MedWatcher Social Privacy Policy

Your privacy and the security of your Personal Information are very important to us. We want you to be as comfortable as possible visiting our Web site. For purposes of this Privacy Policy, Personal Information is information that personally identifies you. Nonpersonal Information is other information collected by Epidemico. This Privacy Policy governs our MedWatcher Social Web application, and explains what information we collect and how we use and share that information, and the choices you have concerning the use of such information. It is your responsibility to read and understand it. This Privacy Policy applies to all information collected by Epidemico, Inc. and any corporate affiliates (collectively, “Epidemico”) for current and former consumers in connection with all the products, services, Web sites and mobile applications we may offer on behalf of ourselves or others (collectively, the “Web site”). Please read this Privacy Policy carefully and contact us if you have any questions or concerns. By accessing or using this Web site, its services, or any Software, you agree to this Privacy Policy. IF YOU DO NOT WISH TO BE BOUND BY THE TERMS AND CONDITIONS SET FORTH IN THIS PRIVACY POLICY DO NOT ACCESS OR USE THE WEB SITE, SERVICES,
OR THE SOFTWARE.

We may amend this Privacy Policy from time to time. We will post any changes to this Privacy Policy here. You agree that your continued access or use of the Web site or any Software after posting of the amendment to the Privacy Policy or your receipt of notice of an amendment to the Privacy Policy will constitute your affirmative acceptance of any such amendment and your agreement to its terms.

Please remember that this Privacy Policy applies only to information collected by our Web site. We are not responsible for the privacy of any information you reveal or post in any public forum (e.g., message board, blog, personal page, public computer, etc.). In addition, we are not responsible for the privacy practices of Web sites that are operated or owned by third parties, which may have separate privacy and different data-collection practices from Epidemico, and we are not responsible for the actions or practices of these third parties, nor for the content on these sites. We encourage you to review the privacy policies of any third party Web sites you visit.

What information does Epidemico collect?

We may collect the following types of information:

Information you provide

We receive and store the information you voluntarily enter on the Web site during the registration or subscription process or that you provide us any other way (e.g., by mail, email, or phone), or that is provided on your behalf by a colleague or superior within your organization. For example you may provide us with your name, gender, birthday, geographic location, or email address. Wherever we provide examples of information in this Privacy Policy, the examples are not intended to be an exhaustive list.

Information from cookies

When you visit our Web site we may send one or more “Cookies” to your computer or other device to provide us with information relating to the sources of our site traffic. Cookies are small pieces of information that some Web sites store on your computer’s hard drive when you visit them. Collecting this information, however, does not allow us to personally identify you. Most Web browsers automatically accept cookies but allow you to modify security settings so that you can approve or reject cookies on a case-by-case basis. Our site requires that both cookies and JavaScript be enabled. If you reject cookies from our site, some parts of the site may not work properly for you.

Log and other information

When you access our Web site, email, advertisement, or other content [served by or on behalf of us on other Web sites or mobile applications], our servers automatically record information that your browser sends whenever you visit a Web site. These server logs typically include your Web request, Internet Protocol address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser or Account(s) to us. Other actions, such as interactions with advertisements, may also be included in our server logs. During some visits to our Web sites we may use software tools such as JavaScript to measure and collect session information, including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

Information from other sources

We may receive information about you from other sources. For example, information we may receive from other sources may include updated delivery and address information from third parties, which we use to correct our records and deliver you communications, and demographic information from data collection companies, your employer organization, and others.

We may link Nonpersonal Information about you with any Personal Information we have.

How does Epidemico use my information?

To manage your Account

We use the information we collect to manage your Account(s) and provide customer service support.

To contact you

We may use the contact information we receive from you or third parties to contact you directly or through third parties via email, direct mail, telephone or other channels such as text messaging, Facebook and Twitter, in each case provided we are permitted by law to send such communications to you and you have not otherwise opted out of receiving them. We may also use your contact information to provide you administrative communications from time to time.

Email communication that you send to us via the email links on our site may be shared with a customer service representative, employee, expert or agent that is most able to address your inquiry. We make every effort to respond in a timely fashion once communications are received. Once we have responded to your communication, it is discarded or archived, depending on the nature of the inquiry. Internet email is inherently insecure, as any given email may be sent via multiple third party computers, some of which can make a copy of the contents with no detection possible.  Because of this insecurity, it is possible that your email communication may be accessed or viewed by another Internet user while in transit to Epidemico.  If you wish to keep your communication completely private, do not correspond with Epidemico via email. You may decide at some point that you no longer wish to receive communications from our site. To stop receiving communications, send an email message to [email protected] or send regular mail to the following postal address: Epidemico, 883 Boylston St, Ste 2, Boston, MA 02116.

To develop, evaluate, improve and deliver the Web site’s products and services

We use the information we collect to develop, evaluate, improve and deliver our product and services.

To protect the rights or property of Epidemico, Registered Users, and others

We also may use the information we collect to the extent we believe it is necessary or appropriate to enforce or apply our rights under our agreements with Registered Users, or to protect the rights, property or safety of Epidemico, our Registered Users and others.

How does Epidemico share your information?

For corporate subscribers only

If you are using the Web site as part of a workplace initiative paid for by your employer, Epidemico may deliver to your employer reports containing either individually identifiable or deidentified aggregate information. Such reports will be delivered using secure data transfer methods. Epidemico may, upon request, deliver to the employer a list of user accounts that are active.

Agents and service providers

We engage other companies and individuals to perform certain services and functions on our behalf. For example, we may engage third parties to help us develop the products and services offered on our Web site, send email and postal mail, analyze data, provide marketing services, process applications, provide search results and links (including paid listings and links), and provide customer service. We contractually obligate these service providers to access and use the Personal Information we make available to them only as needed to perform their functions and for no other purposes.

