Privacy & Data Protection Policy

1. Introduction & Overview

At IT Health Center ("we", "our", or "us"), we prioritize the privacy and security of our clients, website visitors, and the healthcare organizations we serve. As a dedicated provider of managed IT, cloud backup, and workflow automation services for home health, hospice, and senior care facilities, we understand the critical sensitivity of health information and personal data.

This Privacy Policy explains what information we collect, how we use and protect it, our commitment to HIPAA regulations, and your choices regarding your personal data.

2. HIPAA Compliance & Protected Health Information (ePHI)

When delivering managed IT support, cloud storage, and backup disaster recovery, IT Health Center may act as a Business Associate to covered healthcare entities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act.

• Business Associate Agreements (BAAs): We execute standard BAAs with covered entities before managing systems that touch electronic Protected Health Information (ePHI).
• Encryption Mandates: All health data in transit and at rest is secured with military-grade AES-256 and TLS 1.3 encryption.
• No Commercial Monetization: We never sell, rent, lease, or monetize client data or patient records under any circumstances.

3. Information We Collect

We collect information in three primary ways:

1. Directly Provided Information: When you complete an assessment form, request hardware procurement, submit a contact inquiry, or open a technical support ticket (including full name, business email, phone number, healthcare facility name, and specific service needs).
2. Technical Support Data: Information generated during helpdesk sessions, device diagnostics, error logs, and system performance telemetry required to resolve IT issues.
3. Automated Analytics & Cookies: IP address, browser type, operating system, and page interactions captured through standard essential and performance cookies.

4. Cookies & Tracking Technologies

We use cookies to ensure the website operates smoothly, maintain secure administrator sessions, and analyze site performance. In compliance with GDPR and privacy standards, you can manage your preferences at any time:

• Essential Cookies: Required for page navigation, security authentication, and form submissions.
• Performance & Analytics: Anonymous aggregated metrics that help us improve site responsiveness and usability.

You can modify your cookie settings at any time using the Cookie Settings link in our footer.

5. Third-Party Service Providers

We partner with enterprise technology vendors to deliver our services. Each vendor maintains strict privacy standards and compliance with healthcare regulations:

• Cove Data Protection: Immutable cloud backup and disaster recovery.
• Microsoft 365 & Google Workspace: HIPAA-compliant cloud email and collaboration platforms.
• Zoho Corporation & Associated Products: Cloud enterprise solutions including Zoho Desk (helpdesk & support ticketing), Zoho Assist (secure remote desktop support), Zoho CRM & Flow (workflow automations), and Zoho Books (accounting & billing) adhering to rigorous enterprise data encryption and HIPAA compliance standards.
• Aminos AI: Interactive website customer service chat assistance.

6. Data Security & Storage

We implement administrative, physical, and technical safeguards to protect against unauthorized access, destruction, or disclosure of data. Infrastructure is continuously monitored with automated endpoint detection (EDR), intrusion prevention, and regular vulnerability scanning.

7. Your Rights & Contact Details

Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of your personal data. For privacy inquiries or Business Associate Agreement verification, please contact us: