Privacy Policy
Jan 3, 2024
Privacy Policy
Effective Date: February 1, 2024
Introduction
This Privacy Policy ("Privacy Policy") describes the data protection practices of RevDoc, LLC (“RevDoc”) including when you visit our website that links to this Privacy Policy (www.revdoc.com); use any affiliated mobile application (the "App") that link to or contain this Privacy Policy; or otherwise provide data to RevDoc. We refer to the App, Website, and other services provided by RevDoc together in this Privacy Policy as the "Services." This Privacy Policy is incorporated into our Terms of Use. All capitalized terms used in this Privacy Policy but not defined herein have the meanings assigned to them in the Terms of Use.
PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.
The Information We Collect and the Sources of Such Information
We obtain information about you through the means discussed below when you use the Services. Please note that we need certain types of information so that we can provide the Services to you. If you do not provide us with such information, or ask us to delete it, you may no longer be able to access or use part or all of our Services.
1. Information You Provide to Us
We collect a variety of information that you provide directly to us. For example, we collect information from you through:
Account and product registration and administration of your account
Processing your orders and requests for services, including orders and requests made by your provider in connection with your care
Questions, communications, or feedback you submit to us via forms or email
Your participation in research, surveys and contests
Requests for customer support and technical assistance
Uploads to the Services
The specific types of information we collect will depend upon the Services you use, how you use them, and the information you choose to provide. The types of data we collect directly from you includes:
Identifiers, such as name, address, telephone number, date of birth, and email address
Billing information, such as shipping address, credit or debit card number, verification number, and expiration date, collected by our payment processors on our behalf
Commercial information, such as information about purchases or other transactions with us, including information about your healthcare provider, if applicable
Customer service information, such as information about your customer service and maintenance interactions with us
Demographic information such as your gender, age, marital status, and similar information in connection with the Services
Information you provide in the App, such as videos (and in some cases the recordings of such videos), photos, and signatures
General geolocation information, such as city, state, or zip code.
Information about others, such as if you provide a family or friend's email address or contact information to allow access to your information or name them as an emergency contact
Sensitive Personal Information:
a) Health information, such as information about your symptoms, medical history, lifestyle, prescriptions, mental health, drug or alcohol use, genetics, treatment options, and relevant physical characteristics (e.g., your height and weight) as well as medical photos you upload, lab results
b) Information about your sex life and sexual orientation
c) Log-in credentials, if you create an account
d) Sensitive demographic data, such as race and ethnicity
e) Identity verification information (e.g. driver's license or other government-issued ID card or number), and your signature (if required)
f) Contents of communications made via the Services
Any other information you choose to directly provide to us in connection with your use of the Services.
2. Information We Collect Through Automated Means
We collect certain information about your use of the Services and the devices you use to access the Services, as described in this Section (“usage information”). As discussed further below, we and our service providers (which are third party companies that work on our behalf), may use a variety of technologies, including cookies, SDKs, and similar tools, to assist in collecting this information. In some instances, such information may be considered sensitive personal information.
Our Website. When you use our Website, we collect and analyze information such as your IP address, browser types, browser language, operating system, the state or country from which you accessed the Services, software and hardware attributes (including device IDs) referring and exit pages and URLs, platform type, the number of clicks, files you download, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the terms you use in searches on our sites, the date and time you used the Services, error logs, and other similar information.
Our App. When you use our App, we automatically receive certain information about the mobile phone, tablet, or computer used to access the Apps, including a mobile device identifier, advertising identifiers (in accordance with your device settings), IP address, operating system, version, Internet service provider, browser type, domain name and other similar information, whether and when you update the App, date and time of use, and how you use the App, including time spent in different portions of the App.
Location Information. When you use the Services, we and our service providers may automatically collect general location information (e.g., IP address, city/state and or postal code associated with an IP address) from your computer or mobile device. This information allows us to enable access to content that varies based on a user's general location.
Our Use of Cookies and Similar Online Tools. To collect the information discussed in this Section, we and our service providers use web server logs, cookies, tags, SDKs, tracking pixels, and other similar tracking technologies. We use these technologies to offer you a more tailored experience.
