Your information, handled with care.

What we collect

We collect only what the staffing relationship needs:

• Application data — name, contact details, CV, license states, certifications, references, work history, and availability submitted through the site or by email.
• Contact-form data — your name, email address, who you are (facility, clinician, or general inquiry), an optional role or specialty, an optional mobile phone number if you provide one on a job application, and the message you send us. A provided phone number is currently kept together with your message rather than in a separate field. When you submit a form, we also record any marketing-source fields present in the page URL and the hostname (not the full URL) of an external page that referred you, if your browser provides it. We use this only to measure how inquiries reach IMS; it does not use cookies or a persistent identifier.
• Usage telemetry — anonymous, aggregated visit data via Plausible Cloud (no cookies, no cross-site identifiers, and no IP address stored by our analytics). See the Cookies notice.
• Operational records — the credentialing paperwork, references, and assignment history we gather and hold for the clinicians and facility partners we work with, in coordination with each facility's medical staff office.
• Security and abuse-prevention data — when you submit a form, we store a one-way hashed version of your IP address (we never keep the raw IP) and your browser's user-agent string, solely to prevent spam and abuse and to keep the site secure.

How we use it

• To match clinicians to assignments and facilities to qualified clinicians.
• To facilitate credentialing, onboarding, and assignment logistics.
• To respond to inquiries and stay in touch with the clinicians and facility partners we work with.
• To meet the legal, regulatory, and contractual obligations specific to healthcare staffing.

Where it lives

• Application + contact data — Supabase (US-hosted Postgres, encrypted at rest).
• Outbound transactional email — Resend (US-based email delivery).
• Anonymous site analytics — Plausible Cloud (cookieless, no IP address stored by our analytics; EU-hosted, data never leaves the EU).
• Site hosting — Cloudflare (global edge network).

How long we keep it

We keep personal information only as long as reasonably necessary for the purposes described here — to operate our recruiting and staffing business, keep appropriate business records, meet tax, payroll, recordkeeping, and legal obligations, resolve disputes, and enforce agreements. Retention varies by category, and a litigation hold always overrides routine deletion:

• Website analytics and security logs — typically up to 18 months.
• Routine website inquiries with no relationship formed — up to 24 months.
• Job-application data — up to 18 months from last contact, then deleted unless an active engagement extends the relationship.
• Placement, billing, and related business records — about 4 years after the last placement activity, payment, or relationship event, or longer where tax, accounting, contractual, insurance, or litigation-hold reasons apply.
• Form I-9 and similar mandated records — kept on their own statutory schedule.

The legal floors that drive these windows are shorter than people often assume — federal payroll-tax records run four years, FLSA wage records three, Form I-9s the later of three years after hire or one year after the assignment ends, and Texas's longest relevant deadline is the four-year limit on contract claims. Where we keep records longer, that is our own conservative policy, not a legal requirement.

A note on HIPAA

IMS is a staffing agency — not a healthcare provider or health plan. The information we collect about you (contact details, licenses, certifications, references, and work history) is professional credentialing information about you as a clinician, so HIPAA generally does not apply to what we collect, and we do not collect patient health records ("protected health information") through this site. Please do not submit patient health information through our web forms or by email. When you are placed at a facility, any patient information you handle on that assignment is governed by that facility's own HIPAA policies, because on assignment you work under the facility's direction — not ours.

Your rights and how to exercise them

You can ask us at any time to confirm what we hold about you, correct it, or delete it. Email recruiting@iastaffing.com with the subject Data deletion request. We aim to respond within 30 days.

