HSTECHNOLOGY SOLUTIONS, INC. WEBSITE AND PORTAL PRIVACY POLICY


Effective: November 2017

Our policy regarding the collection and use of your information via the HSTechnology Solutions, Inc. Website and Portal (“Privacy Policy”) is set forth below. HSTechnology Solutions, Inc. ("HST", “us”, “we”, or “our”) manages the Website and Portal, as well as the HST Connect mobile application, and is committed to disclosing its privacy and data security policies.


Agreement to Privacy Policy


Your access and use of the Website, Portal and/or HST Connect mobile application is subject to your agreement with the below policy, along with the Terms & Conditions of Use and your Portal Registration Agreement. By using this Website, Portal and/or the HST Connect mobile application, you expressly agree to the terms of this Privacy Policy and consent to the collection and use of information as discussed in this Privacy Policy.


PLEASE PRINT A COPY OF THIS PRIVACY POLICY FOR YOUR RECORDS.


IF YOU DO NOT AGREE WITH THE PRIVACY POLICY, PLEASE DO NOT USE OR ACCESS THE WEBSITE OR PORTAL FOR ANY PURPOSE.


If we make significant changes to these practices, we will post the updated policy here. Each version of this policy will be identified at the top of the page by its effective date. Please check back periodically to see if there are any changes. We reserve the right to change this Privacy Policy, or any other policy or practice, at any time. Your use, or continued use, of Website, Portal and/or the HST Connect mobile application will be conclusively deemed acceptance of this Privacy Policy and any changes or modification to this Privacy Policy, respectively. If you do not agree to the terms of this policy or any revised policy, please exit the site or application immediately.


The Information We Collect, Use, and Disclose


Non-Identifiable Health Information

When you visit the Website, it automatically captures your domain name, the IP address of the Web page from which you enter the Website, the pages you visit on the Website, and the amount of time you spend on the Website. In addition, we collect information about the use of various features of the Website, such as the extent to which certain features are used and the links or information that users access. We use this information to better understand how the Website is used, to improve and expand the Website, and to enhance the users’ experience with the Website.


Cookies

Like many companies, we may use "cookie" technology. “Cookies” are small pieces of information that are stored by your browser on your computer’s hard drive. They enhance your online experience by saving your preferences while you are visiting a particular website. The cookies do not contain any identifiable health information and cannot profile your system or collect information from your hard drive.

When you view the Website or Portal, we may place a cookie on your computer, which may be either temporary or permanent. Temporary cookies are used to complete transactions with this Website or Portal and for other purposes such as counting the number of visits to our certain web pages. These temporary cookies are eliminated when you exit your browser.

A permanent cookie may also be stored on your computer by your browser. When you log in, this type of cookie tells us whether you've visited us before or if you are a new visitor. The cookie doesn't obtain any identifiable health information about you or provide us with any way to contact you, and the cookie doesn't extract any information from your computer.

The "help" portion of the toolbar on most browsers will tell you how to prevent your browser from accepting certain types of cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Please note that disabling temporary cookies may prevent you from using and accessing this Website and Portal. Disabling permanent cookies may also impact your use and access of the Website and Portal and in particular may not allow you to see any personalization on the Website or Portal that you may activate.

In addition, if you visit our Website again after deleting a cookie, a new cookie may be activated.


IP Addresses

We may also log and track IP addresses for systems administration purposes and for reporting usage trends. Your IP address is usually associated with the physical place from which you enter the Internet, the name of the domain and host from which you access the Internet, the browser software you use and your operating system, and the date and time you access the Website or Portal. By collecting your IP address, we may record the page that linked you to this Website, the web pages you visit, the ads you see or click on, and other information about the type of web browser, computer, platform and settings you are using, and any search terms you enter on this Website or Portal. IP addresses are not used to track an individual user’s session. This information only helps us determine how often different areas of our Website and Portal are visited.

We may combine non-identifiable information collected automatically (such as through IP addresses, cookies or click-stream monitoring) with any previously submitted personal information that we may have received from you.


Geographic Location

We may collect your geographic location based on your IP address and other location-based data.


Analytics

We may also use various third party vendors to collect, track, and analyze analytical data regarding Website usage and trends.


Surveys

Users may have the opportunity to participate in various HST surveys depending on the survey and as permitted by law. You may choose not to participate in these surveys.

Any survey responses that you choose to submit may be aggregated, de-identified and provided or sold to third parties. We will not sell, share, or rent the information that is collected to others in ways that differ from what is disclosed in this Privacy Policy.


Identifiable Health Information

You are not required to provide identifiable health information to visit this Website. However, you must provide certain identifiable health information in order to complete your registration for the non-public Portal and/or the HST Connect mobile application. We will collect identifiable health information from you with your knowledge during the registration process and in the event you request information or services. We may collect any identifiable health information that you provide to us, including but not limited to your name, address, e-mail address, gender, birthdate and phone number. If you authorize your group health plan (or your group health plan’s third party administrator) to send you the link to register to access the Portal, certain basic information may be pre-filled into your Portal and/or HST mobile application registration, which you will need to verify.

