Privacy Policy

Introduction

ConnectHealth provides a website and mobile app:

• “ConnectHealth.mx” (the Website)

The website collectively referred to in this Privacy Statement as the “Site”.

The Site allows our members and other users to view health-related information, communicate with our physicians and staff, coordinate clinical and health plan services, and access additional services.

This Privacy Statement applies to the Site, which is owned and operated by ConnectHealth. (“Connect Health”). This Privacy Statement describes how ConnectHealth collects and uses the personal information you provide and other information that is collected from your use of the Site. Also describe the choices available to you regarding our use of your personal information and how you can access and update this information.

Personal information means information that is individually identifiable. Information that has been anonymized by ConnectHealth or others is no longer personal information and is not covered by the terms of this Privacy Statement.

All of your protected health information maintained by ConnectHealth, including information you provide on the Site, is also subject to the Notice of Privacy Practices published by ConnectHealth under the Health Insurance Portability and Accountability Act (“HIPAA”). The Notices of Privacy Practices may contain additional provisions related to the use and disclosure of your information that go beyond the terms of this Privacy Statement.

ConnectHealth is committed to protecting the privacy of users of the Site. We will use and disclose your personal information as described in this Privacy Statement.

Site Privacy Statement

The use and disclosure of health information includes the use of the information to provide treatment to the individual, to make payment for such treatment, and to conduct ongoing quality improvement activities. Our use and disclosure of an individual’s personal information (including health information) is limited as required by state and federal law. We do not sell or rent personal information about visitors to the Site.

Security

The Site has security measures in place that are designed to help protect against the loss, misuse, unauthorized access, or alteration of the information under our control, both during transmission and once the information is received. These measures include data encryption using the Secure Socket Layer (SSL) system and the use of a secure messaging service when we send your personal information electronically to the Site. Despite these measures, the confidentiality of any communication or material transmitted to or from us through the Site by Internet, text message or email cannot be guaranteed.At your discretion, you may contact us at the mailing address or phone number listed in the “Questions, Complaints, and Contacts” section at the end of this Privacy Statement.

Revisions to the Privacy Statement

We may revise this Privacy Statement from time to time as we add new features or change the way we manage information, or as laws change that may affect our services. If we make material changes to our Privacy Statement, we will post a notice of this on our Site prior to the changes becoming effective. Any revised Privacy Statement will apply both to information we already have about you at the time of the change and to any personal information created or received after the change takes effect. We include a version number on this Privacy Statement consisting of the date (year, month, and day) it was last revised.We encourage you to periodically review this Privacy Statement to see if there have been any changes to our policies that may affect you.

Site visitor data

In addition to web logs, which are described below, Kaiser Permanente routinely collects data about Site activity, such as how many people visit the Site, the web pages or mobile screens they visit, where they come from, how long they stay, etc. it is collected on an aggregate basis, which means there is no personally identifiable information associated with the data. This data helps us improve our content and overall usage. The information is not shared with other organizations for their independent use.

The Site does not honor a browser’s signal or request header so as not to track user activity.

Collection, use and disclosure of personal information

Except as disclosed in this Privacy Statement, we do not collect any personally identifiable information about visitors to the Site. The policies, sources, uses, and disclosures of information are described in Sections 1 through 20 below:

1. Use of information collection

We collect the following personal information from you:

• contact information such as name, email address, mailing address, and phone number
• age or date of birth
• unique identifiers such as username, account number and password
• preference information, such as preferred name and the types of emails you would like to receive from us
• health or medical information (such as health symptoms, health conditions, and medications)
• the location of your device

We use and disclose this information to:

• communicating your health information, or the health information of someone you are caring for, to health care providers treating you or the other person
• helped apply for ConnectHealth coverage
• send you the requested information about the product or service
• respond to customer service requests
• send you newsletters, voice messages, text messages or email communications
• respond to your questions and concerns
• improve our site and marketing efforts
• conduct an internal quality improvement or business analysis
• personalize your experience on the Site, including displaying location-based information that is relevant to your care and how to find it

2. Web logs

As with most websites, we collect certain information automatically. We maintain standard web logs that record data about all visitors and customers who use the Site and store this information for a time reasonably useful to carry out its legitimate business purpose, or as required by law. These records may contain the Internet domain from which you access the Site (such as xfinity.com, att.com, etc.); the IP address that is automatically assigned to your computer when you access the Internet (a static IP address can be identified as being connected to you, while a dynamic address is generally unidentifiable); the type of browser and operating system you use;the date and time of your visit; the mobile pages or screens they visited; and the address of the website from which you linked, if applicable.

All web logs are stored securely and can only be accessed by ConnectHealth employees or designees when needed for a specific purpose. ConnectHealth  uses web log information to help us design our Site, identify popular features, resolve user, hardware, and software problems, make the Site more useful to visitors, and for security purposes.

