“Company” or the terms “we” or “us” or similar terms refer to Provata Health. “You” or “your” or similar terms refer to you as a user of our Services.
Personal Information – In General.
Protected Health Information.
We collect personal information you choose to provide, e.g., through registrations, applications, use of the Services, surveys, and in connection with your inquiries, from the time that you initially access our Sites or use our Services. The information we gather from customers enables us to personalize and improve our Services.
From time to time, we may use or augment the personal information we have about you with information obtained from third parties. For example, we may use such third party information to confirm contact or financial information, to verify eligibility, or to better understand your interests by associating demographic information with the information you have provided.
We collect the following types of information from our customers:
Personal Information You Provide to Us.
We receive and store any information you enter on our Sites or provide to us in several ways. Personal Information that we collect may include things like your full name, mobile phone number, your email address, home and business postal addresses, IP address, browser information, username, password, certain health information (e.g., weight, insurance information), and any other information or data that you provide when using our Sites and/or our Services. You can choose not to provide us with certain information, but that may result in our inability to provide you access to many of our special features. Provata’s goal is to use the Personal Information you provide for such purposes as answering questions, shipping goods ordered by you, conduting quality assessment and improvement activities, and communicating with you about the Company’s products and services, including updates and new features.
PLEASE NOTE: By using the Services, you consent to and authorize Provata to disclose your eligibility for and participation in the Services (with respect those Services that contain clinical enrollment criteria in order to participate) to the other users of the Sites and Services. The users, including but not limited to Site administrators and your fellow team members, will have access to a range of Personal Information such as your name and picture and progress toward completion of program sessions.
We take great efforts in protecting your privacy, however, we cannot control, and expressly disclaim any responsibility for, whether or how users will subsequently use or disclose posted or previously disclosed information. If you do not consent to the disclosure of this information, you should not access or use the Sites or the Services. The Services include the ability for users to share Personal Information, including information regarding your medical condition. Any information you choose to provide or upload to the team or community wall, including Personal Information about your medical condition, will be visible to your team, as well as other Site users. As your information will be viewable to the other users of the Sites, you should provide only the information you feel comfortable disclosing. There may be an opportunity to speak on the phone or via video chat in a group conference call. Participation in such opportunities is not mandatory, but should you choose to participate, you should share only as much information as you feel comfortable sharing in these additional forums.
Personal Information Collected Automatically.
We receive and store certain types of information whenever you interact with our Sites and / or use our Services. We automatically receive and record information on our server logs from your browser, including your IP address, and the page you requested. In addition, we may use personal identifiers to recognize you when you arrive at the Site via an external link, e.g., such as a link appearing on a third party site or in a Provata-generated email presented to you. See also our What About Cookies? section below.
We will also use your information to provide customer service and support. By communicating with our customer service regarding your account or personal information, you authorize customer service access to your account and information only for the purpose of resolving your inquiry. In addition, your account information may be accessible to designated Provata personnel to conduct quality assessment and improvement activities to ensure operations of the Services and Sites are functioning correctly (“Internal Quality Control Activities”). You may opt out of potential inclusion in Quality Control Activities by request to [email protected]
Generally, our Services automatically collect usage information, such as the numbers and frequency of visitors to our Sites and its components. We only use this data in aggregate form, that is, as a statistical measure, and not in a manner that would permit us to identify you personally (“De-identified Information”). This type of aggregate data enables us to figure out how often users or customers use parts of the Sites or Services so that we can make the Sites and Services as appealing to as many users and customers as possible and improve our Services. We may provide this de-identified, aggregate data to our partners to identify how our customers, collectively, use our Sites or Services. Again, we never disclose aggregate information to a partner in a manner that would identify you personally.
You may set your browser to refuse or disable these data collection methods, but doing so may change your experience with the Sites or the Services, diminish certain aspects of the Sites’ functionality or render certain features of the Sites or the Services inoperable. The Sites may not recognize or respond to “do not track” technologies employed by your browser.
