Privacy Policy and Notice of Privacy Practices

Last Updated: May 2020

This privacy policy (“Privacy Policy”) governs how we, Get-Grin Inc. (“Grin” “we”, “our” or “us”) use Personal Information (defined below) that we collect, receive and store pertaining to you (“User”, “you”) in connection with the following use cases:

  1. When you browse or visit our website, www.get-grin.com (“Site”)
  2. When you make use of, or interact with, our Site
  1. When you subscribe to our newsletter or blog
  2. When we process your job application
  3. When you contact us (e.g. customer support, etc.)
  1. When you make use of or interact with our mobile or web application ("App").
  1. When you sign up for an account, login and purchase our services
  2. When you make use of the App for its intended use
  1. When you provide personal data for marketing purposes (attending an event, filing a form on the website, contacting on social media, exchange a business card)
  2. When we acquire your Personal Information from third-party sources (such as lead-generation companies)
  3. When we use the Personal Information of our service providers, suppliers, resellers, distributors, agents, finders and/or partners.

The Site and App are referred to herein as the “Services”.  

We greatly respect your privacy, which is why we make every effort to provide a platform that would live up to the highest of user privacy standards. Please read this Privacy Policy carefully, so you can fully understand our practices in relation to Personal Information.

Table of content:

INTRODUCTION

TERMS OF USE

CONSENT AND MODIFICATION

WHAT INFORMATION WE COLLECT, WHY WE COLLECT IT, AND HOW IT IS USED

HOW WE PROTECT AND STORE YOUR INFORMATION

HOW WE SHARE YOUR PERSONAL INFORMATION

ADDITIONAL INFORMATION REGARDING TRANSFERS OF PERSONAL INFORMATION

USE BY CHILDREN

HOW CAN I DELETE MY ACCOUNT?

LINKS TO AND INTERACTION WITH THIRD PARTY PRODUCTS

LOG FILES

COOKIES AND OTHER TRACKING TECHNOLOGIES

GOOGLE ANALYTICS

ACCESS/ACCURACY

CALIFORNIA PRIVACY RIGHTS

OUR CALIFORNIA DO NOT TRACK NOTICE

DELETION OF CONTENT FROM CALIFORNIA RESIDENTS

CONTACT US

This Privacy Policy may be updated from time to time and therefore we ask you to check back periodically for the latest version of the Privacy Policy, as indicated below.  If there will be any significant changes made to the use of your Personal Information in a manner different from that stated at the time of collection, we will notify you by posting a notice on our Site or by other means.

  1. INTRODUCTION

We have implemented this Privacy Policy because your privacy, and the privacy of other users, is important to us. This Privacy Policy explains our online information practices and the choices you can make about the way your Personal Information is collected and used in connection with the Services. “Personal Information” means any information that may be used, either alone or in combination with other information, to personally identify an individual, including, but not limited to, a first and last name, a personal profile, an email address, a home or other physical address, or other contact information.

  1. TERMS OF USE

This Privacy Policy forms part of our Terms of Use which is available at www.get-grin.com/terms (“Terms”). Any capitalized but undefined term in this Privacy Policy shall have the meaning given to it in the Terms.

  1. CONSENT AND MODIFICATION

You are not legally obligated to provide us Personal Information, and you hereby confirm that providing us Personal Information is at your own free will. By using the Services, you consent to the terms of this Privacy Policy and to our collection, processing and sharing of Personal Information for the purposes set forth herein. If you do not agree to this Privacy Policy, please do not access or otherwise use the Services. We reserve the right, at our discretion, to change this Privacy Policy at any time. Such change will be effective ten (10) days following posting of the revised Privacy Policy on the Site, and your continued use of the Services thereafter means that you accept those changes.

  1. WHAT INFORMATION WE COLLECT, WHY WE COLLECT IT, AND HOW IT IS USED

Information we collect

Why is the Information collected and for what purposes?

Third parties with whom we share your Information

Consequences of not providing the Information

When you browse or visit our Site

Cookies, analytic tools and log files (we collect information such as your computer browser information, IP address, operating system, date/time stamps, click stream data and type of mobile device)

 

For more information regarding cookies, please read more

get-grin/privacy/cookies-policy

This type of aggregate data may enable us to figure out how often visitors use parts of the Services, help us determine customer service and Site needs, as well as for internal analytics on visitors’ demographics, interests, and behavior to better understand, protect, and serve users and our community. We may use this data in aggregate form, that is, as a statistical measure, but not in a manner that would identify you personally.

We analyze your use of the Site with third party software that allows us to monitor and record visitors’ navigation and usage activities in order to better customize and improve our Site, Services and other products. Tracking of IP addresses also assists in keeping within compliance of US export regulations in relationship to restricted use in certain geo-locations.

3rd party platforms for the following purposes:

 

  • Analytics tools
  • CRM and marketing automation platforms

Cannot determine if the information provided on the Site is of value to our visitors.

When you make use of, or interact with our Site

When you subscribe to our blog posts and newsletters

  • Full name
  • Email address
  • Zip code
  • Sending newsletters, blog post updates and other marketing communications
  • Assess geo-demographics of interested parties

3rd party platforms such as for the following purposes:

  • CRM and marketing automation platforms

Cannot send you relevant newsletters, blog post and marketing communications

When we process your job application 

  • Full name
  • Email address
  • Phone number
  • CV and cover letter
  • Any other data you decide to provide/supply

  • Process your job application
  • To assess the candidate

3rd party platforms such as for the following purposes:

Storage, hosting / file management system

Cannot process your job application

Cannot assess your suitability as a candidate

When you contact us (e.g. customer support, etc)

  • Full name
  • Email address
  • Description
  • Company name
  • Attachments
  • Any other information that you decide to provide/supply us
  • To process and answer questions
  • To provide support (e.g., to solve problems, bugs or issues)
  • To customize your experience
  • To schedule a demo
  • To send marketing communications

3rd party platforms such for the following purposes:

 

  • Marketing communications
  • Logging and following support activity (ticketing service)

Cannot contact us and we cannot assist/help you

Cannot send you marketing communications

Cannot customize your experience

When you make use of, or interact with our App

[Patient] When you sign up for an account, purchase a service

  • Name
  • Email
  • Date of Birth
  • Address
  • Medical History Form
  • Payment method (credit card information)

  • Creating an account
  • Processing the order of the product
  • Performing/executing the purchase

3rd party platforms such as for the following purposes:

  • Product data storage solution (e.g. AWS)
  • Payment tools
  • scheduling tools
  • Support platforms
  • Partner Doctor Service Provider in network
  • Supplier Provider for subscription

*All of the above with whom we have BAA per HIPAA requirements

Cannot create an account

Cannot assess whether user can go through active treatment

Cannot process the product order and perform the agreement

[Doctor/Provider] When you sign up for an account, purchase a service

  • Name
  • Email
  • Practice information (Address, website, additional material)
  • Billing information
  • Scheduling availability

  • To identify you, the doctor and offer secure services and for contact details
  • To create your account
  • To provide you access to our services
  • To enable you to use Grin’s web app functionality
  • To provide you with features available to registered users only
  • To allow you to treat Grin patients on the Grin platform

3rd party platforms such as for the following purposes:

  • Product data storage solution (e.g. AWS)
  • Payment tools
  • scheduling tools
  • Support platforms
  • Partner Doctor Service Provider in network
  • Supplier Provider for subscription

*All of the above with whom we have BAA per HIPAA requirements

  • Cannot identify the doctor/provider, offer secure services
  • Cannot create your account
  • Cannot provide you access to our services
  • Cannot enable you to use Grin’s functionality
  • Cannot provide you with features available to registered users only
  • Cannot provide you with integration and other support assistance
  • Cannot allow you to treat Grin incoming patients
  • Cannot customize the content you see

When you provide personal data for marketing purposes (attending an event, filing a form on the website, contacting on social media, exchange a business card)

  • Full name
  • Email address
  • Company name
  • Position
  • Phone number
  • Address

  • To establish a business connection
  • To send newsletters or other marketing communications
  • To respond to requests and to provide ongoing communication with potential customers who have requested information and for direct marketing.