When you register for the Portal and/or the HST Connect mobile application, the registration process requires you to choose a user name and password for your account, which you should keep and maintain as confidential. If you choose to share your user name and password you understand that those individuals to whom you share that information will have access and/or modify your identifiable health information as though they were you. You will be responsible for all activities by users resulting from sharing or not maintaining the confidentiality of your user name or password.

We may share your information with our suppliers and vendors to the limited extent permitted by applicable law. We require those suppliers and vendors to comply with all applicable data privacy laws and regulations, including HIPAA. We do not sell, lease, or rent your identifiable health information. We may also use your geographic location to provide you with specific content and direct you to your closest service providers to the extent permitted by applicable law.

We may also use your information to customize your browsing experience and communicate with you and otherwise respond to your questions and suggestions regarding use of the Portal as may be permitted by applicable law.


Aggregate Data

In accordance with HIPAA, we may aggregate and de-identify identifiable health information, either alone or with other data, to create anonymous "aggregate data" regarding the users of our Website, Portal and/or the HST Connect mobile application. Aggregate and de-identified data is information that describes the habits, treatment plans, usage patterns, other data and/or demographics of users as a group but does not reveal the identity of particular users. This data will not identify you, but will be used as statistical information to determine such things as user demographics and usage patterns. HST may use aggregate data to understand the needs of our community of users and determine what kinds of programs and services we can help provide.


Other Use and Ownership

We reserve the right to share your information collected from this Website, Portal and/or the HST Connect mobile application with third parties to the extent permitted by applicable law including but not limited to the requirements under HIPAA, and, in the case of identifiable health information, pursuant to HST’s business associate agreement with the applicable group health plan.

HST maintains full rights to any information collected on the Website, Portal and/or the HST Connect mobile application, and may freely collect, use and disclose such information unless prohibited by this Privacy Policy or applicable law as stated above.


Security

While no website can guarantee security, we maintain physical, administrative, electronic, technical and procedural safeguards to help protect your personal information collected via the Portal as required by applicable law. While we cannot guarantee that loss, misuse or alteration to data will not occur, we use industry standards, such as Secure Socket Layers ("SSL") technology, to help safeguard against such occurrences. In certain areas, the information passed between your browser and our system is encrypted with SSL technology (which covers any messages, IHI or communications a person directs to HST) to create a protected connection between you and our website to ensure confidentiality.

Our data center is both physically and electronically secured. Our servers are protected from open access to the Internet by using firewall and encryption technology. We limit access to personally identifiable information about you to our employees and third-party agents, who we reasonably believe need to have access to your information to provide you with the information or services you request via the Portal.

You should be aware, however, that website security technology changes rapidly and that any security system can be “hacked.” Accordingly, HST cannot guarantee that these safeguards will ensure the safety of your information in all situations or that your information will not be intercepted while being transmitted to or by us over the Internet. In any event, HST is not responsible for (and not liable for) third parties’ illegal or criminal activity.

In order to help maintain security, you should never share your user ID or password and should always sign out when you are finished using the Portal and/or HST Connect mobile application.


Access

We will maintain your information and allow you to request updates at any time by logging into your Portal or your HST Connect account to access your information, by contacting your group health plan’s third party administrator, or by sending a message to us at the contact information below. We will take steps to make sure that any updates that you provide are processed in a timely and complete manner.


Third Party Websites

To the extent hyperlinks are utilized to access third party sites, users should be aware that these third party web sites are not controlled by HST and, therefore, are not subject to this Privacy Policy. Users should check the privacy policies of these individual sites to see how their personal information will be utilized by the proprietors of those third party web sites.


What if I am accessing this Portal from outside of the United States?

If you are visiting our Website or Portal from outside the United States, the data protection and laws of other countries might not be as comprehensive as those in the United States.


Transfer of Data

In the event of a change in control of HST or sale by HST of substantially all of its assets or other acquisition, merger or reorganization, any information owned by or in the control of HST may be transferred to such HST successor, who will comply with the terms of this Privacy Policy.


Important Note Regarding Children

The Website and Portal are not primarily intended for individuals under the age of eighteen (18). Accordingly, we will not knowingly collect or post information from children without parental or guardian consent. Moreover, we will not knowingly collect or use any personal data collected from children for any purpose whatsoever, including disclosure to any third party. To best protect your child’s privacy, please carefully supervise your child’s access to the Internet and this Website.


What if I have questions or concerns regarding this Privacy Policy?

If you have any questions about this Privacy Policy or the use of your information by HST, please contact us at:

HSTechnology Solutions, Inc.

23382 Mill Creek Dr. Ste 200

Laguna Hills, CA 92653

support@hstechnology.com