1) A web server log is a file where website activity is stored.
2) An SDK is a set of tools and/or code that we embed in our App and software to allow third parties to collect information about how users interact with the Services.
3) A cookie is a small text file that is placed on your computer or mobile device when you visit a site, that enables us to: (i) recognize your computer/device; (ii) store your preferences and settings; (iii) understand the parts of the Services you have visited and used; (iv), enhance your user experience by delivering and measuring the effectiveness of content and advertising tailored to your interests; (v) perform searches and analytics; and (vi) assist with security and administrative functions.
4) Tracking pixels (sometimes referred to as web beacons or clear GIFs) are tiny electronic tags with a unique identifier embedded in websites, online ads and/or email that are designed to: (1) collect usage information like ad impressions or clicks and email open rates; (2) measure popularity of the Services and associated advertising; and (3) access user cookies.
As we adopt additional technologies, we may also gather information through other methods.
Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the "Help" section of your browser for more information. Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of the Services.
3. Information We Collect From Social Media and Other Content Platforms
When you "like" or "follow" us on Facebook, Instagram, Twitter, or other social media platforms, we may collect some information from you including your name, email address, and any comments or content you post relevant to us. We also collect your information if you sign up for one of our promotions or submit information to us through social media platforms.
If you access the Services through a third-party connection or log-in (e.g., through a social network or third-party authentication tool), you may allow us to have access to and store certain information from such third parties depending on your settings on such services. If you do not wish to have this information disclosed, do not use these connections to access the Services. For a description of how these third parties handle your information, please refer to their privacy policies and terms of use, which may permit you to modify your privacy settings.
Similarly, if you choose to connect your App to third-party platforms or tools, or with other apps on your device (e.g., health or fitness monitoring platforms or tools, or your contacts, photos, or calendar), such third parties and tools may allow us to have access to and store additional information as it relates to your use of the Services (e.g., to integrate your fitness data within the Services or access your calendar to help you schedule an appointment). If you do not wish to have this information disclosed, do not initiate these connections.
4. Information We Receive From Other Sources
We work closely with third parties (including, for example, third party intermediaries, such as physicians, medical professionals, and pharmacies to provide you with the Services, as well as with advertising networks, analytics providers, marketing partners, and search information providers). Such third parties will sometimes provide us with additional information about you.
Purposes for How We Use Your Information
In connection with providing you with the Services, we may use your information for the following business purposes:
Provide and Manage the Services:
Carry out, improve, and manage the Services and, as applicable, facilitate the provision of health care services to you by physicians or other health care providers and ensure that the physicians or health care providers have the services and support necessary for health care operations.
Provide you with technical support and customer service, and troubleshoot any technical issues or errors.
Communicate with you about the Services, your use of the Services, or your inquiries related to the Services and send you communications on behalf of physicians or other health care providers utilizing the Services to meet your needs.
Verify your identity and administer your account, including processing your payments, fulfilling your orders, and verifying the authenticity of your government-issued identification photo.
Analyze and Improve the Services:
Engage in internal research to understand the effectiveness of our Services, improve our Services, and better understand our user base. If we publish or provide the results of this research to others, such research will be presented in a de-identified and aggregate form such that individual users cannot be identified.
Ensure that content from our Services is presented in the most effective manner for you and for your computer or device, allow you to participate in interactive features of our Services (when you choose to do so), and as part of our efforts to keep our Services safe and secure.
Help us better understand your interests and needs, such as by engaging in analysis and research regarding use of the Services.
Advertising and Marketing:
Communicate with you (in accordance with applicable legal requirements) by email, postal mail, or phone about surveys, promotions, special events or our products and Services and those of our third-party partners.
Provide you (in accordance with applicable legal requirements) with more relevant advertisements and personalized content, and measure or understand the effectiveness of advertising and content we serve to you and others, and to deliver and customize relevant advertising and content to you.
Legal Purposes:
Comply in good faith with any procedures, laws, and regulations which apply to us where it is necessary for our legitimate interests or the legitimate interests of others.
Establish, exercise, or defend our legal rights where it is necessary for our legitimate interests or the legitimate interests of others, such as protecting against malicious, fraudulent, or illegal activity.
Combined Information. For the purposes discussed in this Privacy Policy, we may combine the information that we collect through the Services with information that we receive from other sources, both online and offline, and use and disclose such combined information in accordance with this Privacy Policy.
Aggregate/De-Identified Data. We may aggregate and/or de-identify any information collected through the Services so that such information can no longer be linked to you or your device ("Aggregate/De-Identified Information"). We may use Aggregate/De-Identified Information for any purpose, including for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, promotional partners, and sponsors.
Online Analytics and Advertising
1. Online Analytics
We may use third-party web analytics services (such as those of Google Analytics -including Google Signals, Google User-ID, and other Google Analytics features- Metabase, Amplitude, and MixPanel) on our Services to collect and analyze usage information through cookies and similar tools; engage in auditing, research, or reporting; assist with fraud prevention; try to locate the same unique users across multiple browsers or devices to better tailor services and features; and provide certain features to you. If you have a Google account with personalized advertising enabled, through Google Signals, Google will also be able to gather for us analytics and engagement information from across the various devices you use to access the Services. To prevent Google from using your information for analytics (including cross-device tracking for personalization purposes), you may install the Google Analytics Opt-out Browser Add-on. And to opt out of Google Signals, open your "Settings" app, locate and tap "Google," select "Ads," and turn ON "Opt out of Ads Personalization." You may also be able to disable cross-device tracking through your Android or Apple device-based settings.
If you receive email from us, we may use certain analytics tools, such as clear GIFs to capture data such as when you open our message or click on any links or banners our email contains. This data allows us to gauge the effectiveness of our communications and marketing campaigns.
2. Online Advertising
The Services may integrate third-party advertising technologies (e.g., ad networks and ad servers such as Facebook, Google Ad Words, TikTok, Criteo and others) that use cookies, pixels, and other technologies to deliver relevant content and advertising for RevDoc and research on the Services, as well as on other websites you visit and other applications you use. The ads may be based on various factors such as the content of the page you are visiting, information you enter such as your searches, demographic data, and other information we collect from you. These ads may be based on your current activity or your activity over time and across other websites and online services.
We sometimes provide our customer information (such as email addresses) to service providers, who may "match" this information in de-identified form to cookies (or mobile ad identifiers) and other proprietary IDs, in order to provide you with more relevant ads when you visit other websites and mobile applications. We may also disclose customer information such as your email address with third-party advertising networks that use such information to better target advertising to you regarding the Services, as well as other products and services, as you browse the internet.
If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative's Consumer Opt-Out link, the Digital Advertising Alliance's Consumer Opt-Out link, or Your Online Choices to opt-out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for display advertising or customize Google display network ads, visit the Google Ads Settings page. To update your advertising preferences with Facebook go to www.facebook.com/adpreferences. To update your advertising preferences with TikTok go to https://support.tiktok.com/en/account-and-privacy/personalized-ads-and-data/. We do not control these opt-out links, whether these opt-out links change over time, or whether any particular company chooses to participate in the industry opt-out programs listed above. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms.
For additional ways to opt out of online advertising activities, please see the "Your Rights and Choices" section below.
Please note that if you exercise the opt out choices above, you will still see advertising when you use the Services, but it will not be tailored to you based on your online behavior over time.
3. Mobile Advertising
When using our Apps or others, you may also receive tailored in-application advertisements. We may use third-party service providers to deliver advertisements on mobile applications or for mobile application analytics. Each operating system, iOS for Apple phones, Android for Android devices, and Windows for Microsoft devices provides its own instructions on how to prevent the delivery of tailored in-application advertisements. We do not control how the applicable platform operator allows you to control receiving personalized in-application advertisements; thus, you should contact the platform provider for further details on opting out of tailored in-application advertisements. You may review the support materials and/or the device settings for the respective operating systems to opt-out of tailored in-app advertisements.
