Mevolve Health Privacy Policy
Except as provided in this Privacy Policy, your personally identifiable information (“PII”) and protected health information (“PHI”),will not be shared or distributed with any third party entity or organization. Capitalized terms used herein and not otherwise defined shall have the meaning ascribed to them in the Mevolve Health Terms and Conditions of Service (“Terms and Conditions”).
PII
For purposes of this document, PII means personally identifiable information of a User and may include a User’s first and last name, address, telephone number, email address, date of birth, credit card number, billing address, expiration date, and security code, and any other bank account or financial information provided by a User to Mevolve Health.
PHI
For purposes of this document, PHI means medical and mental health information, history and records that You, your Practitioner, the Organization or Facilitator provides to us. Children’s Online Privacy Protection Act
Verifiable Parental Consent
Before a User under the age of 13 can use the Mevolve Health Service or otherwise submit PII or PHI to Mevolve Health via the Website or otherwise, he or she must have his or her Parent contact Mevolve Health via the contact information below. Such Parent must provide Mevolve Health with an email electronically signed by that Parent that includes (i) the Parent’s and child User’s full names; (ii) a sentence confirming such Parent’s consent for Mevolve Health to collect, store and use the PII and PHI of such Parent’s child User in connection with this Privacy Policy; (iii) a sentence confirming that such Parent agrees to be bound by the Terms and Conditions on Parent’s or his or her child User’s behalf; and (iv) a scanned image of such Parent’s driver’s license or other government-issued identification. Mevolve Health will then verify such Parent’s identity by checking the government-issued identification against databases of such information and, upon confirmation, will send the Parent and the child User an email advising such entities that the child User may use Mevolve Health in accordance with the Terms and Conditions. Mevolve Health will then promptly delete the Parent’s license or government-issued identification information.
Alternatively, a Parent may schedule a videoconferencing appointment with a trained Mevolve Health representative to offer verifiable parental consent.
Mevolve Health Contact InformationPlease send all requests for Parental Consent to: hello@mevolvehealth.com
Disclosure Practices
Mevolve Health does not make the PII or PHI of its Users (including child Users) available to the general public. However, such information is made available and disclosed to such child User’s Provider (including, as applicable, Mevolve Health Provided Professionals, and Mevolve Health’s cloud provider, WeCounsel,) as set forth in this Privacy Policy. Such entities are required, via agreement with Mevolve Health, to keep User’s PII and PHI confidential and not to disclose the same. The disclosure of PII (including child User PII) to these entities is integral to the service. Mevolve Health uses such child User PII and PHI solely to provide the Mevolve Health Service and to facilitate the mental health treatment of such child User’s Provider and/or associated Organization. Mevolve Health does not otherwise sell, transfer, disclose or distribute child User PII and/or PHI to any other person or entity.
Parental Review and Access
A Parent may review the PII Mevolve Health collects from that Parent’s child User and, upon request, may require Mevolve Health to delete such PII from Mevolve Health’s and its affiliates records and servers or otherwise correct such PII. A Parent may also contact Mevolve Health to request that Mevolve Health and its affiliates cease further collection or use of such Parent’s child User’s PII. To do so, please contact Mevolve Health by mailing a request using the contact information provided below.
Retention of Information
Mevolve Health and its affiliates will only retain a child User’s PII for as long as is necessary to allow the child User to use the Service or to otherwise comply with state, local and federal law. Mevolve Health will use commercially reasonable efforts to delete a child User’s PII as promptly as possible after a child User has ceased use of the Service or upon request by a child User’s Parent.
