Privacy Policy

Overview

Partret ("we," "us") provides EMS software for ambulance agencies — ePCR charting, scheduling, QA review, and operations tools. This policy describes how we handle information on partret.com and in the Partret application at app.partret.com.

Last updated: July 12, 2026.

What we collect

Marketing site

When you submit the contact form, we collect the details you provide — name, agency, email, phone, and message — so our team can respond. We may also collect standard web server logs (IP address, browser type, pages visited) for security and performance.

Partret application

Agency users may enter patient care records, crew schedules, and operational data subject to your organization's agreement with Partret. That data may include protected health information (PHI) as defined under HIPAA.

HIPAA

When an EMS agency uses Partret to document patient care, Partret typically acts as a Business Associate under HIPAA. PHI is handled only to provide the contracted services — not for unrelated marketing or resale.

Business Associate Agreement

Agencies receive a Business Associate Agreement (BAA) before production use. The BAA defines permitted uses, safeguards, breach notification, and subprocessors.

  • Minimum necessary — access to PHI is limited to what each role requires.
  • Audit trail — sign-in, exports, and administrative actions are logged in a tamper-evident chain.
  • Legal hold — flagged locked charts cannot be deleted while a hold is active.
  • Session security — time-limited sessions; PHI is cleared from the browser on logout.

How we use data

  • Respond to sales and support inquiries from the marketing site
  • Operate, secure, and improve the Partret platform
  • Meet legal, regulatory, and contractual obligations — including HIPAA and state EMS record rules

We do not sell personal information or PHI.

Sharing

We share information only with service providers that help us operate Partret (for example, cloud hosting), when required by law, or with your consent. Sub-processors are bound by confidentiality and security obligations appropriate to the data they handle.

Security & retention

Contact form submissions are retained as long as needed for sales follow-up. Clinical and agency data retention follows your agency's agreement and applicable regulations — including state EMS record retention requirements in Pennsylvania and New Jersey.

We use encryption in transit, role-based access controls, and audit logging appropriate to EMS and healthcare data.

Your choices

You may request access to or deletion of marketing contact information through the contact form. Agency users should contact their organization's Partret administrator for records held in the application.

Questions about this policy: Contact Partret. See also our Terms of Service and Docs.