CERTIFY Health – Customized Patient Experience Software 

PRIVACY POLICY

Last Updated: August 26, 2020

This Privacy Policy governs CERTIFY’s collection and use of your personal information for the purpose of providing you with the Services, and is incorporated by reference into CERTIFY’s Terms of Use.

The capitalized terms that appear in this Privacy Policy have the same meanings as in CERTIFY’s Terms of Use, unless they are defined in this policy.

By using the Services, you agree to this Privacy Policy.  IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MAY NOT USE THE SERVICES.

SCOPE OF POLICY

This Privacy Policy describes how CERTIFY collects, uses, and protects personal information that can be used to identify an individual (“Personally Identifiable Information”).  Personally Identifiable Information may include names, addresses, telephone numbers, email addresses, birth dates, and similar types of information.  Personally Identifiable Information may also include demographic information, employment information, financial information, and similar types of information.

Personally Identifiable Information may also include personal information that can be used to identify an individual in the healthcare context (“Protected Health Information”).  Protected Health Information may include information about your health condition, your health history, healthcare documents, provision of healthcare services, and payment for healthcare services.

This Privacy Policy does not describe our practices regarding other types of information.  Nor does this Privacy Policy describe the practices of other companies with respect to your information.  We do not control and are not responsible for the practices of such companies.

CHANGES TO PRIVACY POLICY

CERTIFY may modify this Privacy Policy, including any of the policies associated with this Privacy Policy, at any time, with or without notice.  Any changes to this Privacy Policy will be effective immediately upon being posted.  By continuing to use the Services after such changes are posted, you agree to such changes.  If you do not agree to such changes, you may not continue to use the Services.

COLLECTION OF PERSONAL INFORMATION

We may collect certain types of Personally Identifiable Information when you create or update your Account, or when we create an Account on your behalf, such as your name, address, and email address.  We may also collect certain types of Personally Identifiable Information when you use the Services, including biometric information, such as fingerprint, voiceprint, retina, iris, face, and temperature scans (“Biometric Information”).  The purpose of colleting such information is to permit you to use the Services.

Providing us with your Personally Identifiable Information is entirely voluntary.  If you do not wish to consent to the collection and use of your Personally Identifiable Information, you are not required to do so.  However, if you do not consent to the collection and use of your Personally Identifiable Information, you will not be able to use the Services, and if you do not wish to provide certain types of information, your use of the Services may be adversely affected and you may not receive certain communications.

COLLECTION OF OTHER TYPES OF INFORMATION

We may collect “aggregate data” when you use the Services.  Aggregate data is data about your use of the Services.  Aggregate data may include your computer’s IP address, referring website addresses, and the time you accessed the Website.  This Privacy Policy does not limit our use of aggregate data since Personally Identifiable Information is not contained in such data or has been removed from such data.  We may share aggregate data with third parties for various purposes, including to help us improve the Services and for marketing purposes.

We may also collect information about your use of the Services by using cookies pursuant to CERTIFY’s Cookies Policy, which is incorporated by reference into this Privacy Policy.

ACCESS TO PERSONAL INFORMATION

You may access or request access to the Personally Identifiable Information in your Account at any time through the CERTIFY platform or by sending a request to:  support@certifyhealth.com.

If you terminate your use of the Services, or if CERTIFY terminates your use to the Services, any request to access your Personally Identifiable Information must be made within thirty (30) days of termination.  If you do not request such access within this time frame, or if your access to the Services is terminated due to your actual, attempted, threatened, or suspected violation of CERTIFY’s Terms of Use, CERTIFY will have no obligation to maintain such information, and such information may no longer be retrievable.  You may access the Personally Identifiable Information in your Account through the platform or by sending a request to: support@certifyhealth.com..

CERTIFY reserves the right to decline commercially unreasonable request to access the Personally Identifiable Information in your Account.

UPDATES TO PERSONAL INFORMATION

You may update the Personally Identifiable Information in your Account at any time through the CERTIFY platform or by sending a request to: support@certifyhealth.com.

CERTIFY reserves the right to decline commercially unreasonable request to update the Personally Identifiable Information in your Account.

You agree to promptly update the Personally Identifiable Information in your Account if such information changes, particularly your name, address, telephone number, and email address.

USE OF PERSONAL INFORMATION

Your privacy is important to us.  CERTIFY actively seeks to maintain your privacy as set forth in this Privacy Policy.  We will not sell, license, share, or disclose your Personally Identifiable Information, except as set forth in this Privacy Policy or with your consent, and we will use such information only as set forth in this policy.

CERTIFY may use your Personally Identifiable Information to permit you to use the Services and for related purposes, including to communicate with you about the Services and to facilitate the operation of CERTIFY’s business.  For example, we may send you communications to confirm the creation of your Account, changes made to your Account, and purchases made through your Account; to provide you with information about the use of the Services; to respond to your requests for customer support; to respond to your questions, comments, or complaints; to request feedback about the Services; and to send you information about updates, improvements, and/or other modifications to Services and our policies.

You may opt-out of receiving some or all types of electronic communications when you create an Account, by modifying your Account preferences, or by sending a request to support@certifyglobal.com.  However, if you do not consent to the receipt of any types of communications, you will not be able to use the Services, and if you do not consent to the receipt of certain types of communications, you may not receive important communications and your use of the Services may be adversely affected.