General Provisions
What PII and PHI does Mevolve Health collect? Certain of the information and content provided by Mevolve Health on the Website or through the Service is available without Mevolve Health collecting any PII or PHI. However, in using and viewing the Website or the Service, or in otherwise providing your PII or PHI to Mevolve Health or through the Service, you understand and agree that Mevolve Health and its affiliates may use your PII and PHI subject to the terms of this Privacy Policy and applicable law. Mevolve Health may require the collection of financial information including credit card information, insurance information or other information relating to payment or eligibility of services requested Mevolve Health may collect the following PII or PHI in connection with the Website or the provision of the Service:
Name
Address
Phone Number
Medical History / Current Ailments
Physician Information
Email address
Financial or payment information including credit card information
Prescriptions
Diagnoses
Credit card information, insurance information or other information relating to payment
Other medical or clinically related information customarily included within a medical record
When does Mevolve Health collect PII or PHI?
Except as otherwise provided herein, Mevolve Health or its affiliates only collect PII or PHI that you provide voluntarily through the Website, the Service or to an employee, representative or agent of Mevolve Health or its affiliates. Some examples of times when Mevolve Health or its affiliates collect PII or PHI include when you:
Create a User Account;
Transmit PII or PHI through the Mevolve Health Service;
Provide PII or PHI to your Practitioner, Facilitator or Organization and such Practitioner, Facilitator or Organization inputs such information via the Mevolve Health Service;
Send an email to Mevolve Health or otherwise contact Mevolve Health or its employees, agents or representatives via the Website, the Service or otherwise;
otherwise directly provide Mevolve Health with PII or PHI; or
How does Mevolve Health use your PII and PHI?
Mevolve Health uses your PII and PHI for the following purposes:
To respond to your emails or inquiries sent to Mevolve Health, its representatives, agents, or employees;
To conduct a transaction that you have authorized, such as the transfer of funds in connection with a subscription to the Mevolve Health Service;
To provide you with information about Mevolve Health and its products and services;
To alert you to special events, volunteer opportunities, updated information and other news and information from Mevolve Health;
To provide your Facilitator, Organization and/or Practitioner with access to your PII and/or PHI via the Mevolve Health Service; and
In addition, Mevolve Health may hire other companies to perform services on its behalf such as operating certain aspects of the Website or the Service or sending you email. These other companies may be supplied with or have access to your PII or PHI for the sole purpose of providing these services to Mevolve Health or on Mevolve Health’s behalf. We require these companies to protect and safeguard your PII, PFI and PHI to the same extent as we do.
How does Mevolve Health disclose your PII?
Though we will make commercially reasonable efforts to preserve User privacy and to protect PII, we may need to disclose PII when required by law or if we have a good-faith belief that the action is necessary to comply with a pending judicial proceeding, a court order or legal process served on Mevolve Health or to protect Mevolve Health’s rights or the rights of others, to fight fraud, identity theft, to ensure the integrity and operation of Mevolve Health’s business and systems, or to protect the rights, property or safety of Mevolve Health, its employees or others.
How does Mevolve Health disclose your PHI?
Because we are a business associate of a number of health care providers, we are required to comply with many of the privacy and security requirements of the UK Data Protection Act, 1998 (DPA). We protect your PHI as required by DPA and will only disclose PHI in one of the following situations:
We receive your prior authorization.
We are required by law to disclose the information.
The disclosure is permitted by DPA.
How We Share Your Information
We will not disclose your PII or PHI to others without your permission, except as provided in this Privacy Policy.
Aggregate Information
On an aggregate basis only, we may collect comprehensive demographic and other non-identifying information about users of the Website and the Service. Mevolve Health will never disclose any PII or PHI as part of this aggregate information but we may lend, sell, share or otherwise disclose aggregate information with others so we can perform research and provide the results to third parties, enhance and market the Website and/or the Service, and conduct accounting and process record keeping functions.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of PII and PHI, we have put in place or made our best efforts to ensure the existence of reasonable, industry-standard physical, electronic, and administrative procedures to safeguard and secure the PHI, PFI and PII we collect and store online and to protect the loss, misuse, and alteration of the PHI and PII under our control. We comply with the DPA security and privacy requirements with respect to safeguarding and securing your PHI and have implemented such safeguards as data encryption, and encrypted authentication. Unfortunately, no data transmission over the Internet can be guaranteed to be absolutely secure. As a result, while we strive to protect your PII and PHI, we cannot ensure or warrant the security of any information you transmit to us, if your website access credentials have been compromised due to no fault of Mevolve Health or its associated providers. If Mevolve Health provides you with a user name and password to access the Website, we disclaim any responsibility for a breach of privacy as a result of your knowing, willing, negligent, or inadvertent disclosure of your user name and password to anyone other than a Facilitator using Mevolve Health on your behalf.
