Privacy Policy
Last updated: January 1, 2025
1. Introduction
Timelines ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our practice management platform and related services (collectively, the "Service").
2. Information We Collect
Personal Information
We may collect personal information that you provide directly to us, including:
- Name, email address, phone number, and other contact information
- Professional credentials and practice information
- Billing and payment information
- Account preferences and settings
Client Data
As a practice management platform, we process client data on your behalf, including:
- Client contact information and demographics
- Appointment and scheduling data
- Treatment notes and health information
- Payment and billing records
Usage Information
We automatically collect certain information about your use of our Service, including device information, IP address, browser type, and usage patterns.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process transactions and send related information
- Send administrative information and updates
- Respond to your comments, questions, and requests
- Monitor and analyze usage and trends
- Detect, investigate, and prevent fraudulent transactions
- Comply with legal obligations
4. HIPAA Compliance
Timelines is committed to HIPAA compliance. We understand that healthcare practitioners handle protected health information (PHI), and we have implemented appropriate safeguards to protect this information.
We will sign a Business Associate Agreement (BAA) with covered entities to ensure proper handling of PHI in accordance with HIPAA requirements.
All client data is encrypted both in transit and at rest using industry-standard encryption protocols.
5. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:
- With your explicit consent
- To trusted service providers who assist us in operating our Service
- To comply with legal obligations or protect our rights
- In connection with a business transfer or acquisition
6. Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
- Incident response procedures
7. Data Retention
We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. When you cancel your account, we will retain your data for 30 days to allow for account recovery, after which it will be securely deleted unless we are required to retain it for legal purposes.
8. Your Rights and Choices
You have the right to:
- Access and update your personal information
- Request deletion of your personal information
- Object to processing of your personal information
- Request data portability
- Withdraw consent where processing is based on consent
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and use personal information about you. You can control cookies through your browser settings, though disabling cookies may affect the functionality of our Service.
10. Third-Party Services
Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers are conducted in accordance with applicable data protection laws and with appropriate safeguards in place.
12. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Timelines Privacy Team
Email: privacy@rhtimelines.com
Website: https://rhtimelines.com
For HIPAA-related inquiries, please contact: hipaa@rhtimelines.com