MedRhythms Privacy Policy

Please visit this website periodically to check for updates to our Privacy Policy.

MedRhythms respects the privacy of every individual and has taken extensive precautions to create a process that maintains individual privacy:

• We are committed to providing a secure environment for our Service.

• We use the information provided to us to enable your use of our Service, provide you with customer service, and authenticate your visits and usage.

• All information you provide to us is kept on a secure server.

• We do not sell, lease, or rent personal information without your explicit consent.

SCOPE OF THIS PRIVACY POLICY

This Privacy Policy informs users of the MedRhythms websites and/or mobile applications (collectively, the “Service”) regarding our policies applicable to information MedRhythms gathers and uses, including but not limited to: (i) personal information submitted to MedRhythms and (ii) aggregated information collected from the Service. WE TAKE THESE PRECAUTIONS IN AN EFFORT TO PROTECT YOUR INFORMATION AGAINST SECURITY BREACHES. HOWEVER, THIS IS NOT A GUARANTEE THAT SUCH INFORMATION MAY NOT BE ACCESSED, DISCLOSED, ALTERED, OR DESTROYED BY BREACH OF SUCH FIREWALLS AND SECURE SERVER SOFTWARE. BY USING OUR SITE, YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND AGREE TO ASSUME THESE RISKS.

We may modify or amend this Privacy Policy from time to time. If we make material changes, as determined by us, in the way in which personal information is collected, used or transferred, we will notify you of these changes by email, post a modified version of this Privacy Policy on our website, and seek appropriate user consents. Your provision of such consent or, if such consent is not required, your continued use of the Service ten days following any changes means that you accept those changes. Even when we make changes, however, personal information collected by us will be treated in accordance with the version of the Privacy Policy in effect at the time the personal information was collected, unless we obtain your consent otherwise. This policy was last updated on April 8, 2020.

• Scope Of This Privacy Policy

• Collection Of Personal Information

• Types Of Information Collected

• Use Of Information We Collect

• Sharing Payment Information

• Control Of Personal Information And Opt-Out Options

• Security Of The Information We Collect

• Protection Of Children’s Privacy

• Use Of Cookies And Tracking Technology

• Mobile Analytics

• Links To Other Websites

• Legal Bases For Processing Your Information

• Transfer And Processing Of Data

• Data Retention And Deletion

• California Online Privacy Protection Act Notice

• Contact Information

COLLECTION OF PERSONAL INFORMATION

MedRhythms collects and uses your personal information to manage and enhance your use and experience of the Service. MEDRHYTHMS DOES NOT SHARE INFORMATION COLLECTED FROM YOU THAT COULD PERSONALLY IDENTIFY YOU (“Personally Identifiable Information”) WITH ANY THIRD PARTY UNLESS YOU SPECIFICALLY CONSENT TO SUCH SHARING. We may share information that we collect with third parties consistent with this Privacy Policy, but such information will be aggregated and/or modified so as not to enable the identification of any user.

We may also use and allow third parties to track your browsing history profile. Such tracking will allow MedRhythms to offer you specifically tailored Services with appropriate user consent, where necessary. No personally identifiable information will be shared with any third party without your consent.

TYPES OF INFORMATION COLLECTED

User Information

In addition to the above personal information, we collect standard information about MedRhythms users such as:

• Personal Data, which may include name, date of birth, phone, email, address, sex, shoe size, date of stroke, stroke type, stroke lesion site, acute stroke treatment methods, whether users are currently receiving physical therapy, comorbid diagnoses, current medications, assistive devices, and insurance company information.

• Information generated from a user’s data.

• Email address and MedRhythms Password.

• IP addresses, browser type and your operating system.

• Pages visited on the MedRhythms website, referring and exit pages, and the dates and times of the visits.

• Financial information, such as your credit/debit card number or other billing information for purchases and product upgrades.

• Any additional information relating to you and your use of the Service that you provide to use directly through the Service.

• Location data and other information about devices used to access and interact with the Service.

• Information that you make publicly available or publicly post using tools made available as part of the Service.

• Information you may provide in messages through the Service.

• Information collected from promotions with third party companies.

Supplemental Information

Your information may also be supplemented with additional information from other sources, including publicly available sources.

USE OF INFORMATION WE COLLECT

We will treat the information we collect as confidential. We will not share Personally Identifiable Information about you without your consent. We may share de-identified information collected from you with third parties, including advertisers and potential business partners, and use this information for any commercial or non-commercial purpose. For example, we may use your data collected from your use of the Service to help determine the total results of MedRhythms users, based on aggregated statistics developed from collected data, and publish this data or use it for commercial purposes.

We may also use or share data that does not identify a user to do the following:

• To fulfill the Service and products you request from us.

