H&H Medical Corporation Privacy Policy
H&H Medical Corporation (herein referred to as ‘H&H’) understands how important the privacy of personal information is to our users. This Privacy Policy will tell you what information we collect about you, about your use of H&H and its services and how H&H uses this information. We urge you to read this Privacy Policy carefully.
Part 1: About This Privacy Policy and Using Our Site and Tools
This Privacy Policy applies to the H&H Web site (www.hhmedicalcorp.com) owned and operated by H&H Medical Corporation, hereafter referred to as H&H.
The H&H Web site may contain links to other sites. Once you enter another Web site (whether through a service or content link), be aware that H&H is not responsible for the privacy practices of these other sites. We encourage you to look for and review the privacy statements of each and every Web site that you visit through a link on H&H.
We hope that reading our Privacy Policy helps you understand how we manage information about you. Throughout our Privacy Policy, we have underlined various terms and hot-linked them to our Glossary to help you better understand their meaning.
While you may use some of the functionality of H&H without entering personal information, some services on our website require both Personal identifiable information (PII) and Personal health information (PHI). If you use our Web site without divulging any personal information, the only information we collect will be Non-Personal Information through the use of Cookies or Web Beacons. If you choose to use our website to order equipment, contact our physician etc, you are responsible for ensuring the accuracy of the Personally Identifiable Information and Personal Health Information you submit to H&H. Inaccurate information will affect the information you receive when using our site and our ability to contact you as described in this Privacy Policy. For example, your email address should be the one you most frequently use as this is how we, and our physicians, communicate with you.
Part 2: Non-Personal Information We Collect About You
Even if you do not make an order with H&H, we may collect Non-Personal Information about your use of our Web site.
A. Cookies
We collect Non-Personal Information about your use of our Web site through the use of Cookies. Every computer that accesses the H&H Web site is assigned a different Cookie by H&H. The information collected by Cookies (i) allows us to statistically monitor how many people are using our Web site, (ii) how many people open our emails, and (iii) for what purposes these actions are being taken. Cookies are also used to facilitate a user's log-in, as navigation aides and as session timers.
Most browser software can be set to reject all Cookies. Most browsers offer instructions on how to reset the browser to reject Cookies in the "Help" section of the toolbar. If you reject our Cookies, certain of the functions and conveniences of our Web site may not work properly but you do not have to accept our Cookies in order to productively use our site. We do not link Non-Personal Information from Cookies to Personally Identifiable Information without your permission and do not use Cookies to collect or store Personal Health Information about you.
B. Web Beacons
We also may use Web Beacons to collect Non-Personal Information about your use of our Web site. The information collected by Web Beacons allows us to statistically monitor how many people are using our website and for what purpose. Our Web Beacons are not used to track your activity outside of our Web site. We do not link Non-Personal Information from Web Beacons to Personally Identifiable Information without your permission and do not use Web Beacons to collect or store Personal Health Information about you.
Part 3: Personally Identifiable Information We Collect About You
We collect Personally Identifiable Information, like your name, email address, date of birth, and zip code, you provide to us when you start to order your device with H&H. We use the Personally Identifiable Information that you provide to respond to your questions, provide you the specific services you select, send you emails about Web site maintenance and updates, and inform you of significant changes to this Privacy Policy.
A. Information & Emails to You
On occasion H&H may send you informational/promotional documents via email. When you initiate an order you will be given the option to Opt-Out of receiving this information from H&H. These emails will not contain Personal Health Information. If you choose to unsubscribe at a later date you can by simply completing our Customer Support Form. Once H&H Customer Service receives the form, it will unsubscribe you within two to three business days.
B. Emails you send to H&H - Email a Friend
This Privacy Policy does not apply to content, business information, ideas, concepts or inventions that you send to H&H by email. If you want to keep content or business information, ideas, concepts or inventions private or proprietary, do not send them in an email to H&H.
We try to answer every email within 48 business hours, but are not always able to do so.