3rd party platforms for the following purposes:

  • Analytics tools
  • CRM and marketing automation platforms
  • Cannot establish a business connection
  • Cannot send you marketing communications

 

When we acquire your Personal Information from third-party sources (such as lead-generation companies)

  • Full name
  • Email address
  • Company name
  • Position
  • Phone number
  • Address

  • To establish a business connection
  • To send newsletters or other marketing communications

3rd party platforms such as for the following purposes:

  • Analytics tools
  • CRM and marketing automation platforms

Cannot send you marketing communications

When we use the Personal Information of our service providers, suppliers, resellers, distributors, agents, finders and/or partners.  

  • Full name
  • Email address
  • Company name
  • Phone number
  • Address
  • Any other information that you decide to provide/supply us
  • To contact our service providers, suppliers or resellers/ distributors/ agents
  • To perform the applicable agreement
  • To communicate with our resellers, distributors, agents and/or finders
  • To provide our products and services

3rd party platforms such as for the following purposes:

 

  • Storage, hosting / file management systems
  • Bookkeeping platform

  • Cannot contact our service providers
  • Cannot provide the services and/or our products
  • Cannot perform the agreement

When we use the Personal Information of our customers

  • Full name
  • Email address
  • DOB
  • Medical Information
  • Phone number
  • Payment information
  • Medical scans/imagery
  • Other information provided by the customer

 

  • Providing our products and Services

  • Performing the customer agreement

3rd party platforms such as for the following purposes:

 

  • Product data storage solution (e.g. AWS)
  • Payment tools
  • scheduling tools
  • Support platforms
  • Partner Doctor Service Provider in network
  • Supplier Provider for subscription
  • Analytics tools
  • CRM and marketing automation platforms

  • Cannot communicate with you
  • Cannot provide our products and services
  • Cannot perform customer agreement
  • Cannot send marketing communication

Finally, please note that some of the abovementioned Personal Information will be used for fraud detection and prevention, and for security purposes.

  1. HOW WE PROTECT AND STORE YOUR INFORMATION

  1. Security. We have implemented appropriate technical, organizational and security measures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to such information appropriate to the nature of the information concerned. However, please note that we cannot guarantee that the information will not be exposed as a result of unauthorized penetration to our servers. Nevertheless, we make commercially reasonable efforts to make the collection and security of such information consistent with this Privacy Policy and all applicable laws and regulations. As the security of information depends in part on the security of the computer, device or network you use to communicate with us and the security you use to protect your user IDs and passwords, please make sure to take appropriate measures to protect this information.

  1. Retention of your Personal Information. In addition to the retention periods mentioned in Section 4 above, in some circumstances we may store your Personal Information for longer periods of time, for example (i) where we are required to do so in accordance with legal, regulatory, tax or accounting requirements, or (ii) for us to have an accurate record of your dealings with us in the event of any complaints or challenges, or (iii) if we reasonably believe there is a prospect of litigation relating to your Personal Information or dealings.

  1. HOW WE SHARE YOUR PERSONAL INFORMATION  

In addition to the recipients described in Section 4, we may share your information as follows:

  • To the extent necessary, with regulators, to comply with all applicable laws, regulations and rules, and requests of law enforcement, regulatory and other governmental agencies or if required to do so by court order;
  • If, in the future, we sell or transfer some or all of our business or assets to a third party, we will (to the minimum extent required) disclose information to a potential or actual third party purchaser of our business or assets. In the event that we are acquired by or merged with a third party entity, or in the event of bankruptcy or a comparable event, we reserve the right to transfer or assign Personal Information in connection with the foregoing events.
  • Where you have provided your consent to us sharing the Personal Information (e.g., where you provide us with marketing consents or opt-in to optional additional Services or functionality); and
  • Where we receive requests for information from law enforcement or regulators, we carefully validate these requests before any Personal Information is disclosed.

