Patient Privacy Policy

Our Commitment to Your Privacy

Welcome to EVAL Health. This Privacy Policy explains how we collect, use, and protect your personal and health information. Our platform is built on the core belief that you should be in control of your health data. We are committed to being transparent about our practices and serving as a secure custodian for the information you entrust to us.

Our promises to you:

You own your data. You control the health information in your EVAL Health account.
We will never sell your data. We will not sell, rent, or share your personal health information with data brokers or for any advertising purposes.
You control who sees your data. Your information is only shared with healthcare providers you explicitly authorize.
Security is our priority. We use robust security measures to protect your information.

By creating an account and using the EVAL Health platform, you agree to the collection and use of information in accordance with this policy.

1. Your Health Information, Ownership, and Consent

1.1. You Are the Owner of Your Data
In alignment with modern data privacy standards like GDPR, you are the owner of the personal and health data you provide to your EVAL Health account. We act as a service provider, or "data processor," that manages this data on your behalf and at your direction.

1.2. Information We Collect
To provide our services, we collect the following types of information:

Account Information: When you register, we collect personal details such as your name, email address, date of birth, and password.
Health Information You Provide: Any health-related data you voluntarily enter or upload into the platform, such as medical results, symptoms, or health history. This is considered Protected Health Information (PHI).
Communications: Records of communications between you and EVAL Health for customer support or other inquiries.
Technical & Usage Data: Information on how you interact with our platform, such as your IP address, browser type, device information, and login times. We use this to secure our platform, prevent fraud, and improve our services.

1.3. Your Consent to Process Information
By using the EVAL Health platform, you provide your explicit consent for us to securely host, process, and manage your data as described in this policy. This allows us to perform the actions necessary to provide our services to you. You can withdraw this consent at any time by deleting your account.

2. How We Use Your Information

We use your information only for the following purposes:

To Provide and Maintain Our Service: To create your account, display your health information to you within your portal, and manage platform functionality.
To Share With Your Authorized Providers: To transmit your data to healthcare providers whom you have explicitly authorized to receive it.
To Communicate With You: To send you important service announcements, security alerts, and customer support messages. These are transactional messages essential to the service.
To Improve Our Platform: To analyze usage trends and improve the platform’s features, performance, and user experience. When used for this purpose, data is always aggregated and anonymized to protect your identity.

3. How We Share Your Information

Your control over sharing is fundamental to our service.

3.1. With Your Healthcare Providers
You are in full control of sharing. Only when you take a specific action to grant a healthcare provider access is a copy of your relevant data delivered to that provider's account. At that point, the provider becomes an independent custodian of that copy and is obligated to protect it according to their own legal and professional responsibilities (e.g., HIPAA, GDPR).

3.2. With Our Service Providers
We may share information with third-party vendors who help us operate our platform, such as cloud hosting providers (e.g., Amazon Web Services). These providers are contractually bound to maintain the confidentiality and security of your data and are prohibited from using it for any other purpose.

3.3. For Legal Obligations
We may disclose your information if required to do so by law or in response to a valid legal request, such as a court order or subpoena. We will notify you of such a request unless legally prohibited from doing so.

3.4. We Do Not Sell Your Data
To be perfectly clear: we do not and will not sell or rent your personal health information to anyone. We do not share your data with any third parties for marketing or advertising purposes.

4. Data Deletion and Retention

4.1. Deleting Your EVAL Health Account
You have the right to delete your EVAL Health account at any time. When you do, we will permanently and irrevocably destroy all personal and health information stored within your direct account on our platform. This action cannot be undone.

4.2. Data Held by Your Healthcare Provider
Important: Deleting your personal EVAL Health account does not delete the copies of data that you previously shared with your healthcare providers. Because this data is now part of their official medical records, it is subject to their legal and professional data retention policies. To have this data deleted, you must contact your healthcare provider directly.

5. Your Data Protection Rights

We are committed to ensuring you can exercise your data protection rights. You have the right to:

The Right to Access: You can request copies of your personal data stored in your EVAL Health account.
The Right to Rectification: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete within your account.
The Right to Erasure (Right to be Forgotten): You have the right to delete your EVAL Health account as described in Section 4.1.
The Right to Data Portability: You can request that we provide the data we have collected on you in a structured, machine-readable format.

To exercise any of these rights, please contact us at [email protected].

6. Data Security

We take the security of your data very seriously. We use administrative, physical, and technical safeguards to protect your information, including:

Encryption of data both in transit (using TLS) and at rest.
Strict access controls to ensure only authorized personnel can access sensitive data.
Regular security assessments and system monitoring.

7. Children's Privacy

The EVAL Health platform is not intended for use by individuals under the age of 18 without the consent and supervision of a parent or legal guardian. We do not knowingly collect personally identifiable information from children under 18 without such consent.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. We may also notify you via email. We encourage you to review this policy periodically.

9. How to Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our privacy officer:

Email: [email protected]