We often receive a confirmation when you open an email from us if your computer supports this type of program. We use this confirmation to help us make emails more interesting and helpful. We also compare our customer list to lists received from other companies in an effort to avoid sending unnecessary messages to our customers. When you receive e-mail from us, you can opt out of receiving further e-mails by following the included instructions to unsubscribe. However, by opting out of further email communications after you enroll in the Services, you may limit program reminders and other valuable program content and components.
What About Cookies?
Personal Information regarding our users is an integral part of our business. We will not rent, sell or share your Personal Information with other people or non-affiliated companies except to provide the Services, when we otherwise have your permission, or under the following circumstances:
Discussion Walls: We may make available your Personal Information through the Sites and/or the Services (for example, team walls and community walls) (each, a “Wall”) to which you post information and materials. Some of these Walls are described more specifically below. Please note that any information, text, and images posted or disclosed by the user on or through such Walls may be visible to the user’s team, Site administrators, visitors to the Sites, and other users of the Sites. Specifically, Personal Information such as the picture you’ve uploaded and your screen name, may be available for other users to view when you make a posting to such Walls. Information regarding your activities in such Services may also be available for view by other users (for example, other users may be able to view a list of all postings you have made in all available Walls). Any postings you have made to a Wall may also be available for view later by users of the Sites by scrolling to older posts on the Wall. We urge you to exercise discretion and caution when deciding to disclose your Personal Information, such as your illness, or any other information, through a Wall or otherwise through the Site.
Please remember that information posted to Walls becomes public information. Use caution when posting. Further, if a comment you make on the discussion board or in the chat room contains Personal Information, we cannot control how the Personal Information will be used or disclosed by the other users of the discussion board or chat room. We urge you to exercise discretion and caution when deciding to disclose your Personal Information, or any other information, in any comment and/or message, and to be careful about the people to whom you send such comments and/or messages.
Messaging Services: We may provide functionality to permit you to send messages, including instant messages, to other users through the Sites. Please note that if you use such functionality to send such a message to another user, your screen name will be disclosed to that user, as well as Site administrators. Further, if a message you send using such functionality contains Personal Information, we cannot control how the Personal Information will be used or disclosed by the recipient of your message. We urge you to exercise discretion and caution when deciding to disclose your Personal Information, or any other information, in any message, and to be careful about the people to whom you send such messages.
IN THE CASE OF YOUR USE OF WALLS, CHAT ROOMS AND MESSAGING SERVICES, AS DESCRIBED ABOVE, WE ARE NOT RESPONSIBLE FOR THE USE BY OTHERS OF ANY INFORMATION, INCLDUING PERSONAL INFORMATION, THAT IS DISCLOSED BY YOU OR ON YOUR BEHALF BY YOUR SYSTEM IN SUCH FORUMS, DISCUSSION BOARDS, CHAT ROOMS AND MESSAGING SERVICES. BY DISCLOSING ANY OF YOUR INFORMATION VIA FORUMS, DISCUSSION BOARDS, CHAT ROOMS AND MESSAGING SERVICES, YOU ACKNOWLEDGE AND ACCEPT ANY RISK AND DAMAGE ARISING FROM DISCLOSURE OF SUCH INFORMATION.
User Profiles: We may provide functionality to permit you to create a user profile page in which you may provide information about yourself. Users’ email addresses will not be directly revealed to other users by us, except when the user is “connected” to another user via a shared group membership. Please note that any User Submissions you make, including Personal Information, on or through your profile page may be available for other users, the Company, administration, moderators, and other staff. Information you provide on your personal “Vitals” page will not be available to other users.
Affiliated Businesses We Do Not Control: In order to provide you with the optimal user experience, we anticipate that we may become affiliated and work closely with a variety of third party businesses. In certain situations, these businesses may sell products or services to you through the Sites. In other situations, we may provide services, or sell products, jointly with affiliated businesses. You should be able to recognize when an affiliated business is associated with your transactions, and throughout the course of the transactions, we will share your Personal Information that is related to such transactions with that affiliated business.