With corporate affiliates

In the future, we may also share information with our corporate affiliates that either are subject to this Privacy Policy or follow practices at least as protective as those described in this Privacy Policy with respect to the Personal Information we share with them.

Information we share with nonaffiliated third parties as permitted by law:

We reserve the right to disclose Personal Information to the extent permitted by applicable law, for
example:

In business transfers:

If there is a change of control in Epidemico’s business (whether by merger, sale, or otherwise), your Personal Information could be sold as part of that transaction and could be used by the purchaser subject to these privacy policies We will notify the designated account management representative from your subscribing organization (typically your employer) if your Personal Information will become subject to a different privacy policy after the transaction.

To fulfill legal and regulatory requirements

We may also disclose your information, in order to comply with an applicable statute, regulation, rule or law, a subpoena, a search warrant, a court or regulatory order, or other legal process. We may disclose personal information in special circumstances when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be violating our Terms and Conditions or our Subscription Agreement. FOR CONSUMER SUBSCRIBERS: We may disclose your information for fraud protection and credit risk reduction purposes in accordance with applicable law and regulation. We reserve the right, but do not assume the obligation, to disclose your information to protect your safety or security, or the safety and security of our users, our Web site, or the general public. We may also use the information we collect to comply with federal, state, or other applicable laws and regulations.

With your consent:

In addition to the above, we may share Personal Information about you with others to the extent you consent to such sharing.

Nonpersonal Information

We may provide in aggregate Nonpersonal Information about our Users including you, to strategic partners for research, product marketing, analysis, and other purposes. For example, your information may be aggregated with the information of other Registered Users and shared with third parties to enable them to develop products and research. We may also provide in aggregate Nonpersonal Information about you to third party service providers and if you participate in an employer program for analysis, and other purposes. For example, your information may be aggregated with information of other employees and analyzed to evaluate the effectiveness of our Product, and the results of that analysis may be shared with third party service providers to help Epidemico improve its products and services or with employers to allow them to evaluate the success of the Epidemico program.

Security of your Personal Information

Epidemico is committed to earning and keeping your trust. We understand the need for your Personal Information to remain secure and private, and we have implemented security practices and procedures designed to safeguard your information in accordance with this Privacy Policy. Only Epidemico employees and service providers who need to use it as part of their jobs are authorized to have access to your Personal Information.

Notwithstanding our commitment to take commercially reasonable measures to protect your information (including Personally Information) from loss, misuse or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the Internet. There is also some risk that others could find a way to thwart or hack our security systems. As a result, while we strive to protect your information, we cannot ensure or warrant the security and privacy of any information you transmit to us, and you do so at your own
risk.

Please remember that you also play a valuable part in data security. You should never share your password, if applicable, with anyone. If you feel your password has been compromised, you should change it immediately. After you have finished using our Web site, you should log out of your Account and exit your browser so that
no unauthorized persons can use our website under your name or Account.

Online forums

Please note that information you voluntarily include in bulletin boards, chat rooms and other online forums we may offer may be viewed and used by anyone with access to those forums. Epidemico is unable to control any use of such information.

Facebook Connect

We may provide you the ability to log in to our websites using sign-in services such as Facebook Connect or an “Open ID” provider. These services will authenticate your identity and provide you the option to share certain Personal Information with us such as your name and email address to pre-populate our sign up form. Services like Facebook Connect give you the option to post information about your activities on our Website to your profile page to share with others within your network.

Collection of information from children

None of our products or services is intended for use or purchase by children. Accordingly, Epidemico does not knowingly collect, either online or offline, information from children under the age of 13. If you believe that we might have any information from a child under age 13, please contact us.

What information can I access?

You can access and update your account information by accessing the account settings area on the Web site. Information entered actively by a user during the use of the Website such as answers to assessment questions, journal entries, self-reported stress-level etc. cannot be deleted or modified and may remain on servers even
after account is deactivated.

You should be aware that it is not technologically possible to remove each and every record of the information you have provided to us from our systems. The need to back-up our systems to protect information from inadvertent loss means that a copy of your Personal Information may exist in a non-erasable form that will be difficult or
impossible for us to locate.

Promptly after receiving your request, all Personal Information stored in databases we actively use and other readily searchable media will be updated, corrected, changed or deleted, as appropriate, as soon as reasonably practicable.

Through our various online offerings, we may provide links to third-party websites. Except for those portions of the websites that are hosted by us, each of these websites may have separate privacy and different data-collection practices from Epidemico, and we are not responsible for the actions or practices of these third parties,
nor for the content on these sites. We encourage you to review the privacy policies of their websites.

Complaint process

If you have a complaint or problem, or if you believe your privacy rights have been violated, you may e-mail us at [email protected]. Please indicate the following reason for contacting us: “I want to provide feedback about your site.” Our Customer Service department will forward your complaint to the appropriate department for response or resolution. If you don’t receive adequate resolution of a privacy-related problem, you may write to the Epidemico Security and Privacy Officer at:

Epidemico
883 Boylston St, Ste 2
Boston, MA 02116

Epidemico complies with the US-EU Safe Harbor Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries. Epidemico has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement.

In compliance with the US-EU Safe Harbor Principles, Epidemico commits to resolve complaints about your privacy and our collection or use of your personal information. European Union citizens with inquiries or complaints regarding this privacy policy should first contact Epidemico at:

Epidemico has further committed to refer unresolved privacy complaints under the US-EU Safe Harbor Principles to an independent dispute resolution mechanism, the BBB EU SAFE HARBOR, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed,please visit http://www.bbb.org/us/safe-harbor-complaints for more information and to file a complaint.