Information We Collect
Innovosoltech collects information in two primary ways: information you provide directly to us, and information collected automatically when you interact with our website or services.
Information You Provide
When you contact us via our website, request a consultation, or enter into a service agreement, we may collect your name, email address, phone number, clinic name, clinic address, professional credentials, and any other information you choose to share with us.
Information Collected Automatically
When you visit our website, we may automatically collect certain technical information, including your IP address, browser type, device type, operating system, referring URLs, pages viewed, and the dates and times of your visits. This data helps us improve our website experience and understand how visitors engage with our content.
Information from Clinic Partners
As part of delivering our managed Chronic Care Management (CCM) services, clinic partners may provide us with patient rosters and related clinical data necessary to perform enrollment, outreach, care coordination, and documentation services on their behalf.
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery: To provide, manage, and improve our fully managed CCM services, including patient enrollment, monthly outreach, care coordination, clinical documentation, and billing support.
Communications: To respond to your inquiries, schedule consultations, provide service updates, and send important notices related to our services or your account.
Compliance: To meet legal obligations, maintain CMS-aligned documentation, ensure HIPAA compliance, and maintain audit-ready records for all enrolled patients.
Improvement: To analyze website usage patterns, improve our website functionality, and enhance the quality and efficiency of our CCM service delivery.
Security: To detect, prevent, and address fraud, unauthorized access, or other potentially illegal activities, and to protect the rights and safety of Innovosoltech and our users.
Protected Health Information (PHI)
As a provider of managed CCM services, Innovosoltech may access, process, and store Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). Our handling of PHI is governed by our Business Associate Agreements (BAAs) with each clinic partner.
HIPAA Compliance
We maintain administrative, physical, and technical safeguards to protect PHI in accordance with the HIPAA Privacy Rule and Security Rule. All PHI is used exclusively for the purpose of performing CCM services as authorized by the clinic partner and as permitted under applicable law.
We do not use PHI for marketing purposes. We do not sell PHI to any third party under any circumstances. Access to PHI is restricted to authorized personnel who require it for their job functions, and all team members receive regular training on HIPAA compliance and data security best practices.
In the event of a breach of unsecured PHI, Innovosoltech will notify affected clinic partners and individuals in accordance with the HIPAA Breach Notification Rule timelines and requirements.
Data Sharing & Third Parties
Innovosoltech does not sell, rent, or trade your personal information to third parties for marketing purposes. We may share information in the following limited circumstances:
Service Providers: We may engage trusted third-party vendors who assist us in operating our business and delivering services (e.g., secure hosting providers, communication platforms). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
Clinic Partners: Documentation, reports, and records generated through our CCM services are shared with the clinic partner that authorized the service, as required for patient care and billing purposes.
Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Innovosoltech, our partners, or the public.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify affected parties of any such change in ownership or control.
Data Security
We take the security of your information seriously and implement a combination of administrative, technical, and physical safeguards designed to protect against unauthorized access, alteration, disclosure, or destruction of data.
Our Security Measures Include
Encryption of data in transit and at rest, role-based access controls, multi-factor authentication for systems containing sensitive information, regular security assessments and vulnerability testing, secure data storage in SOC 2-compliant environments, employee training on security policies and incident response procedures, and comprehensive logging and monitoring of system access.
While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining the highest practical standards to safeguard your data.
Cookies & Tracking Technologies
Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic. Cookies are small text files stored on your device when you visit a website.
Types of Cookies We Use
Essential Cookies: Required for the website to function properly, such as maintaining session state and security features. Analytics Cookies: Help us understand how visitors interact with our website, which pages are most visited, and where visitors come from. This data is collected in aggregate form. Functional Cookies: Remember your preferences and settings to provide a more personalized experience.
You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling cookies may affect some website functionality.
We do not use tracking technologies on any systems that handle Protected Health Information.
Your Rights & Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:
Access: The right to request a copy of the personal information we hold about you.
Correction: The right to request correction of inaccurate or incomplete personal information.
Deletion: The right to request deletion of your personal information, subject to certain legal exceptions.
Opt-Out: The right to opt out of certain data processing activities, including marketing communications.
Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format.
For rights related to Protected Health Information, patients should contact their healthcare provider (our clinic partner) directly. Our clinic partners are the covered entities responsible for responding to HIPAA-related access and amendment requests.
To exercise any of your rights regarding website data, please contact us using the information provided in Section 10 of this policy.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to provide our services, and to comply with legal, regulatory, and contractual obligations.
Retention Periods
Website data (e.g., analytics, contact form submissions) is generally retained for up to 24 months unless a longer period is required by law. CCM service records containing PHI are retained in accordance with applicable federal and state medical record retention laws, our Business Associate Agreements, and CMS documentation requirements. Business records (e.g., contracts, invoices) are retained as required by applicable tax and commercial laws.
When personal information is no longer needed, we securely delete or anonymize it using industry-standard methods.
Children’s Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18 without verifiable parental consent, we will take steps to delete that information promptly.
If you believe we may have inadvertently collected information from a minor, please contact us immediately so we can investigate and take appropriate action.
Changes to This Policy & Contact
Innovosoltech reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.
For material changes that significantly affect how we handle your data, we will make reasonable efforts to provide notice, such as posting a prominent notice on our website or sending an email to affected users.
Questions or Concerns?
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:
Email: hello@innovosoltech.com
We aim to respond to all privacy-related inquiries within 30 business days.