Privacy Policy
Last Updated: October 2023
1. Commitment to Data Protection
At Svoja Group, we understand the critical nature of the information processed within healthcare and boutique service environments. This policy outlines our rigorous standards for managing, storing, and protecting the data entrusted to us by our clients and their respective patients or customers.
2. HIPAA Compliance and Healthcare Data
For our clinical partners, we operate under strict HIPAA-aware protocols. All Protected Health Information (PHI) is handled through BAA-compliant systems. Our remote operations team is trained in administrative, physical, and technical safeguards to ensure that patient confidentiality is maintained according to U.S. federal regulations. Internal audits are conducted regularly to maintain process integrity and mitigate risk.
3. Information Collection and Storage
We collect only the information necessary to fulfill our operational duties—such as scheduling data, billing details, and client communication logs. All data remains within secure, managed environments authenticated by multi-factor protocols. We never utilize personal devices or unencrypted channels for client-related data transfers, ensuring that institutional knowledge and sensitive details remain locked within your firm's ecosystem.
Questions regarding our privacy practices should be directed to our compliance lead at hello@svojagroup.com.