1. Introduction
Zotec Partners ("we," "us," or "our") operates the Zotec Partners Cloud Platform. This Privacy Policy describes how we collect, use, store, and protect information when you access our cloud services, website, and related applications.
We are committed to safeguarding the privacy of our users and maintaining compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and other applicable data protection regulations.
2. Information We Collect
We may collect the following categories of information:
- Account Information: Organization name, contact name, email address, phone number, and billing details provided during account provisioning.
- Usage Data: Log data, API call records, feature usage metrics, and session information generated through platform interaction.
- Technical Data: IP addresses, browser type, operating system, device identifiers, and network information collected automatically.
- Customer Data: Data you upload, transmit, or process through our cloud services, which may include protected health information (PHI) governed by a separate Business Associate Agreement (BAA).
3. How We Use Information
We use collected information to provide, maintain, and improve our cloud platform services. This includes processing transactions, managing accounts, delivering technical support, monitoring platform performance, and enforcing our terms of service.
We do not sell personal information to third parties. We do not use customer data, including any PHI processed through our platform, for marketing or advertising purposes.
4. Data Protection and Security
We implement administrative, physical, and technical safeguards to protect information under our control. These measures include AES-256 encryption for data at rest, TLS 1.3 for data in transit, role-based access controls, multi-factor authentication, and continuous monitoring.
Our infrastructure undergoes annual SOC 2 Type II audits to validate the design and operating effectiveness of our security controls. Additional details are available on our Security page.
5. Protected Health Information
When our platform processes PHI on behalf of a covered entity, we act as a business associate under HIPAA. Our obligations regarding PHI are governed by the applicable Business Associate Agreement executed between the parties. We maintain PHI only as necessary to perform the services described in that agreement.
6. Data Retention
We retain account and usage data for as long as your account remains active or as needed to provide services. Upon account termination, we delete or anonymize customer data within 90 days unless a longer retention period is required by law or contractual obligation.
7. Third-Party Services
We may engage third-party service providers to assist in operating our platform. These providers are contractually obligated to protect information in accordance with this policy and applicable law. We conduct due diligence on subprocessors that handle sensitive or regulated data.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information. To exercise these rights, contact us at the address below. We will respond to verifiable requests within 30 days.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or via email to the account administrator. The "Last updated" date at the top of this page indicates when the policy was most recently revised.
10. Contact
For privacy-related inquiries, contact us at:
Zotec Partners — Privacy Office
Email: privacy@zotecpartners.cloud
2 Maryland Farms, Suite 210
Brentwood, TN 37027