1. Introduction
Davios International ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
This policy is designed to comply with applicable privacy regulations, including standards aligned with the Health Insurance Portability and Accountability Act (HIPAA) where applicable to the services we provide.
2. Information We Collect
We collect only the minimum information necessary to fulfill our services:
- Contact Information: Name, email address, phone number when you submit a contact or booking request form.
- Account Information: Name, email address, and encrypted password when you create an account.
- Usage Data: We log user actions (login, form submissions) for security audit purposes, including timestamps and IP addresses.
3. How We Use Your Information
- To respond to your inquiries and booking requests
- To provide the services you have requested
- To maintain security and audit trails in compliance with our data protection obligations
- To send you communications related to your requests (only with your consent)
4. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS)
- Password hashing using bcrypt
- Secure session management with short-lived JWT tokens
- Rate limiting and account lockout protections
- Comprehensive audit logging for all data access
- Role-based access controls
5. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy or as required by law. You may request deletion of your account and personal data at any time by contacting us.
6. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only when required by law or to protect our rights.
7. Your Rights
You have the right to:
- Access your personal information
- Request correction of inaccurate data
- Request deletion of your data
- Opt out of non-essential communications
8. HIPAA Compliance
Where our services involve information that may be considered Protected Health Information (PHI), we adhere to HIPAA-aligned safeguards including access controls, audit trails, data minimization, and secure transmission protocols.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through our Contact page.