4. Notice Concerning Do Not Track
Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our Website for third party purposes, and that is why we provide the variety of opt-out mechanisms listed above. However, we do not currently recognize or respond to browser initiated DNT signals. To learn more about “Do Not Track”, go to https://allaboutdnt.com/. Please note that “Do Not Track” is a distinct privacy mechanism from the browser-based opt out signals referenced below in the "Your Rights and Choices" section, which RevDoc does honor in accordance with applicable law.
How We Disclose Your Information
We may disclose your information for our business purposes in the following ways:
Affiliates and Subsidiaries. We may disclose information we collect within any RevDoc member or group (i.e., our subsidiaries and affiliates, including our holding company and its subsidiaries) to deliver products and services to you, ensure a consistent level of service across our services, and enhance our services, and your customer experience.
Health Care Providers and Services. We disclose your information to health care providers: (i) to schedule and fulfill appointments and provide health care services as part of the Services, (ii) to whom you send messages through our Services, and (iii) for other treatment, payment or health care operations purposes, including pharmacy services, upon your request.
Service Providers. We provide access to or disclose your information to select third parties who use the information to perform services on our behalf. They provide a variety of services to us, including billing, content/service enhancements, partner labs, sales, marketing, advertising, analytics, research, customer service, shipping and fulfillment, data hosting and storage, IT and security, fraud prevention, payment processing, and auditing, consulting, and legal services. These entities may also include health care organizations, pharmacies, and other third parties we use to support our business or in connection with the administration and support of the Services.
Advertising Networks. Please see the "Online Advertising" section above for details about how we disclose information to advertising partners.
Joint Product/Marketing Partners. These are entities that jointly offer or provide services or products with us. These entities collect and use data in accordance with their own terms and privacy policies.
Protection of RevDoc and Others. By using the Services, you acknowledge and agree that we may access, retain and disclose the information we collect and maintain about you if required to do so by law or in a good faith belief that such access, retention or disclosure is reasonably necessary to: (a) comply with legal process (e.g. a subpoena or court order); (b) enforce our Terms of Use, this Privacy Policy, or other contracts with you, including investigation of potential violations thereof; (c) respond to claims that any content violates the rights of third parties; (d) respond to your requests for customer service; and/or (e) protect the rights, property or personal safety of RevDoc, its agents and affiliates, its users and/or the public. This includes exchanging information with other companies and organizations for fraud protection, and spam/malware prevention, and similar purposes.
Business Transfers. As we continue to develop our business, we may buy, merge, or partner with other companies. In such transactions, (including in contemplation of such transactions) user information may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third-party, customer information (including your email address) would likely be one of the transferred business assets. If such a transfer is subject to additional mandatory restrictions under applicable laws, we will comply with such restrictions.
Public Forums/User Interactions. Certain features of our Services make it possible for you to disclose comments publicly or with other users. Any information that you post publicly is not confidential, and we may use it for any purpose (including in testimonials or other marketing materials). For example, if you submit a review on our Website, we may display your review (along with the name provided, if any) on other RevDoc Websites and on third-party websites. Any information you post openly in these ways will be available to the users you disclosed it to and potentially the public at large, and may be accessible through third-party search engines. Accordingly, please take care when using these features. We are not responsible for how others use the information about you that you disclose to them through the Services.
Consent. We may also disclose your information in other ways you direct us to and when we have your consent.
Aggregate/De-Identified Information. We reserve the right to create Aggregate/De-Identified Data from the information we collect through the Services and our disclosure of such Aggregate/De-Identified Data is in our discretion.
Your Rights and Choices
Depending on the state in which you live, you may have legal rights with respect to your information. The types of requests you may be able to make are as follows:
Information about the categories of information we process, our uses of your information, our sources of such information and our disclosure of such information.
Access to the information that RevDoc has collected about you and a copy of certain information in a portable format.
Correct certain information we have about you.
Deletion of the information we have about you.
