1. Purpose

Copergrine Medical Courier ("CMC," "we," "us") protects the privacy of every stakeholder we serve. This Policy explains how we collect, use, disclose, and safeguard information across our logistics platform, dispatch operations, and courier network. It reflects the enterprise privacy principles of our parent, Copergrine, Inc.

2. Information We Collect

We collect information from three primary sources: (i) data you provide directly, (ii) operational data generated as we run routes, and (iii) data supplied by clinical partners pursuant to law and contract.

• Account & Contact Details: Names, job titles, facility affiliations, phone numbers, email addresses, authentication credentials.
• Operational Records: Pickup/delivery instructions, manifests, chain-of-custody logs, proof-of-delivery signatures, courier notes, temperature readings, GPS telemetry.
• Regulated Health Information: Patient identifiers, specimen attributes, medication details, or other clinical context supplied by covered entities or business associates under HIPAA/HITECH.
• Technical Data: Device identifiers, IP addresses, browser and operating system details, session analytics, cookies, and other telemetry used to secure and improve the platform.

3. How We Use Information

We process information to deliver safe, compliant clinical logistics:

• Authenticate users, manage access, and secure our systems
• Dispatch couriers, orchestrate routes, and maintain real-time visibility
• Document custody, handoffs, and delivery performance for audits and quality programs
• Support customers, investigate incidents, and coordinate recalls or resupplies
• Improve delivery speed, compliance, and experience through analytics
• Meet legal, contractual, accreditation, and payer requirements

Our primary legal bases include legitimate business interests, contract performance, legal obligations, and consent (where required).

4. Information Sharing

We do not sell personal information. We share data only as needed to provide services or comply with law:

• Healthcare Partners: Facilities, labs, pharmacies, and care teams receive manifests, confirmations, analytics, and compliance documentation relevant to their shipments.
• Copergrine Family of Companies: Enterprise technology, analytics, and compliance teams access information under confidentiality controls to deliver integrated services.
• Service Providers: Cloud, communication, and security vendors operate under Business Associate Agreements (BAAs) or comparable contracts.
• Regulators & Authorities: We respond to lawful requests, emergency directives, accreditation reviews, and public-health reporting obligations.

5. Retention

We retain information only as long as necessary to perform services, satisfy legal or contractual requirements, resolve disputes, and support quality assurance. When retention periods lapse, we securely destroy or de-identify data consistent with Copergrine's enterprise records policy.

6. Security

CMC employs layered safeguards: encryption at rest and in transit, least-privilege access controls, courier credentialing, environment segmentation, and continuous monitoring. Our controls align with HIPAA Security Rule requirements, SOC 2 principles, and NIST-informed risk management practices.

7. Your Privacy Choices

Depending on your role and jurisdiction, you may request access, correction, deletion, or restriction of personal information. Covered entities remain responsible for patient rights under HIPAA; we support them as a business associate. You may update preferences or withdraw consent (where relied upon) without affecting prior lawful processing.

8. Text Messaging (SMS)

If you opt in when booking, Copergrine Medical Courier sends text messages about that delivery — pickup, transit and delivery updates. Message frequency varies by delivery. Msg & data rates may apply. Consent is not a condition of purchase, and you can book without it.

Reply STOP to any message to opt out at any time, or HELP for help. Opt-outs take effect immediately and are recorded against your number. Reply START to resubscribe.

Mobile numbers collected for SMS are never sold, rented, or shared with third parties or affiliates for their own marketing purposes. They are used only to operate the delivery you asked us to perform, and are shared only with the messaging provider that transmits the message on our behalf.

9. Copergrine Driver Mobile App

The Copergrine Driver app is used by our credentialed couriers. In addition to the information above, it collects the following, only to dispatch, navigate and document deliveries:

• Precise location, including in the background — only while you have set yourself to Online. We use it to offer nearby jobs, share delivery ETAs with the ordering facility, record chain of custody, and monitor driving speed for safety. Switching to Offline stops collection. iOS shows its location indicator whenever the app is using location in the background.
• Photos and signatures you capture on the proof-of-delivery screen, using the camera or photo library only when you choose to.
• A push-notification token for this device, so we can alert you to new and changed jobs. It is removed when you sign out or close your account.
• Messages you exchange with dispatch in the app.

Turn-by-turn navigation is provided by the Google Maps Navigation SDK, which receives your location and route while navigation is active, under Google’s terms. We do not use advertising identifiers, do not track you across other companies’ apps or websites, and do not sell app data.

Deleting your account. Open Profile → Settings → Delete Account in the app. Your account is closed immediately and can no longer sign in. Delivery, chain-of-custody and proof-of-delivery records that we must keep for our healthcare clients and for legal and audit purposes are retained under Section 5; you may ask us to delete any other personal information by emailing compliance@copergrine.com. An account cannot be closed while it holds an active delivery.

10. International Transfers

CMC primarily operates in the United States. If information is transferred internationally, we implement safeguards such as contractual clauses and enterprise privacy controls consistent with applicable frameworks.

11. Children’s Privacy and Minimum Age

Our services, websites and the Copergrine Driver app are not directed to children, and we do not knowingly collect personal information from anyone under 13. Couriers must be at least 18 years old: we collect a date of birth when someone applies to drive and do not approve applicants under 18. If you believe a child has given us personal information, email compliance@copergrine.com and we will delete it.

12. Contact