Privacy Policy

1. Information We Collect

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information, including confirmations and invoices
• Send you technical notices, updates, security alerts, and support and administrative messages
• Respond to your comments, questions, and requests, and provide customer service
• Communicate with you about products, services, offers, promotions, and events, and provide other news or information about us and our partners
• Monitor and analyze trends, usage, and activities in connection with our services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of OfficeRidge and others
• Personalize and improve the services and provide content, features, or advertisements that match user profiles or interests
• Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards
• Carry out any other purpose described to you at the time the information was collected

3. Information Sharing and Disclosure

We may share information about you as follows or as otherwise described in this Privacy Policy:

• With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf
• In response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law, regulation, or legal process
• If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property, and safety of OfficeRidge or others
• In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company
• Between and among OfficeRidge and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership
• With your consent or at your direction

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

4. Data Security

OfficeRidge takes data security seriously. We implement appropriate technical and organizational measures to protect the information we collect and store. These measures include:

• Encryption of sensitive data both in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Physical security measures for our data centers
• Employee training on security and privacy best practices
• Incident response procedures

However, no security system is impenetrable, and we cannot guarantee the security of our systems or your information. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps in accordance with applicable laws and regulations.

5. HIPAA Compliance

As a provider of services to healthcare organizations, OfficeRidge may have access to Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). When we act as a Business Associate to covered entities:

• We enter into Business Associate Agreements (BAAs) with covered entities
• We implement all required administrative, physical, and technical safeguards
• We only use or disclose PHI as permitted by our BAA or as required by law
• We report any unauthorized uses or disclosures of PHI
• We ensure that any subcontractors who have access to PHI agree to the same restrictions
• We make our policies and procedures available to the Secretary of Health and Human Services

For more information about our HIPAA compliance program, please visit our HIPAA Compliance page.

6. Data Retention

We retain personal information we collect from you for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

When we no longer need to use your personal information, we will remove it from our systems and records or take steps to anonymize it so that you can no longer be identified from it.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. These may include:

• Access: You may request access to your personal information.
• Correction: You may request that we correct inaccurate or incomplete information about you.
• Deletion: You may request that we delete your personal information.
• Restriction: You may request that we restrict the processing of your information.
• Data Portability: You may request a copy of the information you provided to us in a structured, commonly used, and machine-readable format.
• Objection: You may object to our reliance on our legitimate interests as the basis of our processing of your personal information.
• Withdraw Consent: If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

To exercise these rights, please contact us at privacy@officeridge.com. Please note that these rights may be limited in some circumstances by applicable law.

8. Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information of a child under 16, we will take steps to delete such information from our files as soon as possible.

9. International Data Transfers

OfficeRidge is based in the United States, and we process and store information in the U.S. and other countries. If you are located outside the United States, we may transfer your personal information to the U.S. for the purposes described in this Privacy Policy.

When we transfer personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States or other countries which are not considered to provide an adequate level of data protection, we use legal mechanisms designed to help ensure your rights and protections, including:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules
• Other valid transfer mechanisms

If you have questions about our international data transfers, please contact us at privacy@officeridge.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our website prior to the change becoming effective. We encourage you to review our Privacy Policy whenever you access our services to stay informed about our information practices and the choices available to you.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: