Protecting your information is central to how we build Zentrum Care. Because our platform connects families with pediatric healthcare providers, we handle sensitive health information — often about children — and we treat that responsibility seriously. This page explains the practices and safeguards we have in place. As Zentrum Care grows, we expect these practices to grow with us.
If you have questions about privacy or security, email us at privacy@zentrumcare.com.
How we think about your data
Zentrum Care is designed to meet the requirements that apply to healthcare and to children's information, including the Health Insurance Portability and Accountability Act (HIPAA) and the Children's Online Privacy Protection Act (COPPA). Privacy and security are part of how we make product and engineering decisions — not something added at the end.
Encryption
We use industry-standard encryption to protect your information. Data is encrypted in transit using Transport Layer Security (TLS) over HTTPS whenever it moves between your device and our platform, and data is encrypted at rest in our systems.
Payment security
Payments on Zentrum Care are processed through Stripe, a PCI-DSS Level 1 certified payment processor — the highest level of certification in the payments industry. Zentrum Care does not store your full payment card number on our own systems; card data is handled directly by Stripe.
Access controls
We limit access to personal and health information to the people who need it to operate and support the platform. Access is authenticated, and we apply the principle of least privilege, meaning personnel are given only the access their role requires.
Health information and HIPAA
Where we handle protected health information on behalf of providers, we do so within the framework HIPAA requires, including Business Associate Agreements with the providers and vendors involved. We work to ensure that health information flowing through the platform is used and disclosed only as permitted.
Children's information and COPPA
Pediatric care is at the center of what Zentrum Care does, which means much of the information on our platform relates to children. We apply additional care to that information and build the platform to comply with COPPA, including appropriate involvement of parents and guardians.
Vendors and service providers
We rely on a limited set of third-party service providers — such as Stripe for payments and other infrastructure partners — to operate the platform. Where these providers handle personal or health information on our behalf, we require appropriate data-protection commitments, including Business Associate Agreements wherever protected health information is involved.
In the event of a breach
If personal or health information is ever subject to unauthorized access, we will notify affected users and the appropriate regulators as required by HIPAA and applicable Florida law.
Questions
We're glad to answer questions about how we protect your information. Reach us at privacy@zentrumcare.com