PATIENT PORTAL PRIVACY POLICY


This Privacy Policy (this “Privacy Policy”) sets forth Net Health’s practices regarding the collection and use of your information in the Net Health Patient Portal (the "Portal").


AGREEMENT TO PRIVACY POLICY

YOUR ACCESS AND USE OF THE PORTAL IS SUBJECT TO YOUR AGREEMENT WITH THIS PRIVACY POLICY, ALONG WITH THE NET HEALTH PATIENT PORTAL TERMS & CONDITIONS OF USE. THE PORTAL IS NOT INTENDED FOR USE BY MINORS BELOW THE AGE OF 18. BY USING THE PORTAL, YOU EXPRESSLY AGREE TO THE TERMS OF THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION AND USE OF INFORMATION AS DISCUSSED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT USE OR ACCESS THE PORTAL FOR ANY PURPOSE.

IF YOU ARE A PATIENT, OR THE LEGAL REPRESENTATIVE OF A PATIENT, PLEASE NOTE THAT THIS PRIVACY POLICY ONLY RELATES TO NET HEALTH’S COLLECTION AND USE OF YOUR INFORMATION VIA THE PORTAL, AND DOES NOT DETAIL YOUR MEDICAL PROVIDER’S COLLECTION AND/OR USE OF YOUR DATA. YOUR MEDICAL PROVIDER’S USE AND DISCLOSURE OF YOUR HEALTH INFORMATION IS SUBJECT TO THEIR NOTICE OF PRIVACY PRACTICES. WE DO NOT EXERCISE ANY CONTROL OVER YOUR MEDICAL PROVIDER’S USE OF YOUR INFORMATION. PLEASE CONTACT YOUR PHYSICIAN IF YOU HAVE QUESTIONS ABOUT THEIR NOTICE OF PRIVACY PRACTICES.

MODIFICATIONS TO PRIVACY POLICY

NET HEALTH MAY REVISE THIS PRIVACY POLICY REGARDING THE COLLECTION OF INFORMATION AT ANY TIME. SHOULD ANY NEW POLICY TAKE EFFECT, NET HEALTH WILL POST THE NEW POLICY ON THE PORTAL, AND THE NEW POLICY WILL APPLY ONLY TO INFORMATION COLLECTED THEREAFTER. BY ACCESSING OR USING THE PORTAL AFTER SUCH CHANGES ARE POSTED, YOU AGREE AND CONSENT TO ALL SUCH CHANGES.

APPLICABILITY OF THIS PRIVACY POLICY

This Privacy Policy applies solely to the Portal and provides you information on the specific information that Net Health may collect from you via the Portal and how Net Health may use it in connection with this Portal. Net Health provides you with access to this Portal at the request of your medical provider and protects identifiable health information as required by the applicable agreement between Net Health and your medical provider and in accordance with applicable law. If you have any issues with the identifiable health information managed by your medical provider’s practice, please contact them directly. Net Health may make various third party applications available for your use within the Portal. If you affirmatively elect to engage with such third party applications, as applicable, your engagement with that third party application would be subject to such third party’s terms and conditions and privacy policy.

THE INFORMATION WE COLLECT & HOW WE USE IT


Overview

The amount and type of information that we collect depends on how you use this Portal and the information you choose to submit to us via the Portal. We may use any identifiable health information or other information that you provide to us in order to provide you with information, products or services that you may request from Net Health.

We may track use of your user name and may also capture the paths taken as you move from page to page (i.e., your "click stream" activity). When you log in, your user name and encrypted password may be logged by our system in an audit log.

As a user of the Portal and if available, you may also choose to use the secure messaging feature of the Portal which will allows the exchange of communications between patients and the clinicians who treat them and which may contain identifiable health information. Communications sent via this feature may be recorded and maintained by Net Health in accordance with applicable law. Net Health does not edit the content of the communications between patients and physicians.

Identifiable Health Information

If you are a patient (or the legal representative of a patient), we will collect any identifiable health information that you provide to us via the Portal, e.g., your name, address, e-mail address, gender, birth date, allergy and/or medication information.

When you register for the Portal, the registration process requires you to choose a user name and password for your account, which you should keep and maintain as confidential. You will be responsible for all activities by individuals using your account resulting from your sharing or not maintaining the confidentiality of your user name or password.

