Privacy Policy
Your privacy and data security are fundamental to our healthcare cybersecurity mission.
Our Commitment to Privacy
CryptIoMT is committed to protecting the privacy and security of all information entrusted to us. As healthcare cybersecurity professionals, we understand the critical importance of data protection and maintain the highest standards of confidentiality and HIPAA compliance.
1. Information We Collect
Contact Information
- Name, title, and organization
- Email address and phone number
- Business address and contact preferences
Assessment Data
- Medical device inventory and network configurations
- Risk assessment findings and vulnerability data
- System logs and security event information
- Organizational policies and procedures
2. How We Use Your Information
We use collected information solely for legitimate business purposes:
- Service Delivery: Conducting risk assessments, security planning, and ongoing support
- Communication: Providing updates, reports, and responding to inquiries
- Compliance: Meeting regulatory requirements including HIPAA, NIST, and FDA guidelines
- Quality Improvement: Enhancing our methodologies and service offerings
- Legal Obligations: Complying with applicable laws and regulations
3. HIPAA Compliance & Healthcare Data
As healthcare cybersecurity consultants, we are committed to HIPAA compliance:
- All personnel undergo HIPAA training and sign Business Associate Agreements
- Protected Health Information (PHI) is handled according to HIPAA standards
- Data Privacy Impact Assessments (PIA) are conducted for all IoMT devices
- Minimum necessary standard is applied to all data access
- Breach notification procedures are in place and tested regularly
4. Data Security Measures
We implement comprehensive security controls to protect your information:
- Encryption: All data is encrypted in transit and at rest using industry-standard protocols
- Access Controls: Role-based access with multi-factor authentication
- Network Security: Firewalls, intrusion detection, and secure VPN connections
- Physical Security: Secure facilities with controlled access and monitoring
- Regular Audits: Continuous monitoring and third-party security assessments
- Incident Response: 24/7 monitoring with rapid response procedures
5. Information Sharing
We do not sell, rent, or share your information except in these limited circumstances:
- With Your Consent: When you explicitly authorize information sharing
- Service Providers: Trusted partners who assist in service delivery (under strict confidentiality agreements)
- Legal Requirements: When required by law, court order, or regulatory authority
- Business Transfers: In the event of a merger or acquisition (with continued privacy protections)
6. Data Retention
We retain information only as long as necessary:
- Assessment Data: Retained for 7 years or as required by healthcare regulations
- Contact Information: Maintained while business relationship exists
- Legal Hold: Extended retention when required for legal proceedings
- Secure Disposal: All data is securely destroyed when retention period expires
7. Your Privacy Rights
You have the following rights regarding your personal information:
- Access: Request copies of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your information (subject to legal requirements)
- Portability: Request transfer of your data to another organization
- Restriction: Request limitation of processing activities
- Objection: Object to certain types of data processing
8. Cookies and Website Analytics
Our website uses minimal tracking technologies:
- Essential Cookies: Required for website functionality
- Analytics: Anonymous usage statistics to improve our services
- No Third-Party Tracking: We do not use advertising or social media tracking
- Cookie Control: You can disable cookies through your browser settings
9. International Data Transfers
All data processing occurs within secure, HIPAA-compliant facilities. If international transfers are necessary, we ensure:
- Adequate protection through approved transfer mechanisms
- Contractual safeguards with international partners
- Compliance with applicable data protection laws
- Client notification and consent when required
10. Contact Us About Privacy
For privacy-related questions, concerns, or to exercise your rights:
Privacy Officer: privacy@cryptiomt.com
General Contact: contact@cryptiomt.com
Phone: (555) 123-4567
Response Time: We respond to privacy inquiries within 48 hours
This Privacy Policy may be updated to reflect changes in our practices or legal requirements. We will notify you of material changes via email and post updates on our website.