You may make a request by emailing us at infosecurity@revdoc.com. Before we disclose, correct or delete information in response to any of these requests, we will need to verify your identity. Depending on the nature of your request, we may contact you for further information if appropriate to verify your identity. Note, however, that RevDoc will never ask you for sensitive personal or financial information when verifying your identity, and no RevDoc employee will ask you to tell them your password. If you are an authorized agent submitting a request on their behalf, we may require proof of the written authorization you have received before processing the request.
Certain information may be exempt from such requests under applicable law. For example, if the request prevents us from completing a transaction you initiated, interferes with our legal obligations, affects legal matters including a RevDoc user’s rights to data contained in their account, we cannot verify your identity, or compliance with your request is not legally required and would involve disproportionate cost or effort. But in any event we will respond to your request within a reasonable timeframe and provide you with an explanation. If we deny your request in whole or in part, the laws in your jurisdiction may provide you with rights to appeal our response. If applicable, we will provide you with information about your appeal options in our response to you.
RevDoc will not discriminate against anyone that makes a rights request, but in some cases, we will not be able to provide our Services to you without that information.
Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. We will provide information about how to exercise that right in our response denying the request. You also may have the right to lodge a complaint with a supervisory authority.
Opt out of sale of and disclosure of information for online targeted advertising. As explained in the Online Analytics and Advertising section above, and subject to applicable laws as discussed further below, RevDoc allows third parties to receive certain information such as cookies, IP address, device identifiers, hashed contact information, browsing behavior, and/or other activity to enable the delivery of targeted advertising to you. These activities may qualify as the “sale” of personal information or "sharing" or processing of personal information for targeted advertising, as defined in applicable law.
Residents of certain states may opt out of the sale of personal information or sharing or processing of their personal information through cookies, pixels, and similar online tools for targeted advertising by e-mailing us at optout@revdoc.com. If you have a legally recognized browser-based opt out preference signal turned on via your device browser (such as Global Privacy Control), we recognize such preference in accordance and to the extent required by applicable law. Note, if you use a cookie blocker such as Ghostery, it may block visibility of this tool. You can also use an authorized agent to submit a request to opt-out on your behalf if you provide the agent written permission to do so. We may require the agent to submit proof that you have authorized them to submit an opt-out request.
In addition to advertising activities using cookies and pixels, we may also share user email addresses with advertising partners to provide you with more relevant advertising. To opt out of this activity, please e-mail us at optout@revdoc.com.
If you opt out, you may still receive advertising, it just may not be tailored to your interests. Please note, if you use different browsers, devices, or services you will need opt out on each browser or device where you want your choice to apply.
Sensitive Data Opt Out/Opt-In Right. To provide you with more relevant online advertising regarding RevDoc Services, as described immediately above, we may use information about the treatments you have requested or received and similar information. This may include the processing of information that is considered "sensitive data" or "sensitive personal information" under applicable laws, such as health information and information about sex life and sexual orientation (collectively referred to herein as "sensitive data"). You have a right to limit our use of sensitive data for purposes other than to provide the services or goods you request or as otherwise permitted by law, including our and our partner's processing of sensitive data for tailored advertising purposes. To opt-out from such additional purposes, please e-mail us at optout@revdoc.com or use the Global Privacy Control described above. Depending on your jurisdiction, we may ask for your consent before using your sensitive data. If you consent and subsequently change your mind, you can opt out as described in the "Your Privacy Choices" section above.
Marketing preferences
You may instruct us not to use your contact information to contact you by email, postal mail, or phone regarding products, services, promotions and special events that might appeal to your interests by contacting us using the information below. In commercial email messages, you can also opt out by following the instructions located at the bottom of such emails. Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain operational emails, such as those reflecting our relationship or transactions with you.
Third Party Services and Notice About Health Information
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices, including data privacy and security process and standards of any third parties, including physicians and other health care providers using the Services, the manufacturer of your mobile device and other IT hardware and software, and any other third party mobile application, website, or service to which our Services may contain a link. These third parties may at times gather information from or about you. We have no control over the privacy practices of these third parties. The collection, use, and disclosure of your information will be subject to the privacy policies of the third-party websites or services, and not this Privacy Policy. We urge you to read the privacy and security policies of these third parties.
