Effective: November 2017
The Information We Collect, Use, and Disclose
Non-Identifiable Health Information
When you visit the Website, it automatically captures your domain name, the IP address of the Web page from which you enter the Website, the pages you visit on the Website, and the amount of time you spend on the Website. In addition, we collect information about the use of various features of the Website, such as the extent to which certain features are used and the links or information that users access. We use this information to better understand how the Website is used, to improve and expand the Website, and to enhance the users’ experience with the Website.
Like many companies, we may use "cookie" technology. “Cookies” are small pieces of information that are stored by your browser on your computer’s hard drive. They enhance your online experience by saving your preferences while you are visiting a particular website. The cookies do not contain any identifiable health information and cannot profile your system or collect information from your hard drive.
When you view the Website or Portal, we may place a cookie on your computer, which may be either temporary or permanent. Temporary cookies are used to complete transactions with this Website or Portal and for other purposes such as counting the number of visits to our certain web pages. These temporary cookies are eliminated when you exit your browser.
A permanent cookie may also be stored on your computer by your browser. When you log in, this type of cookie tells us whether you've visited us before or if you are a new visitor. The cookie doesn't obtain any identifiable health information about you or provide us with any way to contact you, and the cookie doesn't extract any information from your computer.
The "help" portion of the toolbar on most browsers will tell you how to prevent your browser from accepting certain types of cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Please note that disabling temporary cookies may prevent you from using and accessing this Website and Portal. Disabling permanent cookies may also impact your use and access of the Website and Portal and in particular may not allow you to see any personalization on the Website or Portal that you may activate.
In addition, if you visit our Website again after deleting a cookie, a new cookie may be activated.
We may also log and track IP addresses for systems administration purposes and for reporting usage trends. Your IP address is usually associated with the physical place from which you enter the Internet, the name of the domain and host from which you access the Internet, the browser software you use and your operating system, and the date and time you access the Website or Portal. By collecting your IP address, we may record the page that linked you to this Website, the web pages you visit, the ads you see or click on, and other information about the type of web browser, computer, platform and settings you are using, and any search terms you enter on this Website or Portal. IP addresses are not used to track an individual user’s session. This information only helps us determine how often different areas of our Website and Portal are visited.
We may combine non-identifiable information collected automatically (such as through IP addresses, cookies or click-stream monitoring) with any previously submitted personal information that we may have received from you.
We may collect your geographic location based on your IP address and other location-based data.
We may also use various third party vendors to collect, track, and analyze analytical data regarding Website usage and trends.
Users may have the opportunity to participate in various HST surveys depending on the survey and as permitted by law. You may choose not to participate in these surveys.
Identifiable Health Information
You are not required to provide identifiable health information to visit this Website. However, you must provide certain identifiable health information in order to complete your registration for the non-public Portal and/or the HST Connect mobile application. We will collect identifiable health information from you with your knowledge during the registration process and in the event you request information or services. We may collect any identifiable health information that you provide to us, including but not limited to your name, address, e-mail address, gender, birthdate and phone number. If you authorize your group health plan (or your group health plan’s third party administrator) to send you the link to register to access the Portal, certain basic information may be pre-filled into your Portal and/or HST mobile application registration, which you will need to verify.
When you register for the Portal and/or the HST Connect mobile application, the registration process requires you to choose a user name and password for your account, which you should keep and maintain as confidential. If you choose to share your user name and password you understand that those individuals to whom you share that information will have access and/or modify your identifiable health information as though they were you. You will be responsible for all activities by users resulting from sharing or not maintaining the confidentiality of your user name or password.
We may share your information with our suppliers and vendors to the limited extent permitted by applicable law. We require those suppliers and vendors to comply with all applicable data privacy laws and regulations, including HIPAA. We do not sell, lease, or rent your identifiable health information. We may also use your geographic location to provide you with specific content and direct you to your closest service providers to the extent permitted by applicable law.
We may also use your information to customize your browsing experience and communicate with you and otherwise respond to your questions and suggestions regarding use of the Portal as may be permitted by applicable law.
In accordance with HIPAA, we may aggregate and de-identify identifiable health information, either alone or with other data, to create anonymous "aggregate data" regarding the users of our Website, Portal and/or the HST Connect mobile application. Aggregate and de-identified data is information that describes the habits, treatment plans, usage patterns, other data and/or demographics of users as a group but does not reveal the identity of particular users. This data will not identify you, but will be used as statistical information to determine such things as user demographics and usage patterns. HST may use aggregate data to understand the needs of our community of users and determine what kinds of programs and services we can help provide.
Other Use and Ownership
We reserve the right to share your information collected from this Website, Portal and/or the HST Connect mobile application with third parties to the extent permitted by applicable law including but not limited to the requirements under HIPAA, and, in the case of identifiable health information, pursuant to HST’s business associate agreement with the applicable group health plan.
While no website can guarantee security, we maintain physical, administrative, electronic, technical and procedural safeguards to help protect your personal information collected via the Portal as required by applicable law. While we cannot guarantee that loss, misuse or alteration to data will not occur, we use industry standards, such as Secure Socket Layers ("SSL") technology, to help safeguard against such occurrences. In certain areas, the information passed between your browser and our system is encrypted with SSL technology (which covers any messages, IHI or communications a person directs to HST) to create a protected connection between you and our website to ensure confidentiality.
Our data center is both physically and electronically secured. Our servers are protected from open access to the Internet by using firewall and encryption technology. We limit access to personally identifiable information about you to our employees and third-party agents, who we reasonably believe need to have access to your information to provide you with the information or services you request via the Portal.
You should be aware, however, that website security technology changes rapidly and that any security system can be “hacked.” Accordingly, HST cannot guarantee that these safeguards will ensure the safety of your information in all situations or that your information will not be intercepted while being transmitted to or by us over the Internet. In any event, HST is not responsible for (and not liable for) third parties’ illegal or criminal activity.
In order to help maintain security, you should never share your user ID or password and should always sign out when you are finished using the Portal and/or HST Connect mobile application.
We will maintain your information and allow you to request updates at any time by logging into your Portal or your HST Connect account to access your information, by contacting your group health plan’s third party administrator, or by sending a message to us at the contact information below. We will take steps to make sure that any updates that you provide are processed in a timely and complete manner.
Third Party Websites
What if I am accessing this Portal from outside of the United States?
If you are visiting our Website or Portal from outside the United States, the data protection and laws of other countries might not be as comprehensive as those in the United States.
Transfer of Data
Important Note Regarding Children
The Website and Portal are not primarily intended for individuals under the age of eighteen (18). Accordingly, we will not knowingly collect or post information from children without parental or guardian consent. Moreover, we will not knowingly collect or use any personal data collected from children for any purpose whatsoever, including disclosure to any third party. To best protect your child’s privacy, please carefully supervise your child’s access to the Internet and this Website.
HSTechnology Solutions, Inc.
23382 Mill Creek Dr. Ste 200
Laguna Hills, CA 92653