If you choose to use our ‘Email a Friend’ service to tell a friend about our site, we will ask you for your name, your email address and your friend's email address. We will automatically send your friend a one-time email inviting him or her to visit the site using your name and email address as the from email address. H&H does not use your name, your email address or your friend's email information and the information you provide using this service for any other purpose. We will only use the information you provide to send the email you request.
C. Interactive Services on H&H
After you have initiated an order with H&H, you may choose to use certain H&H interactive services (on-line consultation for Device Prescription) that will ask you to voluntarily provide other types of information about yourself including Personal Health Information. This information will be stored by H&H in accordance with this Privacy Policy.
D. Children
We are committed to protecting the privacy of children. Neither H&H nor any of its services are designed or intended to attract children under the age of 13. We do not collect Personally Identifiable Information from any person we actually know is under the age of 13. A parent or guardian, however, may use H&H to establish a personal health record for a minor. The parent or guardian is solely responsible for providing supervision of the minor's use of H&H’s web site. The parent or guardian assumes full responsibility for ensuring that the registration information is kept secure and that the information submitted is accurate. The parent or guardian also assumes full responsibility for the services provided through H&H for the minor.
E. Market Research
From time to time H&H may use the information gathered from its client’s to conduct market research. This information will only be used for in-house research purposes and in no way or form will it be sold, traded or rented to any third party. To help us understand and work with our market, we may extract statistical data from our server database but never is that data or the individual statistics identified.
Part 4: H&H Use and Services
Interactive services within the H&H site gather self-reported Personal Health Information. In addition, certain of these services can store Personal Health Information coming from third party data interchange between our physician, your primary health physician or health plan. We maintain and limit the use of that information.
H&H does not knowingly engage in business with a company that uses Spyware. We do not provide Users with downloadable software that collects or uses any PII or PHI without full disclosure and Opt-in consent.
Part 5: Disclosure of Your Information
Except as described in this Privacy Policy or as specifically agreed to by you, H&H will not disclose any Personally Identifiable or Personal Health Information it gathers from you on our website. We may only release Personally Identifiable or Personal Health Information to third parties: (1) to give to our practitioners so that they can prescribe the device, (2) to comply with valid legal requirements such as a law, regulation, search warrant, subpoena or court order; or (3) in special cases, such as in response to a physical threat to you or others, to protect property or defend or assert legal rights. In the event that we are legally compelled to disclose your Personally Identifiable or Personal Health Information to a third party, we will attempt to notify you unless doing so would violate the law or court order. In addition, we may disclose Personal Information as described below.
A. Disclosure to H&H Operations and Maintenance Contractors
H&H operations and maintenance contractors (including website services) sometimes have limited access to your Personally Identifiable Information in the course of providing products or services to H&H. These contractors include vendors and suppliers that provide us with technology, services, and/or content for the operation and maintenance of our Web site. Access to your Personally Identifiable Information by these contractors is limited to the information reasonably necessary for the contractor to perform its limited function for H&H. We also contractually require that our operations and maintenance contractors 1) protect the privacy of your Personally Identifiable Information consistent with this Privacy Policy, and 2) not use or disclose your Personally Identifiable Information for any purpose other than providing us with products and services as required by law.
Part 6: How H&H Handles Privacy and Security Internally
Here are some of the security procedures that H&H uses to protect your privacy:
- All sensitive data is password protected. All passwords use 160 bit encryption.
- Uses firewalls to protect information held in our servers.
- Utilizes Secure Socket Layer (SSL) encryption in transmitting Personally Identifiable Information to our servers. In order to take advantage of encryption technology, you must have an Internet browser which supports 128-bit encryption. SSL creates a secured connection between our web servers and your browser, which eliminates unauthorized access to transmitted data, and ensures data is sent only to the intended recipient.
- Closely monitors the limited number of H&H employees who have potential access to your Personally Identifiable Information.
