Medisure Privacy Policy
Last Updated: May 31, 2026
Medisure (“we,” “us,” or “our”) provides cyber risk assessments, HIPAA‑aligned security reviews, and cyber insurance brokerage services to medical practices and healthcare organizations. We are committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use our services, or interact with us.
1. Information We Collect
We collect information in the following categories:
A. Information You Provide Directly
-
Name
-
Email address
-
Phone number
-
Practice or organization name
-
Role or title
-
Information submitted through forms (assessment intake, quote requests, contact forms)
-
Files or documents you upload (optional)
-
B. Information Collected Automatically
When you visit our website, we may automatically collect:
-
IP address
-
Browser type and version
-
Device information
-
Pages visited and time spent
-
Referral URLs
-
Cookie and tracking data (see Section 7)
C. Assessment & Service Information
When you engage us for cyber risk assessments or insurance services, we may collect:
-
IT environment details
-
Security control information
-
MSP contact information
-
Insurance application data
-
Practice size, systems, and risk profile
We do not collect or store Protected Health Information (PHI).
2. How We Use Your Information
We use your information to:
-
Provide cyber risk assessments
-
Deliver underwriting‑ready reports
-
Facilitate cyber insurance quotes and policy placement
-
Communicate with you about services, updates, and support
-
Improve our website and service offerings
-
Analyze usage patterns and website performance
-
Comply with legal and regulatory obligations
We do not sell your personal information.
3. How We Share Information
We may share your information with:
A. Insurance Carriers & Brokers
To obtain quotes, bind coverage, or support underwriting.
B. MSPs or IT Providers (Only With Your Permission)
To validate controls or coordinate remediation.
C. Service Providers
Trusted vendors who support:
-
Website hosting
-
Email delivery
-
Analytics
-
CRM systems
-
Security tools
These providers are contractually required to protect your information.
D. Legal or Regulatory Authorities
Only when required by law, subpoena, or to protect rights and security.
We do not share information with advertisers or unrelated third parties.
4. Data Security
We implement administrative, technical, and physical safeguards to protect your information, including:
-
Encryption in transit (TLS 1.2+)
-
Role‑based access controls
-
Secure storage and restricted access
-
Regular security reviews
-
Vendor due diligence
While no system is 100% secure, we take reasonable steps to protect your data.
5. Data Retention
We retain personal information only as long as necessary to:
-
Provide services
-
Meet legal or regulatory requirements
-
Maintain business records
-
Resolve disputes
You may request deletion at any time (see Section 9).
6. Your Rights
Depending on your location, you may have the right to:
-
Access your personal information
-
Correct inaccurate information
-
Request deletion
-
Restrict or object to processing
-
Request a copy of your data
-
Withdraw consent (where applicable)
To exercise these rights, contact us at: privacy@medisurecyber.com (placeholder — you can replace with your real email)
7. Cookies & Tracking Technologies
We use cookies and similar technologies to:
-
Improve website functionality
-
Analyze site traffic
-
Understand user behavior
-
Enhance user experience
You can manage cookie preferences through your browser settings.
We do not use cookies for targeted advertising.
8. Children’s Privacy
Our services are not intended for individuals under 18. We do not knowingly collect information from minors.
9. Your Choices
You may:
-
Opt out of marketing emails at any time
-
Request deletion of your data
-
Decline to provide optional information
-
Disable cookies in your browser
10. International Users
If you access our site from outside the United States, your information may be transferred to and processed in the U.S. By using our site, you consent to this transfer.
11. Changes to This Policy
We may update this Privacy Policy periodically. The “Last Updated” date at the top reflects the most recent revision
.
12. Contact Us
For questions or privacy requests, contact:
Medisure Cyber Risk & Insurance Email: privacy@medisurecyber.com Address: (Insert your business address)