Aortic Sciences is committed to protecting the privacy of Authorized Users and their patients. This Privacy Policy describes how we collect, use, store, and protect information submitted through the Platform.
The Platform is intended to operate as non-device Clinical Decision Support software under Section 520(o)(1)(E) of the Federal Food, Drug, and Cosmetic Act and is designed to function exclusively with de-identified data. It is not a medical device, is not FDA cleared or approved, and does not collect Protected Health Information.
The Platform is designed to operate exclusively with de-identified patient data. Authorized Users are strictly prohibited from entering any Protected Health Information ("PHI") as defined under HIPAA, including but not limited to:
By using the Platform, you represent and warrant that all data entered has been de-identified in accordance with the HIPAA Safe Harbor method (45 C.F.R. § 164.514(b)), including removal of all eighteen categories of identifiers enumerated thereunder, or an equivalent standard.
We collect and store the following categories of information:
Information collected through the Platform is used solely for the following purposes:
Aortic Sciences implements commercially reasonable technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS), access controls, and audit logging.
No method of electronic transmission or storage is 100% secure. You acknowledge that your use of the Platform involves inherent security risks.
We may engage third-party service providers (such as cloud hosting and infrastructure providers) to operate and maintain the Platform. These providers process data only as necessary to provide services to Aortic Sciences and are bound by confidentiality and security obligations.
We retain de-identified clinical report data and account information for as long as your account remains active and as necessary to provide our services. You may request deletion of your account and associated data by contacting us at the address below.
In the event of a merger, acquisition, financing, reorganization, or sale of all or substantially all of our assets, account information and de-identified data may be transferred to the successor entity as part of that transaction, subject to the commitments described in this Privacy Policy.
The Platform is operated from the United States, and its infrastructure and data storage are located in the United States. This Privacy Policy is intended to meet the requirements of applicable United States law and, for users in Canada, the Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable provincial privacy legislation.
Cross-border storage and access. If you access the Platform from Canada or elsewhere outside the United States, your account and usage information (including your name, professional credentials, email address, and institutional affiliation) will be transferred to, processed, and stored in the United States. While stored in the United States, this information is subject to United States law and may be accessible to United States courts, law enforcement, and governmental authorities under lawful process. By registering for or using the Platform, you consent to this transfer, processing, and storage.
Your rights. Subject to applicable law, you may request access to, correction of, or deletion of the personal information we hold about you, and you may withdraw your consent to our processing of it, by contacting us at the address in Section 9. Withdrawing consent may prevent us from providing the Platform to you.
Quebec users. Aortic Sciences has designated a person responsible for the protection of personal information, who can be reached at the contact in Section 9. Where required by Quebec's Act respecting the protection of personal information in the private sector ("Law 25"), consent to the collection, use, and cross-border transfer of your personal information is obtained at the point of collection and may be withdrawn at any time.
We make no representation that this Privacy Policy complies with the laws of jurisdictions outside the United States and Canada, including but not limited to the European Union General Data Protection Regulation (GDPR). The Platform is not offered for clinical use outside the United States and Canada.
We may update this Privacy Policy from time to time. Revised versions will be posted on the Platform with an updated "Last Updated" date. Your continued use of the Platform after a revised policy is posted constitutes acceptance of the changes.
For questions regarding this Privacy Policy, please contact:
Aortic Sciences
Email: legal@aorticsciences.com
Website: www.aorticsciences.com