- All H&H employees require both a personal username (log-in name) and a password in order to access your Personally Identifiable Information or Personal Health Information stored on H&H’s database.
- Requires all H&H employees to abide by our Privacy Policy and to be subject to disciplinary action if they violate it.
- Backs-up our systems to protect the integrity of your Personally Identifiable and Personal Health Information.
- H&H provides additional protection for your Personal Health Information as follows:
- Provides secure messaging within the H&H tools so that information related to your personal health related characteristics is sent through a secure, encrypted connection.
- Limits access to Personally Identifiable Information to authorized users and securely stores all PII and PHI information either in soft or hard format.
- H&H does not sell, rent or trade your Personal Health/identifiable information.
Despite H&H's efforts to protect your Personally Identifiable Information and Personal Health Information, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the Internet may be intercepted.
Part 7: Updating Your Information and Contacting H&H
A. Storing Your Personally Identifiable Information
All Personally Identifiable Information (PII and PHI) will be stored on our Server and in our databases for 6 years. Initially, user submitted data, including PII and/or PHI will be held in an active database and then on an inactive back-up medium for a period of not less than six (6) years.
B. Complaints or Issues
If you have a complaint or problem, please contact us either via our customer support form, email or by writing to us. Our customer service department will forward your complaint to the appropriate internal H&H department for a response or resolution. We try to answer every email within 48 business hours, but may not always able to do so.
Customer Service Department
H&H Medical Corporation
7109 Highland Drive
Suite 100
Salt Lake City, UT, 84121
Or email: info@hhmedicalcorp.com
C. Limitations on Removing or Changing Information
Upon your request, we will delete your Personally Identifiable or Personal Health Information from our active databases and where feasible from our back-up media. You should be aware that it is not technologically possible to remove each and every record of the information you have provided to H&H from our servers. Also be aware that H&H have to keep a hard copy of this information for legal purposes for a minimum of 6 (six) years.
Part 8: Changes to this Privacy Policy
Personally Identifiable Information - We will inform you if we make a material change to the Privacy Policy, which means a change that expands the permissible uses or disclosures of Personally Identifiable Information allowed by the prior version of the Privacy Policy. Your continued use of the H&H Web site will indicate acceptance of the changes. You may of course choose to Opt-out of continuing to use the H&H Web site. Please exit the site immediately if you do not agree to the terms of this Privacy Policy or any revised policy.
Personal Health Information - We will inform you if a material change in the Privacy Policy is made that involves the use of your Personal Health Information, and your express Opt-in authorization will be requested. If you choose to not accept the new privacy policy, then the current privacy policy conditions will remain in effect, so long as H&H continues to make the functionality available. H&H reserves the right to discontinue or limit functionality in all its products.
Non-Significant Changes - H&H may make non-significant changes to the Privacy Policy that do no affect Personally Identifiable Information or Personal Health Information. For these instances, H&H may not notify you of such non-significant changes.
If we decide to change our privacy policy, we will post those changes to this privacy statement, the home page, and other places appropriate throughout our site so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.
We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here, by email, and by means of a notice on our home page.
Part 9: Glossary
Aggregate Information or Data: As a website gathers individual pieces of Non-Personal Information (see definition below) from its users, it may combine similar data from many or all the users of the website into one big "batch". For example, the site may add up the total number of people in Sandy, Utah (but not their names) who are seeking information about Hand held ECG devices and compare that to the number of people in Anaheim, California seeking the same information.
This sort of statistical information is called aggregate data because it reflects the habits and characteristics of a large group of anonymous people. Web sites may use aggregate data to generate information they can use to best provide for the needs of the users.
Browser: Short for web browser, a browser is a software application used to locate and display web (Internet) pages. The most popular browsers are AOL, Firefox, Microsoft Internet Explorer, and Netscape Navigator. In addition, most modern browsers can present multimedia information, including sound and video, though they require plug-ins for some formats.
