Data Processing Agreement (DPA)

Data Processing Activities

Immaculate.Care processes the following categories of personal data:

• Health Information: Medical history, diagnoses, medications, vitals
• Staff Information: Names, roles, schedules, wellness data
• Family Information: Contact details, relationships, consent records
• Financial Data: Billing, payment methods, insurance information
• Usage Data: Login records, activity logs, analytics

Data Subject Rights

Under GDPR and CCPA, you have rights including:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict: Limit how your data is used
• Right to Portability: Receive data in portable format
• Right to Object: Object to processing activities

Data Security

Immaculate.Care implements comprehensive security measures:

• Encryption: AES-256 at rest, TLS 1.3 in transit
• Access Controls: Role-based permissions, MFA required
• Monitoring: Real-time intrusion detection
• Backups: Daily encrypted backups, geo-redundant
• Audit Logs: All data access logged and reviewed

Data Retention

Data is retained according to legal requirements:

• Medical records: 6+ years (HIPAA requirement)
• Employment records: 3+ years (labor law)
• Billing/financial: 7 years (tax law)
• Other personal data: Deleted upon request or contract termination

Third-Party Data Processing

Immaculate.Care uses the following third parties to process data:

• Amazon Web Services (AWS): Cloud infrastructure and storage
• SendGrid: Email delivery service
• Stripe: Payment processing

All third parties have Data Processing Agreements in place to ensure GDPR/CCPA compliance.

International Transfers

Data is primarily stored in the United States. For EU residents, transfers comply with:

• Standard Contractual Clauses (SCCs)
• GDPR adequacy determinations
• Supplementary safeguards (encryption, access restrictions)

Contact & Data Requests

To exercise your data rights or ask questions:

Privacy Officer
Email: richy@immaculate.care
Phone: 1-800-CARE-NOW
Response time: Within 30 days

Full Document

For the complete Data Processing Agreement with detailed terms, see the official documentation: