The purpose of this Policy is to describe how Health Gorilla and our partners collect, use, and share information about You. This Policy may incidentally describe how Our Services gather and use information about other individuals or information about You that may be submitted by another Participant.
Health Gorilla is dedicated to protecting the privacy of the individuals whose health information is stored or transmitted by Our Service and of the users of any of Our Services. Maintaining your trust is important to us, and by having this Policy available, You agree and fully consent to all of the terms and conditions of this Policy.
Health Gorilla, (referred to as “Health Gorilla,” “we” or “us”), is committed to protecting your privacy. This Policy also describes how we collect, use, secure and share your personal information when you:
You agree that You will use other persons’ Health Information available on or through this site (whether or not Protected Health Information) strictly in accordance with applicable laws and regulations, and You will ensure that others under your control who have access to such information also comply with applicable laws and regulations. You are solely responsible for obtaining and maintaining all patient consents and authorizations necessary for Your use of Our Services and Your technology to the extent that it facilitates access to Your Authorized Workforce and/ or any other Participant.
To access your account, You must supply the identifier We assign to You. With this information, We can verify You and permit You to view Data in the Services. We log and audit system use in order to ensure that Participants are using the Services appropriately. If We have questions about Your use of the Services, We may contact You. We may also disclose Your identity, or the identity of Participants in your Authorized Workforce to others to assist in the investigation of suspected misuse of Our Services, and otherwise to ensure the proper operation of Our Services.
Throughout this Policy we use the term “Personal Information” to describe any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular person or household that does not include Protected Health Information as defined in HIPAA. This Policy covers all personal information and that we collect from you or on your behalf through our Services. We may collect the following types of personal information:
We may store your personal information for as long as we need it to provide you our Services and to perform the activities described in this Policy, all to the extent permitted by law.
When you sign up for and use Health Gorilla Services, we collect personal information from you for account creation and maintenance (“Account Information”). Such Account Information includes, as applicable or permitted under law, items such as your name, address, e-mail address, telephone number, your contact preferences, device identifiers, IP address. From time to time, we may send you emails that communicate information about your account, about the Services, or emails that Health Gorilla reasonably deems are required by law or necessary to prevent or mitigate a security or fraud risk, or to continue to provide you with the Services.
Records Collection and Sources. We collect personal information about you, including Health Information, using one or more of the following processes:
Product Interaction and Feedback. We collect search queries within the Services, and transactions you make regarding the Services. We collect product interaction and feedback that you provide to us through our Service to provide you with the Services, improve and enhance the Services, and conduct research and analytics.
User Forums and User Generated Content. We may offer forums for the exchange of information among authorized Participants. You agree to assume all responsibility for Your use of such forums. In particular, You understand that We do not assure the accuracy, reliability, confidentiality or security of information made available through the use of Our forums. You agree not to disclose any unauthorized Data and/or Health Information. Health Gorilla may provide you with an opportunity to engage in blog discussions, message boards, chat rooms, and other forms of social networking and post reviews and post content, such as messages relating to healthcare experiences, and interact with other users (User Generated Content” or “UGC”) and such information may include communications maintained by outside platforms such as LinkedIn, You Tube, or Twitter.
Health Gorilla will use your information to create and manage your account, and also for the following purposes:
In addition to the sharing identified earlier in this Policy, Health Gorilla may share data related to your usage of the Services – including Account Information as follows:
In any circumstance where your consent is sought prior to Health Gorilla sharing Personal or Health Information about you, you will be able to withdraw that consent at any time, provided we can individually identify you in such data. Such withdrawal of consent will apply only to new uses or disclosures of Personal or Health Information about you within a reasonable amount of time after Health Gorilla has received the withdrawal or at such other time as required by applicable law.
This Section only applies to users of our Services that reside in the State of California. For purposes of this
Section, the term “personal information” does not include information subject to HIPAA or the California Confidentiality of Medical Information Act.
California privacy rights. In addition to the rights described elsewhere in this Policy, California residents have the right to (1) request additional disclosures about your personal information we collect, use, disclose and sell; (2) request access to and deletion of your personal information; (3) opt out of the sale of your personal information; and (4) obtain a copy of your personal information. We will not discriminate against you for exercising any of these rights, for example, by charging a different price or denying services. However, we may charge a different price or rate or provide a different level or quality of services when that difference is reasonably related to the value provided to you by the data.
If you make a request related to personal information about you, you will be required to supply a valid means of identification as a security precaution. We will verify your identity with a reasonably high degree of certainty using the following procedure where feasible: we will match identifying information you provide when making the request to the personal information maintained by us or use a third-party identity verification service. If it is necessary to collect additional information, we will use the information only for verification purposes and will delete it as soon as practicable after complying with your request. For requests related to particularly sensitive information, we may require additional proof of your identity. We will process your request within the timeframe provided by applicable law.
Categories of personal information we collect. In the previous 12 months, Health Gorilla has collected the following categories of personal information:
Sources from which we collect personal information. Health Gorilla may collect personal information from you directly. Health Gorilla may also receive personal information about you from third parties or through automated means.
Purpose for collecting or selling personal information. Your personal information may be collected or used for the purposes described in this Policy, as well as for other purposes that may be described to you at the time we collect your personal information.
California Shine the Light law. California residents may also request information from us once per calendar year about any personal information shared with third parties for the third party’s own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To make such a request, please reach us at the contact information listed below. This request may be made no more than once per calendar year, and we reserve our right not to respond to requests submitted other than to the email or mailing addresses specified below.
Do Not Track Signal
Certain web browsers and other devices you may use to access the website may permit you to submit your preference that you do not wish to be “tracked” online. Like many websites, our website is not currently designed to recognize a Do Not Track signal from a web browser.
If you live in another part of the world not specifically mentioned here, please contact us as detailed in the Contacting Us section of this Policy.
Any claim relating to the use of this site or the systems or information to which it gives access shall be governed by the internal substantive laws of the State of Delaware.
Term; Modification; Suspension; Termination
We may update or change the Services and/ or the terms set forth in this Policy from time to time and recommend that You review the Agreement on a regular basis. You understand and agree that Your continued use of the Services after the Agreement has been updated or changed constitutes Your acceptance of the revised Policy. We reserve the right to make changes to our Policy at any time without prior notice and to apply the changes to information received by Us prior to the effective date of the change.
Our website is owned and operated by Health Gorilla, Inc.. If you have any questions about this Policy or our Services, you can email us at firstname.lastname@example.org, call us at (844) 446-7455, or write to us via regular mail at Health Gorilla, Inc., Attention: Privacy Officer, 800 W El Camino Real, Suite 100, Mountain View CA 94040.