Privacy Policy - Percept Health

Who we are

Percept Health Inc. (“Percept Health” or “we”/ “us”/ “ours”) is a healthcare apps, products, and services company, primarily serving the US market. Our website address is https://percepthealth.com .

About This Policy

Percept Health respects and understands the importance of privacy – and is therefore committed to affording complete protection to the personal information of our clients and our clients’ clients who use our apps, products, and services, visitors of our website, prospective clients whose information we may have access to. It is in recognition of this need for security, our commitment to privacy, and secured management of any information received or collected by us that Percept Health has established this privacy policy (the “Privacy Policy”).

This Privacy Policy is applicable to our website, apps, products, and solutions. It also applies to our marketing practices.

This Privacy Policy explains how we collect, use, protect, and disclose your personal information, usage data, and message data when you use the Websites or the Services. This Privacy Policy also explains how you can manage your information preferences.

This Privacy Policy was last updated on February 9, 2022

Information we collect on our Website:

As a general practice, no personal information is collected about a visitor to the website, apart from the personal information submitted by the visitor himself/herself in a ‘contact us form. We shall use such personal information for the purpose you share it with us. However, at times, certain analytical information may be collected from you when you visit the website. Such information is aggregated to measure the number of visits, average time spent on the website, pages viewed, etc. to give us an idea of which parts of our website users are visiting, so we may improve the content to offer you better services. We do not link IP addresses to anything personally identifiable. This means that a user’s session will be tracked, but the user is anonymous.

Information we collect on our Emails:

We do contact organizations or executives as a part of our marketing campaigns. We do so, as we believe we have a legitimate interest to promote our products and services and it also benefits our prospects. We do not do any mass mailing and carefully reach out to selected professionals with a personalized approach. The emails we send you as part of our marketing campaigns allow us to know if you have received or opened the email or clicked a link within the email. If you do not want us to collect this information from marketing emails, you can opt out of receiving such emails by clicking on the unsubscribe button.

Information we collect about our clients and clients’ clients/consumers

When you register to use Percept Health apps, products, and services we collect information that is unique to you and identifies you. This may include your name, email address, phone number, date or birth, or other demographics and healthcare protected information all in accordance with applicable law. Some information is required, and other information is optional. Sometimes information regarding eligibility may be required.

Information we collect while using our apps, products, and solutions

When our apps, products, and solutions are used, information may be collected on how it is used. We may collect information (like an IP address, or the type of device used) that your browser or device typically sends to our servers whenever you use our Website or Services. We may use information that led you to our website – for example, the search terms used, or the device being used – through cookies and similar technologies. Often this information is anonymous and if associated with you kept confidential. If you do not want us to collect this information, you can tell us by opting out or by either declining or customizing cookie settings on our website.

Our Clients and Clients’ Clients

Our clients and their clients are healthcare organizations such as hospitals or hospital systems, health insurance providers, life sciences companies, medical devices companies, healthcare providers, or government agencies who use our Services to help them manage their business, patients, etc. Percept Health processes personal data through these Services only according to our clients’ instructions pursuant to a contract. In this way, Percept Health is a “processor” or a “service provider,” while our clients are the “controller” or the “business.” This information may include information related to your treatment, diagnoses, vital signs, or other health-related information. If you have questions about personal data you have entered into our Service on behalf of our clients or want to exercise any of your rights regarding your personal data, the privacy laws, and our client contract requires that we direct your inquiry back to that Percept Health client.

Links to Other Websites

Our websites may include buttons or tools that link to other companies’ services (for example, a Facebook or Twitter button). If you choose to engage with those buttons, we may collect information about your use of these features. In addition, when you see or interact with these buttons, tools, or content, or view a Website containing them, some information from your browser may automatically be sent to the social media site. Please read that company’s privacy policy for more information, as these sites may have their own privacy statements in place, which we recommend you review if you visit any linked websites. We are not responsible for the content of linked sites or any use of the sites or for the privacy practices of those other Web sites. We may collect information when you interact with our social networking pages or use the sign-on features.

Where do we store this data?

Information and data files are stored on our servers and the servers of companies we hire to provide services to us. We use Microsoft Azure cloud, Hubspot.com and secured on-prem infrastructure to store such data and the data is stored with strict security measures.

How do we use the information collected?

We use this information to:

Improve our Website user experience and communicate better to engage users.
To fulfil our contractual commitment and to enhance the performance of our contract with you or controllers who appoint us as processors
Allow you to use our Services and respond to your requests
Provide you with Services, support, or information requested and monitor effectiveness.
Operate, maintain, and add to the features and functionality of our Services.
Enhance the effectiveness of our marketing campaigns. To send marketing emails or messages related to our products and services.
Monitor aggregate metrics to conduct our market research and understand our customers better.

In all cases, this information is not shared with any third party for another purpose unless explicitly disclosed at the time of collection. It is used by Percept Health as above or to prevent/respond to the protection of our Services. In some cases, like with hosted services, we may share information with those that provide us with technology services (e.g., web hosting), but strictly for the purpose of carrying out our work as a service provider to Percept Health. All such vendors used by us have signed contractual terms with Percept Health to secure your data and if transmitted from the EEA, Switzerland, or the UK to third countries, we have signed Standard Contractual Clauses. We may be required to share information with law enforcement or other third parties when compelled to do so by court order or other legal processes or to comply with statutes or regulations.

If we merge with or are acquired by another company, and if all of our assets are acquired by another company, this information will most likely be one of the assets to be transferred. However, we will not transfer any personal information of our customers until necessary to provide you with a continuity of service and only when the new owner maintains and provides the same level of data privacy standards as we do. In such cases, we will provide you with notice and an opportunity to opt out of the transfer of identifiable data where such a right is required by law.

