1. Introduction

At MareezCare, your privacy and the security of patient data are our highest priorities. This Privacy Policy outlines how we collect, use, process, and protect the information provided to us through our healthcare platform.

2. Information We Collect

We collect information in two main categories:

Customer Data: Information provided by healthcare facilities when setting up an account (e.g., names, email addresses, billing details).
Protected Health Information (PHI): Patient records, lab results, and prescriptions entered into our system by authorized healthcare providers.

3. How We Use Information

Customer Data is used strictly for account management, billing, and providing technical support. PHI is processed strictly under the guidelines of our Business Associate Agreement (BAA) and is never sold, marketed, or used for any purpose other than providing the MareezCare service to the healthcare provider.

4. Security Measures

We employ state-of-the-art security measures to protect your data, including AES-256 encryption at rest and TLS 1.3 encryption in transit. Our infrastructure is hosted on ISO 27001 and SOC 2 Type II certified cloud providers. We enforce multi-factor authentication (MFA) and strict role-based access control (RBAC).

5. Compliance Readiness

MareezCare is designed with compliance readiness in mind, including auditable access patterns, role-based permissions, and secure data handling. Specific regulatory commitments depend on the deployment region, contract, and customer requirements.

6. Contact Us

For any questions regarding our privacy practices or to request data deletion, please contact our Data Protection Officer at privacy@mareezcare.com.