Cache (also called cache memory): Once your Web browser accesses a web page, it references that page and the graphics on it within your computer's "cache" (or more simply, your computer takes a "snapshot" of every page you visit and stores it in the "cache".) The next time you visit that same page, your download time will be quicker as the images and much of the page is already available on your computer for your browser to reference instantly instead of waiting for the page and images to download again. H&H does not cache pages.
Click Stream Information: A record of all the pages you have visited during your visit to a particular Web site or the services you accessed from the site or from an email. Click Stream Information is associated with your browser and not with you personally. It records the archives of your browser.
Cookie: A small data file that is stored on the hard drive of the computer you use to view a Web site. Cookies are placed by that site and are accessible only by the party or site that placed the Cookie (i.e. a Cookie placed on your computer by H&H isn't accessed by any other site you visit). Cookies can contain pieces of Personally Identifiable Information (PII). H&H encrypts any PII it stores in its Cookies. These Cookies often are used to make the site easier to use. For example, if you check a box to ask that we store your user name on your computer so that you don't have to enter it each time you visit the site, it's stored in a Cookie on your computer.
Encryption: The translation of data into a secret code. Encryption is the most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it. This is typically done by secure computer systems.
Firewall: A system designed to prevent unauthorized access to or from a public or private network. Firewalls can be implemented in both hardware and software, or a combination of both. Firewalls are frequently used to prevent unauthorized Internet users from accessing private portions of public networks. All messages entering or leaving the network pass through the firewall, which examines each message and blocks those that do not meet the specified security criteria.
Non-Personal Information: Information that is not traceable back to any individual and cannot be used to identify an individual. For example, Click Stream Information is Non-Personal Information, as is information such as gender, age, city and state when not linked with other Personally Identifiable Information.
Opt-In: Means you are actively indicating your preference to participate in a program, email, feature, tool, or enhancement on a Web site. Typically, if you "Opt-in" you must provide certain information, usually Personally Identifiable Information, to the Web site or otherwise actively indicate your choice or preference to participate in the Web site program. For example, if you wish to receive a product update email from H&H, you must enter your email address and click the statement that says: "Yes, I'd like to receive H&H's product update information."
Opt-Out: Means that if you do not take some action you are indicating your preference to participate in a program, email, feature, tool or enhancement on a Web site. Typically, if you "Opt-out" you must uncheck a box next to a stated preference or otherwise take some indicate action to indicate your preference not to participate in a program. For example, if you do not wish to receive promotional emails from H&H, you must uncheck the box in your email preference center that states: "Please send me special offers and communications from H&H."
Password: A secret series of characters, typically alphanumeric (meaning it consists of both letters and numbers) that enables you to access a file, computer, or program. You must enter your password before the computer or system will respond to commands. The password helps ensure that unauthorized users do not access the system. In addition, data files and programs may require a password.
Ideally, the password should be something that nobody could guess. In practice, many people choose a password that is easy to remember, such as their name or their initials. This is one reason it is relatively easy to break into many computer systems.
Personal Health Information (PHI): When your Personally Identifiable Information (PII) is combined with known health characteristics. For example, if you indicated that you have a certain disease or condition, when that information is combined with your PII, it becomes Personal Health Information.
Personally Identifiable Information (PII) (also called Personal Information): Information that can be traced back to an individual (contrast with Non-Personal Information and Aggregate Information). Examples of PII include your name, home address, telephone number, email address, and Social Security number.
If other pieces of information are linked to PII, they also become PII. For example, if you use a nickname to chat online and give out your real name while chatting, your nickname becomes PII when linked with other PII.
Server: A computer that provides services to other computers. A "web server" stores web site files and "serves" them to people who request them.
SSL (Secure Sockets Layer): A security protocol developed by Netscape for transmitting private information via the Internet. SSL works by using a private key to encrypt data that's transferred over the SSL connection. Both Microsoft Internet Explorer (http://www.webopedia.com/TERM/S/Internet_Explorer.htm) and Netscape Navigator (http://www.webopedia.com/TERM/S/Navigator.htm) support SSL, and many Web sites use the protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that utilize an SSL connection start with https: instead of http.
