Privacy Policy
1. Overview
Mirlo Systems ("we," "us," "our") is committed to protecting the privacy of anyone who visits this website or engages our services. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data. By using this website or engaging Mirlo Systems, you agree to the practices described here.
2. Information We Collect
From website visitors. When you visit mirlosystems.com, we may automatically collect your IP address, browser type, device type, referring URL, pages visited, and time spent on the site. This data is collected through analytics tools and helps us understand how the site is used.
From contact forms and booking requests. If you submit an inquiry or book a diagnostic call, we collect your name, email address, company name, phone number if provided, and the content of your message. This information is used solely to respond to your inquiry and follow up on your request.
From clients. During the course of an engagement, clients provide us with operational data, system credentials, claim files, and other business information necessary for service delivery. This data is used only to perform the contracted services and is not used for any other purpose.
3. Protected Health Information
Mirlo Systems operates in the medical billing industry. Some client engagements require access to Protected Health Information as defined under HIPAA. We only access PHI when required by a signed engagement and only after a Business Associate Agreement is in place. PHI is handled under strict confidentiality controls and is never retained beyond what is necessary for service delivery.
4. How We Use Your Information
We use the information we collect to respond to inquiries, deliver contracted services, send service-related communications, improve this website, and comply with legal obligations. We do not use your information for advertising, third-party marketing, or any purpose not directly related to the services you have engaged us for.
5. Who We Share Information With
We do not sell, rent, or trade personal data. We may share information with trusted third-party service providers who assist us in operating this website and delivering services, including analytics providers and scheduling tools. All third-party processors are contractually required to handle data in accordance with applicable privacy law. We may also disclose information where required by law or court order.
6. Data Retention
Contact and inquiry data is retained for up to two years or until you request deletion. Client operational data is retained for the duration of the engagement and up to one year after termination, unless a shorter period is requested in writing or a longer period is required by law. PHI retention follows the schedule agreed in the applicable Business Associate Agreement.
7. Your Rights
You have the right to request access to the personal data we hold about you, request correction of inaccurate data, request deletion of your data, and object to how we process your data. To exercise any of these rights, email hello@mirlosystems.com with the subject line "Privacy Request." We will respond within thirty days.
8. Data Security
We apply administrative, technical, and physical safeguards to protect all information we hold. Data transmitted to and from our systems is encrypted. Access to client data is restricted to personnel who need it to perform their role. In the event of a data breach affecting client data, we will notify affected clients in writing within 48 hours of discovery.
9. Third-Party Links
This website may contain links to external websites. Mirlo Systems is not responsible for the privacy practices of any third-party site. Visiting a linked site is at your own discretion and subject to that site's own privacy policy.
10. Changes to This Policy
We may update this Privacy Policy at any time. Changes will be posted on this page with a revised effective date. For clients under an active engagement, material changes will be communicated by email at least thirty days before they take effect.
11. Contact
For any questions about this Privacy Policy or to exercise your data rights, contact us at hello@mirlosystems.com or by phone at +92 326 692 6005. Our office is at Citadel, Plot 25, F-8 Markaz, Islamabad, Pakistan.
Frequentlyasked questions
No. Mirlo Systems does not sell, rent, or trade personal data to any third party under any circumstances. Data collected from website visitors and clients is used solely to operate this website, respond to inquiries, and deliver agreed services.
When you visit mirlosystems.com, we may collect your IP address, browser type, pages visited, and time spent on the site through analytics tools. If you submit a contact form or book a call, we collect your name, email address, company name, and the message you send.
Mirlo Systems only accesses PHI when required to perform contracted services for a client. Before any PHI access, a Business Associate Agreement is executed as required under HIPAA. PHI is never stored beyond what is necessary for service delivery and is handled under strict confidentiality and security controls.
Contact and inquiry data is retained for up to two years or until you request deletion. Client operational data is retained for the duration of the engagement and up to one year after termination, unless a longer period is required by law or the client requests earlier deletion in writing.
Yes. You can request deletion of your personal data at any time by emailing hello@mirlosystems.com. We will process your request within thirty days. Some data may be retained where required by law or legitimate business record-keeping obligations.
Yes. We use analytics and scheduling tools that may process your data on our behalf. These include Google Analytics for website traffic and Cal.com for call scheduling. All third-party processors are required to handle data in accordance with applicable privacy law.
We apply administrative, technical, and physical safeguards to protect all data we hold. This includes access controls, encrypted data transmission, and documented data handling procedures. In the event of a breach affecting client data, affected clients are notified in writing within 48 hours.
All privacy-related questions and requests should be directed to hello@mirlosystems.com with the subject line "Privacy Request." We aim to respond within five business days.