PRIVACY POLICY

1. Relationship to OncoHelix

PRISMS is provided to OncoHelix Inc. as a secure data management solution. Use of this platform is also regulated by the general terms of the OncoHelix Privacy Policy.

OncoHelix Privacy Policy: https://oncohelix.org/privacy-policy/

2. Our Role: Data Processor vs. Controller

Solasta acts primarily as a Data Processor. We receive data from Data Controllers (such as OncoHelix and its affiliated laboratories) who collect personal information directly from individuals. Solasta handles this data as a third party on behalf of these controllers for the sole purpose of processing, reporting, and secure information transfer.

3. Information We Collect

• A. Information You Provide: Name, email address, organization name, account credentials, and contact form submissions.
• B. Platform Account Information: User roles (e.g., laboratory staff, physician), login activity, and authentication logs (MFA).
• C. Automatically Collected Information: IP address, browser type, device information, and usage analytics. We use cookies (small text files) to improve navigation. You may disable cookies in your browser settings, though some platform features may be affected.

4. Handling of Healthcare Data

• Encryption: All personal data and Protected Health Information (PHI) are encrypted both in transit and at rest using industry-accepted protocols.
• Email Security: PHI is never transmitted via email. Email notifications only inform users that secure information is available for viewing within the encrypted platform.
• Access: Report content is accessed only after secure authentication.
• Compliance: PRISMS is designed to be fully compliant with HIPAA (Health Insurance Portability and Accountability Act) Title II’s Security and Privacy Rules.

5. How We Use Information

• Provide and maintain the PRISMS platform and authenticate users.
• Communicate directly with users regarding their accounts (transactional emails).
• Ensure system security, audit logging, and regulatory compliance.

We do not sell, rent, or lease personal data to any third party.

6. Data Transfer and Third Parties

Solasta does not transfer personal data to third-party agents or non-agent third parties. If future circumstances require the use of third-party agents, we will provide individuals with the choice to opt-out prior to any sharing of data.

We currently utilize secure cloud infrastructure provided by Amazon Web Services (AWS) for data hosting. These providers process data only for authorized, secure purposes.

7. Data Security and Retention

We implement administrative, physical, and technical safeguards, including:

• Role-based access controls and Multi-Factor Authentication (MFA).
• Firewall and intrusion protections.
• Strictly limited employee access based on the principle of least privilege.

Note: While we use all reasonable efforts to safeguard your privacy, transmissions made via the Internet cannot be made absolutely secure. Solasta assumes no liability for disclosure of data due to errors in transmission or unauthorized acts by third parties.

8. Your Rights and Opt-Out

At Solasta, we believe keeping personal information up to date ensures the best user experience.

Access/Correction: You may review or change your data by contacting support@solastasoftech.com.

Opt-Out: If you no longer wish to receive notifications or materials, you may opt-out at any time by directly contacting OncoHelix.

9. Acceptance and Changes

By using the PRISMS site and services, you signify your acceptance of this Privacy Policy. Solasta reserves the right to modify this policy at any time. Continued use of the platform after changes are posted constitutes acceptance of those changes.

10. Contact Information

Solasta Software Solutions Ltd. Alberta, Canada
Email: support@solastasoftech.com
Website: https://www.solastasoftech.com