Privacy Policy

Unified Imaging, Inc. ("Unified," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinical imaging platform and related services (collectively, the "Services").

As a healthcare technology provider, we understand the sensitivity of the information we handle and take our responsibility to protect it seriously. We comply with applicable privacy laws including the Health Insurance Portability and Accountability Act (HIPAA) where applicable.

1. Information We Collect

Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, organization name, and job title when you create an account or request a demo.
• Practice Information: Details about your practice including size, location, and imaging devices used.
• Payment Information: Billing address and payment details processed through our secure payment providers.
• Communications: Information you provide when contacting our support team or participating in surveys.

Protected Health Information (PHI)

When you use our Services to store or transmit patient data, we may receive Protected Health Information as defined under HIPAA. We handle all PHI in accordance with our Business Associate Agreement (BAA) with covered entities and applicable HIPAA regulations.

Information Collected Automatically

When you access our Services, we automatically collect:

• Device Information: Hardware model, operating system, browser type, and unique device identifiers.
• Usage Data: Features used, time spent in the application, and interaction patterns.
• Log Data: IP address, access times, pages viewed, and referring URLs.
• Cookies and Tracking: Information collected through cookies, pixels, and similar technologies.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience
• Comply with legal obligations and enforce our terms

Legal Bases for Processing

We process your information based on:

• Contract Performance: To provide Services you have requested
• Legitimate Interests: To improve our Services and communicate with you
• Legal Compliance: To meet regulatory requirements including HIPAA
• Consent: Where you have provided explicit consent

3. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, such as hosting, data analytics, payment processing, and customer support. These providers are contractually obligated to protect your information.

Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

Legal Requirements

We may disclose information if required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

With Your Consent

We may share information with your explicit consent or at your direction.

4. Data Security

We implement robust security measures to protect your information, including:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Infrastructure: SOC 2 Type II certified cloud infrastructure
• Monitoring: 24/7 security monitoring and intrusion detection
• Auditing: Regular security assessments and penetration testing
• Training: Mandatory security awareness training for all employees

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing industry-standard protections.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You can request a copy of the personal information we hold about you in a portable format.

Correction

You can request that we correct inaccurate or incomplete information.

Deletion

You can request deletion of your personal information, subject to certain legal exceptions and retention requirements.

Opt-Out

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

Cookie Preferences

You can manage cookie preferences through your browser settings or our cookie consent tool.

California Residents

California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt-out of sales (though we do not sell personal information).

6. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For HIPAA-related inquiries or to report a potential security incident, please contact our Security Officer at security@unified-imaging.com.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or through the Services.

Your continued use of our Services after any changes indicates your acceptance of the updated Privacy Policy.