Website Visitors. Like most website operators, we collect non-personally-identifying information of the sort that web browsers and servers typically make available, including without limitation the browser type, language preference, referring site, and the date and time of each visitor request. Our purpose in collecting non-personally identifying information is to better understand how MCR visitors use our website. From time to time, we may release non-personally-identifying information in the aggregate, including without limitation by publishing a report on trends in the usage of its website.
We also collect potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on MCR blogs/sites. We only disclose logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below, except that commenter IP addresses and email addresses are visible and disclosed to the administrators of the blog/site where the comment was left.
Gathering of Personally-Identifying Information. Certain visitors to our websites choose to interact with us in ways that require us to gather personally-identifying information. The amount and type of information that we gather depends on the nature of the interaction. For example, we ask visitors who sign up at MCRto provide a username and email address. Those who engage in transactions with us are asked to provide additional information, including as necessary the personal and financial information required to process those transactions. In each case, we collect such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with MCR. We do not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
Aggregated Statistics. We may collect statistics about the behavior of visitors to our websites. We may display this information publicly or provide it to others. However, we do not disclose personally-identifying information other than as described below.
Protection of Certain Personally-Identifying Information. We may disclose potentially personally-identifying and personally-identifying information only to those of our employees, contractors and affiliated organizations that (i) need to know that information in order to process the information on our behalf or to provide services available at our websites, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using our websites, you consent to the transfer of such information to them. We will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, we disclose potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when we believes in good faith that disclosure is reasonably necessary to protect the property or rights of MCR, third parties or the public at large. If you are a registered user of an MCR website and have supplied your email address, we may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with MCR and our products. If you send us a request (for example via email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. We take all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.
Sharing of Personal Information. With your signed permission, [Insert Permission Form] we may share your Personal Information with the individual provided on the permission form and/or a Healthcare Provider. Your use of the MCR Services is at your own risk, including without limitation the risk that content that you or others contribute to your health record is inaccurate or unreliable or that your records may be misused or misappropriated by someone with whom you provide access.
Healthcare Providers, Individual Subscribers and Other Third-Parties (“Non-End Users”). The patient receiving the Services and taking the medication is an End User. Every Non-End User is required to sign the Consent Document, found at [Link to consent document] that states who is providing PHI to MCR and that the Non-End User understands and recognizes that he or she has provided PHI to MCR, he or she has authority to provide such information to MCR and that he or she has freely provided personal data, including PHI to a third party who will endeavor to protect that information pursuant to this policy, but takes no responsibility for such data as entered and does not confirm the accuracy of such data entered.
Business Associates. We may contract with third parties to perform certain services for us, such as billing services, copy services or consulting services. These third-party service providers, referred to as Business Associates, may need to access your personal health information (“PHI”) to perform services for us. They are required by contract and law to protect your PHI and only use and disclose it as necessary to perform their services for us.
Individuals Involved in Your Care or Payment for Your Care. Unless you object, we may disclose health information about you to a friend or family member who is involved in your care. We may also give information to someone who helps pay for your care.
Business Transfers. If MCR, or substantially all of its assets, were acquired, or in the unlikely event that MCR goes out of business or enters bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of MCR may continue to use your personal information as set forth in this policy.
California Privacy Rights. California Civil Code Section § 1798.83 permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to firstname.lastname@example.org