• To operate and improve the Service available to you through MedRhythms, including developing new features and products.

• To communicate with you, respond to your requests and manage our relationship.

• To personalize the products and Service provided to you.

• To measure performance of the Service.

• To allow you to participate in surveys. MedRhythms may co-sponsor promotions with other companies, in which case any information collected is likely to be shared with other participating sponsors.

• To send you marketing notices, including promotions of our products and Service. You can opt-out of communications from MedRhythms at any time (see “Control of Personal Information and Opt-Out Options” below).

• For internal purposes, which may require the transfer of such information to other MedRhythms affiliates for administrative purposes, for technical maintenance purposes, and for the marketing and promotion of products and Services that might be of interest to you.

• When you contact MedRhythms, we may keep a record of your communication to help solve any issues you might be facing.

We may disclose your personal information when we reasonably believe that it is required by law, a duly authorized court order, a legal process, or to protect and defend the rights and interests of MedRhythms, its affiliates, suppliers, or users. If we are required to disclose your information, we will attempt to provide you with advance notice, unless we are prohibited from doing so by law.

In the event MedRhythms goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets, users’ personal information will, in most instances, be part of the assets transferred. We will require as a term of such transition that the entity acquiring users’ personal information treat such information in accordance with this Privacy Policy.

In some circumstances we may use third party contractors to perform these Services on our behalf. In such circumstances, we will only provide the contractor with the information needed to perform the Service (for example, name and address if a contractor is delivering a product to you), and all contractors will be required to agree to confidentiality obligations with respect to your personal information.

SHARING PAYMENT INFORMATION

We use secure third party services to process your payments and do not store your credit card or banking information on our servers. If you provide any financial information to us when you contact us for customer support, this information is only used for the purpose of resolving the issue you contact us about.

Certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

CONTROL OF PERSONAL INFORMATION AND OPT-OUT OPTIONS

MedRhythms values the accuracy of the information you provide. All users can confirm, change, or update personal information  by contacting us directly at info@medrhythms.com.

If you want to opt-out of communications from MedRhythms, you can do so by emailing your request to info@medrhythms.com. If you change your mind, you can opt-in again, by emailing this same address. When you opt-out of promotional communications from us, you may still receive service messages (such as an order confirmation) and legally mandated notices.

SECURITY OF THE INFORMATION WE COLLECT

As mentioned at the beginning of this Privacy Policy, we take commercially reasonable precautions in an effort to protect your information against security breaches. For example, we store personal information in a secure, limited access facility, and we use industry-standard firewalls and security software design to protect the security and integrity of your Personal Information. However, this is not a guarantee that your information may not be accessed, disclosed, altered, or destroyed. By using the Service, you acknowledge that you understand and agree to assume these risks.

PROTECTION OF CHILDREN’S PRIVACY

MedRhythms.com is a general interest website, and we do not knowingly collect any personal information from children. If you are under 13, you are not permitted to use the website. Consistent with the Children’s Online Privacy Protection Act (“COPPA”), the MedRhythms website is not intended for use by anyone under the age of 13 MedRhythms does not knowingly collect personal information from children through this website.

If you are a parent with concerns about children’s privacy issues in conjunction with the use of this Web Site, please contact us at privacy@medrhythms.com. MedRhythms encourages parents to discuss this Privacy Policy and the dangers of providing Personal Information online.

USE OF COOKIES AND TRACKING TECHNOLOGY

Cookies

When you visit the MedRhythms website, a cookie may be saved on your computer (if your computer accepts cookies), and if you return to the MedRhythms website, the cookie may be read. A “cookie,” is a small text file placed on the user’s hard drive to track usage of the MedRhythms website and collect basic information, which may include certain user preferences.

We may use cookies to gain knowledge of Internet usage, improve content and advertisements, collect the site visitation data described above, and, in some cases, to deliver specialized content. Cookies may also help to prevent you from having to register or re-enter your information every time you visit the website. Some of our advertisers and partners may occasionally use cookies as well. MedRhythms does not have any control over the cookies used by advertisers and partners.

If you would like to avoid cookies, your web browser may have an option that enables you to disable or not accept cookies. It should be noted, however, that, should you disable or not accept cookies, portions of the website may not properly function.

Log Files

When users visit our website, MedRhythms gathers certain information automatically and stores it in log files. This information includes Internet Protocol (IP) addresses, browser type, Internet Service Provider, referring/exit pages, operating system, and date/time stamp. We use this information to monitor the usage of our site. Also, when we send e-mails to you, we may be able to identify information about your email address, such as whether you can read graphic-rich HTML emails. We use this information not to identify individual users, but to analyze trends, administer the site, track users’ movements around the site, and gather demographic information about our user base as a whole which provides us with the ability to determine aggregate information about our user base and usage patterns. We may, in some circumstances, need to review this automatically collected data in combination with specific registration information to identify and resolve issues for individual users.

