Privacy Policy

1. Introduction & Overview

SelfClinic Global Health Technologies Ltd. ("SelfClinic", "we", "us", or "our") is dedicated to protecting the privacy and confidentiality of healthcare practitioners, clinic administrators, and patients worldwide. This Privacy Policy details our data collection, processing, and security practices across our web applications, cloud EHR services, and websites.

2. Information We Collect

In operating our cloud practice management software, we may process:

• Account & Registration Details: Full name, professional title, medical license numbers, clinic name, work email address, billing contact, and telephone number.
• Protected Health Information (PHI): When clinics use SelfClinic as their cloud EHR, all patient records, treatment charts, diagnoses, and prescriptions stored on behalf of healthcare providers are strictly processed under our Business Associate Agreement (BAA) and Data Processing Agreements (DPA).
• Usage & Technical Diagnostics: IP addresses, browser types, device fingerprints, and access timestamps to maintain service security and prevent unauthorized access.

3. How We Safeguard Health Information

We implement industry-leading technical and administrative safeguards:

• End-to-End Encryption: 256-bit AES encryption at rest for all database volumes and TLS 1.3 encryption for all data in transit.
• Granular Role-Based Access: Strict permission controls allowing clinics to restrict record visibility by clinical role.
• Immutable Audit Trails: Every access, chart modification, export, and record view is recorded with non-repudiable audit logs.

4. International Data Transfers (GDPR Compliance)

For European and international healthcare clients, data is hosted in ISO 27001-certified European and regional data centers adhering to EU Standard Contractual Clauses (SCCs) and GDPR Article 28 data processing guidelines.

5. Data Subject Rights

Users and patients have the right to request access to their stored personal data, request corrections, or request data portability and deletion subject to mandatory statutory medical record retention laws.

6. Contact Our Data Protection Officer (DPO)

If you have questions regarding our privacy practices or wish to execute a Business Associate Agreement (BAA), please contact our Data Protection Office at:

✉️ privacy@selfclinic.org
📍 750 Lexington Ave, New York, NY 10022, United States