Privacy Policy
Last updated: May 25, 2026
1. Introduction
HealthShift ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare staffing platform and services.
By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.
2. Information We Collect
2.1 Personal Information
We collect information you provide directly to us, including:
- Account Information: Name, email address, phone number, and password
- Professional Information: Professional licenses, certifications, work experience, and qualifications
- Profile Information: Profile photos, bio, skills, and preferences
- Location Information: Current location and work preferences
- Payment Information: Billing address and payment method details (processed securely by third-party providers)
- Communication Data: Messages, reviews, and other communications through our platform
2.2 Automatically Collected Information
We automatically collect certain information when you use our Service:
- Usage Data: How you interact with our Service, pages visited, and features used
- Device Information: IP address, browser type, operating system, and device identifiers
- Log Data: Server logs, including access times, pages viewed, and error reports
- Cookies and Tracking: Information collected through cookies and similar technologies
2.3 Information from Third Parties
We may receive information about you from:
- Background check and verification services
- Professional licensing boards and certification bodies
- Social media platforms (if you choose to connect your accounts)
- Other users of our Service (such as reviews and references)
3. How We Use Your Information
We use the information we collect to:
- Provide and Improve Our Service: Operate, maintain, and enhance our platform functionality
- Facilitate Connections: Match healthcare professionals with appropriate job opportunities
- Verify Credentials: Conduct background checks and verify professional qualifications
- Process Payments: Handle billing, invoicing, and payment processing
- Communicate: Send notifications, updates, and respond to your inquiries
- Ensure Safety: Monitor for fraud, abuse, and ensure platform security
- Comply with Legal Requirements: Meet regulatory and legal obligations
- Analytics and Research: Analyze usage patterns to improve our Service
4. Information Sharing and Disclosure
4.1 With Other Users
We share certain information with other users to facilitate connections:
- Professional profiles are visible to healthcare facilities
- Job postings are visible to qualified healthcare professionals
- Reviews and ratings are shared between matched parties
- Communication history is accessible to relevant parties
4.2 With Service Providers
We may share information with trusted third-party service providers who assist us in:
- Payment processing and financial services
- Background verification and credential checking
- Cloud storage and data hosting
- Customer support and communication services
- Analytics and performance monitoring
4.3 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes or government requests
- Protect our rights, property, or safety
- Prevent fraud or illegal activities
- Protect the rights and safety of our users
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication systems
- Employee training on data protection
- Incident response and breach notification procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. HIPAA Compliance
As a healthcare platform, we are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) and similar healthcare privacy regulations. We:
- Implement appropriate administrative, physical, and technical safeguards
- Conduct regular risk assessments and audits
- Provide HIPAA training to our staff
- Maintain business associate agreements with relevant service providers
- Implement incident response procedures for potential breaches
We do not collect, store, or process protected health information (PHI) unless specifically required for our services and with appropriate safeguards in place.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:
- Account Information: Retained while your account is active and for a reasonable period after closure
- Professional Records: Retained as required by applicable regulations and professional standards
- Communication Data: Retained for business purposes and legal compliance
- Payment Information: Retained as required by financial regulations
- Usage Data: Retained for analytics and service improvement purposes
We will securely delete or anonymize your information when it is no longer needed, subject to legal and regulatory requirements.
8. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
8.1 Access and Portability
You have the right to access and receive a copy of your personal information in a structured, machine-readable format.
8.2 Correction and Updates
You can update or correct your personal information through your account settings or by contacting us.
8.3 Deletion
You may request deletion of your personal information, subject to legal and regulatory requirements.
8.4 Restriction and Objection
You may restrict or object to certain processing of your personal information.
8.5 Withdrawal of Consent
You may withdraw your consent for certain processing activities at any time.
To exercise these rights, please contact us using the information provided in the Contact section below.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns. Types of cookies we use include:
- Essential Cookies: Required for basic platform functionality
- Performance Cookies: Help us understand how you use our Service
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used for targeted advertising and marketing
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect platform functionality.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
- Standard contractual clauses approved by relevant authorities
- Adequacy decisions by data protection authorities
- Certification schemes and codes of conduct
- Binding corporate rules and other appropriate safeguards
11. Children's Privacy
Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by:
- Posting the updated Privacy Policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our platform
Your continued use of our Service after such changes constitutes acceptance of the updated Privacy Policy.
13. Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us:
HealthShift Privacy Team
Email: privacy@healthshift.com
Phone: +1 (555) 123-4567
Address: 123 Healthcare Plaza, Medical City, MC 12345
Data Protection Officer: dpo@healthshift.com