Do we sell personal information collected?

We do not share, sell, or lease any kind of personal information collected from any third parties.

How do we secure information collected?

We understand that the security of your information is vital and have in place strong administrative, technical, and physical security controls and measures to keep data safe and secure. Our privacy practices are designed to provide protection for your personal information, all over the world.

To protect information stored in our servers, through Microsoft Azure infrastructure in the US, access is limited (through user/password credentials and two-factor authentication) to those employees who require it to perform their job functions. We use industry-standard Secure Socket Layer (SSL) encryption technology to safeguard the account registration process and sign-up information. Other security safeguards include but are not limited to multifactor authentication, data encryption, firewalls, and physical access controls to buildings and files.

We would like to caution our visitors about phishing attacks, wherein unscrupulous third parties seek to extract sensitive and confidential information from you by posing as a genuine website or by sending an email misrepresenting it to be from a genuine source. Please be aware that we never seek sensitive or confidential information such as regarding your financial or health record through emails or through our websites. If you receive such a message claiming to be from Percept Health, then please do not reply to it and immediately bring it to our attention by contacting us at [email protected].

Percept Health also recognizes the receipt, transmission, or distribution of spam emails (unsolicited bulk emails) as a major concern and has taken reasonable measures, to minimize the transmission and effect of spam emails in its computing environment.

Can this information be reviewed?

In some cases, and at our discretion this information may be accessed by respective organizations to correct any mistake in that information, and to delete any information we no longer have business reasons for retaining. You can do this by sending us an email.

Percept Health strives to comply with all applicable laws around the globe that are designed to protect your privacy and information, no matter where that information is collected, transferred or retained. Although legal requirements may vary from country to country, we intend to adhere to the principles set forth in this Privacy Policy even if the information is transferred from your country to other countries that may not require an adequate level of protection for your information.

Rights over your personal data

California residents

If you are a California resident, California law provides you with specific rights regarding your personal information, including the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months; the right to request that we delete any of your personal information that we have collected from you, subject to certain exceptions; and the right to opt-out of the sale of your personal information. To make such a request, please contact us by email [email protected].

Please note that we are only required to respond to two such requests per individual each year. You also have the right not to be discriminated against if you exercise any of your rights under California privacy law. We may have collected the following categories of personal information of California residents in the past 12 months:

Identifiers such as a name, postal address, Internet Protocol address, email address, or other similar identifiers.
Categories of personal information described in subdivision (e) of California Civil Code Section 1798.80.
Characteristics of protected classifications under California or federal law.
Commercial information, including records of products or services purchased or considered.
Internet or other electronic network activity information.
Geolocation data.
Professional or employment-related information.
Education information.
Contents of SMS/text messages and chats.
Inferences drawn from any of the information identified above.

This information is collected and used for the purposes disclosed in this Privacy Policy. We may have disclosed any of the above categories of personal information pursuant to your consent or under a written contract with a service provider for a business purpose in 12 months immediately preceding the posting of this updated privacy policy.

EEA, Switzerland, UK

In various countries, including countries in the EEA, Switzerland, and the EEA, as well as in some U.S. states, upon their request, you may have the right to access your personal data and, if necessary, have it amended, deleted or restricted. You can also ask for some types of personal data to be delivered to them, or another organization they nominate, in a structured and machine-readable format. You may also:

Object to your personal data being processed for a particular purpose or to request that we stop using your information.
Request not to be subject to a decision based on automated processing and to have safeguards put in place if you are being profiled based on your personal data.
Ask us to transfer a copy of your personal data to you or to another service provider or third party where technically feasible and otherwise required by applicable regulations.
Withdraw, at any time, any consent that you have previously given to us for our use of your personal data.
Ask us to stop or start sending you marketing messages at any time. Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Request the erasure of your personal data. This enables you to ask us to delete or remove personal data where you think that we do not have the right to process it.
Any request for access to or a copy of your personal data must be in writing and we will endeavour to respond within a reasonable period and in any event within one month in compliance with Data Protection Legislation. We will provide this information free of charge unless the request is manifestly unfounded or excessive. We will comply with our legal obligations as regards any individual’s rights as a data subject.
Be informed about the processing of your personal data (i.e., for what purposes, what types, to what recipients it is disclosed, storage periods, any third-party sources from which it was obtained, confirmation of whether we undertake automated decision-making, including profiling, and the logic, significance, and envisaged consequences).

If you would like to contact us in relation to any of the rights set out above, please contact us by email at [email protected]. To protect your privacy and security, we may take reasonable steps to verify your identity before providing you with the details.

We will not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. In such instances, we will inform the requestor about the legal obligations that prevent us from fulfilling the request.

Right to Complain to the ICO

You can contact the ICO if you have any concerns about how Percept Health has handled your personal data and you also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. You can contact the ICO via their helpline. You can find out more information about your rights as a data subject, their regulatory powers, and actions they can take on their website https://ico.org.uk.

Notification of Changes

If we decide to change our privacy policy, we will post those changes on this page, so our users are always aware of the information we collect and how we use it. If at any point we decide to use personally identifiable information in a manner different from that stated at the time it was collected, we will notify users by way of an email. Users will have a choice as to whether or not we use their information in this different manner. We will use information in accordance with the privacy policy under which the information was collected.

Where links are provided to other websites it should be noted that they are not and cannot be governed by our Privacy Statement. We cannot guarantee your privacy when you access other websites through any link provided on this website.

Comments on this website

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For clients and our clients’ clients using our services, apps and products, we store the information we collect and keep it for the contract duration and any time after the contract that’s mentioned in the contract.