Web Beacons

We may also use web beacons, clear gif technology, or action tags as mechanisms to collect aggregate site visitation data by tracking how users navigate to and through our website. We may also use this technology to track the delivery of HTML email messages. Data collected through this mechanism is not linked to personal information. A web beacon is an electronic image and string of code that is imbedded in a web page or email which allows us to track web page views/hits or the opening of an email containing a beacon. We may use web beacons in conjunction with cookies to track website activity on the MedRhythms website. Web beacon tracking by MedRhythms does not identify the name or email address of the web user or mail recipient.

MOBILE ANALYTICS

In addition, MedRhythms or our partners may use analytics technology to track anonymous traffic data about use of our Service. Such partners have the right to retain and use the anonymous traffic data collected through the analytics technology from users of our Service.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites. Please be aware that we are not responsible for the privacy practices of these other sites, and we encourage you to review the policies of each site you use. We cannot control the actions of such third parties or be held responsible for their use of any information that you provide directly to them.

LEGAL BASES FOR PROCESSING YOUR INFORMATION

We rely on the following legal grounds to process your personal information:

• Performance of a Contract – If you choose to make a purchase through the MedRhythms website, we need to collect and use your personal information to perform our agreement with you.

• Consent – We may use or disclose some of your personal information as described in this Privacy Policy subject to your consent.

• Legitimate Interests – We may use your personal information for our legitimate interests to improve our products and Service. Consistent with our legitimate interests and any choices that we offer or consents that may be required under applicable laws, we may use technical information as described in this Privacy Policy and use personal information for our marketing purposes.

• Customer Testimonials – We may post customer testimonials on our website and may use testimonials in other formats consistent with consent received. Customer testimonials may contain personally identifiable information. We may use your Personal Information to contact you to obtain a testimonial and obtain your consent via email or agreement sent via fax, pdf or mail prior to using such testimonial and/or using your name along with your testimonial.

• Legal Exception – Notwithstanding the above, we may in any event store and use Personal Information and User Data to the extent required by law or legal process, to resolve disputes, to enforce our agreements (including this Privacy Policy and the Terms of Service) with you, or, if in our reasonable discretion use is necessary, to protect our legal rights or to protect third parties.

• Email Communications – If you register and provide your email address, we may send you administrative and promotional emails. If you want to opt-out of communications from MedRhythms, you can do so by emailing your request to info@medrhythms.com. If you change your mind, you can opt-in again, by emailing this same address. When you opt-out of promotional communications from us, you may still receive service messages (such as an order confirmation) and legally mandated notices.

TRANSFER AND PROCESSING OF DATA

For users within the United States, we process data in data centers located in the United States.  We have adopted reasonable physical, technical, and organizational safeguards against accidental, unauthorized, or unlawful destruction, loss, alteration, disclosure, access, use, or processing of user data in our possession.  We comply with state and federal laws governing the protection of personal information.

Service Visitors from outside the United States: MedRhythms and its servers are located in the United States and are subject to the applicable state and federal laws of the United States. If you choose to access or use the Services, you consent to the use and disclosure of information in accordance with this privacy policy and are subject to such laws.

DATA RETENTION AND DELETION

We will only retain your personal information for as long as necessary to fulfill the purposes for which it was collected and processed, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.

In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case it is no longer personal information.

If you would like your name and email address permanently removed from our database, please contact us at info@medrhythms.com. We will promptly delete your name and email address and you will no longer receive emails from us. Your removal from the mailing list or database will not remove data you have submitted to us or records of past use of the Service, nor delete information stored in our data backups and archives. Such data will be maintained and/or deleted in the ordinary course of our business.

CALIFORNIA ONLINE PRIVACY PROTECTION ACT NOTICE

On September 27, 2013, California enacted A.B. 370, amending the California Online Privacy Protection Act to require website operators like us to disclose how we respond to “Do Not Track Signals”; and whether third parties collect personally identifiable information about users when they visit us.

(1) We do not track users who do not interact with our sharing functionality across the web, and therefore do not use “do not track” signals.

(2) We do not authorize the collection of personally identifiable information from our users for third party use through advertising technologies without separate member consent.

California Civil Code Section 1798.83 also permits our customers who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes.  To make such a request, please send an email to support@medrhythms.com. Please note that we are only required to respond to one request per customer each year.

CONTACT INFORMATION

We welcome your input on our Privacy Policy. If you have any questions or suggestions regarding our Privacy Policy, please contact us at privacy@medrhythms.com.