How We Protect Your Information
RevDoc takes a variety of technical and organizational security measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. However, no method of transmission over the Internet, and no means of electronic or physical storage, is absolutely secure. As such, you acknowledge and accept that we cannot guarantee the security of your information transmitted to, through, or on our Services or via the Internet and that any such transmission is at your own risk. Where we have given you (or where you have chosen) a password that enables you to access the Services, you are responsible for keeping this password confidential. We ask you not to provide your password to anyone. The information you disclose in public areas may be viewed by anyone.
Privacy Information for California Residents
If you are a California resident, the California Consumer Privacy Act (“CCPA”) requires us to provide you with the following additional information about: (1) the purpose for which we use each category of “personal information” and “sensitive personal information” (as defined in the CCPA) we collect; and (2) the categories of third parties to which we (a) disclose such information for a business purpose, (b) “share” information for “cross-context behavioral advertising,” and/or (c) “sell” such information. Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites, and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. We “share” information to provide more relevant and tailored advertising to you regarding our Services. Our use of third-party analytics services and online advertising services may result in the sharing of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “sale” under the CCPA. Please see the following chart for the rest of this information:
For more detailed information about how we use and disclose your personal information, please see the "Purposes for How We Use Your Information" and "How We Share and Disclose Your Information" sections of this Policy above. Please note that the ways we use your information may also differ depending on applicable legal obligations, such as where you opt out of a particular use, we will no longer use your information for that purpose.
Your Choices Regarding “Sharing” and “Selling”: As described more in the "Your Rights and Controls" section of our Privacy Policy, you have the right to opt out of RevDoc’s sale/sharing of your personal information for purposes of online advertising and related purposes through the use of cookies, pixels, and similar online tools. Please note that we will also honor legally required browser-based opt out signals (such as the Global Privacy Control) in accordance with our legal obligations.
In addition to advertising activities using cookies and pixels, we may also share user email addresses with advertising partners to provide you with more relevant advertising. To opt out of this activity, send an e-mail to infosecurity@revdoc.com indicating that you opt out of the “sale” and/or “sharing” of your information via online cookies, pixels, and similar tools.
We do not knowingly “sell” or “share” the personal information of children under 16.
Other CCPA Rights.
Incentive Programs. The Services may offer opportunities to receive certain services or benefits such as gift cards, discounts, or free services, which may require the provision of Personal Information. Such opportunities could be considered a financial incentive under applicable law (each, an “Incentive Program”). When you participate in an Incentive Program, you agree to the terms of that Incentive Program, and may revoke your participation depending on the Incentive Program (e.g., by opting out of emails). To the extent we can determine the value of your information, we consider the value of providing you with a more personalized experience as well as the expenses we incur in providing Incentive Programs that are reasonably related to the costs associated with offering the Incentives.
Right to Limit. The CCPA also allows you to limit the use or disclosure of your “sensitive personal information” (as defined in the CCPA) if your sensitive personal information is used for certain purposes. You have a right to limit our use of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law (for example, you have the right to opt out of our use of information about the RevDoc treatments you have received to opt out of receiving targeted online advertisements about similar products and services that might be of interest to you). To opt-out from such additional purposes, please email us at optout@revdoc.com or use the Global Privacy Control described in the “Your Rights and Choices” section of this statement.
Other information rights. Please see the “Your Rights and Choices” section of our Privacy Policy above for information about the additional rights you have with respect to your personal information under California law and how to exercise them.
Retention of Your Personal Information. Please see the “Retention of Your Information” section below.
Shine the Light Disclosure. The California "Shine the Light" law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we disclose certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not disclose your personal information to third parties for their own direct marketing purposes.
Privacy Information for Nevada Residents
Under Nevada law, certain Nevada consumers may opt out of the sale of "personally identifiable information" for monetary consideration (as such terms are defined under Nevada law) to a person for that person to license or sell such information to additional persons. We do not engage in such activity; however, if you are a Nevada resident who has purchased services from us, you may submit a request to opt out of any potential future sales under Nevada law by emailing us at optout@revdoc.com. Please note we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.
