Privacy Policy
January 2007
Your trust is our greatest asset. We make every reasonable effort to ensure that
information we hold is confidential and secure. We disclose our information-security
practices to you as clearly and fully as possible. These practices are reviewed
regularly, and many of our business decisions, including web design, technology
selections, and third-party business relationships, begin and end with considerations
for your privacy.
While our philosophy will not change, the details of this policy will change over
time as we add additional services and form relationships with new business partners.
Please refer back to this page periodically. The date this policy was last revised
will always appear at the top of the policy pages.
If you have any questions about this Privacy Policy or our practices, please e-mail
us at
support@FormedicMHQ.com or call us at (877) 599-5118.
This Policy applies only to the Formedic MHQ service.
a. You control access to your account and decide
whether to share your start link with patients. You may protect your MHQ interview
start link with a password to prevent unauthorized patients from performing interviews.
b. No one other than yourself is permitted to
make changes or updates to your account. It is your responsibility to protect your
account username and password and thus your account from unauthorized use.
a. The physical security of your account is
protected in many ways. The facilities that house our servers, network devices,
backup storage media and other equipment and information are physically secured
and attended. Access is strictly limited to only those individuals who require it
for legitimate, documented business purposes. Those individuals will have access
to the minimum amount of information necessary to accomplish their business purpose.
b. We regularly evolve and update our internal
information security policies and our business continuity and disaster recovery
plans. We perform risk assessment, security audits, and system test activities on
an ongoing basis. Our employees and contractors receive frequent training and reminders
regarding information security and protecting the confidentiality of your information.
c. Our employees and contractors have occasional,
legitimate needs to access our data servers for purposes of system troubleshooting
and maintenance. Such access is permitted only for those who have such needs and
that they access the minimum necessary amount of information needed. All such individuals
have signed confidentiality agreements with us and are periodically made aware of
their obligations regarding user information. Access is controlled via pre-assigned
user accounts that require multiple levels of authentication. All staff are periodically
trained regarding security protection of their personal workstations. Our systems
are monitored to detect breaches in security. Employees or contractors who violate
our policies are handled accordingly, up to and including dismissal.
a. You control the use of your account data.
Except as expressly disclosed to you, no use of your account information will be
made without your express consent.
b. We collect and use network utilization and
activity statistics so we can understand the ways in which our sites and services
are being utilized. This data is stored anonymously and it is only used in the form
of aggregated statistics. This aggregated, anonymous data may also be shared with
business partners. It is our policy not to use activity related data to target our
users with solicitations of any kind.
a. We use non-persistent session state cookies
to establish and sustain login sessions. These cookies disappear after you close
your browser. The cookies are used to monitor your session and to automatically
log you out of our service if you exceed 60 minutes of inactivity. Other sites cannot
use cookies created by our sites, and we do not use cookies to track your activities
outside of our own sites.
b. A cookie is a small text file that Web sites
use to recognize a user. At its simplest, cookie technology works by carrying a
unique ID generated by the server that creates the cookie. A cookie does not pose
a threat to the computer that accepts it.
We cooperate with law enforcement inquiries as a matter of policy. We use IP addresses
and other available information to attempt to identify a user when we are legally
compelled to do so or when we feel it is necessary to protect our services, sites,
customers, or others.
Unfortunately, no data protection method or combination of methods can be guaranteed
100 percent secure. We take all reasonable steps to protect your personal information
as described throughout this policy, but we cannot ensure or warrant our ability
to do so. As a result, you use our content, products, and services at your own
risk. We will not be liable for disclosures of your personal information
due to errors in transmission or unauthorized acts of third parties.