Last updated: October 12, 2026
Who is responsible
OnTech Solutions provides OnTech Meds and is the controller of practice account data (name, email, billing details).
For patient data, each practice is the controller and OnTech Solutions acts as processor: it processes the data only to provide the service and following the practice’s instructions.
What data we process
About practices and their team: name, email, phone, roles, billing details and access logs.
About patients, on behalf of the practice: identification and contact details, appointments, clinical information, prescriptions, results, payments and consents.
From the website: the data you enter when signing up. The site uses no tracking or advertising tools.
What we use it for
To provide and maintain the service, send the messages the practice configures, bill the subscription, provide support, meet legal obligations and protect the platform against abuse.
We do not sell data or use it for advertising. We do not use patient data to train artificial intelligence models.
How we protect it
Isolation of each practice in the database, encryption in transit and at rest, additional encryption of sensitive clinical data, two-step verification for clinical access and an audit log that cannot be modified.
Who we share it with
Providers that help us deliver the service (hosting, email and message delivery, payment gateway), under contracts that require them to protect the data.
Another practice only when the practice refers a patient and the patient authorizes it.
Authorities when required by law.
How long we keep it
While the account is active and for the periods required by the law that applies to medical records. When the service ends, the practice can export its information.
Your rights
You can request access, correction, deletion or objection regarding your data, and portability where applicable. Patients can exercise them with their practice and request a copy of their data from the patient portal.
Contact
For any privacy question, write to the email shown on the contact page.