Other Websites and Links
On Mevolve Health’s Website, through the Service or in correspondence sent to you by Mevolve Health, Mevolve Health may include links to other websites that it thinks will be of interest to you or that are operated by our business partners, affiliates, advertisers, and others. These third parties have separate data collection and privacy practices independent from Mevolve Health’s and Mevolve Health cannot be responsible for their policies or activities. Please contact those third parties directly if you have questions about their privacy policies.
Cookies, Web Beacons, Clear Gifs, and IP Addresses
Mevolve Health may also use a feature of your browser called a “cookie.” Your cookie automatically identifies your computer – but not you – to our servers when you visit the Website and allows us to correlate your computer with certain usage patterns which may be stored in our log files. We use cookies to gather general, aggregate statistics about the overall popularity and usage of the Website and/or the Service. Mevolve Health also uses more temporary cookies, often referred to as session cookies, to keep a User logged into the system and aid in the exchange of information between pages without loss of data. Such a cookie, however, is only stored for the current browsing session and is deleted once the browser is closed. Mevolve Health can also only read cookies from the Website. Search for Cookies under your Web browser’s Help menu for more information on cookie management features available to you. If your browser is set to reject all cookies, the Website may not function properly.
Additionally, we may use IP address information to count and track aggregate visits to the Website or the Service, to help diagnose problems with our servers, and to administer the Website or the Service. Mevolve Health does not link IP addresses to anything identifying a specific person, so while a particular user’s session can be tracked, the user remains completely anonymous. Moreover, Mevolve Health may collect information through the use of clear gifs (also called Web Beacons and Web Bugs) in selected email messages we send to you. These are tiny graphic files, not visible to the human eye, that are included in HTML-based emails and used to let us know which emails we send are opened. Clear gifs may also see or read cookies on your computer. When authorized by Mevolve Health, third parties specializing in monitoring aggregate statistical use of our site with whom we contract, may use cookies, our web log files, web beacons, and other monitoring technologies to compile anonymous aggregate data.
Changes to this Privacy Policy
We encourage you to review our Privacy Policy not just the first time you visit the Website but periodically afterwards since we may modify our Privacy Policy from time to time. The date of the last update of the Privacy Policy will always be posted below:
THIS PRIVACY POLICY WAS LAST REVISED ON FEBRUARY 8, 2018.
If we make any substantive changes to our Privacy Policy in the future with regard to how we use your PII, PFI or PHI, we will incorporate those changes here. Your continued use of the Website or the Service after the changes are posted constitutes your agreement to the changes, both with regard to information we have previously collected from you and with regard to information we collect from you in the future. If you do not agree to the changes, please immediately discontinue use of the Website or the Service.
Merger or Sale
If Mevolve Health is sold or merged with another company, your PII, PFI and PHI may be included as part of the sale. Unless you are notified otherwise, such other company will maintain your PII, PFI and PHI in the same manner as set forth herein.
International Users
Like almost every website, the Site is accessible around the world. By visiting the Site and providing your information, you acknowledge and agree that your PII and PHI can be stored for the purposes identified in this Privacy Policy. We process and store your information in EU, and your information may be stored on servers located outside your residential jurisdiction and which may have less stringent privacy practices than your own. If you access the Site from outside the EU or conduct sessions with us in any manner, your usage of the Site constitutes consent to the transfer of your data outside of your country and to EU.