Agents: We employ other companies and people to perform tasks on our behalf and need to share your information with them to provide products and/or services to you. Without specific authorization and/or consent, we limit the rights of our agents to use Personal Information we share with them to that which is minimally necessary to assist us. You hereby consent to our sharing of Personal Information for the above purposes.
Sponsors and Third Party Administrators; As Required by Law: In limited circumstances, we may disclose certain of your Personal Information (e.g., reports containing data related to enrollment, engagement, retention, and outcomes) to your sponsor or your sponsor’s third party administrators (e.g., incentives vendors, wellness administrators, etc.) for treatment, payment, or healthcare operations purposes and for other purposes permitted or required by law, as more fully described in our HIPAA Notice.
Protection of the Company and Others: We may release Personal Information when we believe in good faith that release is necessary to comply with the law; enforce or apply our conditions of use and other agreements; or protect the rights, property, or safety of the Company, our employees, our users, or others. This includes exchanging information with other companies and organizations for fraud protection, detection or suppression, and credit risk reduction. If necessary, we will make all legally required disclosures of any breach of the security, confidentiality, or integrity of your Personal Information, including, without limitation, breaches of your unencrypted, electronically stored, “personal information” or “medical information” (as defined in applicable state statutes on security breach notification). To the extent permitted by applicable laws, we will make such disclosures to you via email or conspicuous posting on your private profile on the Sites in the most expedient time possible and without unreasonable delay, insofar as consistent with (a) the legitimate needs of law enforcement, or (b) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.
With Your Consent: Except as set forth above, you will be notified when your Personal Information may be shared with third parties, and will be able to control the sharing of this information.
De-identified Information: We may create De-Identified Information from the information that you share with us and use such De-identified Information without restriction. We may, for instance, share De-identified Information with the sponsors paying for your participation in the Services (e.g., reports containing data related to enrollment, engagement, retention, and outcomes to evidence overall program success metrics), and with third party administrators working with the sponsors to administer certain services to you (e.g., incentives vendors, wellness administrators, etc.). Again, we never disclose aggregate information in a manner that would identify you personally.
We employ industry standard administrative, physical, and technical measures designed to safeguard and protect information under our control from unauthorized access, use, and disclosure. In addition, when we collect, maintain, access, use, or disclose your Personal Information, we will do so using systems and processes consistent with information privacy and security requirements under applicable federal and state laws, including, without limitation, the Health Insurance Portability and Accountability Act (“HIPAA”).
Furthermore, your individual user account is protected by a password for your privacy and security. To ensure that there is no unauthorized access to your account and Personal Information, we suggest that you safeguard your password appropriately and limit access to your computer and browser by signing off after you have finished accessing your account.
You can access certain information about you for the purpose of viewing, and in certain situations, updating that information. This list may change as the Sites and Services change.
In order to help us maintain and ensure that your information is accurate and up to date, please update your information if it changes or inform us promptly at [email protected] so that we make the appropriate changes.
As stated previously, you can always opt not to disclose information, even though it may be needed to take advantage of certain features of the Sites and the Services.
You are able to add or update certain information on pages, such as those listed in the “What Personal Information Can I Access And Correct” section, above. When you update information, however, we often maintain a copy of the unrevised information in our records.
If you would like us to remove your records from our system, you may request deletion of your account with us by sending e-mail to [email protected] Please note that some information may remain in our records after deletion of your account, including any information or records we are legally obligated to retain. We will process your request within a reasonable time, but please note that you may receive additional offers as we process your request.
The Services are not directed to children. We do not knowingly allow or solicit anyone under the age of 18 to participate independently in any of the Services. We do not knowingly collect Personal Information from children. If a parent or guardian becomes aware that his or her child has provided us with Personal Information, please contact us. If we become aware that a user of the Services is under the age of 18 and has provided us with Personal Information without verifiable parental consent, we will delete such Personal Information from our files.
If you have any questions or concerns regarding privacy on our Sites, please send us a detailed message at [email protected] or at the address below. We will make every effort to resolve your concerns. Provata Health, 6 Centerpointe Drive, Suite 450, Lake Oswego, OR 97035.
Effective Date: October 3, 2016