Elation Health, Inc. (“Elation Health”) is committed to maintaining the security and privacy of your personal information collected through this website, www.elationhealth.com (the “Website”), the Elation Health electronic health record (the “EHR”) and the Elation Health patient portal, Elation Passport (the “Patient Portal”). This Privacy Policy discloses Elation Health’s information collection and dissemination practices in connection with the Website, the Clinical EHR and the Patient Portal and applies solely to the information that we collect through those means. This Privacy Policy does not address personal information that you provide to us in other contexts (e.g., through a business or investment relationship not expressly described in this Privacy Policy).

Contents

1. The Electronic Medical Record
2. The Patient Portal
3. The Website
4. General Terms

The Electronic Health Record

Elation Health provides the web-based Clinical EHR to customers who enter into an Elation Service Agreement (“Customers”), who then authorize Clinical EHR users, including physicians, physician assistants, nurse practitioners and non-physician staff members (“Authorized Users”). Customers and Authorized Users are responsible for determining uses and disclosures of patient medical information maintained in the Clinical EHR, in accordance with their legal and professional responsibilities as health care professionals and state and federal medical privacy laws, including the federal Health Insurance Portability and Accountability Act (“HIPAA”). To the extent that Elation Health receives or maintains patient medical information in the course of providing the Clinical EHR, that information is secured, used and disclosed only in accordance with Elation Health’s legal obligations as a “business associate” under HIPAA.

The Patient Portal

Elation Health Customers may choose to make the Patient Portal available to patients to enable certain interactions between the Customer, Authorized Users and patients, including scheduling appointments, discussing medical treatment, sending medication prescription-related messages, and enabling patient viewing of a portion of the Clinical EHR. Customers are solely responsible for the content of the patient’s medical record maintained in the Clinical EHR and determining the portion of the Clinical EHR that may be viewed by the patient through the Patient Portal.

Elation Health may utilize patient medical information on a limited basis as necessary to provide the Patient Portal services, including the following uses and disclosures:

  • An email address and a cell phone number are required to be stored in the Clinical EHR before an invitation can be sent to the patient to open a Patient Portal account.
  • When a letter or a response from a doctor is opened by the patient through the Patient Portal, the opened status will be communicated to the doctor inside the Clinical EHR.
  • If instructed by the patient to fax a clinical profile derived from the patient’s medical record (a “Profile”) to a fax machine within the Portal, Elation Health will fax such documents on the patient’s behalf.
  • Elation Health will send email or text notifications to the patient when a letter from the doctor or clinical document is available in the Patient Portal. The email or cell phone number used is documented in the patient’s chart in the Clinical EHR.

Elation Health will maintain aggregate information regarding usage of the Patient Portal for product improvement purposes, but that data will not identify individual patients. Elation Health will not sell any personal information provided by a patient through the Patient Portal to a third party.

The Website

Acceptance of Privacy Policy

By using the Website, you signify your acceptance of this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use this Website. Your continued use of the Website following the posting of changes to these terms will mean that you accept those changes.

Personal Information Provided by You

Except as described in this Privacy Policy, Elation Health only collects your personally identifiable information (“PII”) through this Website when you choose to provide such information, such as when you use the “Contact Us” feature or submit a job application. PII can include your name, date of birth and zip code. Elation Health uses your PII to address your requests for information, products or services. Elation Health will not sell, rent, license, or trade your PII with third parties for their own direct marketing use unless we receive your express consent to do so. Unless you give us permission to do so, Elation Health will not share your PII other than as specified in this Privacy Policy.

Disclosures to Third Parties Assisting In Our Operations

Elation Health may share your PII under confidentiality agreements with other companies that work with, or on behalf of, Elation Health to provide products and services. These companies, which may include members of Elation Health’s corporate family, may use your PII to assist Elation Health in its operations. However, these companies do not have any independent right to share this information.

Disclosures Under Special Circumstances

We may provide information about you to respond to subpoenas, court orders, legal process or governmental regulations, or to establish or exercise our legal rights or defend against legal claims. We believe it is necessary to share information in order to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.

