Terms of Service

By accessing or using the Medteqpro platform ("Platform"), you ("User") agree to be bound by these Terms of Service ("Terms") and our Privacy Policy, incorporated herein by reference. If you are using the Platform on behalf of a healthcare organisation, you represent that you have the authority to bind that organisation to these Terms.

If you do not agree to these Terms, you must discontinue use of the Platform immediately. These Terms constitute a legally binding agreement between you and Medteqpro.

Medteqpro is a cloud-based healthcare management platform designed to assist hospitals, clinics, and healthcare professionals with patient management, clinical workflows, payroll administration, billing, and operational analytics. The Platform is intended exclusively for use by authorised healthcare organisations and their personnel.

The Platform is not a substitute for professional medical judgement. All clinical decisions remain the sole responsibility of the licensed healthcare professionals using the Platform. Medteqpro does not practise medicine and nothing on the Platform constitutes medical advice, diagnosis, or treatment.

Account Registration: Access to the Platform requires registration by an authorised administrator of a healthcare organisation. Users must provide accurate, current, and complete information during registration and keep that information updated.

Multi-Factor Authentication (MFA): In compliance with 2025 HIPAA Security Rule requirements, MFA is mandatory for all accounts that access electronic protected health information (ePHI). Users must enrol in MFA upon account creation and must not circumvent this control.

Role-Based Access: The Platform implements role-based access control (RBAC) with least-privilege principles. Each user is assigned permissions appropriate to their role (e.g., physician, nurse, administrator, pharmacist). Users must not attempt to access functionality beyond their assigned role.

Session Management: Sessions will automatically time out after a period of inactivity to protect against unauthorised access to ePHI. You are responsible for logging out of sessions on shared or unattended devices.

Credentials: You are responsible for maintaining the confidentiality of your login credentials. You must notify us immediately at support@medteqpro.com of any suspected unauthorised access. You are liable for all activities conducted under your account until you report a compromise.

Account Suspension: We reserve the right to suspend or terminate accounts that violate these Terms, are suspected of being compromised, or are inactive for an extended period, with reasonable notice where practicable.

You agree to use the Platform only for lawful purposes and in accordance with these Terms. You must not:

Use the Platform to store, transmit, or process information in violation of applicable law, including HIPAA, GDPR, CCPA, or local healthcare privacy regulations

Attempt to gain unauthorised access to any part of the Platform, its infrastructure, or other users' accounts

Introduce malware, viruses, ransomware, or any other malicious code into the Platform

Reverse engineer, decompile, or disassemble any part of the Platform

Use automated scripts, bots, or scraping tools without our express written consent

Share access credentials or allow multiple individuals to use a single user account

Disable, bypass, or circumvent MFA, session controls, or any other security feature

Use the Platform for any purpose that could harm patients, third parties, or the integrity of clinical data

HIPAA — Business Associate Agreement: Where Medteqpro creates, receives, maintains, or transmits ePHI on behalf of a covered entity, Medteqpro operates as a Business Associate under HIPAA (45 CFR Parts 160 and 164). We will enter into a Business Associate Agreement (BAA) with covered entities upon request. BAAs will be reviewed at least annually and updated when new sub-processors are introduced or when regulatory changes require it, in line with the 2025 HIPAA Security Rule proposed updates.

Subcontractors: Where Medteqpro engages subcontractors who handle PHI, we require those subcontractors to enter into equivalent BAAs, ensuring the chain of PHI protection is maintained throughout our supply chain.

Audit Trails: The Platform maintains comprehensive audit logs documenting all access to ePHI — including user identity, date, time, and actions performed — retained for a minimum of six (6) years as required by HIPAA. Your organisation's administrators may access audit logs for their users upon request.

Data Accuracy: You are responsible for the accuracy and completeness of all patient data, clinical records, and other information entered into the Platform. Medteqpro does not independently verify clinical data.

Regulatory Obligations: Healthcare organisations using the Platform remain solely responsible for compliance with all applicable healthcare regulations, licensing requirements, and professional standards in their jurisdiction, including but not limited to HIPAA, local medical records laws, and professional regulatory requirements.

GDPR — Data Processing Agreement: For organisations processing personal data of EU/EEA data subjects, Medteqpro will enter into a Data Processing Agreement (DPA) as required by GDPR Article 28. Contact legal@medteqpro.com to request a DPA.

