2. Privacy Policy (Including RGPD and HIPAA Requirements)
Privacy Policy
Last Updated: [Insert Date]
At Graciela Leija, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data, in compliance with U.S. and EU regulations (HIPAA and GDPR).
1. What Information We Collect
We may collect the following information:
- Personal identification details (e.g., name, email, phone).
- Medical information (e.g., health details submitted via forms).
- Technical data (e.g., IP address, browser type).
2. How We Use Your Information
We use your information to:
- Schedule and manage appointments.
- Respond to inquiries.
- Improve our website functionality and user experience.
3. Legal Basis for Processing (GDPR)
We process data based on:
- Your consent (e.g., submitting forms).
- Contractual obligations (e.g., booking appointments).
- Compliance with legal or regulatory requirements.
4. Data Sharing
We may share your information with:
- Healthcare service providers.
- Third-party vendors supporting our website (e.g., analytics).
- Legal authorities when required by law.
We do not sell your personal data.
5. Data Security
We use secure measures to protect your data, including encryption, firewalls, and regular audits.
6. Your Rights
Under GDPR and HIPAA, you have the right to:
- Access, correct, or delete your data.
- Restrict data processing.
- Withdraw consent at any time.
To exercise these rights, contact us at [Insert Email].
7. Retention of Data
We retain personal data only as long as necessary for its intended purpose or as required by law.