Privacy Policy

Effective Date: July 25, 2026  |  Platform: emp.knoxsecurity.org

NRNathanTechnologies, LLC 131 Continental Dr, Suite 305, Newark, DE 19713, New Castle County, USA Delaware Entity File Number: 10692981

1. Introduction

NRNathanTechnologies, LLC ("Company," "we," "us," or "our") operates the Electronic Medical Platform ("EMP" or "Platform"). We are committed to protecting the privacy, confidentiality, and security of all personal and health-related data processed through our platform.

This Privacy Policy explains how we collect, use, encrypt, store, and protect information when Doctors, Secretarial Staff, Pharmacies, and Third-Party Verifiers access or use emp.knoxsecurity.org.

2. Information We Collect

A. Practitioner & User Account Data

  • Doctor Credentials: Full name, practice/clinic name, clinic address, contact phone numbers, email addresses, medical licenses, qualifications, and digital signatures.
  • Staff Credentials: Name, email address, assigned practice, and assigned doctor linkage for Secretarial accounts (e.g., SEC-XXXXXX-DR-XXXXXX).

B. Patient PII & Medical Records

  • Demographics: Patient names, date of birth, physical address, and phone numbers.
  • Identification Documents: Stored identification details (e.g., National ID, Driver's License, or Passport numbers).
  • Clinical Records: Clinical notes, initial consultation assessments, attached medical documents, issued prescriptions, dispense logs, and medical letters.

C. Technical & Audit Log Data

  • System Logs: IP addresses, browser user-agent strings, access timestamps, and session tokens.
  • Audit Logs: Logs tracking pharmacy tablet-level dispenses and public document verification attempts.

3. Zero-Trust Encryption Architecture

We implement enterprise-grade cryptographic safeguards to protect sensitive health and personal data at rest and in transit:

  1. Encryption at Rest: Patient PII, clinical notes, prescriptions, and medical letters are stored using field-level ciphers and envelope encryption algorithms.
  2. Encryption in Transit: All communications with emp.knoxsecurity.org are protected using TLS 1.3 protocol encryption enforced by Strict Transport Security (HSTS).
  3. Restricted Protected Media: Attached clinical files and digital signatures are served via internal Nginx X-Accel-Redirect handoffs, preventing direct public URL access.

4. How We Use Your Information

  • Medical Record Management: Enabling licensed practitioners and assigned secretarial staff to manage clinical workflows and patient files.
  • Cryptographic Verification: Allowing authorized pharmacies to verify prescriptions and employers/institutions to validate medical letters via reference tokens and patient ID matching.
  • Audit & Accountability: Maintaining immutable audit trails for pharmacy dispenses and system security events.
  • Security Protection: Monitoring for unauthorized account access, managing session terminations, and enforcing account lockouts.
We do not sell, rent, trade, or monetize any patient data, clinical records, or user information.

5. Data Sharing & Third-Party Disclosures

Data processed through the Platform is disclosed only under strict operational conditions:

  • Pharmacy Verification: Pharmacies verifying a prescription receive decrypted medication instructions only after providing a valid Reference Code and matching Patient Identification Number.
  • Letter Verification: External entities verifying medical letters view issued letter text only upon providing the correct Document Reference Code and matching Patient Identification Number.
  • Legal Requirements: We may disclose information if required by a valid court order, subpoena, or legal regulatory authority under Delaware or U.S. federal law.

6. Data Retention & Account Lockouts

  • Retention Period: Clinical records, prescriptions, and audit logs are retained in encrypted storage for as long as necessary to fulfill legal, medical regulatory, and contractual obligations.
  • Account Lockouts: In the event of a security incident, users can execute emergency session termination or lock their account. Locked accounts remain inaccessible until manual identity verification is completed by NRNathanTechnologies support.

7. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Delaware, United States.

Privacy Contact & Security Support

NRNathanTechnologies, LLC
131 Continental Dr, Suite 305, Newark, DE 19713, New Castle County, USA
Official Portal: https://www.emp.knoxsecurity.org
Delaware File Number: 10692981