Pvt Ltd. Service and to allow us to deliver the type of content and product offerings in which you are most interested.
    • To better service you in responding to your customer service requests.
    • To validate your identity.
    • To administer a promotion or other Birlamedisoft Pvt Ltd. Service feature.
    • To troubleshoot problems with the Birlamedisoft Pvt Ltd. Services or any services as requested.
    • To enforce the Birlamedisoft Pvt Ltd. Terms of Use and to detect and protect against errors, fraud, and other unauthorized or illegal activities.
    • To attempt to contact you regarding product safety or recall.

    We may also de-identify and aggregate your Personal Information for purposes such as research.

    • Aggregated Data is information that has been combined with that of other users and analyzed as a whole, such that no specific individual may be reasonably identified.
    • De-identified Information is information that has been stripped of your identifiers, such as name, contact information, and other identifying data, such that you cannot reasonably be identified as an individual.

    You understand and agree that if you are using any Birlamedisoft Pvt Ltd. Service from a country outside the United States and provide Personal Information to the Birlamedisoft Pvt Ltd. Service, you will be authorizing and consenting to the transfer of Personal Information about yourself to the United States.

    You understand that the privacy laws of the United States may be different from and not as comprehensive or protective as those in your country, and you agree that the transfer of your Personal Information to the United States occurs with your consent. Personal Information collected on the Birlamedisoft Pvt Ltd. Service may be stored and processed in the United States or abroad.

    How Do We Communicate With You?

    When you send email or other communications to Birlamedisoft Pvt Ltd., we may retain those communications in order to process your inquiries, respond to your requests, and improve our Services and related products and services. When you send and receive messages, we may collect and maintain information associated with those messages.

    We will also send you strictly service-related announcements on a few occasions when it is necessary to do so. For instance, if our Services are temporarily suspended for maintenance, we might send you an email. Generally, you may not opt-out of these communications, which are not promotional in nature. If you do not wish to receive them, you have the option to deactivate your account.

    Based upon the Personal Information you provide us, we may send you a welcome email to verify your username and password. We will communicate with you in response to your inquiries, to provide the services you request, and to manage your account. We will communicate with you by email or telephone, in accordance with your preference. You may contact customer service at info@birlamedisoft.com.

    You acknowledge that by providing us with your telephone number, cell phone number, and email address, we may use that information to send you information that you or your provider request on products and services offered by us or one of our partners. If we do, out of respect for your privacy, we will provide an option not to receive these types of communications. Please review the Terms of Use for more information on the ways in which we may communicate with you.

    The Information We Disclose to Outside Parties

    We may disclose your Personal Information and other data to third parties as follows:

    • To our subsidiaries or affiliates, strategic partners, and to third parties we engage to provide services on our behalf, such as website hosting, order processing, and delivery. Our agreements with these third parties require them to protect this data and prohibit these parties from using your Personal Information for any other purpose.
    • In the event of the sale or transfer of Birlamedisoft Pvt Ltd., one or more of our business units, or some or all of our assets, or in the context of some other business acquisition transaction.
    • In response to a subpoena or court order, or a request from a law enforcement or other government agency; to establish or exercise our legal rights, or to defend against claims; or to protect the safety or security of the public or of users of the Birlamedisoft Pvt Ltd. Services.

    We provide additional notice and ask for your consent if we wish to share your information with our commonly owned entities in a materially different way than discussed in this Privacy Policy.

    Your Rights

    You have the right to:

    • Get a copy of your electronic medical information: You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
    • Correct your electronic medical information: You can ask us to correct health information about you that you think is incorrect or incomplete. Ask us how to do this. We may say “no” to your request, but we will tell you why in writing within 60 days.
    • Request confidential communications: You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say “yes” to all reasonable requests.
    • Ask us to limit the information we use or share: You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request and may say “no” if it would affect your care.
      If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.
    • Get a list of those with whom we have shared your information: You can ask for a list (accounting) of the times we have shared your health information for six years prior to the date you ask, who we shared it with, and why.
      We will include all disclosures except those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We will provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
    • Get a paper copy of this privacy notice: You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy.
    • File a complaint if you believe your privacy rights have been violated: You can complain if you feel we have violated your rights by contacting us using the information on the contact page.
      You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
      We will not retaliate against you for filing a complaint.

    You can exercise your rights by sending us an email at info@birlamedisoft.com.