If you want to receive the list of recipients of your Personal Information, please make your request by contacting us by emailing support@get-grin.com.

  1. ADDITIONAL INFORMATION REGARDING TRANSFERS OF PERSONAL INFORMATION  

 

  • We will use your Personal Information to provide and improve our Site, to send you marketing/advertisement communications that we believe may be of interest to you, to contact you in connection with the Site and certain programs or offerings that you may have registered for, and to identify and authenticate your access to the parts of the Site that you are authorized to access.
  • We may use your designated email address to: (i) send you updates or news regarding the Site and our products; and/or (ii) respond to a “Contact Us” or administrative request (for example, to change your password).
  • We may transfer your Personal Information to our local or foreign subsidiaries or affiliated companies for the purpose of storing or processing such information on our behalf. Such information may be transferred to other countries (including US). We require that these parties agree to process such information in compliance with our Privacy Policy.
  • We may share your Personal Information with our third party service providers and partners, but only to assist us with our business operations and to provide our Site to you and other users. Such information may be transferred to other countries. We use commercially reasonable efforts to only engage or interact with third party service providers and partners that post a privacy policy governing their processing of Personal Information.
  • We may disclose your Personal Information or any information you submitted via the Site if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce our Terms, including investigations of potential violations thereof; (iii) detect, prevent, or otherwise address fraud or security issues; or (iv) protect against harm to the rights, property or safety of [Grin], our users, yourself or the public.

  1. USE BY CHILDREN

We do not offer our products or Services for use by children. If you are under 18, you may not use the Site, or provide any information to the Site without involvement of a parent or a guardian. We do not knowingly collect information from, and/or about children.

  1. HOW CAN I DELETE MY ACCOUNT?

Should you ever decide to delete your Account, you may do so by emailing support@get-grin.com. If you terminate your Account, any association between your Account and information we store will no longer be accessible through your Account. However, given the nature of sharing on the Services, any public activity on your Account prior to deletion will remain stored on our servers and will remain accessible to the public.

  1. LINKS TO AND INTERACTION WITH THIRD PARTY PRODUCTS  


The Site may enable you to interact with or contain links to your Third Party Account and other third party websites or services that are not owned or controlled by us (each a “Third Party Service”). We are not responsible for the privacy practices or the content of such Third Party Services. Please be aware that Third Party Services may collect Personal Information from you. Accordingly, we encourage you to read the terms and conditions and privacy policy of each Third Party Service that you choose to use or interact with.

  1. LOG FILES

We make use of log files. The information inside the log files includes internet protocol (IP) addresses, type of browser, Internet Service Provider (ISP), date/time stamp, referring/exit pages, clicked pages and any other information your browser may send to us. We may use such information to analyze trends, administer the Site, track users’ movement around the Site, and gather demographic information.

  1. COOKIES AND OTHER TRACKING TECHNOLOGIES  

Our Site utilizes “cookies”, anonymous identifiers and other tracking technologies in order to for us to provide our Site and present you with information that is customized for you. A “cookie” is a small text file that may be used, for example, to collect information about activity on the Site. Certain cookies and other technologies may serve to recall Personal Information, such as an IP address, previously indicated by a user. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser.

  1. GOOGLE ANALYTICS

The Site uses analytic tools including a tool called “Google Analytics” to collect information about use of the Site. Google Analytics collects information such as how often users visit this site, what pages they visit when they do so, and what other sites they used prior to coming to this Site. We use the information we get from Google Analytics to maintain and improve the Site and our products. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to this Site is restricted by the Google Analytics Terms of Service, available at http://www.google.com/analytics/terms/us.html/, and the Google Privacy Policy, available at http://www.google.com/policies/privacy/. You may learn more about how Google collects and processes Information specifically in connection with Google Analytics at http://www.google.com/policies/privacy/partners/. You may prevent your Information from being used by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout/.

