— —

Privacy Policy

Last updated: August 10, 2026

This Privacy Policy explains how Dreams HMS ("we," "our," or "us") collects, uses, discloses and safeguards patient and staff information when you use the Dreams HMS platform (the "Service"). We are committed to protecting the confidentiality of protected health information (PHI) in accordance with HIPAA and applicable data protection regulations. By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

We collect information you provide directly, including demographic details, medical history, insurance information and contact details, as well as clinical data generated during treatment (lab results, prescriptions, diagnostic reports). We also automatically collect technical information such as IP address, device identifiers and usage logs when you access the Service.

2. How We Use Your Information

Information is used to provide clinical care, schedule appointments, process billing and insurance claims, communicate appointment reminders and lab results, improve care quality, and comply with legal and regulatory obligations. We do not use PHI for marketing without explicit consent.

3. Data Security

We employ industry-standard safeguards including encryption in transit and at rest, role-based access controls, audit logging of all record access, and regular security assessments to protect against unauthorized access, alteration or disclosure of health information.

4. Sharing of Information

We do not sell patient information. We may share information with treating physicians, insurance providers for claims processing, laboratories and pharmacies involved in your care, and regulatory authorities where required by law — always limited to the minimum necessary for the purpose.

5. Data Retention

Medical records are retained in accordance with applicable healthcare record-retention regulations, typically a minimum of 7 years from the date of last treatment, or longer where required by law.

6. Your Rights

You have the right to access, request corrections to, and receive a copy of your medical records. You may also request an accounting of disclosures and, in certain cases, request restrictions on how your information is used or shared.

7. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page along with a revised "Last updated" date.

8. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact our Privacy Officer at privacy@dreamshms.health.