Retention of Your Information
We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it, the nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, and our legitimate interests, and/or as required to comply with applicable laws.
Children
We do not knowingly collect personal data from anyone under the age of 13 through our Services, and our Services are not directed to children under the age of 13. If we discover we have received any “personal information” (as defined under the Children’s Online Privacy Protection Act) from a child under the age of 13 in violation of this Privacy Policy, we will take reasonable steps to delete that information as quickly as possible.
Revisions to Our Privacy Policy
We reserve the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy accessible through the Services, so you should review it periodically. The date this Privacy Policy was last revised is identified at the top of the document. You are responsible for periodically monitoring and reviewing any updates to the Privacy Policy. If we make a material change to the Privacy Policy, we will provide you with appropriate notice in accordance with legal requirements. Your continued use of our App or Website after such amendments (and notice, where applicable) will be deemed your acknowledgment of these changes to this Privacy Policy.
Contacting Us
If you have any questions about this Privacy Policy or RevDoc's privacy practices, please contact us at:
RevDoc, LLC P.O. Box 18131 Tampa, FL 33679 or infosecurity@revdoc.com
HEALTH CARE PROVIDERS’ NOTICE OF PRIVACY PRACTICES
Effective Date: February 1, 2024
Health Care Providers have agreed to the following notice of privacy practices.
This notice describes how medical information about you may be used and disclosed by or on behalf of Health Care Providers and how you can get access to this information. Please review it carefully.
Your Rights
You have the right to:
· Get a copy of your paper or electronic medical record
· Correct your paper or electronic medical record
· Request confidential communication
· Ask the Health Care Provider to limit the information the Provider shares
· Get a list of those with whom the Health Care Provider has shared your information
· Get a copy of this privacy notice
· Choose someone to act for you
· File a complaint if you believe your privacy rights have been violated
Your Choices
You have some choices in the way that the Health Care Provider uses and shares information as the Health Care Provider:
· Tells family and friends about your condition
· Provides disaster relief
· Includes you in a hospital directory
· Provides mental health care
· Markets the Health Care Provider’s services and sells your information
· Raises funds
The Health Care Provider’s Uses and Disclosures
The Health Care Provider may use and share your information as the Health Care Provider:
· Treats you
· Runs its organization
· Bills for the health care services the Health Care Provider performs for you
· Helps with public health and safety issues
· Does research
· Complies with the law
· Responds to organ and tissue donation requests
· Works with a medical examiner or funeral director
· Addresses workers’ compensation, law enforcement, and other government requests
· Responds to lawsuits and legal actions
Your Rights
When it comes to your health information held by or on behalf of your Health Care Provider, you have certain rights. This section explains your rights and some of the Health Care Provider’s responsibilities to help you.
Get an electronic or paper copy of your medical record
· You can ask to see or get an electronic or paper copy of your medical record and other health information the Health Care Provider has about you. You may ask the Health Care Provider how to do this.
· The Health Care Provider will provide a copy or a summary of your health information, usually within 30 days of your request. The Health Care Provider may charge a reasonable, cost-based fee for doing this.
Ask us to correct your medical record
• You can ask the Health Care Provider to correct health information about you that you think is incorrect or incomplete. You may ask the Health Care Provider how to do this.
• The Health Care Provider may say “no” to your request, but will tell you why in writing within 60 days.
Request confidential communications
• You can ask the Health Care Provider to contact you in a specific way (for example, home or office phone) or to send mail to a different address.
• The Health Care Provider will say “yes” to all reasonable requests.
Ask to limit what the Health Care Provider uses or shares
• You can ask the Health Care Provider us not to use or share certain health information for treatment, payment, or our operations. The Health Care Provider is not required to agree to your request, and may say “no” if it would affect your care.
• If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. The Health Care Provider will say “yes” unless a law requires them to share that information.
