Privacy Policy
Effective Date: April 6, 2023
Handspring Health, Inc. and Handspring Medical NJ, P.C. (“Handspring,” “us” or “we”) take your privacy very seriously. We created this Privacy Policy to provide you with important information about the privacy practices applicable to the services provided by us through the Handspring Platform (the “Platform”) and our website at www.handspringhealth.com (collectively, the “Services”). This Privacy Policy describes how we collect, protect, use, disclose and store the information collected through the Services.
Through the Platform, patients (“Patient Users”) can connect with Handspring counselors, nurse practitioners, and psychiatrists (our “Providers”) and receive services from the Providers via telehealth.
BY DOWNLOADING, ACCESSING, OR USING THE PLATFORM OR SERVICES, AND/OR BY REGISTERING WITH US OR PROVIDING INFORMATION TO US IN CONNECTION WITH THE APPLICATION, YOU ACCEPT THE PRACTICES AND POLICIES OUTLINED IN THIS PRIVACY POLICY, AND YOU HEREBY CONSENT THAT WE WILL COLLECT, USE, AND SHARE YOUR INFORMATION AS SET FORTH IN THIS PRIVACY POLICY. IF YOU ARE REGISTERING AN ACCOUNT OR USING THE SERVICES ON BEHALF OF AN INDIVIDUAL OTHER THAN YOURSELF, YOU REPRESENT THAT YOU ARE AUTHORIZED TO ACCEPT THIS PRIVACY POLICY ON SUCH INDIVIDUAL'S BEHALF.
Your use of the Services is also subject to our Terms of Use, which are available here.
COLLECTION, USE, AND DISCLOSURE OF INFORMATION
What is Personal Information?
Personal Information is any information relating to a natural person who is, or can be, identified either directly or indirectly from such information and includes information such as a user’s name, address, telephone number, email address, Internet activity (such as browsing history), or other information directly linked to that person. Personal Information that we collect also includes the personal medical information which users provide to us through the Services. You are not legally required to provide Personal Information to us, but if you refuse to provide such information, we may not be able to register you to use the Platform.
Information that We Collect
Handspring collects Personal Information from users when such users (or such users’ parents or legal guardians) register for and use the Platform. You don't have to use the Platform, but if you do, you acknowledge that Handspring collects and uses your Personal Information for the legitimate interests and purposes described in this Privacy Policy. Handspring collects the following types of Personal Information which you provide to us:
▪ Registration information related to Patient Users and their parents/legal guardians;
▪ Health information about Patient Users provided by the patients, their parents/legal guardians, and/or Providers through use of the Services;
▪ Records and copies of your correspondence (including email addresses), if you contact us;
▪ Contact details you may provide, such as your name and email address; and
▪ Details of transactions you carry out through our Platform.
In addition, from time to time, we may use or augment the Personal Information we have about you with information obtained from other sources, such as public databases, social media platforms, and other third parties.
In addition to collecting Personal Information that you provide to us, we may automatically collect certain Personal Information when you use the Services, such as IP address, information about your browser, device or operating system or similar information. IP addresses are ID numbers for the location of your computer or network on the internet. Log files are recordings of the traffic to and from a server. Handspring servers log IP addresses for systems administration and troubleshooting. We track page hits in the aggregate to track the popularity of pages that people visit. With that information we can improve the quality of our Platform. We may also use or allow third parties to use web beacons on our Platform to monitor the effectiveness of survey qualification. Web beacons are small, graphic images on web pages, web-based documents, or in email messages that allow us or third parties to monitor who is visiting our Platform or if an email has been read. Web beacons collect the IP address of the device where the web beacon is sent, the URL of the page where the web beacon originates, and the time it was viewed. Web beacons may be linked to your Personal Information. We may also use third-party devices, services, links, or electronic mail to deliver surveys to you, which may use cookies, web beacons, or other technology to collect information about your visits to our Platform (or other websites) in order to present surveys that may be of interest to you.
How We May Use Personal Information
We and our third-party service providers may use Personal Information to:
▪ respond to your inquiries and fulfill your requests;
▪ communicate with health care professionals who will help you identify the appropriate level of care and healthcare setting for the healthcare services you are requesting;
▪ send to you administrative information, including information regarding the Platform, and changes to our terms, conditions and policies;
▪ schedule and provide services related to the scheduling of an appointment, for example; communicate with you regarding your health status, appointments and related services provided by your Provider; obtain or facilitate payments for appointments and related services provided by your Provider and send you payment receipts; and provide you with related customer service;
▪ confirm that services you request were provided to you by your Providers;
▪ send to you marketing communications that we believe may be of interest to you;
▪ personalize your experience on the Platform by presenting products and offers tailored to you;
▪ create diagnostic or therapeutic models intended for use by the Handspring community;
▪ further our business purposes, such as quality assessment, data analysis, audits, developing new products, enhancing the Platform, improving our services, identifying usage trends to inform members of the Handspring community which aspects of the Platform might be useful to them, developing tools which help you assess the performance, competence and qualifications of healthcare professionals and conducting training programs for such professionals, and determining the effectiveness of our promotional campaigns; and
▪ act as we believe to be necessary or appropriate: (a) under applicable law; (b) to comply with legal process; (c) to respond to requests from public or government authorities; (d) to enforce our Terms of Use; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, or that of our affiliates, you or others; (g) at our discretion under emergency circumstances, to notify emergency services or your family members, personal representative or other individuals involved in your care of your location and condition; or (h) to allow us to pursue available remedies or limit the damages that we may sustain.
Our use of your Personal Information may also be subject to certain restrictions set forth in an agreement between us and your Provider.
We may also use aggregate or de-identified data that is not personally identifiable for any legally permissible purposes without restriction.
