Your Health Rights and Privacy Policies
Access Health Records respects the privacy of each and every person and is committed to protecting all of your personal and medical information. This notice describes how medical information about you may be used, how it may be disclosed and how you can obtain access to this information.
This page will serve as a summary of your privacy rights. The law requires that your medical information be kept private. We must give you this Notice about our privacy practices and follow these practices.
You may also want to read about the Health Insurance Portability And Accountability Act Guide, which Access Health Records is proud to be in full compliance.
| 1. |
OUR PHILOSOPHY.
Your trust is our greatest asset. We make every reasonable effort to ensure that information held by Access Health Records is confidential and secure. We disclose our information-security practices to you as clearly and as fully as possible. These practices are reviewed regularly, and many of our business decisions, including Web design, technology selections, and begin and end with considerations for your privacy. |
| 2. |
CHANGES TO POLICY.
While our philosophy will not change, the details of this policy will change over time as we add additional services. Please refer back to this page periodically. |
| 3. |
CONTACTING US.
If you have any questions about this Privacy Policy or our practices, please contact us at info@accesshealthrecord.com, or by phone, toll-free, at 1.877.983-2929 within the United States. |
| 4. |
SCOPE OF THIS PRIVACY POLICY.
This Policy applies only to the Access Health Records service. For information regarding general privacy on the Access Health Records network, please click here. |
| 5. |
SHARING AND USE OF INFORMATION. |
|
| 5.1. |
You control access to your Interactive & Electronic Personal Health Record, and decide which of your clinicians are permitted to view your record and for what period of time that access is granted. Your authorization allowing your clinicians to have access to your Interactive Personal Health Record will continue until you revoke it. |
| 5.2. |
All third parties to whom you have granted access will appear on a list in your Interactive & Electronic Personal Health Record until you remove them. You can revoke access privileges at any time. It is your responsibility to maintain and update access privileges for your Interactive and Electronic Personal Health Record. |
| 5.3. |
No one other than yourself is permitted to make changes or updates to your Interactive Personal Health Record. It is your responsibility to protect your User ID and Password and thus your Interactive and Electronic Personal Health Record, from unauthorized use. |
| 5.4. |
You are encouraged to identify a trusted third party (a personal representative) - with whom to share your Interactive Personal Health Record access information (User ID and Password), so that he or she can access your health information in the event of a medical emergency during which access to this information could be important. If possible, this person should be the same individual identified as your emergency contact in your Interactive Personal Health Record. Your personal representative is someone you authorize to have access to your personal health information. |
|
| 6. |
PHYSICAL SECURITY AND PRIVACY. |
|
| 6.1. |
The physical security of your Interactive and Electronic Personal Health Record is protected by Access Health Records in many ways. The facilities that house our servers, network devices, backup storage media and other equipment and information are physically secured and attended. Access is strictly limited to only those individuals who require it for legitimate, documented business purposes. Those individuals will have access to the minimum amount of information necessary to accomplish their business purpose. |
| 6.2. |
Access Health Records takes all reasonable steps to provide secure transmission of your information from your computer to our servers. When you transmit personal information to us, we encrypt it using 128bit Encryption Secure Socket Layer (SSL), the industry-standard encryption technology. Encryption provides a secure means to protect your information as it passes over the Web to our servers. In addition, certain personally identifying information, such as your Social Security Number, Date of Birth, Secret Question, etc., are encrypted in our database, to further protect this information from third parties. |
| 6.3. |
Access Health Records regularly evolves and updates our internal information security policies and our business continuity and disaster recovery plans. We perform risk assessment, security audits, and system test activities on an ongoing basis. Our employees and contractors receive frequent training and reminders regarding information security and protecting the confidentiality of your information. |
| 6.4. |
Access Health Records employees and contractors have occasional, legitimate needs to access our data servers for purposes of system troubleshooting and maintenance. All such individuals have signed confidentiality agreements and are periodically made aware of their obligations regarding user information. Access is controlled via pre-assigned user accounts that require multiple levels of authentication. All staff are periodically trained regarding security protection of their personal workstations. Our systems are monitored to detect breaches in security. Employees or contractors who violate our policies are handled accordingly, up to and including dismissal. |
| 6.5. |
Access Health Records is committed to meet or exceed regulatory and industry self-regulatory guidelines regarding privacy, confidentiality, and information security. It is our policy to review and adapt to statutes, regulations, formal private-sector standards, and informal policy guidelines as they apply, including, without limitation, all applicable provisions of the final Health Insurance Portability and Accountability Act (HIPAA) rules for information security. |
|
| 7. |
DATA MINING AND USE. |
|
| 7.1. |
You control the use of your Interactive and Electronic Personal Health Record data. No use of your Interactive Personal Health Record information will be made without your express consent. |
| 7.2. |
Access Health Records collects and uses network utilization and activity statistics so we can understand the ways in which our sites and services are being utilized. This data is stored anonymously and it is only used in the form of aggregated statistics.It is our policy not to use activity related data to target our users with solicitations of any kind. We do not sell, share or give any of your information. |
|
| 8. |
USE OF COOKIES.
We use non-persistent session state cookies to establish and sustain login sessions. These cookies disappear after you close your browser. The cookies are used to monitor your session and to automatically log you out of our service if you exceed 60 minutes of inactivity. Other sites cannot use cookies created by our sites, and we do not use cookies to track your activities outside of our own sites. |
|
| 8.1. |
A cookie is a small text file that Web sites use to recognize a user. At its simplest, cookie technology works by carrying a unique ID generated by the server that creates the cookie. A cookie does not pose a threat to the computer that accepts it. |
|
| 9. |
LEGAL REQUESTS.
Access Health Records cooperates with law enforcement inquiries as a matter of policy. We use IP addresses and other available information to attempt to identify a user when we are legally compelled to do so or when we feel it is necessary to protect our services, sites, customers, or others. |
| 10. |
LEGAL DISCLAIMER.
Unfortunately, no data protection method or combination of methods can be guaranteed 100 percent secure. We take all reasonable steps to protect your personal information as described throughout this policy, but we cannot ensure or warrant our ability to do so. As a result, you use Access Health Records content, products, and services at your own risk. Access Health Records will not be liable for disclosures of your personal information due to errors in transmission or unauthorized acts of third parties. |
|
