Privacy Policy
Privacy Policy Effective Date: April 25, 2025
1nessAgency is committed to protecting the privacy of visitors to our Site and users of our services. This policy explains how we collect, use, and safeguard personal information, and how we ensure compliance with HIPAA, NYS, and NYC laws.
1. Information We Collect We may collect the following types of information:
Name, email, and contact info
Website usage data via cookies and analytics
Business contact information for service delivery. We do not knowingly collect PHI unless specifically contracted via BAA.
2. Use of Information Information is used to:
Deliver and improve our services
Respond to inquiries
Comply with legal and regulatory obligations
3. Information Sharing We do not sell personal information. We may share data with:
Service providers are under a contractual obligation to safeguard data
Legal authorities, if required by law
4. HIPAA and Healthcare Compliance We operate in compliance with:
HIPAA Privacy and Security Rules
HITECH Act for electronic health data
NYS Department of Health and Mental Hygiene standards
NYC Consumer Protection Laws and Marketing Guidelines. We execute BAAs where appropriate and ensure subcontractor compliance.
5. Data Security We implement administrative, physical, and technical safeguards to protect data integrity and confidentiality, including SSL encryption, role-based access control, and monitoring.
6. Your Rights Under applicable law, you have the right to:
Request access to your personal data
Correct inaccuracies
Request deletion under certain conditions. To exercise these rights, email us.
7. Cookies and Tracking We use cookies for performance and analytics. You can disable cookies in your browser settings.
8. Data Retention We retain information only as long as necessary to fulfill the purposes outlined or as required by law.
9. Updates We may revise this policy periodically. Material changes will be communicated clearly on our Site.
Notice to EU and Non-U.S. Visitors
1nessAgency is based in the United States and operates in accordance with U.S. laws, including HIPAA and applicable state-level privacy regulations. If you are accessing this Site from the European Union or any jurisdiction outside of the U.S., please be aware that:
Your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction.
By using our Site and services, you acknowledge and consent to the transfer of your data to the United States and the handling of that data in accordance with our Privacy Policy and Terms of Service.
We do not actively market to or contract with clients located in the EU, EEA, or jurisdictions with extraterritorial privacy regimes unless a separate Data Processing Agreement (DPA) is executed.
Contact Us: If you have questions about these Privacy practices.