We do not sell personal data for monetary consideration, we do not sell sensitive personal data, we do not share personal information for cross-context behavioral advertising, and we do not process personal data for targeted advertising. We are not a data broker — we collect information directly from the clinicians and facility partners we work with, and we use it to provide staffing services, not to build advertising profiles. We do not share, sell, rent, or trade your personal information with other companies for their own marketing. The only sharing we do is the following, and only as needed to run our service: when a clinician asks us to present them for a staffing opportunity, we disclose the information reasonably necessary to evaluate and facilitate that requested opportunity to the healthcare facility involved — we treat that as part of providing the staffing services you have asked for, not as advertising — and we disclose data to the sub-processors listed above, who act only on our behalf and under our written instructions. Your mobile number and your text-messaging opt-in and consent are excluded from all of this: that information is never shared with any third parties or affiliates for marketing or promotional purposes, and is never sold, rented, or traded (see Text messages and your mobile number below).

Text messages and your mobile number

If you give us your mobile number — for example on our job-application form, or by replying to a recruiter's message — we and our recruiters may text you about job opportunities, your application, scheduling, credentialing, and assignment logistics. These are conversational messages between you and an Innovative Medical Staffing (IMS) recruiter, not automated marketing campaigns. Message frequency varies with your conversation, and message and data rates may apply. Reply STOP to any message to opt out at any time, or HELP for help — you can also email recruiting@iastaffing.com or call (512) 524-6686. Opting out never affects your application or your standing with us — we will simply reach you another way. Giving us your number is always optional, and we never require it as a condition of applying.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are excluded from every other kind of data-sharing in this notice; your mobile number and SMS consent are never sold, rented, or traded, and they will not be shared with any third parties, except with the messaging providers and the telecommunications carriers that transmit the messages between you and your recruiter on our behalf. Your mobile number and SMS consent are stored and processed only by us and the service providers that operate our systems under our written instructions (the sub-processors listed above); they are not disclosed to the healthcare facilities we present clinicians to, and they are never used to build any advertising or marketing profile.

When you provide your number on the application form, it is kept with the rest of that application — in practice it currently lives inside the message we receive from the form rather than in a separate field — and it is handled under the same retention and security commitments described in this notice. If you ask us to delete your information, that includes your mobile number; email recruiting@iastaffing.com with the subject Data deletion request.

Privacy laws and where you live

Innovative Medical Staffing is a small Texas-based business. The comprehensive US state consumer-privacy laws now in effect — including California (CCPA/CPRA) and the roughly twenty other states, Texas among them, with similar laws as of 2026 — generally apply only to larger companies that cross specific revenue or data-volume thresholds, or that sell personal data. We do not meet those thresholds, and we do not sell personal data. Most of these laws also do not cover the information you give us as a job applicant or a business contact, and even the newest and broadest of them — such as Connecticut's 2026 amendments, which can reach a business that handles the sensitive data of a single resident — apply only to individuals acting as consumers, not to the job applicants and business contacts whose information we handle.

Texas's own law — the Texas Data Privacy and Security Act — exempts businesses that qualify as a "small business" under US Small Business Administration standards, which we do. The one rule that still applies to every business, large or small, is that sensitive personal data may not be sold without your consent; we satisfy it by not selling data at all.

None of that changes how we treat you. Whatever the law requires, you can ask us to confirm, correct, or delete what we hold — use the deletion-request flow above, and we will honor reasonable requests.

Where we operate

Our services are intended for people in the United States, and we do not currently market our services to individuals in the EEA, UK, or Switzerland. If you are outside the United States and have a question or request about your information, email recruiting@iastaffing.com and we will do our best to help.

If there is a data breach

If we determine that a security incident requires notice under applicable law, we will provide those notices as the law requires. For Texas residents, that may include notice to the affected individuals and, where required, a report to the Texas Attorney General.

Children's privacy

This site is not directed to children under 13, and IMS does not knowingly collect personal information online from children under 13. If you believe a child under 13 has given us personal information through the site, email recruiting@iastaffing.com and we will take appropriate action.

Accessibility

IMS is committed to improving website accessibility for all users. If you have trouble accessing any content on this site, email recruiting@iastaffing.com with the page and the issue, and we will work to provide the information in an accessible format.

Changes to this notice

We update this notice when our practices change or when the law requires it. The date at the top reflects the most recent change.