How Personal Information May Be Disclosed
Your Personal Information may be disclosed to:
▪ our third-party service providers that provide services such as hosting of the Platform, data analysis, IT services and infrastructure, customer service, e-mail delivery, auditing and other similar services;
▪ our affiliates, for the purposes described for Personal Information in this Privacy Policy, including marketing purposes relating to their products and services;
third parties, to permit them to send marketing communications to you regarding our products or services or the services of your Providers;
▪ for other treatment, payment or health care purposes of your Provider;
▪ a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, liquidation or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceeding); and
▪ a third party as we believe to be necessary or appropriate: (a) under applicable law; (b) to comply with legal process; (c) to respond to requests from public or government authorities; (d) to enforce the Terms of Use; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, or that of our affiliates, you or others; (g) at our discretion under emergency circumstances, to notify emergency services or your family members, personal representative or other individuals involved in your care of your location and condition; or (h) to allow us to pursue available remedies or limit the damages that we may sustain.
Handspring does not, to the best of our knowledge, sell or rent Personal Information that we have collected or retained about you to any other third-party for any purpose. Accordingly, we do not offer individuals the ability to “opt-out” of the selling or renting of Personal Information because we do not engage in those practices.
We may also disclose to third parties aggregate or de-identified data that is not personally identifiable for any legally permissible purposes.
COOKIES
A cookie is a small piece of information that a website can store on a computer and sometimes later use to recognize a user. The purpose of cookies is to enhance your ability to receive the information you want. In the future, we may use cookies to enhance the experience of users. A “session” cookie expires when the user closes the browser in which the website was viewed. A “persistent” cookie may be used to help save your settings and customizations. As with all cookies, you can personalize your web browser settings to reject session cookies. Though some cookies, that are strictly necessary for site operation, cannot be toggled off.
Some of our business partners with whom we contract to carry out the Services (e.g., website providers) may use their cookies on our website and/or Platform. Although we may not have direct access to or control over such cookies, this Privacy Policy governs the use of cookies by us and such business partners on our website and Platform. We may also allow social media companies (e.g., Facebook) to put “widgets” on our websites. These third-party tools may also be used to track you across websites. For example, so long as you are logged in to Facebook, every time you land on a webpage that has a Facebook widget, Facebook will know you are on that webpage. We do not control the privacy practices of these third parties.
THIRD PARTIES
This Privacy Policy does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including Providers, the manufacturer of your mobile device, and any other third party mobile application or website to which the Platform may contain a link. We encourage you to review the Notice of Privacy Practices of each Provider who provides you with services and the privacy policies of each website and application you visit and use.
HIPAA
Handspring is regulated as a “covered entity” under the Health Insurance Portability and Accountability Act (“HIPAA”). Please be aware that this Privacy Policy is distinct from our HIPAA Notice of Privacy Practices, which describes in detail overall how we use and disclose your individually identifiable health information. If you would like to review a copy of our HIPAA Notice of Privacy Practices, please request a copy directly from your Provider.
CHILDREN’S PRIVACY
Handspring is concerned about the safety and privacy of children online. Because of this, we will make all efforts to comply with the Children’s Online Privacy Protection Act of 1998 (“COPPA”). COPPA and its accompanying FTC regulations establish United States federal law that protects the privacy of children using the internet. Further, Handspring Services are intended only for minors whose parents/legal guardians have consented to their use of such Services. However, it is possible that by fraud or deception by others we may receive information given to us or pertaining to minors, including children under 13. If we are notified of this, as soon as we verify the information, we will immediately obtain parental consent or else delete the information from our servers. If you want to notify us of our unauthorized receipt of information by minors, including children under 13, please email support@handspringhealth.com.
Notwithstanding the foregoing, depending upon the functionality available in the Platform, you, a partner or legal guardian may register a minor under their supervision for access to our Services as a Patient User. In such cases, our Services may include features through which a parent or guardian may be permitted to view the Personal Information or manage the benefits on behalf of registered minors. The parent or guardian shall have permission to view the Personal Information of the minor they register until such minor reaches the age of majority or otherwise qualifies as an emancipated minor under applicable law and provide Handspring with evidence of such emancipated status. The availability of the Personal Information of a minor's information to the parent or guardian may depend on the minor’s preferences, available website functionality, and applicable law. Upon turning 18, we will cease providing access to Services to the parent or guardian related to a minor that reaches the age of majority, at which point the minor that reaches the age of majority will be required to take ownership of their own registered account.
SECURITY
We seek to use reasonable physical, technical and administrative measures to protect Personal Information under our control. Unfortunately, no data transmission over the Internet or data storage system is 100% secure, and therefore we cannot guarantee against all potential security breaches. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the “Contacting Us” section below.
STORAGE OF DATA
We will only store Personal Information for as long as it is needed to fulfill the purposes for which it was collected, subject to applicable data retention periods imposed upon us by applicable law. This may mean that your Personal Information is stored by us for a number of years, depending on the purpose and need for that data to be processed.
UPDATES TO THIS PRIVACY POLICY
We may occasionally update this Privacy Policy at any time. Any changes to this Privacy Policy will become effective when we make the revised Privacy Policy available through the Platform. We will update the “Effective Date” date at the top of this Privacy Policy if we make any such changes to this Privacy Policy. Your use of the Platform or the submission of any information in connection with the Platform following any change means that you accept the revised Privacy Policy. We encourage you to periodically review this Privacy Policy to stay informed about how we collect, use, and disclose personally identifiable information.
CONTACTING US
If you have any questions or comments about this Privacy Policy, please contact us by e-mail at support@handspringhealth.com. Please note that e-mail communications are not always secure; so please do not include health information, credit card information or other sensitive information in your e-mail messages to us.