3.Internet cookies

We and our service providers may place Internet “cookies” or similar technologies (JavaScript, HTML5, ETag) on ​​the hard drives of the computers of visitors to the Site. The information we collect helps us tailor our Site to be more useful and efficient for our visitors. For example, we can see the navigation path taken by users, and that information allows us to understand the success or challenges of users with the web experience. The cookie consists of a unique identifier that does not contain information about your health history. We use two similar types of cookies, “session” cookies and “persistent” cookies, along with other technologies.

A session cookie is temporary and expires after you end a session and close your web or application browser. We use session cookies to help personalize your experience on our Site, maintain your login status as you navigate our features, and track your “click path” through our web pages or mobile screens.

Persistent cookies remain on your hard drive after you have left our Site, and we use them for a variety of reasons. For example, if you have given us permission to send you an email with information about your Kaiser Permanente benefits, or for other reasons, we may place a persistent cookie on your hard drive that will let us know when you return to our Site. We sometimes use this type of persistent cookie with a “web beacon” (see below). Persistent cookies will not contain any personal health information about you, such as a ConnectHealth health/medical record number .

You may have software on your computer that allows you to reject or disable Internet cookies, but if you do, some features of the Site may not work properly for you. For instructions on how to remove cookies from your hard drive, please go to your browser’s website for detailed instructions. In addition, more information about cookies may be available on other websites or through your Internet service provider. Safari, Chrome, Firefox, Internet Explorer, and iOS browsers are commonly used browsers.

4. Web beacons

From time to time, we may also use “web beacons” (also known as “clear gifs,” “web bugs,” “1-pixel gifs,” etc.) that allow us to collect non-personal information about your response to our email communications, and for other purposes. Web beacons are tiny images, placed on a web page or email, that can tell us whether you have gone to a particular area of ​​our Site. For example, if you have given us permission to send you emails, we may send you an email encouraging you to use a certain feature on our Site. If you reply to that email and use that feature, the web beacon will tell us that our email communication with you was successful.We do not collect any personal health information with a web beacon and we do not link web beacons to any other personal health information you have provided to us.

Because web beacons are used in conjunction with persistent cookies (described above), if you set your browser to reject or disable cookies, web beacons will not work.

Our mobile application contains software development kits (SDKs) that may collect and transmit information to us or third party partners about your use of that mobile application or other applications on your device. Such data, when collected by a third party, which may show which click path was taken, which pages users visited and how long certain pages took to be displayed, is not identifiable to you as an individual.

5. Retargeting

We have contracted with a third party advertising network to manage our advertising on other sites. Our ad network service provider uses cookies, web beacons, and other tracking technologies to collect information about your activities on this and other websites and then serve KP advertising to you on other websites. We may also place a third-party persistent cookie (provided by Google) on your hard drive if you sign in to kp.org. This cookie will prevent kp.org members from seeing advertising targeted to non-Kaiser Permanente health plan members when searching on Google.

6. Data retention

We will retain your personal information for the period necessary to fulfill the purposes outlined in this privacy statement, including to comply with our legal obligations, resolve disputes, and enforce our agreements, unless a longer retention period is required or permitted by law. .

7. Social networks

Our site includes social media features, such as the Facebook button. These Features may collect your IP address, which page you are visiting on our Site, and may set a cookie to enable the Feature to function properly. Social media features are either hosted by a third party or hosted directly on our site. Your interactions with these Features are governed by the privacy statement of the company providing it.

8. Links to third party websites

Our site includes links to other websites whose privacy practices may differ from those of ConnectHealth. If you submit personal information to any of those sites, your information is governed by their privacy statements. We encourage you to carefully read the privacy statement of any website you visit.

9. Location

An IP address (also called an Internet address) is assigned to your device by your Internet Service Provider, and is required to use the Internet. IP addresses are used to establish the connection between your device and the websites and services you use. You cannot prevent a website or app from obtaining your device’s IP address. Your IP address includes general information about the location of your device and we use it to display your nearby location on the website. We obtain the approximate location of your Internet device from your IP address, which is provided to us when you visit the Site.We do this to provide you with a personalized experience on our Site, including displaying location-based information that is relevant to you and your care. 

With your permission, we may collect the precise location of your device using technologies such as GPS, Wi-Fi, and Bluetooth, to help you find a facility, doctor, or directions within a facility or to provide you with timely notices when you visit a facility. 

20. Third Party Applications

Upon your request, we may send your personal information to applications created and owned by a third party. ConnectHealth does not control the application or the application provider and is not responsible for the integrity, privacy, security or breach of data transferred or stored in the application, nor for the use or disclosure of data by the application or the application provider. the app once the data is published by ConnectHealth . We encourage you to carefully review the terms of use and privacy policy and settings that apply to the application and application provider and approve the disclosure of data only to those applications and application providers that you trust.

VER. 1.0