Contacting Us
Please feel free to share any comments and concerns with us. If you have any questions about this Privacy Policy or the practices of the Website or the Service, or otherwise wish to contact us in connection with this Privacy Policy please contact us at: hello@mevolvehealth.com
PII
For purposes of this document, PII means personally identifiable information of a User and may include a User’s first and last name, address, telephone number, email address, date of birth, credit card number, billing address, expiration date, and security code, and any other bank account or financial information provided by a User to Mevolve Health.
PHI
For purposes of this document, PHI means medical and mental health information, history and records that You, your Practitioner, the Organization or Facilitator provides to us. Children’s Online Privacy Protection Act
Verifiable Parental Consent
Before a User under the age of 13 can use the Mevolve Health Service or otherwise submit PII or PHI to Mevolve Health via the Website or otherwise, he or she must have his or her Parent contact Mevolve Health via the contact information below. Such Parent must provide Mevolve Health with an email electronically signed by that Parent that includes (i) the Parent’s and child User’s full names; (ii) a sentence confirming such Parent’s consent for Mevolve Health to collect, store and use the PII and PHI of such Parent’s child User in connection with this Privacy Policy; (iii) a sentence confirming that such Parent agrees to be bound by the Terms and Conditions on Parent’s or his or her child User’s behalf; and (iv) a scanned image of such Parent’s driver’s license or other government-issued identification. Mevolve Health will then verify such Parent’s identity by checking the government-issued identification against databases of such information and, upon confirmation, will send the Parent and the child User an email advising such entities that the child User may use Mevolve Health in accordance with the Terms and Conditions. Mevolve Health will then promptly delete the Parent’s license or government-issued identification information.
Alternatively, a Parent may schedule a videoconferencing appointment with a trained Mevolve Health representative to offer verifiable parental consent.
Mevolve Health Contact InformationPlease send all requests for Parental Consent to: hello@mevolvehealth.com
Disclosure Practices
Mevolve Health does not make the PII or PHI of its Users (including child Users) available to the general public. However, such information is made available and disclosed to such child User’s Provider (including, as applicable, Mevolve Health Provided Professionals, and Mevolve Health’s cloud provider, WeCounsel,) as set forth in this Privacy Policy. Such entities are required, via agreement with Mevolve Health, to keep User’s PII and PHI confidential and not to disclose the same. The disclosure of PII (including child User PII) to these entities is integral to the service. Mevolve Health uses such child User PII and PHI solely to provide the Mevolve Health Service and to facilitate the mental health treatment of such child User’s Provider and/or associated Organization. Mevolve Health does not otherwise sell, transfer, disclose or distribute child User PII and/or PHI to any other person or entity.
Parental Review and Access
A Parent may review the PII Mevolve Health collects from that Parent’s child User and, upon request, may require Mevolve Health to delete such PII from Mevolve Health’s and its affiliates records and servers or otherwise correct such PII. A Parent may also contact Mevolve Health to request that Mevolve Health and its affiliates cease further collection or use of such Parent’s child User’s PII. To do so, please contact Mevolve Health by mailing a request using the contact information provided below.
Retention of Information
Mevolve Health and its affiliates will only retain a child User’s PII for as long as is necessary to allow the child User to use the Service or to otherwise comply with state, local and federal law. Mevolve Health will use commercially reasonable efforts to delete a child User’s PII as promptly as possible after a child User has ceased use of the Service or upon request by a child User’s Parent.
General Provisions
What PII and PHI does Mevolve Health collect? Certain of the information and content provided by Mevolve Health on the Website or through the Service is available without Mevolve Health collecting any PII or PHI. However, in using and viewing the Website or the Service, or in otherwise providing your PII or PHI to Mevolve Health or through the Service, you understand and agree that Mevolve Health and its affiliates may use your PII and PHI subject to the terms of this Privacy Policy and applicable law. Mevolve Health may require the collection of financial information including credit card information, insurance information or other information relating to payment or eligibility of services requested Mevolve Health may collect the following PII or PHI in connection with the Website or the provision of the Service:
Name
Address
Phone Number
Medical History / Current Ailments
Physician Information
Email address
Financial or payment information including credit card information
Prescriptions
Diagnoses
Credit card information, insurance information or other information relating to payment
Other medical or clinically related information customarily included within a medical record
When does Mevolve Health collect PII or PHI?
