Privacy Policy
We are committed to safeguarding your medical data and protecting personal information.
HealthERP Data Protection & Privacy Statement
1. Overview
HealthERP ("we", "our", or "us") provides cloud-based hospital and clinic management solutions. This Privacy Policy details how we collect, store, encrypt, process, and protect your personal and healthcare information when using our services.
By accessing HealthERP portal accounts (as Admin, Clinic Owner, Doctor, Staff, or Patient), you consent to the data practices described in this document.
2. Information We Collect
To operate our medical software effectively, we process the following data categories:
- Personal Identifiers: Name, email address, phone number, physical address, national identity numbers, and profile avatars.
- Clinical & Health Data: Medical history, consultation records, doctor diagnoses, prescriptions, lab test reports, and vital statistics.
- Billing & Financial Information: Invoice details, payment transactions, and payment method records.
- Technical Log Data: IP address, device specs, browser type, and system audit logs for security oversight.
3. How We Use Information
Collected information is strictly used for legitimate healthcare operational purposes:
- Facilitating patient appointment scheduling and clinical consultation workflows.
- Generating accurate medical records, digital prescriptions, and billing invoices.
- Maintaining system audit trails and preventing unauthorized access or fraud.
- Providing patient portal access for reviewing personal health records and appointments.
4. Data Security & Encryption
Security is fundamental to HealthERP. We implement strict technical and organizational safeguards:
- SSL/TLS encryption for all data in transit across web connections.
- Role-based permission controls restricting medical file access strictly to authorized personnel.
- Secure database storage with automated backups and threat monitoring.
Security Assurance: All patient data is encrypted at rest and in transit using industry-standard AES-256 encryption protocols.
5. Information Sharing & Disclosure
HealthERP does not sell, rent, or trade personal or medical data to advertisers or commercial third parties. Data is shared strictly when required by law or to deliver authorized healthcare workflows within your designated clinic environment.
6. Your Privacy Rights
Depending on applicable data protection laws, users retain the right to:
- Request access to stored personal health records.
- Request corrections to inaccurate personal profile data.
- Request account deactivation or data export from clinic administrators.
7. Contact Information
Privacy Concerns & Contact
If you have questions about your privacy or wish to submit a data protection inquiry, please contact our Data Protection Officer at privacy@healtherp.com.