Privacy Policy
Last updated: January 2025
Introduction
CommsDr ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare communication platform and SMS messaging services.
Information We Collect
We may collect the following types of information:
- Contact Information: Name, phone number, email address
- Healthcare Provider Information: Practice name, address, provider credentials
- Message Data: SMS messages sent through our platform, appointment details, and related communications
- Usage Data: Information about how you interact with our services
- Device Information: IP address, browser type, and device identifiers
How We Use Your Information
We use the information we collect to:
- Provide and maintain our SMS messaging services
- Send appointment reminders and healthcare-related communications on behalf of healthcare providers
- Process and respond to your inquiries
- Improve and optimize our services
- Comply with legal obligations and healthcare regulations
- Protect against fraudulent or unauthorized activity
HIPAA Compliance
CommsDr operates as a Business Associate under HIPAA regulations. We implement appropriate administrative, physical, and technical safeguards to protect Protected Health Information (PHI). We enter into Business Associate Agreements (BAAs) with covered entities as required by law.
SMS Messaging
Our platform facilitates SMS communications between healthcare providers and patients. By opting in to receive SMS messages, patients consent to receive appointment reminders, follow-up care messages, and other healthcare-related communications. Message and data rates may apply. Patients can opt out of SMS communications at any time by replying STOP to any message.
Data Sharing and Disclosure
We may share your information with:
- Healthcare Providers: To facilitate patient communications
- Service Providers: Third parties who assist in operating our platform (e.g., SMS carriers)
- Legal Requirements: When required by law or to protect our rights
We do not sell your personal information to third parties.
Data Security
We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations, including healthcare record retention requirements. When data is no longer needed, we securely delete or anonymize it.
Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal requirements)
- Opt out of marketing communications
- Opt out of SMS messages by replying STOP
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Email: contact@commsdr.com