GemPlus Privacy Policy
At GemPlus, based in Colorado, we are committed to protecting your privacy and handling your personal and Protected Health Information (PHI) with the highest level of security.
1. Information We Collect
We collect information through in-person visits, our website, patient portals, and telehealth services:
- Personal Information: Full name, date of birth, address, phone number, email, and emergency contacts.
- Health Information (PHI): Medical history, diagnosis, treatments, medications, lab results, insurance details, and clinical notes.
- Technical Data: IP address, browser type, device info, and login activity.
2. How We Use Your Information
We use the collected data strictly for:
- Providing medical care, treatment, and scheduling.
- Processing billing and insurance claims.
- Improving healthcare operations and communicating with you.
- Meeting legal and regulatory requirements.
Note: We do not sell or rent your personal or medical information.
3. Data Protection & Secure Cloud Infrastructure
Your data is managed using EHRs (built on Google Cloud infrastructure), ensuring full administrative, technical, and physical safeguards:
- End-to-end encryption (data in transit and at rest).
- Role-based access controls and secure authentication.
- Continuous security monitoring, firewalls, and automatic backups.
- Full compliance via Business Associate Agreements (BAAs) with cloud providers.
4. Legal Compliance
GemPlus operates in full compliance with federal and state privacy laws, including:
- Health Insurance Portability and Accountability Act (HIPAA).
- Health Information Technology for Economic and Clinical Health Act (HITECH).
- Colorado State privacy and medical record protection laws.
5. How We Share Information
We only share your information as permitted by law with:
- Healthcare providers involved in your treatment.
- Insurance companies for billing and payment processing.
- Laboratories and authorized business associates.
- Law enforcement or public health authorities when legally required.
6. Your Patient Rights & Data Retention
You have the right to access your medical records, request corrections, restrict certain disclosures, and file a complaint if you believe your privacy has been violated.
We retain patient records in accordance with federal and Colorado state laws. Once the retention period expires, data is securely destroyed.
7. Breach Notification
In the unlikely event of a data breach involving your PHI, GemPlus will promptly notify affected individuals and regulatory authorities in compliance with HIPAA guidelines.
8. Contact Us
If you have any questions regarding this Privacy Policy or your rights, please contact:
- Company Name: GemPlus
- Location: Colorado, USA
- Phone: +1 (719) 559-0943
- Email: info@gemplusrcm.com