Privacy Policy

This Privacy Notice explains how C&M Healthcare Solutions Ltd (HCS Ltd) collects, uses, and protects your personal information within the HCS Ltd customer portals, including the online client account ("Client Portals") and email links on the HCS Ltd website. 

For the purposes of this notice, "Personal Information" refers to any data about an identified or identifiable individual. This includes information that can directly (e.g., your name) or indirectly (e.g., your address, phone number, or date of birth) identify you. 

Please read this document carefully. By accessing and using our website, third-party applications, and providing your Personal Information, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Notice. 

The Personal Information Protection Act 2016 (PIPA) provides individuals in Bermuda with rights related to their Personal Information. This Privacy Notice is designed to ensure compliance with PIPA while upholding the highest standards of confidentiality as a healthcare entity. 

1. Who We Are & Contact Details 

C&M Healthcare Solutions Ltd (HCS Ltd) is a limited company incorporated in Bermuda and serves as the parent company to Epic Wellness and The DRIPBaR Bermuda. In this Privacy Notice: 

• "We", "our", and "us" refer to C&M Healthcare Solutions Ltd. 

• "You" and "your" refer to individuals who access or use the Website and/or provide their Personal Information through the Client Portals, in person, or via email. 

HCS Ltd engages third-party vendors to provide essential services, including but not limited to: 

• Human Resources 

• Care/Health Management Programs 

• IT 

• Finance 

• Legal/Privacy 

• Marketing/Communications 

These services may require the transfer of Personal Information between HCS Ltd and its third-party vendors. All vendors are subject to HCS Ltd.’s privacy and data protection policies to ensure the security of stakeholders' Personal Information. 

For inquiries regarding this Privacy Notice or our use of your Personal Information, please contact our Privacy Officer:
Privacy Officer: Mrs. Ruth Moran 
Mailing Address:
C&M Healthcare Solutions Ltd
60 Harrington Sound Road
Smith’s FL 08
Bermuda 

Email: admin@healthcaresolutions.bm   

2. What Personal Information Do We Collect? 

HCS Ltd, through its third-party vendors, client portals, and security systems, may request and store the following Personal Information: 

• Contact details: Name, mailing and service address, phone numbers, and email addresses

• Health information: Insurance details and data related to healthcare services provided by HCS Ltd

• Financial details: Banking/payment information for billing and payroll purposes 

• Employment records: Documents required for new hires 

• Communications: Correspondence via the website, third-party applications, or email, including concerns or feedback

• Login credentials: Usernames for third-party programs 

• Uploaded content: Submitted images or pictures, where applicable 

3. How Do We Use Your Personal Information? 

We use your Personal Information for the following purposes: 

• Providing requested services

• Responding to inquiries and maintaining business relations

• Setting up and managing client accounts

• Improving information about our services 

• Verifying your identity

• Processing billing and payments 

• Preventing or investigating fraud or legal violations

• Requesting participation in surveys or questionnaires

• Sending relevant notifications and reports

• Sharing information about our services

• Investigating concerns

4. Who Has Access to Your Personal Information? 

Your Personal Information is used to: 

• Support the provision of requested services 

• Fulfill obligations related to service delivery 

All staff, consultants, and third-party vendors are required to comply with HCS Ltd’s data protection policies. Personal Information is only shared with authorized personnel on a need-to-know basis for the purpose of delivering services. 

We may transfer Personal Information to third parties located in Bermuda or overseas for operational purposes, such as financial transactions. Only the necessary data required to complete these tasks will be shared. These third parties are required to meet PIPA’s data protection standards. 

We do not share your Personal Information with third parties for marketing purposes without your consent. We do not sell or rent your Personal Information. 

5. How Long Do We Keep Your Personal Information? 

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required for business or legal purposes. 

6. What Are Your Rights? 

We are committed to assisting you in exercising your rights regarding your Personal Information. You may request to: 

• Access or restrict access to your Personal Information 

• Rectify inaccurate Personal Information

• Block or stop the use of all or part of your Personal Information

• Erase or destroy your Personal Information

7. How to Exercise Your Rights 

To make a request regarding your Personal Information, submit a written request to the Privacy Officer at admin@healthcaresolutions.bm. We may require verification of your identity before processing your request. 

However, access to Personal Information may be restricted in situations such as: 

• The information is protected by legal privilege

• Disclosure would reveal confidential company or third-party business data

• The information is used in an ongoing legal, disciplinary, or arbitration matter

• Disclosure would compromise negotiations or pose a security risk

• The information includes personal data about another individual

• The information includes the identity of a confidential source

8. Security Measures 

We implement reasonable and appropriate security measures to protect your Personal Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction in accordance with PIPA.

While we strive to ensure data security, transmission over the internet is never 100% secure. However, once received, we take all necessary precautions to safeguard your Personal Information through ongoing system monitoring and policy reviews. 

9. Administrative Details 

• Privacy Notice Version: 1.1 

• Effective Date: January 2025 

• Last Updated: January 2025 
  

We may update this Privacy Notice periodically. Any revisions will become effective upon publication.