Legal

Privacy Policy

Effective Date: April 27, 2026

Eighty Seven Solutions (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information and sensitive data you provide when using our website and services.

1

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

  • Name
  • Email address
  • Phone number
  • Company name
  • Any information submitted through contact forms, emails, or booking pages

Technical Information

We may automatically collect certain information when you visit our website, including:

  • IP address
  • Browser type and device information
  • Pages visited and time spent on the site

Sensitive & Regulated Data

In the course of providing IT, cybersecurity, and compliance services, we may have access to Protected Health Information (PHI) when working with healthcare-related clients.

2

HIPAA Compliance & Business Associate Role

When providing services to healthcare providers, health plans, or other covered entities, Eighty Seven Solutions may act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA).

In such cases:

  • We access, use, and disclose PHI only as permitted under a signed Business Associate Agreement (BAA)
  • We implement administrative, physical, and technical safeguards aligned with HIPAA Security Rule requirements
  • We restrict access to PHI to authorized personnel only
  • We ensure our workforce is trained in handling sensitive and regulated data
3

How We Use Your Information

We use the information we collect to:

  • Deliver IT, cybersecurity, and compliance services
  • Respond to inquiries and schedule consultations
  • Improve our website, services, and user experience
  • Maintain system security and prevent unauthorized access

We do not use Protected Health Information (PHI) for marketing purposes.

4

Data Security

We implement appropriate technical and organizational safeguards to protect your information, including:

  • Access controls and least-privilege policies
  • Endpoint protection and monitoring
  • Encryption of data in transit
  • Secure backup and recovery systems
  • Continuous monitoring for threats and vulnerabilities

While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure.

5

Sharing of Information

We do not sell or rent your personal or sensitive information.

We may share information only when necessary to operate our business, including:

  • Trusted service providers and platforms (such as Microsoft Bookings for scheduling)
  • When required by law or regulatory obligation
  • As permitted under a Business Associate Agreement for healthcare clients

All third parties are expected to maintain appropriate data protection and security measures.

6

Cookies & Tracking Technologies

Our website may use cookies and similar technologies to:

  • Enhance user experience
  • Analyze website traffic
  • Improve site performance

Cookies are not used to collect Protected Health Information (PHI). You can adjust your browser settings to disable cookies if desired.

7

Data Retention

We retain personal and business information only as long as necessary to:

  • Provide services
  • Fulfill contractual obligations
  • Comply with legal requirements

For healthcare clients, retention of PHI is governed by applicable agreements and regulations.

8

Your Rights

Depending on your location, you may have the right to:

  • Request access to your personal data
  • Request corrections or deletion
  • Opt out of marketing communications

Requests related to healthcare data are managed in accordance with applicable regulations and through the covered entity.

9

Breach Notification

In the event of a data breach involving sensitive information or PHI, we will:

  • Take immediate steps to mitigate the issue
  • Notify affected parties and clients as required
  • Comply with applicable legal and regulatory requirements
10

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.

11

Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

12

Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised effective date.