Privacy Policy

Our Commitment to Privacy

At OFFIN Healthcare, we take your privacy seriously. This policy describes how we collect, use, and protect your personal information when you use the ECG:Connect platform. By using our services, you trust us with sensitive health data, and we are committed to maintaining that trust.

Information We Collect

We collect information necessary to provide our services:

• Account information — name, email address, professional credentials, role
• Patient data — MRNs, ECG recordings, measurements (under your institution's data controller responsibility)
• Usage data — access logs, sync events, platform interactions
• Device information — connected ECG device vendor, model, serial number
• Gateway telemetry — only if explicitly opted in; de-identified statistical data only

How We Use Information

• To provide and maintain the ECG:Connect gateway and cloud services
• To process, store, and synchronise medical ECG data on your behalf
• To enforce plan limits, license validity, and data retention policies
• To improve platform reliability and performance
• To communicate about updates, support, and billing
• To comply with applicable law and regulatory requirements

Data Security

We implement enterprise-grade security at every layer:

Information Sharing

We do not sell your personal information. We may share data:

• With your explicit consent
• With HMIS/EMR systems you configure via HL7 or FHIR
• To comply with legal obligations or valid legal process
• With trusted service providers under confidentiality agreements

Your Rights

• Access your personal information and data we hold
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing

Contact Us

Questions about this Privacy Policy? Contact our Data Protection Officer: