{"id":2153,"date":"2026-07-18T08:10:40","date_gmt":"2026-07-18T08:10:40","guid":{"rendered":"https:\/\/ummdigital.tech\/elixirglobal\/?page_id=2153"},"modified":"2026-07-18T08:25:33","modified_gmt":"2026-07-18T08:25:33","slug":"privacy","status":"publish","type":"page","link":"https:\/\/ummdigital.tech\/elixirglobal\/privacy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"2153\" class=\"elementor elementor-2153\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-cfdc4ef e-flex e-con-boxed e-con e-parent\" data-id=\"cfdc4ef\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3baf4b2 elementor-widget elementor-widget-html\" data-id=\"3baf4b2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>\n  .eg-legal *, .eg-legal *::before, .eg-legal *::after { margin:0; padding:0; box-sizing:border-box; }\n\n  .eg-legal {\n    --ink: #0a0a0a;\n    --body: #1e1e1e;\n    --rule: rgba(0,0,0,0.12);\n    --rule-soft: rgba(0,0,0,0.07);\n    --blue: #1a6dd6;\n    --blue-bright: #4a7cfc;\n\n    font-family: 'FP Pro', 'SF Pro Display', -apple-system, BlinkMacSystemFont, 'Helvetica Neue', Arial, sans-serif;\n    width: 100%;\n    background: #fff;\n    color: var(--body);\n    padding: 72px 64px 96px;\n    font-size: 17px;\n    line-height: 1.75;\n    -webkit-font-smoothing: antialiased;\n  }\n\n  .eg-legal a { color: var(--blue); text-decoration: none; border-bottom: 1px solid rgba(26,109,214,0.3); transition: color .2s, border-color .2s; }\n  .eg-legal a:hover { color: var(--blue-bright); border-bottom-color: var(--blue-bright); }\n  .eg-legal :focus-visible { outline: 2px solid var(--blue-bright); outline-offset: 3px; border-radius: 3px; }\n\n  \/* Masthead *\/\n  .eg-legal-head { border-bottom: 1px solid var(--rule); padding-bottom: 34px; }\n\n  .eg-legal-title {\n    font-size: clamp(40px, 6vw, 76px);\n    font-weight: 400; line-height: 1.02; letter-spacing: -0.035em;\n    color: var(--ink); margin-bottom: 20px;\n  }\n\n  .eg-legal-date { font-size: 16px; color: var(--body); }\n  .eg-legal-date b { font-weight: 500; color: var(--ink); }\n\n  \/* Shell *\/\n  .eg-legal-shell { display: grid; grid-template-columns: 260px 1fr; gap: 80px; align-items: start; }\n\n  .eg-legal-nav {\n    position: sticky; top: 110px; padding-top: 48px;\n    max-height: calc(100vh - 140px); overflow-y: auto;\n  }\n  .eg-legal-nav::-webkit-scrollbar { width: 3px; }\n  .eg-legal-nav::-webkit-scrollbar-thumb { background: var(--rule); border-radius: 3px; }\n\n  .eg-legal-nav h4 {\n    font-size: 12px; font-weight: 500; letter-spacing: 0.14em; text-transform: uppercase;\n    color: var(--ink); margin-bottom: 14px;\n  }\n  .eg-legal-nav h4 + ul { margin-bottom: 32px; }\n  .eg-legal-nav ul { list-style: none; }\n  .eg-legal-nav li a {\n    display: block; padding: 7px 0 7px 16px; font-size: 15px; line-height: 1.45;\n    color: var(--body); border-left: 1px solid var(--rule-soft); border-bottom: none;\n    transition: color .2s, border-color .2s;\n  }\n  .eg-legal-nav li a:hover { color: var(--ink); border-left-color: var(--ink); border-bottom: none; }\n  .eg-legal-nav li a.is-active { color: var(--blue); border-left-color: var(--blue); }\n\n  .eg-legal-body { max-width: 740px; padding-top: 48px; }\n\n  \/* Part divider *\/\n  .eg-part {\n    border-top: 1px solid var(--rule);\n    padding-top: 40px; margin-top: 56px; margin-bottom: 40px;\n  }\n  .eg-part h2 {\n    font-size: clamp(30px, 3.4vw, 44px); font-weight: 400; line-height: 1.1;\n    letter-spacing: -0.03em; color: var(--ink); margin-bottom: 0;\n  }\n\n  \/* Sections *\/\n  .eg-legal-body section { margin-bottom: 44px; }\n  .eg-legal-body section:last-child { margin-bottom: 0; }\n\n  .eg-legal-body section h2 {\n    font-size: clamp(21px, 2vw, 26px); font-weight: 400; line-height: 1.3;\n    letter-spacing: -0.02em; color: var(--ink); margin-bottom: 16px;\n    scroll-margin-top: 120px;\n  }\n\n  .eg-legal-body h3 {\n    font-size: 18px; font-weight: 500; color: var(--ink);\n    letter-spacing: -0.01em; margin: 28px 0 8px;\n  }\n\n  .eg-legal-body p { margin-bottom: 18px; }\n  .eg-legal-body p:last-child { margin-bottom: 0; }\n\n  .eg-legal-body ul { list-style: none; margin-bottom: 20px; }\n  .eg-legal-body ul li { position: relative; padding-left: 24px; margin-bottom: 11px; }\n  .eg-legal-body ul li::before {\n    content: ''; position: absolute; left: 0; top: 14px;\n    width: 12px; height: 1.5px; border-radius: 2px; background: var(--blue-bright);\n  }\n\n  .eg-legal-body strong { color: var(--ink); font-weight: 500; }\n  .eg-legal-body address { font-style: normal; line-height: 1.9; }\n\n  \/* Responsive *\/\n  @media (max-width: 1024px) {\n    .eg-legal { padding: 56px 40px 76px; }\n    .eg-legal-shell { grid-template-columns: 220px 1fr; gap: 52px; }\n  }\n\n  @media (max-width: 860px) {\n    .eg-legal-shell { grid-template-columns: 1fr; gap: 0; }\n    .eg-legal-nav {\n      position: static; max-height: none; padding: 36px 0 32px;\n      border-bottom: 1px solid var(--rule);\n    }\n    .eg-legal-nav ul { columns: 2; column-gap: 28px; }\n    .eg-legal-nav h4 + ul { margin-bottom: 26px; }\n    .eg-legal-body { padding-top: 36px; }\n  }\n\n  @media (max-width: 640px) {\n    .eg-legal { padding: 44px 24px 60px; font-size: 16px; }\n    .eg-legal-date { font-size: 15px; }\n    .eg-legal-nav ul { columns: 1; }\n    .eg-part { margin-top: 44px; padding-top: 32px; }\n  }\n<\/style>\n\n<section class=\"eg-legal\">\n\n  <div class=\"eg-legal-head\">\n    <h1 class=\"eg-legal-title\">Privacy Policy<\/h1>\n    <p class=\"eg-legal-date\"><b>Last updated:<\/b> 18 July 2026<\/p>\n  <\/div>\n\n  <div class=\"eg-legal-shell\">\n\n    <nav class=\"eg-legal-nav\" aria-label=\"On this page\">\n      <h4>Privacy Policy<\/h4>\n      <ul class=\"eg-toc\">\n        <li><a href=\"#eg-intro\">Introduction<\/a><\/li>\n        <li><a href=\"#eg-role\">Who we are and our role<\/a><\/li>\n        <li><a href=\"#eg-scope\">Scope of this policy<\/a><\/li>\n        <li><a href=\"#eg-collect\">Information we collect<\/a><\/li>\n        <li><a href=\"#eg-use\">How we use information<\/a><\/li>\n        <li><a href=\"#eg-hipaa\">Healthcare data and HIPAA<\/a><\/li>\n        <li><a href=\"#eg-certs\">Certifications and standards<\/a><\/li>\n        <li><a href=\"#eg-protect\">How we protect information<\/a><\/li>\n        <li><a href=\"#eg-share\">Sharing and disclosure<\/a><\/li>\n        <li><a href=\"#eg-retention\">Data retention<\/a><\/li>\n        <li><a href=\"#eg-intl\">International data handling<\/a><\/li>\n        <li><a href=\"#eg-cookies\">Cookies and tracking<\/a><\/li>\n        <li><a href=\"#eg-rights\">Your rights and choices<\/a><\/li>\n        <li><a href=\"#eg-links\">Third-party links<\/a><\/li>\n        <li><a href=\"#eg-children\">Children's privacy<\/a><\/li>\n        <li><a href=\"#eg-contact\">Contact us<\/a><\/li>\n        <li><a href=\"#eg-changes\">Changes to this policy<\/a><\/li>\n      <\/ul>\n\n      <h4>Security and Compliance<\/h4>\n      <ul class=\"eg-toc\">\n        <li><a href=\"#eg-regulated\">Built for regulated environments<\/a><\/li>\n        <li><a href=\"#eg-sc-certs\">Certifications and standards<\/a><\/li>\n        <li><a href=\"#eg-infosec\">Information security<\/a><\/li>\n        <li><a href=\"#eg-sc-privacy\">Data privacy<\/a><\/li>\n        <li><a href=\"#eg-continuity\">Business continuity<\/a><\/li>\n        <li><a href=\"#eg-governance\">Governance and training<\/a><\/li>\n        <li><a href=\"#eg-glance\">Certifications at a glance<\/a><\/li>\n      <\/ul>\n    <\/nav>\n\n    <main class=\"eg-legal-body\">\n\n      <section id=\"eg-intro\">\n        <h2>Introduction<\/h2>\n        <p>Elixir Global (\"Elixir Global\", \"Elixir\", \"we\", \"us\", or \"our\") is an enterprise technology and AI transformation firm operating across the Gulf, India, Singapore, and North America. Our services span consulting, digital transformation, intelligent operations, and industry-specific offerings, including healthcare revenue cycle management.<\/p>\n        <p>This Privacy Policy, which also serves as our Privacy Notice, explains how we collect, use, disclose, and protect information when you visit elixirglobal.com, communicate with us, or engage our services. Because much of our work involves sensitive business, financial, and healthcare information, we treat the protection of that information as a core responsibility.<\/p>\n      <\/section>\n\n      <section id=\"eg-role\">\n        <h2>Who we are and our role<\/h2>\n        <p>Elixir Global delivers enterprise transformation and managed operations for organisations across regulated and non-regulated sectors. Depending on the engagement, our role in handling information differs:<\/p>\n        <ul>\n          <li>For our own business activities (running the website, responding to enquiries, recruiting, and managing client relationships), we determine how and why information is used, and we are responsible for that information.<\/li>\n          <li>When delivering services to a client, we process information on behalf of and under the instruction of that client. In these cases the client remains responsible for the underlying data, and our handling is governed by the agreement we hold with them.<\/li>\n        <\/ul>\n        <p>For healthcare revenue cycle management engagements, we act as a <strong>Business Associate<\/strong> under the U.S. Health Insurance Portability and Accountability Act (HIPAA). This means we process Protected Health Information (PHI) on behalf of Covered Entities such as hospitals and physician groups, governed by the Business Associate Agreement (BAA) we sign with each healthcare client.<\/p>\n      <\/section>\n\n      <section id=\"eg-scope\">\n        <h2>Scope of this policy<\/h2>\n        <p>This policy applies to:<\/p>\n        <ul>\n          <li>Visitors to elixirglobal.com and anyone who contacts us through the website, email, or phone.<\/li>\n          <li>Representatives of prospective and current clients and partners who share business information with us.<\/li>\n          <li>Candidates who apply for roles with us.<\/li>\n          <li>Client data, including Protected Health Information, that we process in the course of delivering services, as governed by the applicable client agreement or Business Associate Agreement.<\/li>\n        <\/ul>\n      <\/section>\n\n      <section id=\"eg-collect\">\n        <h2>Information we collect<\/h2>\n\n        <h3>Information you provide to us<\/h3>\n        <p>When you request information, submit a contact form, subscribe to our newsletter, apply for a role, or email us, we collect the details you choose to share. This typically includes your name, organisation, job title, email address, phone number, and the content of your message.<\/p>\n\n        <h3>Information collected automatically<\/h3>\n        <p>When you visit our website, we and our service providers may collect technical information such as your IP address, browser type, device information, pages viewed, referring pages, and the dates and times of your visits. We collect this through cookies and similar technologies, described in <a href=\"#eg-cookies\">Cookies and tracking<\/a>.<\/p>\n\n        <h3>Client and service data<\/h3>\n        <p>In the course of delivering services, we process data supplied by or on behalf of our clients. For enterprise engagements this may include business records, financial data, and operational information. For healthcare engagements this may include patient demographics, insurance and coverage details, clinical and diagnostic codes, claims data, and payment information. We collect and use this data only as permitted by the relevant client agreement, the applicable Business Associate Agreement, and applicable law, and only to perform the services requested.<\/p>\n      <\/section>\n\n      <section id=\"eg-use\">\n        <h2>How we use information<\/h2>\n        <p>We use the information we collect to:<\/p>\n        <ul>\n          <li>Respond to enquiries, prepare proposals, and manage our relationships with clients, partners, and prospects.<\/li>\n          <li>Deliver the services our clients engage us for, including transformation, managed operations, and healthcare revenue cycle management.<\/li>\n          <li>Operate, maintain, and improve our website and services.<\/li>\n          <li>Send updates, research, and marketing communications where you have asked to receive them or where we are otherwise permitted to do so. You can opt out at any time.<\/li>\n          <li>Recruit and evaluate candidates who apply for roles with us.<\/li>\n          <li>Meet our legal, regulatory, and contractual obligations.<\/li>\n          <li>Protect the security and integrity of our systems and the information we hold.<\/li>\n        <\/ul>\n        <p><strong>We do not sell personal information or Protected Health Information, and we do not use Protected Health Information for marketing.<\/strong><\/p>\n      <\/section>\n\n      <section id=\"eg-hipaa\">\n        <h2>Healthcare data and our role as a HIPAA Business Associate<\/h2>\n        <p>For healthcare revenue cycle management engagements, we are bound by the HIPAA Privacy Rule and Security Rule with respect to the PHI we handle. Our commitments include:<\/p>\n        <ul>\n          <li>Using and disclosing PHI only as permitted by the applicable Business Associate Agreement and by law.<\/li>\n          <li>Applying administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of electronic PHI.<\/li>\n          <li>Reporting security incidents and any breach of unsecured PHI to the relevant Covered Entity in line with our contractual and legal obligations.<\/li>\n          <li>Requiring any subcontractor who handles PHI on our behalf to agree in writing to the same restrictions and conditions that apply to us.<\/li>\n          <li>Making PHI available to support a Covered Entity's obligations regarding individual access, amendment, and accounting of disclosures.<\/li>\n        <\/ul>\n        <p>Requests from patients relating to their own health information should be directed to the healthcare provider that holds the relationship with the patient. We will support that provider in responding to such requests as required under our agreement with them.<\/p>\n      <\/section>\n\n      <section id=\"eg-certs\">\n        <h2>Our certifications and standards<\/h2>\n        <p>We maintain independently recognised standards for information security and quality management:<\/p>\n        <ul>\n          <li><strong>ISO\/IEC 27001<\/strong> for our Information Security Management System, covering the way we identify, assess, and manage information security risk.<\/li>\n          <li><strong>ISO 9001:2015<\/strong> for our Quality Management System, covering the consistency and quality of the services we deliver.<\/li>\n          <li><strong>HIPAA compliance<\/strong> for healthcare engagements, with policies, controls, and staff training aligned to the HIPAA Privacy and Security Rules.<\/li>\n        <\/ul>\n        <p>These certifications are subject to periodic external audit and surveillance to confirm ongoing compliance.<\/p>\n      <\/section>\n\n      <section id=\"eg-protect\">\n        <h2>How we protect information<\/h2>\n        <p>We apply a layered set of safeguards to protect the information we hold, including:<\/p>\n        <ul>\n          <li>Encryption of data in transit and at rest.<\/li>\n          <li>Role-based access controls, so staff can access only the information they need to perform their duties.<\/li>\n          <li>Secure authentication, including multi-factor authentication for access to systems that hold sensitive data.<\/li>\n          <li>Network security controls, monitoring, and logging.<\/li>\n          <li>Regular staff training on data protection, information security, and, where relevant, HIPAA.<\/li>\n          <li>Documented incident response and breach notification procedures.<\/li>\n        <\/ul>\n        <p>No method of transmission or storage is completely secure. While we protect your information using measures appropriate to its sensitivity, we cannot guarantee absolute security.<\/p>\n      <\/section>\n\n      <section id=\"eg-share\">\n        <h2>How we share and disclose information<\/h2>\n        <p>We share information only where it is necessary and permitted. This may include disclosures to:<\/p>\n        <ul>\n          <li><strong>Service providers and subcontractors<\/strong> who support our operations or service delivery, and who are bound by confidentiality and, where PHI is involved, by a written agreement carrying the same obligations we hold.<\/li>\n          <li><strong>Clients<\/strong> to whom the relevant data belongs, as part of delivering the contracted services.<\/li>\n          <li><strong>Group companies<\/strong> within Elixir Global, where necessary to deliver services and administer our business, under appropriate safeguards.<\/li>\n          <li><strong>Legal and regulatory authorities<\/strong> where we are required to disclose information by law, regulation, court order, or valid legal process.<\/li>\n          <li><strong>Professional advisers<\/strong> such as auditors and legal counsel, where reasonably necessary and subject to confidentiality obligations.<\/li>\n        <\/ul>\n        <p>We do not sell or rent personal information or Protected Health Information to any third party.<\/p>\n      <\/section>\n\n      <section id=\"eg-retention\">\n        <h2>Data retention<\/h2>\n        <p>We retain personal information and client data only for as long as necessary to fulfil the purposes described in this policy, to meet the terms of our client agreements, and to comply with legal, regulatory, and tax obligations. Retention of PHI is governed by the applicable Business Associate Agreement and by law. When information is no longer required, we dispose of it securely.<\/p>\n      <\/section>\n\n      <section id=\"eg-intl\">\n        <h2>International data handling<\/h2>\n        <p>Elixir Global operates across the Gulf, India, Singapore, and North America, and information may be accessed or processed in countries other than the one in which it was collected. Where information is transferred across borders, we put appropriate contractual and technical protections in place so that it continues to be handled in line with this policy, the applicable client agreement, and the data protection laws that apply in the regions where we operate.<\/p>\n      <\/section>\n\n      <section id=\"eg-cookies\">\n        <h2>Cookies and tracking technologies<\/h2>\n        <p>Our website uses cookies and similar technologies to help the site function, to remember your preferences, and to understand how visitors use the site. You can control cookies through your browser settings. Disabling certain cookies may affect how parts of the website work. Where required by law, we ask for your consent before setting non-essential cookies.<\/p>\n      <\/section>\n\n      <section id=\"eg-rights\">\n        <h2>Your rights and choices<\/h2>\n        <p>Depending on where you are located and the law that applies to you, you may have rights over the personal information we hold about you, including the right to request access, correction, deletion, or restriction of its use, the right to object to certain processing, and the right to withdraw consent where processing is based on consent.<\/p>\n        <p>To exercise any of these rights in relation to information we hold about you directly, contact us using the details below. Requests relating to patient health information should be directed to the healthcare provider responsible for that patient, and we will support the provider as described in <a href=\"#eg-hipaa\">Healthcare data and HIPAA<\/a>.<\/p>\n      <\/section>\n\n      <section id=\"eg-links\">\n        <h2>Third-party links<\/h2>\n        <p>Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any site you visit through a link from ours.<\/p>\n      <\/section>\n\n      <section id=\"eg-children\">\n        <h2>Children's privacy<\/h2>\n        <p>Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal information from children through our website.<\/p>\n      <\/section>\n\n      <section id=\"eg-contact\">\n        <h2>Contact us<\/h2>\n        <p>If you have questions about this policy or how we handle information, contact us:<\/p>\n        <address>\n          Elixir Global<br>\n          Email: <a href=\"mailto:privacy@ummdigital.tech\">privacy@ummdigital.tech<\/a><br>\n          Contact form: <a href=\"https:\/\/ummdigital.tech\/elixirglobal\/contact\/\">elixirglobal.com\/contact<\/a><br>\n          11800 Amber Park Drive, Suite 225<br>\n          Alpharetta, GA 30009\n        <\/address>\n      <\/section>\n\n      <section id=\"eg-changes\">\n        <h2>Changes to this policy<\/h2>\n        <p>We may update this policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this page periodically.<\/p>\n      <\/section>\n\n      <div class=\"eg-part\">\n        <h2>Security and Compliance<\/h2>\n      <\/div>\n\n      <section id=\"eg-regulated\">\n        <h2>Built for regulated environments<\/h2>\n        <p>Elixir Global works with enterprises across regulated and non-regulated sectors, including healthcare, financial services, and the public sector. The information our clients trust us with, from financial records to Protected Health Information, is protected by a documented security programme, independently audited certifications, and staff who are trained to handle sensitive data correctly.<\/p>\n      <\/section>\n\n      <section id=\"eg-sc-certs\">\n        <h2>Certifications and standards<\/h2>\n\n        <h3>ISO\/IEC 27001<\/h3>\n        <p>Our Information Security Management System is certified to ISO\/IEC 27001. It covers how we identify and manage information security risk across our people, processes, and technology, and is subject to regular external audit.<\/p>\n\n        <h3>ISO 9001:2015<\/h3>\n        <p>Our Quality Management System is certified to ISO 9001:2015, covering the consistency, repeatability, and quality of the services we deliver to clients.<\/p>\n\n        <h3>HIPAA compliance<\/h3>\n        <p>For healthcare revenue cycle management engagements, we operate as a Business Associate under HIPAA. Our controls and training are aligned to the HIPAA Privacy and Security Rules, and we sign a Business Associate Agreement with each healthcare client.<\/p>\n      <\/section>\n\n      <section id=\"eg-infosec\">\n        <h2>Information security<\/h2>\n        <p>Our security controls include:<\/p>\n        <ul>\n          <li>Encryption of data in transit and at rest.<\/li>\n          <li>Role-based access, so staff reach only the data their work requires.<\/li>\n          <li>Multi-factor authentication for access to systems holding sensitive data.<\/li>\n          <li>Continuous monitoring, logging, and network security controls.<\/li>\n          <li>Vulnerability management and periodic security testing.<\/li>\n          <li>A documented incident response and breach notification process.<\/li>\n        <\/ul>\n      <\/section>\n\n      <section id=\"eg-sc-privacy\">\n        <h2>Data privacy<\/h2>\n        <p>We handle personal and client data in line with the data protection laws that apply in the regions where we operate, across the Gulf, India, Singapore, and North America. For healthcare data, our obligations are set by the applicable Business Associate Agreement. We do not sell client data or Protected Health Information, and we share information only where it is necessary and permitted. Our full approach is set out in our <a href=\"#eg-intro\">Privacy Policy<\/a>.<\/p>\n      <\/section>\n\n      <section id=\"eg-continuity\">\n        <h2>Business continuity<\/h2>\n        <p>We maintain business continuity and disaster recovery plans so that critical services remain available and client data remains protected during disruption. Our global delivery model provides continuity across time zones and locations.<\/p>\n      <\/section>\n\n      <section id=\"eg-governance\">\n        <h2>Governance and training<\/h2>\n        <p>Security and compliance are owned at the leadership level and reviewed regularly. Every team member completes data protection and security training on joining and at regular intervals, with additional role-specific training for staff who handle regulated data.<\/p>\n      <\/section>\n\n      <section id=\"eg-glance\">\n        <h2>Certifications at a glance<\/h2>\n        <ul>\n          <li>ISO\/IEC 27001, Information Security Management<\/li>\n          <li>ISO 9001:2015, Quality Management<\/li>\n          <li>HIPAA compliant for healthcare engagements<\/li>\n        <\/ul>\n      <\/section>\n\n    <\/main>\n  <\/div>\n<\/section>\n\n<script>\n(function () {\n  var links = Array.prototype.slice.call(document.querySelectorAll('.eg-legal-nav .eg-toc a'));\n  if (!links.length || !('IntersectionObserver' in window)) return;\n\n  var map = {};\n  links.forEach(function (a) {\n    var el = document.querySelector(a.getAttribute('href'));\n    if (el) map[el.id] = a;\n  });\n\n  var obs = new IntersectionObserver(function (entries) {\n    entries.forEach(function (e) {\n      if (e.isIntersecting) {\n        links.forEach(function (a) { a.classList.remove('is-active'); });\n        if (map[e.target.id]) map[e.target.id].classList.add('is-active');\n      }\n    });\n  }, { rootMargin: '-120px 0px -68% 0px', threshold: 0 });\n\n  Object.keys(map).forEach(function (id) { obs.observe(document.getElementById(id)); });\n})();\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Last updated: 18 July 2026 Privacy Policy Introduction Who we are and our role Scope of this policy Information we collect How we use information Healthcare data and HIPAA Certifications and standards How we protect information Sharing and disclosure Data retention International data handling Cookies and tracking Your rights and choices Third-party links [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2153","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/pages\/2153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/comments?post=2153"}],"version-history":[{"count":16,"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/pages\/2153\/revisions"}],"predecessor-version":[{"id":2169,"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/pages\/2153\/revisions\/2169"}],"wp:attachment":[{"href":"https:\/\/ummdigital.tech\/elixirglobal\/wp-json\/wp\/v2\/media?parent=2153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}