Privacy Policy

Privacy Policy

Effective Date: 11.11.2024

Scope and Purpose

This Privacy Policy (“Policy”) explains how OneMed Marketing, operated by Onemed & A2Z Solutions LLC (registered in Wilmington, Delaware, USA) and Onemed & A2Z Solutions Private Limited (registered in Kolkata, West Bengal, India) (collectively referred to as “OneMed Marketing,” “we,” “our,” or “us”), collects, uses, and protects your personal information.

This Policy applies to all websites, applications, and services managed by OneMed Marketing, including www.onemedmarketing.com and any other platforms linking to this Policy (collectively, the “Sites”).

Our data handling practices are designed in accordance with applicable U.S. federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), Delaware Online Privacy Protection Act (DOPPA), the UK & EU General Data Protection Regulation (GDPR), and India’s Information Technology Act and Personal Data Protection Bill.

By using our Sites and services, you acknowledge and agree to the terms outlined in this Policy.

1. Information We Collect

We may collect and process the following categories of personal data:

  • Personal Identifiers: Name, email address, mailing address, phone number, and IP address.
  • Professional Information: Job title, company name, or business-related details.
  • Health-Related Information: When applicable, in connection with healthcare marketing and related services, in compliance with HIPAA.
  • Geolocation Data: General or precise location data, based on your device or IP address.
  • Electronic Activity Information: Website interactions, browser details, device type, and cookies.
  • Commercial Information: Service inquiries, purchase details, and client relationship history.
  • Financial Information: Billing or payment information when processing transactions related to our services.

2. Methods of Collection

Your personal data may be collected through:

  • Direct Interactions: When you contact us, fill out forms, create an account, or use our marketing services.
  • Automated Tracking: Cookies, analytics tools, and other tracking technologies that capture user behavior on our Sites.
  • Third-Party Sources: Business directories, public databases, social media, and strategic partners.

3. Legal Basis for Processing (EU & UK GDPR)

For individuals within the UK and EU, we process personal data under the following lawful bases:

  • Consent: When you have provided consent for specific processing purposes.
  • Contractual Necessity: When data is needed to fulfill or manage a service contract.
  • Legal Obligation: When required to comply with applicable laws or regulations.
  • Legitimate Interests: When processing supports our business operations, provided it does not override your rights.
  • Explicit Consent for Sensitive Data: For limited processing of health-related data under HIPAA and GDPR Article 9.

4. Use of Personal Data

We may use personal data to:

  • Deliver, manage, and improve our marketing and communication services.
  • Respond to client requests and provide customer support.
  • Process payments and manage business accounts.
  • Comply with legal, regulatory, and contractual requirements.
  • Send service updates, newsletters, or promotional materials (where legally permitted).
  • Protect against fraud, misuse, or unauthorized access.
  • Maintain security, system integrity, and compliance with industry standards.

5. Disclosure of Personal Data

We do not share or disclose mobile information (including text message opt-in data and consent) with third parties or affiliates for marketing or promotional use. All mobile opt-in data and consent are strictly confidential and will never be shared under any circumstances.

Other categories of personal data may be shared with trusted service providers, affiliates, or legal authorities only when necessary and compliant with applicable data protection laws.

6. Data Subject Rights (EU & UK GDPR)

If you are located in the UK or EU, you are entitled to the following rights under GDPR:

  • Right to Be Informed: Transparency regarding data collection and use.
  • Right of Access: Obtain copies of your personal data held by us.
  • Right to Rectification: Request corrections to inaccurate or incomplete data.
  • Right to Erasure (Right to Be Forgotten): Request deletion of personal information in certain cases.
  • Right to Restrict Processing: Limit processing under specific circumstances.
  • Right to Data Portability: Request transfer of your data to another controller.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Rights Related to Automated Decision-Making: Opt out of profiling or automated decisions that affect you significantly.

To exercise these rights, please contact compliance@onemedmarketing.org.

7. Data Protection and Security

We use advanced technical, administrative, and organizational safeguards to protect your personal data against unauthorized access, disclosure, or misuse. While we employ industry-standard security measures, we cannot guarantee absolute security due to the inherent nature of online communications.

8. Data Retention

We retain personal information only for as long as required to fulfill the purposes stated in this Policy or as mandated by law, including tax, regulatory, or contractual obligations.

9. International Data Transfers

Your personal data may be transferred to servers or partners in countries outside the UK, EU, or India (such as the United States). We ensure that such transfers are conducted under lawful mechanisms like Standard Contractual Clauses (SCCs) to maintain adequate data protection standards.

10. Cookies and Tracking Technologies

Our Sites use cookies and similar tools to improve website functionality, analyze usage, and deliver customized content. You can manage or disable cookies via your browser settings, though some features may not function properly without them.

11. Third-Party Links

Our Sites may contain links to external websites or services. OneMed Marketing is not responsible for the content or privacy practices of such third parties. We encourage users to review their privacy policies independently.

12. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 13 in compliance with COPPA (Children’s Online Privacy Protection Act). If you believe a minor has submitted personal information, please contact us for prompt removal.

13. Breach Notification (EU & UK GDPR)

In the unlikely event of a data breach impacting your personal information, OneMed Marketing will notify affected users and relevant authorities within 72 hours, as required by GDPR regulations.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updated versions will be posted on this page with a revised “Effective Date.” Continued use of our Sites signifies your acceptance of the updated Policy.

15. Contact Information

OneMed & A2Z Solutions LLC (USA)

1007 N Orange St. 4th Floor Ste 1382, Wilmington, DE 19801
Email: info@onemedmarketing.org
Phone: +1 315 366 8242

OneMed & A2Z Solutions Private Limited (India)

13th Floor, Unit No. 1306, GP, Godrej Genesis Building, EP Block, Sector V, Bidhannagar, Kolkata, West Bengal, India 700091
Email: contact@onemedmarketing.org
Phone: +91 33 6902 9160

OneMed Marketing (UK)

71-75, Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: info@onemedmarketing.org
Phone: +44 786 207 3907(UK)