Privacy Policy
ResidentHealth360 LLC ("ResidentHealth360," "we," "us," or "our") is committed to protecting the privacy and security of information entrusted to us. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you access or use our website and services.
1. Scope
This Privacy Policy applies to:
- Visitors to www.residenthealth360.com
- Authorized users of the ResidentHealth360 platform
- Information collected through our services and website
This policy does not replace or supersede any obligations under an executed Business Associate Agreement ("BAA"). Where we handle Protected Health Information ("PHI"), we do so only as permitted by an applicable BAA and HIPAA.
2. Information We Collect
a. Protected Health Information (PHI)
ResidentHealth360 may process PHI solely on behalf of covered entities and only pursuant to an executed BAA. PHI is not intended to be collected through general website contact forms, and you should not submit PHI to us through the website unless specifically authorized under a signed agreement and secure workflow.
b. Non-PHI Information
We may collect the following categories of information:
- Contact information (e.g., name, email address, organization) submitted via inquiry forms or communications
- Account information (e.g., usernames, authentication-related identifiers)
- Usage information (e.g., feature usage, pages viewed, timestamps)
- Device and technical data (e.g., IP address, browser type, device identifiers)
- Security and audit logs (e.g., sign-in events, access activity, error and diagnostic logs)
3. How We Use Information
We use information for purposes that include:
- Providing, operating, and maintaining the platform
- Authenticating users and enforcing access controls
- Maintaining security, monitoring, auditing, and incident detection/response
- Complying with legal and regulatory obligations
- Improving platform performance, reliability, and user experience
PHI is used only as permitted under applicable BAAs and HIPAA regulations.
4. Disclosures and Sharing
We do not sell PHI or personal information.
We may disclose information as follows:
- To covered entities and authorized users in accordance with an applicable BAA and system permissions
- To service providers that support our operations (e.g., hosting, security, monitoring), under contractual confidentiality and security obligations
- For legal reasons if required by law, legal process, or governmental request
- To protect rights and safety where necessary to enforce agreements, prevent fraud, or address security incidents
5. Data Security
We maintain administrative, technical, and physical safeguards designed to protect information. These may include, as appropriate:
- Encryption in transit and at rest
- Role-based access controls and least-privilege principles
- Multi-factor authentication for administrative access and/or users, as applicable
- Audit logging and monitoring
- Security incident response procedures
No system can be guaranteed 100% secure. However, we maintain safeguards intended to be consistent with HIPAA Security Rule requirements where applicable.
6. Data Retention
We retain information only as long as reasonably necessary to fulfill contractual obligations, support operations, comply with legal and regulatory requirements, and resolve disputes. We securely delete or de-identify information when retention is no longer required, consistent with applicable agreements and law.
7. Your Choices and Rights
Where applicable, individuals may request access, correction, or deletion of certain non-PHI personal information. Requests relating to PHI should generally be directed to the applicable covered entity (e.g., a facility or provider) that controls the PHI.
8. Children's Privacy
The services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 via the website. If you believe a child has provided us information through the website, please contact us so we can address the issue.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective Date above and, where appropriate, provide additional notice through the website or platform.
10. Contact
If you have questions about this Privacy Policy or our privacy practices, contact:
ResidentHealth360 LLC
Email: privacy@residenthealth360.com
This Privacy Policy is provided for general informational purposes and does not constitute legal advice. You should consult qualified counsel to ensure these terms meet your specific business and regulatory requirements.