As a user of the Portal, your identifiable health information (or that of the patient for whom you are the legal representative) currently stored electronically in your physician records may become accessible to Net Health in order to provide you access to such information through the Portal. Your electronic health records are not permanently stored in the Portal, but a temporary copy of them is displayed via the Portal when you are logged in with your user name and password.

The information you provide to us via the Portal may be shared with your medical provider, at which point, as between you and your provider, such information becomes subject to your medical provider’s Notice of Privacy Practices. Net Health has no control over or responsibility for your physician's use or disclosure of information that you may provide via the Portal.

We may use your information to customize your browsing experience and communicate with you and otherwise respond to your questions and suggestions regarding use of the Portal as may be permitted by applicable law.

We may share your information with our third party vendors to the extent permitted by applicable law. We require those suppliers and vendors to comply with all applicable data privacy laws and regulations, including HIPAA. We do not sell, lease or rent your identifiable health information. We may also use your geographic location to provide you with specific content and direct you to your closest service providers to the extent permitted by applicable law.

Non-personally Identifiable Information

Either Net Health or third party vendors on behalf of Net Health may also collect non-identifiable information which may be automatically collected as you browse or otherwise access the Portal. We may collect such information by tracking, or asking a third party vendor to track, your click-stream activity when such information is not tied to a user ID through the use of "cookie" technology or by tracking internet protocol (IP) addresses, as further explained below.

When you access the Portal we may place a cookie on your computer, which may be either temporary or permanent. Temporary cookies are used to complete transactions with the Portal and for other purposes such as counting the number of visits to our certain web pages. These temporary cookies are eliminated when you exit your browser. A permanent cookie may also be stored on your computer by your browser. When you log in, this type of cookie tells us whether you've visited us before or if you are a new visitor. The cookie doesn't obtain any identifiable health information about you or provide us with any way to contact you, and the cookie doesn't extract any information from your computer. Since third parties may use their own cookies when you click on a hypertext link to their site or service, you should carefully review the privacy policy of other sites or applications you link to from the Portal.

We may also log and track IP addresses for systems administration purposes and for analyzing usage trends. Your IP address is usually associated with the physical place from which you enter the Internet, the name of the domain and host from which you access the Internet, the browser software you use and your operating system, and the date and time you access the Portal. By collecting your IP address, we may record the page that linked you to the Portal, the web pages you visit, the links you click on, and other information about the type of web browser, computer, platform and settings you are using, and any search terms you enter on the Portal. IP addresses are not used to track an individual user’s session. This information only helps us determine how often different areas of the Portal are visited.

Other Use and Ownership

We also reserve the right to share your information collected from the Portal with third parties to the extent permitted by applicable law including but not limited to the requirements under HIPAA, and, in the case of identifiable health information, pursuant to Net Health’s business associate agreement with the applicable medical provider.

Except as limited by this Privacy Policy and applicable law, Net Health maintains full rights to any information collected on the Portal, and may freely collect, use and disclose such information in accordance with this Privacy Policy and applicable law.

SECURITY

While no web site can guarantee security, we maintain physical, administrative, electronic, technical and procedural safeguards to help protect your personal information collected via the Portal as required by applicable law. While we cannot guarantee that loss, misuse or alteration to data will not occur, we use industry standards, such as Secure Socket Layers ("SSL") technology, to help safeguard against such occurrences. The information passed between your browser and our system is encrypted with SSL technology (which covers any messages, information or communications a person directs to Net Health or to a medical provider via the Portal) to create a protected connection between you and the Portal to ensure confidentiality.

Our data center is both physically and electronically secured and audited by a certified third party on an annual basis. Our servers are protected from open access to the Internet by using firewall and encryption technology. We limit access to personally identifiable information about you to our employees and third-party agents, who we reasonably believe need to have access to your information to provide you with the information or services you request via the Portal.

In the event that a breach in our security systems occurs and there is a possibility that an unauthorized person acquires your personal information, we will notify you of such a breach in accordance with our business associate agreement with your medical provider and applicable law.

In order to help maintain the security of your data, you should never share your user ID or password and should always sign out when you are finished using the Portal. You are responsible for the security of your credentials.

TRANSFER OF DATA

In the event of a change in control of Net Health or sale by Net Health of all or substantially all of its assets or other acquisition, merger or reorganization, any information owned by or in the control of Net Health may be transferred to Net Health’s successor, who will comply with the terms of this Privacy Policy.

If you have any questions about the contents of this Privacy Policy, please contact Net Health Client Services.https://www.nethealth.com/services/client-support/