Privacy Policy

Introduction

ImmiMedical is a HIPAA-compliant healthcare platform operated by NTX Medical. This Privacy Policy describes how we collect, use, and protect your personal information when you use our service at immimedical.com. This policy applies to all users of our platform, including civil surgeons, practice staff, and immigration medical exam applicants.

Information We Collect

We collect the following categories of information:

• Account Information — name, email address, date of birth, and other identifiers needed to create and manage your account.
• Medical Examination Data — information submitted as part of USCIS Form I-693, including vaccination records, physical examination results, and related health data.
• Usage Data — information about how you interact with our platform, including log data, device information, and access timestamps used to maintain security and improve the service.

How We Use Your Information

• To provide, operate, and maintain our immigration medical exam platform.
• To send transactional emails such as authentication codes and status updates.
• To maintain the security and integrity of the service.
• To comply with legal obligations, including healthcare record-keeping requirements.

Email Communications

We send only transactional emails necessary for the operation of the service, including authentication codes, appointment confirmations, and status updates on your medical examination. We do not send marketing emails. Recipients can manage their notification preferences from their account settings. We never sell or share your email address with third parties for marketing purposes.

Data Security

We implement industry-standard safeguards to protect your data, including:

• HIPAA-compliant infrastructure hosted on Amazon Web Services (AWS) under a Business Associate Agreement.
• Encryption of data at rest and in transit.
• Row-Level Security (RLS) for database isolation between practices and patients.
• Comprehensive audit logging of data access and modifications.

Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal requirements for immigration medical records. Practices may configure retention periods in accordance with their own policies and applicable regulations.

Third-Party Services

We use the following third-party services to operate our platform:

• Amazon Web Services (AWS) — hosting, email delivery via SES, and secure file storage.

We do not sell your data to any third party. Third-party service providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

Your Rights

You have the right to request access to, correction of, or deletion of your personal information. To exercise these rights, please contact us at info@ntxmedical.com. We will respond to your request within a reasonable timeframe in accordance with applicable law.

HIPAA Notice

ImmiMedical handles Protected Health Information (PHI) in connection with immigration medical examinations. We maintain a Business Associate Agreement (BAA) with AWS and implement administrative, physical, and technical safeguards as required by the HIPAA Privacy and Security Rules. For questions about our HIPAA practices, please contact our Privacy Officer at info@ntxmedical.com.

Contact

If you have questions or concerns about this Privacy Policy, please contact us:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.