  1. ACCESS/ACCURACY

To the extent that you do provide us with Personal Information, we wish to maintain accurate Personal Information. If you would like to delete or correct any of your other Personal Information that we may be storing, you may submit an access request by sending an email to support@get-grin.com. Your email should include adequate details of your request.

  1. CALIFORNIA PRIVACY RIGHTS

For the purposes of this section, Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the California Consumer Privacy Act of 2018 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (“CCPA”).

Personal Information does not include information that is:

  • Lawfully made available from government records.
  • Deidentified or aggregated.
  • Otherwise excluded from the scope of the CCPA. Please note that data collected from patients for the provisioning of medical services is not within the scope of the CCPA as this data is in the scope of the Health Insurance Portability and Accountability Act.

The chart above provides the types of Personal Information we have collected, disclosed for a business purpose, or used for business or commercial purposes in the preceding twelve months since this notice was last updated, as well as the sources from which that information was collected, the third parties with whom we shared Personal Information, and the purposes for which we collect Personal Information.

In the preceding twelve months, we have not sold any California resident’s Personal Information.

If you are a California resident, you may exercise the following rights:

  • Right to Know and Access. You may submit a verifiable request for information regarding the: (1) categories of Personal Information collected, sold, or disclosed by us; (2) purposes for which categories of Personal Information are collected or sold by us; (3) categories of sources from which we collect Personal Information; (4) categories of third parties with whom we disclosed or sold Personal Information; and (5) specific pieces of Personal Information we have collected about you during the past twelve months.
  • Right to Delete. Subject to certain exceptions, you may submit a verifiable request that we delete Personal Information about you that we have collected from you.

  • Right to Equal Service and Price. You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations.

  • Submit Requests. To exercise your rights under the CCPA, send an email to support@get-grin.com or visit our website and use our Contact Us section www.get-grin.com/contact

  • Authorizing an Agent. To authorize an agent to make a request to know or delete on your behalf, please send a written authorization signed by you and the authorized agent to us via the Contact Information section.

  • Shine the Light. California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to support@get-grin.com. Please note that we are only required to respond to one request per customer each year.

Please note, requests for access to or deletion of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations. Should you ever decide to delete your Account, you may do so by emailing support@get-grin.com, some information may be required to verify the account before action can be taken on such requests.

  1. OUR CALIFORNIA DO NOT TRACK NOTICE

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers.  Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers, but we may allow third parties, such as companies that provide us with analytics tools, to collect personally identifiable information about an individual consumer’s online activities over time and across different web sites when a consumer uses the Services.

  1. DELETION OF CONTENT FROM CALIFORNIA RESIDENTS

If you are a California resident under the age of 18 and a registered user, California Business and Professions Code Section 22581 permits you to remove content or Personal Information you have publicly posted. To remove, please contact us at: support@get-grin.com. Please be aware that after removal you will not be able to restore removed content. In addition, such removal does not ensure complete or comprehensive removal of the content or Personal Information you have posted and that there may be circumstances in which the law does not require us to enable removal of content.

  1. CONTACT US

If you have any questions, concerns or complaints regarding our compliance with this notice and the Information protection laws, or if you wish to exercise your rights, we encourage you to first contact us at support@get-grin.com.

