1. Introduction

Korys Health ("we," "our," or "us") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Electronic Health Records System.

2. Information We Collect

We collect several types of information:

• Personal Information: Name, date of birth, contact information, identification numbers
• Health Information: Medical history, diagnoses, medications, lab results, treatment plans
• Insurance Information: Insurance provider, policy numbers, coverage details
• System Usage Data: Login times, actions performed, IP addresses

3. How We Use Your Information

We use collected information for:

• Providing healthcare services and maintaining medical records
• Coordinating care between healthcare providers
• Processing insurance claims and billing
• Complying with legal and regulatory requirements
• Improving our services and system functionality

4. Information Sharing

We may share your information with:

• Healthcare providers involved in your care
• Insurance companies for billing and claims processing
• Legal authorities when required by law
• Business associates who assist in our operations (under strict confidentiality agreements)

5. Data Security

We implement comprehensive security measures including:

• Encryption of data in transit and at rest
• Multi-factor authentication for system access
• Regular security audits and updates
• Strict access controls and audit logging
• Employee training on privacy and security practices

6. Your Rights

You have the right to:

• Access your health information
• Request corrections to your records
• Receive an accounting of disclosures
• Request restrictions on certain uses and disclosures
• File a complaint if you believe your privacy rights have been violated

7. HIPAA Compliance

Korys Health is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) and follows all applicable regulations regarding the protection of health information.

8. Data Retention

We retain health records in accordance with applicable laws and regulations, typically for a minimum of 7 years after the last patient encounter or as required by law.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes through the system or via email.

10. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact:
Privacy Officer: privacy@koryshealth.com
Phone: +55 (11) 1234-5678
Address: Korys Ltda., São Paulo, SP, Brazil