Get a list of those with whom the Health Care Provider has shared information
• You can ask for a list (accounting) of the times the Health Care Provider has shared your health information for six years prior to the date you ask, who they shared it with, and why.
• The Health Care Provider will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked them to make). The Health Care Provider will provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
Get a copy of this privacy notice
You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. You will be provided with a paper copy promptly.
Choose someone to act for you
• If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
• The Health Care Provider will make sure the person has this authority and can act for you before they take any action.
File a complaint if you feel your rights are violated
• You can complain if you feel the Health Care Provider has violated your rights by contacting the Provider through the RevDoc App.
• You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
• The Health Care Provider will not retaliate against you for filing a complaint.
Your Choices
For certain health information, you can make choices about what the Health Care Provider shares. If you have a clear preference for how a Health Care Provider shares your information in the situations described below, please send a message to the Provider through the RevDoc App. The Health Care Provider will follow your instructions.
In these cases, you have both the right and choice to tell the Health Care Provider to:
• Share information with your family, close friends, or others involved in your care
• Share information in a disaster relief situation
• Include your information in a hospital directory
If you are not able to inform the Health Care Provider of your preference, for example if you are unconscious, the Health Care Provider may go ahead and share your information if they believe it is in your best interest. The Health Care Provider may also share your information when needed to lessen a serious and imminent threat to health or safety.
In these cases the Health Care Provider will not share your information unless you give us written permission:
• Marketing purposes
• Sale of your information
• Most sharing of psychotherapy notes
In the case of fundraising:
• The Health Care Provider may contact you for fundraising efforts, but you can tell them to contact you again.
Health Care Providers Uses and Disclosures
How do Health Care Providers typically use or share your health information?
Health Care Providers typically use or share your health information in the following ways.
Treat you
The Health Care Provider can use your health information and share it with other professionals who are treating you.
Run the Health Care Provider’s organization
The Health Care Provider can use and share your health information to run their practice, improve your care, and contact you when necessary.
Bill for the services provided to you
The Health Care Provider can use and share your health information to bill and get payment from health plans or other entities.
How else can the Health Care Provider use or share your health information?
Health Care Providers are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. Health Care Providers have to meet many conditions in the law before the can share your information for these purposes. For more information see:w.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html.
Help with public health and safety issues
Health Care Providers can share health information about you for certain situations such as:
• Preventing disease
• Helping with product recalls
• Reporting adverse reactions to medications
• Reporting suspected abuse, neglect, or domestic violence
• Preventing or reducing a serious threat to anyone’s health or safety
Do research
Health Care Providers can use or share your information for health research.
Comply with the law
Health Care Providers will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that they are complying with federal privacy law.
Respond to organ and tissue donation requests
Health Care Providers can share health information about you with organ procurement organizations.
Work with a medical examiner or funeral director
Health Care Providers can share health information with a coroner, medical examiner, or funeral director when an individual dies.
Address workers’ compensation, law enforcement, and other government requests
Health Care Providers can use or share health information about you:
• For workers’ compensation claims
• For law enforcement purposes or with a law enforcement official
• With health oversight agencies for activities authorized by law
• For special government functions such as military, national security, and presidential protective services
Respond to lawsuits and legal actions
Health Care Providers can share health information about you in response to a court or administrative order, or in response to a subpoena.
Health Care Providers’ Responsibilities
• Health Care Providers are required by law to maintain the privacy and security of your protected health information.
• Health Care Providers will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• Health Care Providers must follow the duties and privacy practices described in this notice and give you a copy of it.
• Health Care Providers will not use or share your information other than as described here unless you tell them that they can in writing. If you tell them they can, you may change your mind at any time. You can let them know through the RevDoc App if you change your mind.
Health Care Providers will not share any substance abuse treatment records without your written permission.
For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.
Changes to the Terms of this Notice
The terms of this notice can be changed at any time, and the changes will apply to all information the Health Care Provider has about you. The new notice will be available upon request, at the Health Care Provider’s location, and through the RevDoc App.
Health Care Providers have designated a privacy official who you may contact at infosecurity@revdoc.com.