PATIENT SIGNS PRIVACY POLICY

Last Updated: November 3, 2026

Patient Signs ("we," "our," or "us") operates Patientsigns.com (the "Site"). This Privacy Policy describes our practices regarding the collection, use, retention, protection, and disclosure of personal information informed by the AICPA Trust Services Criteria for Privacy.

1. MANAGEMENT AND ACCOUNTABILITY

We maintain internal accountability for all personal data handled by Patient Signs. Our designated privacy officer ensures that personal data is processed fairly, lawfully, and transparently in accordance with this notice.

2. NOTICE AND THE NATURE OF DATA COLLECTION

We provide notice regarding our data handling practices via this document. We do not utilize tracking cookies, automated analytics scripts, or behavioral tracking mechanisms on this Site. The only personal information collected is voluntarily provided by users via our digital contact and order forms. This data is limited to:
• Name
• Email address
• Phone number
• Company or facility name
• Inferred technical identifiers (e.g., standard server logs/IP addresses required for basic web security)

3. CHOICE AND CONSENT

By voluntarily submitting personal information through our online forms, users consent to the processing of their information for the explicit purposes stated at the point of collection. Users may withdraw consent or object to further communication at any time by contacting us directly.

4. USE AND PURPOSE SPECIFICATION

Information collected through our website forms is strictly utilized for the following internal operational purposes:
• Responding to direct inquiries, business requests, or product pricing quotes.
• Fulfilling orders and delivering customer support.
• Maintaining website infrastructure security and integrity.

5. RETENTION AND SECURE DISPOSAL

We retain personal information only as long as necessary to fulfill the operational business purposes for which it was collected or to comply with applicable legal, tax, or regulatory requirements. When personal data is no longer required, it is systematically and securely destroyed or deleted in accordance with our internal data destruction schedules to prevent unauthorized retrieval.

6. DATA ACCURACY AND INDIVIDUAL ACCESS RIGHTS

We take reasonable steps to ensure that personal data remains accurate, complete, and relevant for its intended use. Individuals have the right to request access to, correction of, or deletion of the personal information we hold about them. Requests can be submitted directly to our privacy team.

7. THIRD-PARTY DISCLOSURES AND SHARING BOUNDARIES

Patient Signs does not sell, trade, or license personal information, and does not disclose it to advertising networks or data brokers. We share personal information only with service providers who process it on our behalf under written contract — including our cloud hosting, website, email and payroll providers — and who are prohibited from using it for any other purpose. Personal information relating to our healthcare clients’ patients is handled under Business Associate Agreements. We also disclose information where explicitly mandated by a valid legal obligation, subpoena, or law enforcement directive.

8. SECURITY AND SAFEGUARDS

We implement administrative, logical, and physical security controls designed to protect personal information against unauthorized access, modification, disclosure, or destruction. Website form transmissions are encrypted using standard Secure Sockets Layer (SSL/TLS) technology.

9. CHILDREN'S PRIVACY

Our website and services are intended strictly for commercial and adult audiences. We do not knowingly collect personal information from individuals under the age of 13.

10. MONITORING, ENFORCEMENT, AND DISPUTE RESOLUTION

We conduct periodic internal reviews to monitor compliance with this Privacy Policy. Any inquiries, privacy concerns, or complaints regarding our data practices should be directed to us at info@patientsigns.com. We are committed to investigating and resolving all disputes in a timely manner.

‍