Privacy Policy
Purpose
This Privacy Policy describes how Medlaunch Concepts LLC (hereinafter referred to as "Medlaunch Concepts") collects, uses, discloses, retains, and protects personal information, and the rights that individuals have with respect to that information. It reflects Medlaunch Concepts's commitment to handling personal information responsibly and in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, "CCPA"), and, where Medlaunch Concepts acts as a HIPAA Business Associate, the Health Insurance Portability and Accountability Act (HIPAA).
Scope
This policy applies to personal information that Medlaunch Concepts collects from or about individuals, including customers and their authorized users, website visitors, prospective customers, and workforce members, through its websites, products, services, and business operations. Protected Health Information (PHI) that Medlaunch Concepts processes on behalf of its customers is governed primarily by HIPAA and the applicable Business Associate Agreement; this policy supplements, and does not replace, those obligations.
Personal Information We Collect
Medlaunch Concepts may collect the following categories of personal information: identifiers such as name, email address, telephone number, and account credentials; professional or employment information; commercial information related to the services purchased or used; internet and network activity information such as log data, device identifiers, and usage information; and, only where Medlaunch Concepts acts as a Business Associate on behalf of a customer, health information. Medlaunch Concepts collects personal information directly from individuals, automatically through the use of its websites and services, and from its customers in the course of providing services.
How We Use Personal Information
Medlaunch Concepts uses personal information to provide, maintain, and improve its products and services; to establish and manage customer accounts and relationships; to communicate with individuals, including for support and service-related messages; to ensure the security and integrity of its systems and data; to comply with legal, regulatory, and contractual obligations; and for other purposes disclosed at the time of collection. Medlaunch Concepts does not sell personal information, and does not use or disclose personal information for purposes incompatible with those described in this policy.
Disclosure of Personal Information
Medlaunch Concepts may disclose personal information to service providers and subprocessors that perform services on its behalf under appropriate contractual protections; to its customers, in connection with the services provided to them; as required to comply with applicable law, legal process, or a governmental request; and in connection with a corporate transaction such as a merger or acquisition, subject to appropriate safeguards. Where Medlaunch Concepts processes PHI as a Business Associate, disclosures are limited to those permitted by HIPAA and the applicable Business Associate Agreement.
Data Retention
Medlaunch Concepts retains personal information for as long as necessary to fulfil the purposes for which it was collected, to provide its services, and to comply with legal, regulatory, and contractual obligations, after which the information is deleted or de-identified. HIPAA-related records are retained for at least six years in accordance with the HIPAA Internal Privacy Policy.
Information Security
Medlaunch Concepts maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction, consistent with its Information Security Policy and applicable regulatory requirements. These safeguards include access controls, encryption of sensitive data in transit and at rest, monitoring and logging, and workforce security awareness training.
Individual Rights
Subject to applicable law and verification of identity, individuals may have the right to request access to the personal information Medlaunch Concepts holds about them; to request correction of inaccurate personal information; to request deletion of personal information; to opt out of the sale or sharing of personal information, noting that Medlaunch Concepts does not sell personal information; and to not be subject to unlawful discrimination for exercising these rights. Requests may be submitted through the contact information below and will be handled in accordance with applicable law. Where Medlaunch Concepts processes personal information on behalf of a customer, it will refer or forward such requests to the relevant customer.
Children's Privacy
Medlaunch Concepts's products and services are not directed to children under the age of thirteen, and Medlaunch Concepts does not knowingly collect personal information directly from children, except as part of PHI processed on behalf of a customer under the applicable Business Associate Agreement.
Changes to This Policy
Medlaunch Concepts may update this Privacy Policy from time to time to reflect changes in its practices or in applicable law. Material changes will be communicated through appropriate means, and the effective date will be updated accordingly.
Contact
Questions, requests, or complaints regarding this Privacy Policy or Medlaunch Concepts's handling of personal information may be directed to the Cybersecurity/Cloud Lead using the contact information published by Medlaunch Concepts.