    Opt-Out Choices

    To “opt-out” of any of the following, send an email to info@birlamedisoft.com:

    • Any consents previously given to us,
    • Receiving communications from us, or
    • Having Personal Information disclosed to third parties.

    Notwithstanding this right to request to cease receiving communications from us and to have us not share Personal Information with third parties, we retain the right to collect, maintain, and process information provided by and collected about you on and through the Services and disclose such information to comply with reasonable business and legal obligations.

    Do We Use “Cookies”?

    Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser or mobile device that enable the site’s or service provider’s systems to recognize your browser and capture and remember certain information. Cookies help us in many ways to make your use of the Birlamedisoft Pvt Ltd. Services more enjoyable and meaningful, such as understanding usage patterns and improving functionality.

    For instance, we use cookies to help us understand your preferences based on previous or current Birlamedisoft Pvt Ltd. Services activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about Birlamedisoft Pvt Ltd. Services traffic and interactions so that we can offer better Birlamedisoft Pvt Ltd. Services experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our Birlamedisoft Pvt Ltd. Service visitors.

    If you are using our website, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. If you are accessing our mobile app, you can choose to change your permissions and settings on your mobile device. Each browser and device is a little different, so look at your browser or device’s Help or Settings menu to learn the correct way to modify them.

    If you turn cookies off or disable certain permissions, you will not have access to many features that make your Birlamedisoft Pvt Ltd. Service more efficient, and some of our services will not function properly.

    “Do Not Track”

    We do not track our customers over time and across third-party websites to provide targeted advertising and therefore do not respond to Do Not Track (DNT) signals. However, some third-party sites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such sites, you need to set the DNT signal on your browser so that third parties (particularly advertisers) know you do not want to be tracked.

    Safeguarding Your Personal Information

    Birlamedisoft Pvt Ltd. follows generally accepted industry security standards to safeguard and help prevent unauthorized access and maintain data security of Personal Information. However, no commercial method of information transfer over the Internet or electronic data storage is known to be 100% secure. As a result, we cannot guarantee the absolute security of any Personal Information submitted to or otherwise collected during your use of any Birlamedisoft Pvt Ltd. Service.

    Accordingly, you understand and agree that you transmit all data, including Personal Information, to us at your own risk.

    Privacy and Third-Party Links

    This Privacy Policy applies solely to information collected by the Birlamedisoft Pvt Ltd. Service through our website located at www.birlamedisoft.com and the mobile application(s) we make available. In an attempt to provide you with increased value, we may include third-party links on the Birlamedisoft Pvt Ltd. Services. This Privacy Policy does not apply to the third-party sites and services accessible through these links, and we suggest that you contact the operator of the third-party service to obtain details about their privacy policies. We have no responsibility or liability for the content and activities of these linked sites or services.

    Nonetheless, we seek to protect the integrity of the Birlamedisoft Pvt Ltd. Services and welcome any feedback about these linked sites (including if a specific link does not work).

    Exclusions

    This Privacy Policy shall not apply to any unsolicited information you provide to us through the Birlamedisoft Pvt Ltd. Services or through any other means. This includes, but is not limited to, any ideas for new products or modifications to existing products, and other unsolicited submissions (collectively, “Unsolicited Information”). All Unsolicited Information shall be deemed to be non-confidential and we shall be free to reproduce, use, disclose, and distribute such Unsolicited Information to others without limitation or attribution.

    Children’s Privacy

    The Birlamedisoft Pvt Ltd. Service is intended only for use by adults, either for themselves or on behalf of their minor children. We do not knowingly collect information directly from children under the age of thirteen. If you have reason to believe that a child under the age of thirteen has provided Personal Information to us through the Birlamedisoft Pvt Ltd. Service, please contact us, and we will endeavor to delete that information from our databases.

    Retention of Your Personal Information

    We will store the Personal Information you provide for as long as necessary based on our Retention Policy to:

    • carry out the purpose(s) for which we collected it, or
    • comply with applicable laws, contracts, or other rules.

    Questions and Feedback

    We welcome your questions, comments, and concerns about the Birlamedisoft Pvt Ltd. Services. Please send any and all feedback pertaining to the Birlamedisoft Pvt Ltd. Services to info@birlamedisoft.com.

    The information contained in this Privacy Policy is subject to change without notice.

    For full details, please contact us at info@birlamedisoft.com.