Except as otherwise provided herein, Mevolve Health or its affiliates only collect PII or PHI that you provide voluntarily through the Website, the Service or to an employee, representative or agent of Mevolve Health or its affiliates. Some examples of times when Mevolve Health or its affiliates collect PII or PHI include when you:
Create a User Account;
Transmit PII or PHI through the Mevolve Health Service;
Provide PII or PHI to your Practitioner, Facilitator or Organization and such Practitioner, Facilitator or Organization inputs such information via the Mevolve Health Service;
Send an email to Mevolve Health or otherwise contact Mevolve Health or its employees, agents or representatives via the Website, the Service or otherwise;
otherwise directly provide Mevolve Health with PII or PHI; or
How does Mevolve Health use your PII and PHI?
Mevolve Health uses your PII and PHI for the following purposes:
To respond to your emails or inquiries sent to Mevolve Health, its representatives, agents, or employees;
To conduct a transaction that you have authorized, such as the transfer of funds in connection with a subscription to the Mevolve Health Service;
To provide you with information about Mevolve Health and its products and services;
To alert you to special events, volunteer opportunities, updated information and other news and information from Mevolve Health;
To provide your Facilitator, Organization and/or Practitioner with access to your PII and/or PHI via the Mevolve Health Service; and
In addition, Mevolve Health may hire other companies to perform services on its behalf such as operating certain aspects of the Website or the Service or sending you email. These other companies may be supplied with or have access to your PII or PHI for the sole purpose of providing these services to Mevolve Health or on Mevolve Health’s behalf. We require these companies to protect and safeguard your PII, PFI and PHI to the same extent as we do.
How does Mevolve Health disclose your PII?
Though we will make commercially reasonable efforts to preserve User privacy and to protect PII, we may need to disclose PII when required by law or if we have a good-faith belief that the action is necessary to comply with a pending judicial proceeding, a court order or legal process served on Mevolve Health or to protect Mevolve Health’s rights or the rights of others, to fight fraud, identity theft, to ensure the integrity and operation of Mevolve Health’s business and systems, or to protect the rights, property or safety of Mevolve Health, its employees or others.
How does Mevolve Health disclose your PHI?
Because we are a business associate of a number of health care providers, we are required to comply with many of the privacy and security requirements of the UK Data Protection Act, 1998 (DPA). We protect your PHI as required by DPA and will only disclose PHI in one of the following situations:
We receive your prior authorization.
We are required by law to disclose the information.
The disclosure is permitted by DPA.
How We Share Your Information
We will not disclose your PII or PHI to others without your permission, except as provided in this Privacy Policy.
Aggregate Information
On an aggregate basis only, we may collect comprehensive demographic and other non-identifying information about users of the Website and the Service. Mevolve Health will never disclose any PII or PHI as part of this aggregate information but we may lend, sell, share or otherwise disclose aggregate information with others so we can perform research and provide the results to third parties, enhance and market the Website and/or the Service, and conduct accounting and process record keeping functions.
Data Security
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of PII and PHI, we have put in place or made our best efforts to ensure the existence of reasonable, industry-standard physical, electronic, and administrative procedures to safeguard and secure the PHI, PFI and PII we collect and store online and to protect the loss, misuse, and alteration of the PHI and PII under our control. We comply with the DPA security and privacy requirements with respect to safeguarding and securing your PHI and have implemented such safeguards as data encryption, and encrypted authentication. Unfortunately, no data transmission over the Internet can be guaranteed to be absolutely secure. As a result, while we strive to protect your PII and PHI, we cannot ensure or warrant the security of any information you transmit to us, if your website access credentials have been compromised due to no fault of Mevolve Health or its associated providers. If Mevolve Health provides you with a user name and password to access the Website, we disclaim any responsibility for a breach of privacy as a result of your knowing, willing, negligent, or inadvertent disclosure of your user name and password to anyone other than a Facilitator using Mevolve Health on your behalf.
