PY HEALTHCARE PRIVACY POLICY
Last updated 01/05/2024
This Privacy Policy for PY Healthcare pertains to the healthcare services, website, or mobile application (the “Healthcare Services“) offered by PY HEALTHCARE, (“PY HEALTHCARE,” “we,” “us,” or “our“), as appropriate.
This Privacy Policy for PY Healthcare covers individually identifiable information, also referred to as “Protected Health Information” or “PHI,” which you provide us to access medical care through the Healthcare Services. This information is governed by our Health Insurance Portability and Accountability Act (“HIPAA“) Notice of Privacy Practices (the “HIPAA Notice“). Additionally, it encompasses information that does not fall under PHI. The HIPAA Notice, a distinct document, outlines the usage and disclosure of your PHI as well as your rights concerning it. However, it does not pertain to non-PHI information. This Privacy Policy complements the HIPAA Notice specifically for PHI. In case of any discrepancy between this Privacy Policy and the HIPAA Notice regarding your PHI, the HIPAA Notice shall prevail.
1. COLLECTION OF INFORMATION
When utilizing the Healthcare Services, we may gather the following types of information:
(a) Information provided directly by you: During certain activities like registration with the Healthcare Services, subscribing to alerts, or direct communication with us, we may collect some or all of the following:
i. Contact details such as your full name, email address, mobile number, and physical address;
ii. Username and password;
Payment details including credit card number, expiration date, security code, and billing address;
iv. Protected Health Information (PHI), encompassing details about your diagnosis, past treatments, general health status, the names of your other healthcare providers, and health insurance details;
v. Reviews of doctors or providers; and
vi. Any additional information you provide for the purpose of using the Healthcare Services.
We may merge this information with existing data we have about you.
(b) Information collected automatically: When utilizing our Healthcare Services, certain information may be collected automatically, including but not limited to your computer’s Internet protocol (IP) address, device and advertising identifiers, browser type, operating system, Internet service provider, pages visited before and after using the Healthcare Services, visit date and time, details of links clicked, pages viewed within the Healthcare Services, and other standard server log information. Additionally, location information may be collected, such as your mobile device’s GPS signal or data about nearby WiFi access points and cell towers.
To automatically gather this information, we may employ cookies, pixel tags, Local Shared Objects, and similar technologies. Cookies are small pieces of data stored by your computer’s web browser, while pixel tags are tiny images or data pieces embedded within images, capable of recognizing cookies and capturing information about page views and descriptions. Local Shared Objects, also known as “Flash Cookies,” function similarly to standard cookies but are larger and downloaded by the Adobe Flash media player. By using the Healthcare Services, you agree to our utilization of cookies, pixel tags, Local Shared Objects, and similar technologies.
Moreover, we may collect technical data to diagnose and address technical issues, thereby enhancing our Healthcare Services. Your device or browser settings might allow you to manage the collection of this technical data. By utilizing the Healthcare Services, you consent to us or any authorized party collecting this technical data.
(c) Information from Third-Party Services: If you access the Healthcare Services via an advertisement on a third-party platform (a “Third-Party Service”), we may receive information from the Third-Party Service owner pertaining to you or the advertisement.
(d) Information obtained from your healthcare providers and other sources: In the course of treatment, we may gather medical records from your past, present, and future healthcare providers. This may include details about your diagnosis, prior treatments, overall health status, laboratory and pathology test results, social histories, any family illness history, and records of health-related phone calls and emails.
(e) Other Sources: We may receive information about you from various sources, including third-party services and organizations. Our first-party data, like your email address or name, may be combined with third-party data from other sources, enabling us to contact you (e.g., through direct mail). For instance, if you utilize Facebook, Google, or Twitter to log in to the Healthcare Services or to share your Healthcare Services experience, we may collect data from these third-party platforms.
2. USE OF INFORMATION
We generally use the information we collect online to:
(a) Provide and improve the PY Healthcare Services;
(b) Contact you;
(c) Fulfill your requests for products, services, and information;
(d) Send you information about additional virtual services or general wellness from us or on behalf of our affiliates;
(e) Analyze the use of the Telemedicine Services and user data to understand and improve the PY Healthcare Services;
(f) Conduct research using your information, which may be subject to your separate written authorization;
(g) Prevent potentially prohibited or illegal activities and otherwise in accordance with our Terms of Use; and
(h) For any other purposes disclosed to you at the time we collect your information or pursuant to your consent.
3. SHARING OF INFORMATION
We value your trust and aim to be transparent about when and with whom we share the information we gather.
(a) Authorized third-party vendors and service providers: We may share your information with third-party vendors and service providers who assist us in specialized services, such as billing, payment processing, medical advice provision, telemedicine services management and hosting, customer service, email deployment, business analytics, marketing (including advertising, attribution, deep-linking, direct mail, mobile marketing, optimization, and retargeting), advertising, performance monitoring, hosting, and data processing. These third-party vendors and service providers are restricted from using your information for purposes other than those directly related to the services they provide to us. Patient information disclosed during medical consultations is not used for marketing purposes.
(b) Corporate affiliates: Your information may be shared with our affiliates.
(c) Legal purposes: Information may be disclosed to comply with subpoenas, court orders, legal proceedings, law enforcement requests, legal claims, government inquiries, or to safeguard and uphold the rights, interests, health, safety, and security of PY Healthcare, our affiliates, patients, users, or the public. In cases where we are legally obligated to disclose information about you to a third party, we will make reasonable efforts to notify you via email using the address in our records, unless such notification would contravene the law or unless you have not provided us with your email address.
(d) Business Transfers: As permitted by HIPAA, we may transfer your information in the event of transferring our organization's assets, a merger, consolidation, or in the unlikely scenario of bankruptcy, provided such transfer aligns with HIPAA regulations and the HIPAA Notice.
(e) Protected Health Information: Transfer of your PHI will adhere to the guidelines outlined in the HIPAA Notice and permitted by HIPAA regulations.
(f) With your consent or at your direction: Information may be shared for any other purposes disclosed to you at the time of collection or in accordance with your consent or direction.
If you choose to participate in public activities on third-party sites we link to, please be aware that any information you share there may be viewed, collected, or used by other users of those sites and forums. Exercise caution when disclosing personal information in these areas. We bear no responsibility for the information you choose to submit in public spaces.
4. SECURITY
We implement various measures to safeguard your PHI against loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction, in compliance with HIPAA regulations. Additionally, we employ measures specifically tailored to protect your other information from similar risks. Nonetheless, it's important to recognize that no data storage system or transmission over the Internet or any other public network can be guaranteed to be completely secure.
5. YOUR CHOICES
You have some control over how we handle certain aspects of your information. To request the deletion of your personal information, you can email us at [email protected]. Upon receipt of such a request, we will proceed with deleting your information unless retention is mandated by applicable laws or regulations.
You also have the option to decline or deactivate cookies by adjusting your web browser settings. As each web browser differs, please refer to the “Help” instructions provided by your specific web browser for guidance. Keep in mind that additional steps may be necessary to decline or deactivate Local Shared Objects and similar technologies. For instance, instructions for managing Local Shared Objects can be found on Adobe’s Setting Manager page. It's important to note that if you opt to decline, deactivate, or delete these technologies, certain functionalities of the Healthcare Services may become unavailable to you.
We do not share your PHI with third parties for their direct marketing purposes.
6. THIRD-PARTY LINKS AND CONTENT
1. Certain features of PY Healthcare may include links to content maintained by third parties over which we have no control. We do not assume responsibility for the privacy practices of these third parties, and their information handling practices are not governed by this Privacy Policy or any of our other policies.
2. We do not share or sell SMS opt-in or phone numbers for the purpose of SMS
7. LIMITING DATA COLLECTION AND DO NOT TRACK
(a) Opt-Out: You can opt out of interest-based advertising across various browsers and devices by visiting the websites of the Digital Advertising Alliance or Network Advertising Initiative opt-out programs. Additionally, you might have the option to opt out of interest-based advertising within the settings of mobile apps or your mobile device. However, please note that your opt-out preference may only apply to the specific browser or device you are currently using, so you should opt out on each browser and device individually if you wish to disable interest-based advertising across all of them. Even if you opt out, you may still receive ads, but they may be less relevant to your interests, and your experience on our PY Healthcare Services may be somewhat diminished.
(b) Do-Not-Track Signals and Similar Mechanisms: Some web browsers send “do-not-track” signals to websites. However, due to variations in how web browsers implement and activate this feature, it's not always clear whether users intend for these signals to be transmitted or if they are even aware of them. At present, we do not take specific actions in response to these signals.
8. CROSS-BORDER USE AND INTERNATIONAL LAWS/USERS
The PY Healthcare Services are exclusively intended for individuals within the United States, and the information provided on the website or the application is solely for such individuals. Nothing on the PY Healthcare Services should be construed as a solicitation to offer advisory services to any individual in any jurisdiction where such an offer or solicitation would be unlawful under the laws of that jurisdiction. You may not use the PY Healthcare Services or accept the Terms of Use if: (1) you are not of legal age to form a binding contract with us, either under the laws of Ohio or the laws of your jurisdiction of residence or usage of the PY Healthcare Services; or (2) you are prohibited from using the PY Healthcare Services under the laws of the United States or any other country, including your country of residence or usage of the PY Healthcare Services. If you opt to access the PY Healthcare Services from a location outside the United States, you do so at your own discretion and assume full responsibility for compliance with all relevant local laws. PY Healthcare makes no assertions regarding the suitability or availability of the PY Healthcare Services outside the United States. Accessing or utilizing the PY Healthcare Services from outside the United States may not be legal for certain individuals or in certain countries. Therefore, if you choose to access or use the PY Healthcare Services from outside the United States, you do so at your own risk and are accountable for adhering to all applicable laws and regulations in your jurisdiction.
We store information in the United States of America and adhere to the laws of the United States, which may not offer the same level of protection as the laws in your jurisdiction. By endeavoring to use the Telemedicine Services and furnishing us with information, you acknowledge and consent to the possibility of your information being transferred to and stored on servers situated outside your resident jurisdiction. Moreover, if you are a resident of a country other than the United States, you explicitly consent to the transfer of such data to the United States for processing by us in accordance with this Privacy Policy.
9. CHILDREN
We do not knowingly permit individuals under the age of 18 to create accounts granting access to our PY Healthcare Services.
10. CHANGES TO THE PY HEALTHCARE PRIVACY POLICY
We reserve the right to update this Privacy Policy for PY Healthcare periodically at our sole discretion. In the event of an update, we will modify the "Effective Date" indicated above and publish the revised Privacy Policy for PY Healthcare. We advise you to review the Privacy Policy for PY Healthcare whenever you visit the PY Healthcare Services to remain informed about our privacy practices.
11. QUESTIONS ?
If you have any questions about this Privacy Policy or our practices, please email [email protected].