Business Transfers

We may share your PII with other business entities, in connection with the sale, assignment, merger or other transfer of all or a portion of Elation Health’s business to such business entity. We will require any such successor business entity to honor the terms of this Privacy Policy.

Automatically Collected Information and Anonymous Information

Each time a visitor comes to the Website, Elation Health collects some information to improve the overall quality of the visitor’s online experience.

Aggregated Data

Elation Health collects aggregate queries for internal reporting and also counts, tracks, and aggregates the visitor’s activity into Elation Health’s analysis of general traffic-flow at the Website. To these ends, Elation Health may merge information about you into aggregated group data. In some cases, Elation Health may remove personal identifiers from PII and maintain it in aggregate form that may later be combined with other information to generate anonymous, aggregated statistical information. Such anonymous, group data may be shared on an aggregated basis with Elation Health’s affiliates, business partners, service providers and/or vendors; if it does so, Elation Health will not disclose your individual identity.

Web Server Logs and IP Addresses

An Internet Protocol (“IP”) address is a number that automatically identifies the computer/device you have used to access the Internet. The IP address enables our server to send you the web pages that you want to visit, and it may disclose the server owned by your Internet Service Provider. Elation Health may use IP addresses to conduct website analyses and performance reviews and to administer the Website.

Cookies and Web Beacons

Cookies are pieces of information that a website transfers to a user’s computer for purposes of storing information about a user’s preferences. Cookies in and of themselves do not personally identify users, although they do identify a user’s computer. Many websites use cookies as a standard practice to provide useful features when a user visits the website and most web browsers are set up to accept cookies. Elation Health uses cookies to improve your online experience when visiting the Website. You can set your browser to refuse cookies, but some portions of the Website may not work properly if you refuse cookies. Some of the Website’s web pages may use web beacons in conjunction with cookies to compile aggregate statistics about website usage. A web beacon is an electronic image (also referred to as an “action tag,” “single-pixel,” or “clear GIF”) that is commonly used to track the traffic patterns of users from one web page to another in order to maximize web traffic flow and to otherwise analyze the effectiveness of websites. Some web beacons may be unusable if you elect to reject their associated cookies.

Referrals/Links

The Website may contain links to third-party websites that may offer information of interest. This Privacy Policy does not apply to those websites, and Elation Health recommends reviewing those websites’ privacy policies individually. Elation Health assumes no responsibility for any material outside of the Website, including any website that may be accessed through a link from the Website.

Security

Elation Health understands that storing our data in a secure manner is essential. Elation Health stores PII and other data using industry-standard physical, technical and administrative safeguards to secure data against foreseeable risks, such as unauthorized use, access, disclosure, destruction or modification. Please note, however, that while Elation Health has endeavored to create a secure and reliable website for users, the confidentiality of any communication or material transmitted to/from the Website or via e-mail cannot be guaranteed.

Children’s Privacy Protection

Elation Health understands the importance of protecting children’s privacy in the interactive online world. The Website is not designed for, or intentionally targeted at, children 13 years of age or younger. It is not our policy to intentionally collect or maintain information about anyone under the age of 13. No one under the age of 13 should submit any PII to Elation Health and/or the Website.

Changes

You may review and request changes to your PII that Elation Health has collected, including the removal of your PII from Elation Health’s databases in order to prevent receipt of future communications or to halt receipt of our Website services, using any of the following options:

You can send your request via e-mail to: privacy@elationhealth.com, or mail your request to the following postal address:

Elation Health, Inc.
550 15th Street, Suite 21
San Francisco, CA 94103

General Terms

Policy Updates

This Privacy Policy may be revised from time to time as we add new features and services, as laws change, and as industry privacy and security best practices evolve. We display a version number and a date on the policy in the upper right corner of this Privacy Policy so that it will be easier for you to know when there has been a change. If we make any change to this Privacy Policy regarding use or disclosure of PII, we will provide advance notice on this Website. Small changes or changes that do not significantly affect individual privacy interests may be made at any time and without prior notice.

Questions?

If you have any questions about this Privacy Policy or about Elation Health’s handling of your information, please contact privacy@elationhealth.com.