Username: A name used to gain access to a computer system or program. Usernames, and often passwords, are required in shared systems, such as the Internet. In most such systems, users can choose their own usernames and passwords.
Virus: A program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes. Viruses can also "replicate" themselves by copying their code to other computers. All computer viruses are manmade. A simple virus that can make a copy of itself over and over again is relatively easy to produce. Even such a simple virus is dangerous because it will quickly use all available memory and bring the system to a halt. An even more dangerous type of virus is one capable of transmitting itself across networks and bypassing security systems. There are numerous virus protection programs available. See the "How You Can Protect Yourself" section.
Web Beacons (also often referenced as "clear GIFs", "web bugs", "1-by-1 GIFs", "Single-Pixel GIFs", "1 x 1 Pixels", or "clear Pixels"): Tiny graphic image files, imbedded in a web page in GIF, jpeg or HTML format, typically used to monitor activity on a web page and send back to its home server (which can belong to the host site, a network advertiser or some other third party) information from your browser, such as the IP address, the URL of the page on which the beacon is located, the type browser that is accessing the site and the ID number of any Cookies on your computer previously placed by that server. Web Beacons can also be used to place a Cookie on your computer.
PLEASE READ THESE TERMS AND CONDITIONS OF USE CAREFULLY BEFORE USING THIS SITE.
By using this site, you signify your assent to these Terms and Conditions. If you do not agree to all of these Terms and Conditions of use, do not use this site!
H&H Medical Corporation. ("H&H") may revise and update these Terms and Conditions at any time. Your continued usage of the H&H website will mean you accept those changes.
The site does not provide medical advice
The contents of the H&H Site, such as text, graphics, images and other material contained on the H&H Site ("Content") are for informational purposes only. The Content is not intended to be a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of something you have read on the H&H Site.
If you think you may have a medical emergency, call your doctor or 911 immediately. H&H does not recommend or endorse any specific tests, physicians, products, procedures, opinions, or other information that may be mentioned on the Site. Reliance on any information provided by H&H, H&H employees, others appearing on the Site at the invitation of H&H, or other visitors to the Site is solely at your own risk.
You have chosen to use our services at your own risk and expense. We cannot guarantee results and give you no warranties.
Children's privacy
We are committed to protecting the privacy of children. You should be aware that this Site is not intended or designed to attract children under the age of 13. We do not collect personally identifiable information from any person we actually know is a child under the age of 13.
Use of content
H&H authorizes you to view or download a single copy of the material on the H&H Site solely for your personal, noncommercial use.
If you violate any of these Terms and Conditions, your permission to use the Content automatically terminates and you must immediately destroy any copies you have made of any portion of the Content.
Liability of H&H
The use of the H&H Site and the Content is at your own risk.
When using the H&H Site, information will be transmitted over a medium that may be beyond the control and jurisdiction of H&H and its suppliers. Accordingly, H&H assumes no liability for or relating to the delay, failure, interruption, or corruption of any data or other information transmitted in connection with use of the H&H Site.
The H&H Site and the content are provided on an "as is" basis. H&H, ITS LICENSORS, AND ITS SUPPLIERS, TO THE FULLEST EXTENT PERMITTED BY LAW, DISCLAIM ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT OF THIRD PARTIES' RIGHTS, AND FITNESS FOR PARTICULAR PURPOSE. Without limiting the foregoing, H&H, its licensors, and its suppliers make no representations or warranties about the following:
1. The accuracy, reliability, completeness, correctness, or timeliness of the Content, software, text, graphics, links, or communications provided on or through the use of the H&H Site.
2. The satisfaction of any government regulations requiring disclosure of information on prescription drug products or the approval or compliance of any software tools with regard to the Content contained on the H&H Site.
