Privacy Policy

Introduction

Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our services:

• •Account Information: Name, email address, phone number, clinic name, and professional credentials
• •Patient Data: Medical records, appointment information, prescriptions, lab orders, and other health information you enter into the system
• •Usage Data: Information about how you access and use Nevatal, including IP address, browser type, device information, and usage patterns
• •Payment Information: Billing details processed securely through our payment providers (we do not store full credit card information)
• •Communication Data: Messages, support requests, and other communications you send to us
• •Technical Data: Log files, error reports, and diagnostic information to help us improve our services

How We Use Your Information

We use the information we collect to provide, maintain, and improve our services:

• •To provide and maintain our medical practice management platform
• •To process appointments, medical records, prescriptions, and other clinical workflows
• •To send automated reminders, notifications, and communications via WhatsApp, email, or SMS
• •To generate compliance reports (RIPS, DIAN invoicing) as required by law
• •To provide customer support and respond to your inquiries
• •To detect, prevent, and address technical issues and security threats

Data Protection and Security

We implement industry-standard security measures to protect your data:

• •Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• •Access Controls: Role-based access control ensures only authorized personnel can access sensitive data
• •Regular Security Audits: We conduct regular security assessments and vulnerability testing
• •Data Isolation: Multi-tenant architecture ensures complete data separation between clinics
• •Backup and Recovery: Regular backups ensure data availability and recovery in case of incidents

Your Rights

You have the following rights regarding your personal data:

• •Access: You can request access to your personal data and receive a copy
• •Correction: You can request correction of inaccurate or incomplete data
• •Deletion: You can request deletion of your data, subject to legal retention requirements
• •Portability: You can request transfer of your data to another service provider
• •Objection: You can object to processing of your data for certain purposes
• •Restriction: You can request restriction of processing in certain circumstances
• •Withdrawal of Consent: You can withdraw consent where processing is based on consent

Cookies and Tracking

Third-Party Services

Data Retention