All rights, title, and interest in and to the Platform — including software, design, trademarks, logos, and documentation — are owned by Medteqpro or its licensors. These Terms do not grant you any ownership rights in the Platform.

You are granted a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform solely for your organisation's internal healthcare operations during the term of your service agreement.

You retain ownership of all patient data and clinical information you input into the Platform. By inputting data, you grant Medteqpro a limited licence to process that data solely to provide the services described herein, in accordance with our Privacy Policy and any applicable BAA or DPA.

We strive to maintain Platform availability of 99.5% uptime, excluding scheduled maintenance windows. We will provide advance notice of planned maintenance where operationally feasible.

We reserve the right to modify, suspend, or discontinue any feature or aspect of the Platform at any time with reasonable notice. We are not liable for any downtime, data loss, or interruption caused by factors outside our reasonable control, including third-party service failures, internet outages, or force majeure events.

Use of the Platform is subject to the subscription fees set out in your service agreement. All fees are stated exclusive of applicable taxes, which are your responsibility.

Invoices are due within the payment terms specified in your service agreement. Late payments may incur interest at the statutory rate and may result in suspension of Platform access until outstanding balances are settled.

Fees are non-refundable except as expressly required by applicable law or as stated in your service agreement.

Each party agrees to maintain the confidentiality of the other party's proprietary information disclosed in connection with the Platform. This obligation does not apply to information that is publicly available, independently developed, or required to be disclosed by law or regulatory authority.

You agree to treat all Platform documentation, pricing, and technical specifications as confidential and not to disclose them to third parties without our prior written consent. Confidentiality obligations with respect to PHI are governed by the applicable BAA.

To the maximum extent permitted by applicable law:

Medteqpro's total liability to you for any claim arising out of or related to these Terms or the Platform shall not exceed the fees paid by you in the twelve (12) months preceding the claim.

Medteqpro shall not be liable for any indirect, incidental, consequential, punitive, or special damages, including loss of data, loss of revenue, or clinical harm, even if advised of the possibility of such damages.

These limitations apply regardless of the legal theory (contract, tort, negligence, or otherwise) and even if any limited remedy fails its essential purpose.

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited by applicable law.

You agree to indemnify, defend, and hold harmless Medteqpro, its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in connection with:

Your use of the Platform in violation of these Terms

Any clinical decisions made using data from the Platform

Your breach of applicable healthcare laws or regulations, including HIPAA or GDPR

Your failure to maintain required BAAs or DPAs with your own downstream partners

Any third-party claims arising from your or your organisation's use of the Platform

Either party may terminate these Terms upon written notice if the other party materially breaches these Terms and fails to cure such breach within thirty (30) days of written notice.

Upon termination:

Your access to the Platform will be revoked immediately

We will retain your data for ninety (90) days to allow you to request a structured export in a machine-readable format

Following that period, all PHI and personal data will be securely deleted or destroyed, consistent with our obligations under any applicable BAA and HIPAA requirements — unless a longer retention period is required by law

Sections relating to intellectual property, confidentiality, limitation of liability, indemnification, and data return obligations shall survive termination

These Terms are governed by and construed in accordance with applicable law. Any disputes arising out of or relating to these Terms or the Platform shall first be subject to good-faith negotiation for a period of thirty (30) days. If unresolved, disputes shall be referred to binding arbitration conducted by a mutually agreed arbitration body, except that either party may seek injunctive or other equitable relief in a court of competent jurisdiction for intellectual property infringement or confidentiality breaches without first engaging in arbitration.

We reserve the right to modify these Terms at any time. We will provide at least fourteen (14) days' notice of material changes via email or in-platform notification prior to the effective date. Continued use of the Platform after the effective date constitutes your acceptance of the updated Terms. If you do not agree to the changes, you must stop using the Platform before the effective date. We maintain a version history of these Terms available upon request.

For questions about these Terms, to report a violation, or to request a Business Associate Agreement or Data Processing Agreement, please contact:

Medteqpro — Legal & Compliance

Email: legal@medteqpro.com

Website: medteqpro.com

We aim to acknowledge all legal enquiries within five (5) business days.