In no event shall H&H, its licensors, its suppliers, or any third parties mentioned on the H&H Site be liable for any damages (including, without limitation, incidental and consequential damages, personal injury/wrongful death, lost profits, or damages resulting from lost data or business interruption) resulting from the use of or inability to use the H&H Site or the Content, whether based on warranty, contract, tort, or any other legal theory, and whether or not H&H, its licensors, its suppliers, or any third parties mentioned on the H&H Site are advised of the possibility of such damages. H&H, its licensors, its suppliers, or any third parties mentioned on the H&H Site shall be liable only to the extent of actual damages incurred by you, not to exceed U.S. $1000. H&H, its licensors, its suppliers, or any third parties mentioned on the H&H Site are not liable for any personal injury, including death, caused by your use or misuse of the Site or Content. Any claims arising in connection with your use of the Site, any Content, or the Public Areas must be brought within one (1) year of the date of the event giving rise to such action occurred. Remedies under these Terms and Conditions are exclusive and are limited to those expressly provided for in these Terms and Conditions.
User submissions
The personal information you submit to H&H is governed by the H&H Privacy Policy. To the extent there is an inconsistency between this Agreement and the H&H Privacy Policy, this Agreement shall govern.
If you make any submission you agree that you will not send or transmit to H&H by email, (including through the email addresses listed on the "Contact Us" link) any communication or content that infringes or violates any rights of any party. If you submit any business information, idea, concept or invention to H&H by email, you agree such submission is non-confidential for all purposes.
Advertisements, searches, and links to other sites
H&H may provide links to third-party web sites. H&H does not recommend and does not endorse the content on any third-party websites. H&H is not responsible for the content of linked third-party sites, sites framed within the H&H Site, third-party sites provided as search results, or third-party advertisements, and does not make any representations regarding their content or accuracy. Your use of third-party websites is at your own risk and subject to the terms and conditions of use for such sites. H&H does not endorse any product, service, or treatment advertised on the H&H Site.
Indemnity
You agree to defend, indemnify, and hold H&H, its officers, directors, employees, agents, licensors, and suppliers, harmless from and against any claims, actions or demands, liabilities and settlements including without limitation, reasonable legal and accounting fees, resulting from, or alleged to result from, your violation of these Terms and Conditions.
General
H&H is based in Salt Lake City, Utah, in the United States of America. H&H makes no claims that H&H and the Content are appropriate or may be downloaded outside of the United States. Access to the Content may not be legal by certain persons or in certain countries. If you access the H&H site from outside the United States, you do so at your own risk and are responsible for compliance with the laws of your jurisdiction.
The following provisions survive the expiration or termination of this Agreement for any reason whatsoever: Liability, User Submissions, User Submissions – image, video, audio files, Indemnity, Jurisdiction, and Complete Agreement.
Jurisdiction
You expressly agree that exclusive jurisdiction for any dispute with H&H, or in any way relating to your use of the H&H Site, resides in the courts of the State of UTAH and you further agree and expressly consent to the exercise of personal jurisdiction in the courts of the State of Utah in connection with any such dispute including any claim involving H&H or its affiliates, subsidiaries, employees, contractors, officers, directors, telecommunication providers, and content providers.
These Terms and Conditions are governed by the internal substantive laws of the State of Utah, without respect to its conflict of laws principles. If any provision of these Terms and Conditions is found to be invalid by any court having competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of these Terms and Conditions, which shall remain in full force and effect. No waiver of any of these Terms and Conditions shall be deemed a further or continuing waiver of such term or condition or any other term or condition.
Complete agreement
Except as expressly provided in a particular "legal notice" on the H&H Site, these Terms and Conditions and the H&H Privacy Policy constitute the entire agreement between you and H&H with respect to the use of the H&H Site and Content.
Thank you for your cooperation. We hope you find the HHmedicalcorp.com Site helpful and convenient to use! Questions or comments regarding this website, including any reports of non-functioning links, should be submitted to us via our Customer Support form or in writing.
Last Updated: January 2009