top of page

Privacy Policy

Privacy Policy - Last Updated: 08/24/2025

Gentrel ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website www.gentrel.com (the "Site") and use our services, which are provided exclusively to covered entities and business associates within the United States healthcare sector.
 
This policy is designed to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and other applicable US federal and state privacy laws.

1.1 Information We Collect

We collect information that you provide directly to us, such as when you create an account, contact us, or use our services. This may include:

  • Protected Health Information (PHI): In our role as a Business Associate, we may receive, create, or maintain PHI on behalf of your healthcare organization to provide our services. This information is governed by a Business Associate Agreement (BAA).

  • Personal Information: Name, email address, phone number, professional credentials, and workplace information.

  • Technical Data: Information about your device and browsing actions on our Site, such as your IP address, browser type, and pages visited (collected through cookies and similar technologies).

1.2 How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve our services.

  • Fulfill our obligations under our Business Associate Agreements.

  • Communicate with you about our services, updates, and support.

  • Comply with legal and regulatory obligations, including HIPAA mandates.

  • Analyze trends and improve the functionality and security of our Site.

1.3 Disclosure of Your Information

We do not sell your PHI or personal information. We may disclose information in the following circumstances:

  • To Your Healthcare Organization: As necessary to provide our services under our agreement with them.

  • To Our Service Providers: We may share information with vendors who perform services on our behalf (e.g., cloud hosting, data analytics) under strict contractual obligations that mandate confidentiality and security.

  • For Legal Reasons: To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

  • To Protect Rights: If we believe disclosure is necessary to protect the rights, property, or safety of Gentrel, our customers, or others.

1.4 Data Security

We implement a robust framework of administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of all information we process, especially ePHI. Encryption: Implementing encryption for ePHI both in transit and at rest.
 

  • Access Controls: Utilizing unique user IDs, emergency access procedures, and rigorous authentication protocols.

  • Audit Controls: Recording activity in systems that contain ePHI to monitor for improper access or use.

  • Risk Management: Conducting regular risk analyses and implementing security measures to protect against anticipated threats and unauthorized disclosures.

1.5 Your Rights

Depending on your state of residence, you may have certain rights regarding your personal information, such as the right to access, correct, or delete data. To exercise these rights, please contact us at contact@gentrel.com]. All requests concerning PHI must be coordinated through the healthcare provider that is the covered entity.

1.6 Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
Email: contact@gentrel.com

bottom of page