Privacy Policy

ImmiMedical is an online platform, operated by NTX Medical, that medical practices use to complete the U.S. immigration medical exam (USCIS Form I-693). This policy explains what information the platform collects, how it is used and shared, and how it is protected. It applies to everyone who uses immimedical.com: applicants and their families, civil surgeons, and practice staff.

Your exam is performed by the medical practice you chose (your civil surgeon’s office). That practice is responsible for your medical record. ImmiMedical stores and processes the record on the practice’s behalf, as its business associate under HIPAA, and uses it only to provide the service to that practice and to you.

Questions about your exam or your medical record are usually best sent to your practice. You can also contact us at info@ntxmedical.com.

• Account information — your email address and password (held by our sign-in service), and the phone number you give us.
• Your details on Form I-693 — name, date of birth, gender, place of birth, home address, phone numbers, A-Number and USCIS online account number.
• Family members— one adult’s account can manage a household, so the same details for spouses and children whose exams the account holder arranges.
• Medical exam information — what the civil surgeon records on Form I-693, including vaccination history, physical exam findings and lab results, and documents uploaded by you or the practice (for example vaccination records or lab reports).
• Appointments and billing — appointment dates and times, invoices, and payment records (amount, date and method, such as cash or card). We do not store card numbers.
• Staff information — for practice staff, name, email, role and, for civil surgeons, their USCIS civil surgeon details.
• Security records — a record of important actions (for example who finalized, changed or released an exam), kept to protect accounts and records.

• To let you and your practice complete, review and certify your Form I-693.
• To schedule appointments and handle the practice’s invoices and payments.
• To send emails the service needs to work (see Email below).
• To keep accounts and records secure and to investigate misuse.
• To meet legal and medical record-keeping obligations.

We do not sell your information, and we do not use it for advertising.

• You, and the adult who manages your household account.
• Your practice — its civil surgeons and medical staff see your exam. Front office staff see only names, contact details, appointments, billing, and where your exam is in the process, not your medical information.
• USCIS — when you or your practice submit the completed exam packet.
• Our service providers, only to run the platform (below).
• Others when the law requires it, for example in response to a valid legal order.

• Amazon Web Services (AWS) — hosting, database, file storage and sign-in, in the United States. We have a Business Associate Agreement with AWS.
• Paubox — encrypted, HIPAA-compliant email delivery.

These providers may use your information only to provide their service to us.

We send only emails the service needs: sign-in codes, account invitations, updates about your exam (for example when your results or packet are ready), and invoices from your practice. Emails sent for a practice show the practice’s name. We do not send marketing email.

We use a secure cookie to keep you signed in. We do not use advertising or analytics cookies or other tracking.

• Encryption of data in transit (HTTPS) and at rest (database and file storage).
• Access limited by role and by practice: staff see only their own practice’s records, and only what their role needs.
• Two-factor sign-in, required for system administrators and available to all practice staff.
• Documents are downloaded through short-lived links that expire after 15 minutes.
• A record of important actions on exams and accounts.

No system is perfectly secure. If a breach affects your health information, we and your practice will notify you as HIPAA requires.

Exam records are medical records. Your practice keeps them for at least seven years after the exam is finalized, or until the patient turns 21 if that is later. Your completed exam packet stays available to download in your account for at least 90 days after it is finalized; after that, contact your practice for a copy.

You can ask to see, get a copy of, or correct your information.

• You can see and update your own details in your account until your practice locks the form.
• For a copy of your medical record, or to correct it, contact your practice.
• You can ask us to delete your account. Exam records your practice must keep by law are kept for the required period, even after an account is closed.

To make a request, contact your practice or info@ntxmedical.com. We respond as required by applicable law.

Accounts are for adults. A parent or guardian can arrange exams for their children from their own household account; children do not have accounts of their own.

Questions about this policy or our privacy practices:

We may update this policy when our practices or the law change. When we do, we update the "Last Updated" date above.