Privacy Policy - Impruvon Health - Long Term Care Medication Workflow Automation

Who we are

This privacy policy (“Privacy Policy”) sets forth how Impruvon, Inc. (“Impruvon,” “we,” “us” or “our”) collects, uses and protects any information that we may collect from you (the Subscriber, as defined in Impruvon’s Terms and Conditions (“Terms”)) or that you may provide when you use the Equipment, Services or Software (as defined in the Terms).

Consent

By subscribing to and accessing our Services, you agree that you:

have read and understood this Privacy Policy, which describes how we use your information; and
you consent to the use, storage and disclosure of your information by us in the manner described in this Privacy Policy.

Information Collected

Information provided directly to us when you enroll in our platform via web application, SMS notification system, through the Contact Us page of our Website, or when you email, write or call us (“Personal Information”);

Personal Health Information (“PHI”) of individuals using our Equipment and applications to ensure adherence to medication dosing schedules, which you input directly into our systems using our Software;

Non-Personal Information collected automatically as you utilize our Services, including information collected through cookies (or web beacons if applicable).

Cookies

to help us recognize you when you return to our Services (just a number without any Personal Information);

to avoid requiring registration for access to content on the Services;

to develop leads for our business development team and our business partners and to provide direct marketing communications to you if you have consented to receive such communications;

to compile anonymous, aggregated statistics that allow us to understand how users interact with our Services; and

to help us improve the structure and user experience of our Services.

Data Usage

provide and improve the content and features of our Website and downloadable app for you;

provide you with information about our Services and Equipment, solely at your election;

provide you with expiration or renewal notices for your account;

enforce our rights or carry out our obligations under this Privacy Policy or the Terms;

notify you of any changes to this Privacy Policy or our Terms.

Personal Health Information

Report to you any breach of security of PHI of which we become aware within three calendar days of “discovery” within the meaning of the Health Information Technology for Economic and Clinical Health Act of 2009 (“HITECH”). Such notice shall include the identification of each individual whose “unsecured PHI” (as defined in HITECH) has been, or is reasonably believed by Impruvon, to have been, accessed, acquired, or disclosed in connection with such breach. In addition, Impruvon shall provide any additional information reasonably requested by you for purposes of investigating the breach and any other available information that you are required to provide under 45 C.F.R. § 164.404(c) at the time of notification or promptly thereafter as information becomes available. Our notification of a breach of unsecured PHI under this Section will comply in all respects with each applicable provision of Section 13400 of Subtitle D (Privacy) of the American Recovery and Reinvestment Act of 2009 (“ARRA”), the HIPAA rules, and related guidance issued by the U.S. Secretary of Health and Human Services (“Secretary”) from time to time.

In the event of our use or disclosure of unsecured PHI in violation of HIPAA, HITEC, or ARRA, we bear the burden of demonstrating that notice as required under this was made, including evidence demonstrating the necessity of any delay, or that the use or disclosure did not constitute a breach of unsecured PHI.

We agree, in accordance with 45 C.F.R. §§ 164.502(e)(1)(ii) and 164.308(b)(2), if applicable, to require that any of its subcontractors that create, receive, maintain, or transmit PHI on behalf of Impruvon agree to the same restrictions, conditions, and requirements that apply to the us with respect to such information.

We agree to make PHI available in a designated record set to you as necessary to satisfy your obligations under 45 C.F.R. § 164.524, and to comply with any individual’s request to restrict disclosure of his or her PHI in accordance with 45 C.F.R. § 164.522, except where such use, disclosure, or request is required or permitted under applicable law.

We will charge fees for providing individuals access to their PHI in accordance with 45 C.F.R. § 164.524(c)(4).

We agree that when requesting, using, or disclosing PHI in accordance with 45 C.F.R. § 164.502(b)(1) that such request, use, or disclosure shall be to the minimum extent necessary, including the use of a “limited data set” as defined in 45 C.F.R. § 164.514(e)(2), to accomplish the intended purpose of such request, use, or disclosure.

We agree to make any amendments to PHI in a designated record set as directed or agreed to by the you pursuant to 45 C.F.R. § 164.526, or to take other measures as necessary to satisfy your obligations under 45 C.F.R. § 164.526.

We agree to maintain and make available the information required to provide an accounting of disclosures to the you or the individual owner of PHI, as the case may be, as necessary to satisfy your obligations under 45 C.F.R. § 164.528.

We agree to make our internal practices, books, and records, including policies and procedures regarding PHI, relating to the use and disclosure of PHI and breach of any unsecured PHI received from you, or created or received by us on your behalf, available to you (or the Secretary) for the purpose of determining compliance with 45 C.F.R. Parts 160-164 (the “Privacy Rule”).

To the extent we carry out one or more of your obligations under Subpart E of 45 C.F.R. Part 164, we agree to comply with the requirements of Subpart E that apply to you.

Disclosures of PHI and breaches of unsecured PHI and any information relating to the disclosure of PHI and breach of unsecured PHI in a manner as would be required for you to respond to a request by an individual or the Secretary for an accounting of PHI disclosures and breaches of unsecured PHI.

Information collected in accordance with this Section, to permit you to respond to a request by an individual or the Secretary for an accounting of PHI disclosures and breaches of unsecured PHI.

Any disclosure of PHI used or maintained as an electronic health record in a manner consistent with 45 C.F.R. § 164.528 and related guidance issued by the Secretary from time to time; provided that an individual shall have the right to receive an accounting of disclosures of such records by us made on your behalf only during the three years prior to the date on which the accounting is requested.

Who we are

Consent

Information Collected

Cookies

Data Usage

Personal Health Information

Data Retention

Links to Third Party Sites

Disclosure of Information to Third-Parties

Chat Service

Effect of Changes