1. Introduction
Extended Care Respiratory Partners, LLC (“ECRP,” “we,” “us,” or “our”) respects the privacy and security of the individuals and organizations that use our websites, applications, and services. This Privacy Policy describes how we collect, use, disclose, protect, and retain information associated with ECRP’s website and the ECRP Command Center.

2. Information We Collect
Depending on how you interact with ECRP, we may collect:

• Contact information, including name, email address, telephone number, company, and job title.

• Account information used to create and administer authorized ECRP Command Center accounts.

• Business and facility information necessary to provide ECRP services.

• Financial and accounting information obtained through authorized integrations, including QuickBooks Online.

• Transaction, invoice, payment, expense, customer, vendor, account, and related accounting information when an authorized user connects QuickBooks Online.

• Technical information such as login activity, device or browser information, system events, security records, and audit logs.

• Information voluntarily submitted through forms, email, or other communications with ECRP.
   

3. How We Use Information
ECRP may use collected information to operate and administer our services; authenticate and manage authorized users; provide financial and operational reporting; synchronize authorized accounting information; support facility management and business operations; troubleshoot integrations; maintain audit trails; protect our systems against unauthorized access; comply with contractual, regulatory, accounting, and legal requirements; and communicate with users regarding ECRP services.

4. QuickBooks Online Integration
The ECRP Command Center may connect with QuickBooks Online when an authorized ECRP user elects to establish the connection.

When connected, ECRP may access accounting information authorized through the QuickBooks integration, including accounts, customers, vendors, invoices, payments, expenses, and related accounting information necessary to provide ECRP Command Center functionality.

ECRP uses QuickBooks information for legitimate internal business purposes, including financial reporting, accounts receivable monitoring, expense attribution, facility profitability analysis, debt monitoring, and other authorized accounting workflows.

ECRP does not sell QuickBooks data.

Access to QuickBooks information is limited to authorized users and system processes necessary to provide the integration.

Users with appropriate authority may disconnect the QuickBooks integration. Disconnecting the integration stops future synchronization but may not automatically delete information previously synchronized where retention is reasonably necessary for accounting, audit, security, legal, or operational purposes.

5. How We Share Information
ECRP does not sell personal information.

Information may be disclosed to service providers and technology vendors that assist ECRP in operating its business and technology systems; professional advisors such as attorneys, accountants, auditors, and consultants when appropriate; governmental or regulatory authorities when required by law; or other parties when necessary to protect ECRP, its users, residents, facilities, or legal rights.

Third parties receiving information on ECRP’s behalf are expected to use the information only for authorized purposes and subject to applicable contractual and legal requirements.

6. Healthcare Information
ECRP operates in the healthcare industry and takes the confidentiality of healthcare information seriously.

Where ECRP receives, maintains, or processes Protected Health Information (“PHI”) subject to the Health Insurance Portability and Accountability Act (“HIPAA”), such information is handled in accordance with applicable HIPAA requirements, contractual obligations, and Business Associate Agreements where required.
This Privacy Policy does not replace any Notice of Privacy Practices that may apply to PHI maintained by a covered entity.

7. Data Security
ECRP uses reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, alteration, disclosure, loss, or misuse.

Access to ECRP systems is restricted according to authorization and business need. ECRP may maintain authentication records, access controls, system logs, and audit records to protect its systems and investigate security or operational events.

No electronic system can be guaranteed to be completely secure, and ECRP cannot guarantee absolute security.

8. Data Retention
ECRP retains information for as long as reasonably necessary to provide its services, maintain appropriate business and accounting records, satisfy contractual requirements, maintain security and audit records, resolve disputes, and comply with applicable legal and regulatory obligations.

Information may be deleted, anonymized, or archived when it is no longer reasonably required.

9. Data Access and Deletion Requests
Individuals may contact ECRP regarding questions about information maintained by ECRP or to request access, correction, or deletion where applicable.

Requests may be subject to identity verification and may be limited where ECRP is required or permitted to retain information for accounting, healthcare, contractual, regulatory, security, legal, or other legitimate business purposes.

Requests may be submitted to info@ecrp.health.

10. Third-Party Services
ECRP services may integrate with or link to third-party platforms, including QuickBooks Online and other technology providers. Those third parties maintain their own privacy practices and terms.

Information processed directly by a third-party provider may be governed by that provider’s privacy policy in addition to applicable agreements with ECRP.

11. Cookies and Website Technologies
The ECRP website and supporting technology providers may use cookies or similar technologies necessary for website operation, security, authentication, analytics, and functionality.

Users may be able to control certain cookies through their browser settings.

12. Children's Privacy
ECRP’s website and ECRP Command Center are intended for business and professional use and are not directed toward children under 13. ECRP does not knowingly collect personal information directly from children through these services.

13. Changes to This Privacy Policy
ECRP may update this Privacy Policy periodically to reflect changes in our services, technology, legal requirements, or business practices.

The effective date displayed at the top of this page identifies the current version.

14. Contact ECRP
Questions regarding this Privacy Policy or ECRP’s privacy practices may be directed to:
Extended Care Respiratory Partners, LLC
Email: info@ecrp.health
Website: ECRP.health
For privacy or data-related requests, please include sufficient information for ECRP to identify and appropriately respond to the request.