1. Purpose

Copergrine Medical Courier ("CMC," "we," "us") protects the privacy of every stakeholder we serve. This Policy explains how we collect, use, disclose, and safeguard information across our logistics platform, dispatch operations, and courier network. It reflects the enterprise privacy principles of our parent, Copergrine, Inc.

2. Information We Collect

We collect information from three primary sources: (i) data you provide directly, (ii) operational data generated as we run routes, and (iii) data supplied by clinical partners pursuant to law and contract.

• Account & Contact Details: Names, job titles, facility affiliations, phone numbers, email addresses, authentication credentials.
• Operational Records: Pickup/delivery instructions, manifests, chain-of-custody logs, proof-of-delivery signatures, courier notes, temperature readings, GPS telemetry.
• Regulated Health Information: Patient identifiers, specimen attributes, medication details, or other clinical context supplied by covered entities or business associates under HIPAA/HITECH.
• Technical Data: Device identifiers, IP addresses, browser and operating system details, session analytics, cookies, and other telemetry used to secure and improve the platform.

3. How We Use Information

We process information to deliver safe, compliant clinical logistics:

• Authenticate users, manage access, and secure our systems
• Dispatch couriers, orchestrate routes, and maintain real-time visibility
• Document custody, handoffs, and delivery performance for audits and quality programs
• Support customers, investigate incidents, and coordinate recalls or resupplies
• Improve delivery speed, compliance, and experience through analytics
• Meet legal, contractual, accreditation, and payer requirements

Our primary legal bases include legitimate business interests, contract performance, legal obligations, and consent (where required).

4. Information Sharing

We do not sell personal information. We share data only as needed to provide services or comply with law:

• Healthcare Partners: Facilities, labs, pharmacies, and care teams receive manifests, confirmations, analytics, and compliance documentation relevant to their shipments.
• Copergrine Family of Companies: Enterprise technology, analytics, and compliance teams access information under confidentiality controls to deliver integrated services.
• Service Providers: Cloud, communication, and security vendors operate under Business Associate Agreements (BAAs) or comparable contracts.
• Regulators & Authorities: We respond to lawful requests, emergency directives, accreditation reviews, and public-health reporting obligations.

5. Retention

We retain information only as long as necessary to perform services, satisfy legal or contractual requirements, resolve disputes, and support quality assurance. When retention periods lapse, we securely destroy or de-identify data consistent with Copergrine's enterprise records policy.

6. Security

CMC employs layered safeguards: encryption at rest and in transit, least-privilege access controls, courier credentialing, environment segmentation, and continuous monitoring. Our controls align with HIPAA Security Rule requirements, SOC 2 principles, and NIST-informed risk management practices.

7. Your Privacy Choices

Depending on your role and jurisdiction, you may request access, correction, deletion, or restriction of personal information. Covered entities remain responsible for patient rights under HIPAA; we support them as a business associate. You may update preferences or withdraw consent (where relied upon) without affecting prior lawful processing.

8. International Transfers

CMC primarily operates in the United States. If information is transferred internationally, we implement safeguards such as contractual clauses and enterprise privacy controls consistent with applicable frameworks.

9. Contact