Privacy Policy

At Referrin, we are committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare referral platform.

By using Referrin, you consent to the data practices described in this policy. This policy applies to all users of the platform, including patients, healthcare providers, and case managers.

Personal Information

• Name, email address, and phone number
• Professional credentials and licenses (for healthcare providers)
• Organization information and role
• Profile information and preferences

Health Information

• Patient referral details and medical history
• Treatment plans and recommendations
• Case management notes and documentation
• Communication records between parties

Technical Information

• IP address and device information
• Usage data and analytics
• Cookies and similar technologies
• Log files and system information

We use the information we collect for the following purposes:

• Providing and maintaining our healthcare referral services
• Facilitating communication between patients, providers, and case managers
• Processing and managing referrals and case files
• Improving our platform and user experience
• Ensuring compliance with legal and regulatory requirements
• Sending important updates and notifications
• Providing customer support and technical assistance

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our platform
• Legal Requirements: We may disclose information when required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
• Consent: We may share information with your explicit consent

As a healthcare platform, we are committed to maintaining the privacy and security of protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable regulations.

Our platform implements appropriate administrative, physical, and technical safeguards to protect PHI, including:

• Encryption of data in transit and at rest
• Access controls and authentication measures
• Regular security audits and assessments
• Employee training on privacy and security
• Incident response and breach notification procedures

We implement comprehensive security measures to protect your information:

• End-to-end encryption for sensitive communications
• Multi-factor authentication for account access
• Regular security updates and patches
• Secure data centers with physical security controls
• Continuous monitoring for security threats
• Regular backup and disaster recovery procedures

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal requirements)
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your information

To exercise these rights, please contact us using the information provided below.

We retain your information for as long as necessary to provide our services and comply with legal obligations. The retention period varies depending on the type of information and its purpose:

• Account Information: Retained while your account is active and for a reasonable period after deactivation
• Health Information: Retained in accordance with healthcare record retention requirements
• Communication Records: Retained for the duration of the case and as required by law
• Technical Data: Retained for security and analytics purposes

We use cookies and similar technologies to enhance your experience on our platform:

• Essential Cookies: Required for basic platform functionality
• Performance Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Security Cookies: Help protect against fraud and maintain security

You can control cookie settings through your browser preferences, though disabling certain cookies may affect platform functionality.

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

For users in the European Union, we rely on adequacy decisions, standard contractual clauses, and other appropriate safeguards for international data transfers.

Our platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new policy on our platform and updating the "Last updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Policy or our data practices, please contact us:

For privacy-related complaints, you also have the right to contact your local data protection authority.