Your information, handled with care.

What we collect

We collect only what the staffing relationship needs:

• Application data — name, contact details, CV, license states, certifications, references, work history, and availability submitted through the site or by email.
• Contact-form data — your name, email address, who you are (facility, clinician, or general inquiry), an optional role or specialty, and the message you send us.
• Usage telemetry — anonymous, aggregated visit data via Plausible Cloud (no cookies, no cross-site identifiers, no stored IP). See the Cookies notice.
• Operational records — the credentialing paperwork, references, and assignment history we gather and hold for the clinicians and facility partners we work with, in coordination with each facility's medical staff office.

How we use it

• To match clinicians to assignments and facilities to qualified clinicians.
• To facilitate credentialing, onboarding, and assignment logistics.
• To respond to inquiries and stay in touch with the clinicians and facility partners we work with.
• To meet the legal, regulatory, and contractual obligations specific to healthcare staffing.

Where it lives

• Application + contact data — Supabase (US-hosted Postgres, encrypted at rest).
• Outbound transactional email — Resend (US-based email delivery).
• Anonymous site analytics — Plausible Cloud (cookieless, no stored IP; EU-hosted, data never leaves the EU).
• Site hosting — Cloudflare (global edge network).

How long we keep it

We keep personal information only as long as reasonably necessary for the purposes described here — to operate our recruiting and staffing business, keep appropriate business records, meet tax, payroll, recordkeeping, and legal obligations, resolve disputes, and enforce agreements. Retention varies by category, and a litigation hold always overrides routine deletion:

• Website analytics and security logs — typically up to 18 months.
• Routine website inquiries with no relationship formed — up to 24 months.
• Job-application data — up to 18 months from last contact, then deleted unless an active engagement extends the relationship.
• Placement, billing, and related business records — about 4 years after the last placement activity, payment, or relationship event, or longer where tax, accounting, contractual, insurance, or litigation-hold reasons apply.
• Form I-9 and similar mandated records — kept on their own statutory schedule.

The legal floors that drive these windows are shorter than people often assume — federal payroll-tax records run four years, FLSA wage records three, Form I-9s the later of three years after hire or one year after the assignment ends, and Texas's longest relevant deadline is the four-year limit on contract claims. Where we keep records longer, that is our own conservative policy, not a legal requirement.

A note on HIPAA

IMS is a staffing agency — not a healthcare provider or health plan. The information we collect about you (contact details, licenses, certifications, references, and work history) is professional credentialing information about you as a clinician, so HIPAA generally does not apply to what we collect, and we do not collect patient health records ("protected health information") through this site. Please do not submit patient health information through our web forms or by email. When you are placed at a facility, any patient information you handle on that assignment is governed by that facility's own HIPAA policies, because on assignment you work under the facility's direction — not ours.

Your rights and how to exercise them

You can ask us at any time to confirm what we hold about you, correct it, or delete it. Email recruiting@iastaffing.com with the subject Data deletion request. We aim to respond within 30 days.

We do not sell personal data for monetary consideration, we do not share personal information for cross-context behavioral advertising, and we do not process personal data for targeted advertising. If a clinician asks us to present them for a staffing opportunity, we may disclose the information reasonably necessary to evaluate and facilitate that requested opportunity with a healthcare facility or other business counterparty — we treat those disclosures as part of providing the staffing services you have asked for, not as advertising. We also disclose data to the sub-processors listed above, who act on our behalf. We do not sell sensitive personal data.

Privacy laws and where you live

Innovative Medical Staffing is a small Texas-based business. The comprehensive US state consumer-privacy laws now in effect — including California (CCPA/CPRA) and the roughly twenty other states, Texas among them, with similar laws as of 2026 — generally apply only to larger companies that cross specific revenue or data-volume thresholds, or that sell personal data. We do not meet those thresholds, and we do not sell personal data. Most of these laws also do not cover the information you give us as a job applicant or a business contact, and even the newest and broadest of them — such as Connecticut's 2026 amendments, which can reach a business that handles the sensitive data of a single resident — apply only to individuals acting as consumers, not to the job applicants and business contacts whose information we handle.

Texas's own law — the Texas Data Privacy and Security Act — exempts businesses that qualify as a "small business" under US Small Business Administration standards, which we do. The one rule that still applies to every business, large or small, is that sensitive personal data may not be sold without your consent; we satisfy it by not selling data at all.

None of that changes how we treat you. Whatever the law requires, you can ask us to confirm, correct, or delete what we hold — use the deletion-request flow above, and we will honor reasonable requests.

Where we operate

Our services are intended for people in the United States, and we do not currently market our services to individuals in the EEA, UK, or Switzerland. If you are outside the United States and have a question or request about your information, email recruiting@iastaffing.com and we will do our best to help.

If there is a data breach

If we determine that a security incident requires notice under applicable law, we will provide those notices as the law requires. For Texas residents, that may include notice to the affected individuals and, where required, a report to the Texas Attorney General.

Children's privacy

This site is not directed to children under 13, and IMS does not knowingly collect personal information online from children under 13. If you believe a child under 13 has given us personal information through the site, email recruiting@iastaffing.com and we will take appropriate action.

Accessibility

IMS is committed to improving website accessibility for all users. If you have trouble accessing any content on this site, email recruiting@iastaffing.com with the page and the issue, and we will work to provide the information in an accessible format.

Changes to this notice

We update this notice when our practices change or when the law requires it. The date at the top reflects the most recent change.