***

 


Notice of Privacy Practices

Get-Grin, Inc.

www.get-grin.com

PRIVACY PRACTICES CONTACT: Pamela Oren-Artzi, (646) 893-6122, support@get-grin.com

1. INTRODUCTION

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

You have the right to:

  • Get a copy of your paper or electronic medical record
  • Correct your paper or electronic medical record
  • Request confidential communication
  • Ask us to limit the information we share
  • Get a list of those with whom we’ve shared your information
  • Get a copy of this privacy notice
  • Choose someone to act for you
  • File a complaint if you believe your privacy rights have been violated

You have some choices in the way that we use and share information as we:

  • Tell family and friends about your condition
  • Provide disaster relief
  • Include you in a hospital directory
  • Provide mental health care
  • Market our services and sell your information
  • Raise funds

We may use and share your information as we:

  • Treat you
  • Run our organization
  • Bill for your services
  • Help with public health and safety issues
  • Do research
  • Comply with the law
  • Respond to organ and tissue donation requests
  • Work with a medical examiner or funeral director
  • Address workers’ compensation, law enforcement, and other government requests
  • Respond to lawsuits and legal actions

2. YOUR RIGHTS.

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

  • Get an electronic or paper copy of your medical record: You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Contact us at support@get-grin.com to obtain a copy of your medical record.
  • Ask us to correct your medical record: You can ask us to correct health information about you that you think is incorrect or incomplete. Ask us how to do this by contacting us at support@get-grin.com.
  • Request confidential communications: You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will comply with all reasonable requests.
  • Ask us to limit what we use or share: You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” if it would affect your care. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will comply unless a law requires us to share that information.
  • Get a list of those with whom we’ve shared information: You can ask us for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why. We will include all the disclosures except those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
  • Get a copy of this privacy notice: You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.
  • Choose someone to act for you: If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.
  • File a complaint if you feel your rights are violated: You can complain if you feel we have violated your rights by contacting us using the information at the beginning of this notice. You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, W.W., Washington D.C. 20201, calling 1-877-696-6755, or vising www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.

3. YOUR CHOICES

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.

In these cases, you have both the right and choice to tell us to:

  • Share information with your family, close friends, or others involved in your care
  • Share information in a disaster relief situation,
  • Include your information in a hospital directory

If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

In these cases, we never share your information unless you give us written permission:

  • Marketing purposes
  • Sale of your information
  • Most sharing of psychotherapy notes

In the case of fundraising: We may contact you for fundraising efforts, but you can tell us not to contact you again.

4. OUR USES AND DISCLOSURES

We typically use or share your health information in the following ways:

  • To treat you: We can use your health information and share it with other professionals who are treating you (e.g. a doctor treating you for an injury asks another doctor about your overall health condition) or supporting your treatment through related services.
  • To run our organization: We can use and share your health information to run our practice, improve your care, and contact you when necessary (e.g. we use health information about you to manage your treatment and services).
  • Bill you for your services: We can use and share your health information to bill and get payment from health plans or other entities (e.g. we give information about you to your health insurance plan so it will pay for your services).

We are also allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes. For more information see: https://www.hhs.gov/hipaa/for-individuals/guidance-materials-for-consumers/index.html.

  • To help with public health and safety issues: We can share health information about you for certain situations such as preventing disease; helping with product recalls; reporting adverse reactions to medications; reporting suspected abuse, neglect, or domestic violence; or preventing or reducing a serious threat to anyone’s health or safety.
  • To conduct research: We can use or share your information for health research.
  • To comply with the law: We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.
  • To respond to organ and tissue donation requests: We can share health information about you with organ procurement organizations.
  • To work with a medical examiner or funeral director: We can share health information with a coroner, medical examiner, or funeral director when an individual dies.
  • To address workers’ compensation, law enforcement, and other government requests: We can use or share health information about you for worker’s compensation claims; for law enforcement purposes or with a law enforcement official; with health oversight agencies for activities authorized by law; and for special government functions such as military, national security, and presidential protective services.
  • To respond to lawsuits and legal actions: We can share health information about you in response to a court or administrative order, or in response to a subpoena.

5. OUR RESPONSIBILITIES

  • We are required by law to maintain the privacy and security of your protected health information.
  • We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
  • We must follow the duties and privacy practices described in this notice and give you a copy of it.
  • We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information see: https://www.hhs.gov/hipaa/for-individuals/notice-privacy-practices/index.html

6. CHANGES TO THE TERMS OF THIS NOTICE

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our web site.

Last Updated: May 2020