Other Websites and Links
On Mevolve Health’s Website, through the Service or in correspondence sent to you by Mevolve Health, Mevolve Health may include links to other websites that it thinks will be of interest to you or that are operated by our business partners, affiliates, advertisers, and others. These third parties have separate data collection and privacy practices independent from Mevolve Health’s and Mevolve Health cannot be responsible for their policies or activities. Please contact those third parties directly if you have questions about their privacy policies.
Cookies, Web Beacons, Clear Gifs, and IP Addresses
Mevolve Health may also use a feature of your browser called a “cookie.” Your cookie automatically identifies your computer – but not you – to our servers when you visit the Website and allows us to correlate your computer with certain usage patterns which may be stored in our log files. We use cookies to gather general, aggregate statistics about the overall popularity and usage of the Website and/or the Service. Mevolve Health also uses more temporary cookies, often referred to as session cookies, to keep a User logged into the system and aid in the exchange of information between pages without loss of data. Such a cookie, however, is only stored for the current browsing session and is deleted once the browser is closed. Mevolve Health can also only read cookies from the Website. Search for Cookies under your Web browser’s Help menu for more information on cookie management features available to you. If your browser is set to reject all cookies, the Website may not function properly.
Additionally, we may use IP address information to count and track aggregate visits to the Website or the Service, to help diagnose problems with our servers, and to administer the Website or the Service. Mevolve Health does not link IP addresses to anything identifying a specific person, so while a particular user’s session can be tracked, the user remains completely anonymous. Moreover, Mevolve Health may collect information through the use of clear gifs (also called Web Beacons and Web Bugs) in selected email messages we send to you. These are tiny graphic files, not visible to the human eye, that are included in HTML-based emails and used to let us know which emails we send are opened. Clear gifs may also see or read cookies on your computer. When authorized by Mevolve Health, third parties specializing in monitoring aggregate statistical use of our site with whom we contract, may use cookies, our web log files, web beacons, and other monitoring technologies to compile anonymous aggregate data.
Changes to this Privacy Policy
We encourage you to review our Privacy Policy not just the first time you visit the Website but periodically afterwards since we may modify our Privacy Policy from time to time. The date of the last update of the Privacy Policy will always be posted below:
THIS PRIVACY POLICY WAS LAST REVISED ON FEBRUARY 8, 2018.
If we make any substantive changes to our Privacy Policy in the future with regard to how we use your PII, PFI or PHI, we will incorporate those changes here. Your continued use of the Website or the Service after the changes are posted constitutes your agreement to the changes, both with regard to information we have previously collected from you and with regard to information we collect from you in the future. If you do not agree to the changes, please immediately discontinue use of the Website or the Service.
Merger or Sale
If Mevolve Health is sold or merged with another company, your PII, PFI and PHI may be included as part of the sale. Unless you are notified otherwise, such other company will maintain your PII, PFI and PHI in the same manner as set forth herein.
International Users
Like almost every website, the Site is accessible around the world. By visiting the Site and providing your information, you acknowledge and agree that your PII and PHI can be stored for the purposes identified in this Privacy Policy. We process and store your information in EU, and your information may be stored on servers located outside your residential jurisdiction and which may have less stringent privacy practices than your own. If you access the Site from outside the EU or conduct sessions with us in any manner, your usage of the Site constitutes consent to the transfer of your data outside of your country and to EU.
Contacting Us
Please feel free to share any comments and concerns with us. If you have any questions about this Privacy Policy or the practices of the Website or the Service, or otherwise wish to contact us in connection with this Privacy Policy please contact us at: hello@mevolvehealth.com