DISCLOSURES OF PERSONAL INFORMATION

We may also disclose your Personally Identifiable Information to certain third parties under the following circumstances.

DISCLOSURES TO PRODUCT/SERVICE PROVIDERS

We will not share, rent or sell your Personal Information to other companies or individuals, unless we have your consent.CERTIFY may disclose certain Personally Identifiable Information to product and/or service providers who assist us in providing Services.  The Personally Identifiable Information disclosed to such companies will be limited to information sufficient to provide the Services, to support the Services, to enhance the Services, or to verify or supplement the information in your account.

We may also disclose certain Personally Identifiable Information to affiliated companies whose products or services may be used in connection with the Services. The Personally Identifiable Information disclosed to such affiliated companies will be limited to information sufficient to contact you electronically about their services, and will be used only for the purpose of providing you with information about such services. Your Personally Identifiable Information will not be sold to such affiliated companies. You may opt-out of the disclosure of your Personally Identifiable Information to such affiliated companies at any time by contacting us at  support@certifyhealth.com.

DISCLOSURES TO OTHER ENTITIES

CERTIFY may disclose Personally Identifiable Information to third parties: (a) to comply with a valid legal demands for such information; (b) to protect CERTIFY or any of its owners, directors, officers, employees, agents, customers, or anyone else; (c) to enable CERTIFY to investigate actual, attempted, threatened, or suspected violations of our Terms of Use or other agreements, or to enforce our Terms of Use or other agreements; or (d) pursuant to any acquisition, merger, or sale of all or substantially all of our business (“Change of Control”).  In the event that Personally Identifiable Information is disclosed to a third party pursuant to a Change of Control, you will receive notice of the transfer.

GOVERNMENT DISCLOSURES

The disclosure of Personally Identifiable Information to third parties to comply with valid legal demands for such information is governed by CERTIFY’s Government Disclosures Policy.

DESTRUCTION OF PERSONAL INFORMATION

This Privacy Policy does not require us to destroy any Personally Identifiable Information, unless you request its destruction, and unless otherwise provided in this Privacy Policy.

SECURITY

CERTIFY and the third-party product/service providers who assist CERTIFY in processing Personally Identifiable Information take reasonable steps to prevent destruction, alteration, disclosure, misuse, and unauthorized access to your Personally Identifiable Information.

Sensitive information, including your login information, is protected through encryption during transmission over the Internet.  Servers and other devices used for processing your information at CERTIFY and third-party vendors are kept in controlled environments where access to your information is limited to authorized persons.

CERTIFY’s security policies and practices comply with HITRUST, ISO 270001, and PCI-DSS standards, and we are certified as compliant by the governing bodies for each of those standards.

CONFIDENTIALITY OF COMMUNICATIONS

You agree that, aside from any Personally Identifiable Information contained in your communications with CERTIFY, your communications with CERTIFY are not confidential.  Such communications, including any communications containing any ideas, concepts, or suggestions regarding the Services, improvements to the Services, or new Services, may be used by CERTIFY for any purpose.

CHILDREN

We do not knowingly collect personally identifiable information from children under the age of 13 without parental consent.  If we learn that we have collected the personally identifiable information of a child under the age of 13 without parental consent, we will take steps to delete the information as soon as possible.

CALIFORNIA USERS

If you reside in California, CERTIFY’s collection and use of your Personally Identifiable Information is subject to the California Consumer Privacy Act (“CCPA”).  Under the CCPA, you may ask us what information we have about you (which is set forth above), you may ask us what we do with that information (which is set forth above), and you may request that we not sell your information (which we do not) by contacting us at the below email address.  In addition, you may request that we delete any information we have about you by contacting us at the below email address.  We may not discriminate against you in any way for exercising any of the above rights.  Our California Collection Notice contains additional information for California residents regarding their rights under the CCPA and is incorporated by reference into this Privacy Policy.

ILLINOIS USERS

If you reside in Illinois, CERTIFY’s collection and use of your Biometric Information is subject to the Illinois Biometric Information Privacy Act (“IBIPA”).  Under the IBIPA, we may only use your Biometric Information if you provide your written consent.  When you use the Services, you will be asked to indicate that you agree to our collection, storage, and use of your Biometric Information in accordance with the terms of this Notice by clicking on a checkbox, by entering you name, or by similar means.  You agree that such indication of consent is your written release regarding our collection, storage, and use of your Biometric Information under the IBIPA.  Our Illinois Biometric Information Notice contains additional information for Illinois residents regarding their rights under the IBIPA and is incorporated by reference into this Privacy Policy.

INTERNATIONAL USERS

If you reside in the European Union or another jurisdiction that has adopted the EU’s General Data Protection Regulation (“GDPR”), CERTIFY’s collection and use of your Personally Identifiable Information is subject to the GDRP.  CERTIFY’s obligations under the GDPR are set forth in the CERTIFY’s GDPR Policy, which is incorporated by reference into this Privacy Policy.

COMMUNICATIONS

Questions, complaints, and other communications regarding any aspect of this Privacy Policy should be addressed to CERTIFY at info@certifyhealth.com.

Questions, complaints, and other communications regarding any aspect of CERTIFY’s GDPR Policy should be addressed to CERTIFY as set forth in our GDPR Policy.