PRIVACY POLICY

  1. Introduction

  2. HSBlox, Inc., Acceligrate, Inc. and PatientBlox, Inc. and their subsidiaries and affiliates (singularly, “Provider” and collectively, “Providers,” “we,” “us,” or “our”) respect your preferences concerning the treatment of personal information that we may collect (“Personal Information”). This Policy informs you how we collect and use your Personal Information, how you can control its use, and describes our practices regarding information collected from our websites and resources related to this Policy, including, without limitation, www.loginhsb.com and our other websites and database portals, our computer and mobile software applications, our social media pages and our HTML-formatted e-mail messages, as well as our offline sales and marketing forms, materials and venues (collectively, “Channels”).

  3. Visitors and Customers

  4. This Policy is a general privacy policy that applies to all users of our Channels, including: (a) the general public, such as visitors and bloggers; and (b) those who have ordered our products or services. If you have ordered our products or services, we will manage your Personal Information in accordance with any additional agreements between you and any of us, such as any Master License Agreement or Business Associate Agreement. To the extent that the terms of this Policy conflict with the terms of any such agreement, the terms of such agreement will control.

  5. Privacy Policies of Others

  6. The Channels may provide links to or the ability to connect with non-Provider websites, services, social networks or applications. Clicking on those links or enabling those connections may allow the third party to collect or share information about you. Those third-party websites or services are beyond our control. We encourage you to check the privacy policies and terms of use of any non-Provider websites or services before providing your Personal Information to them.

  7. Information We Collect

  8. Through your interaction with and use of the Channels, Providers may collect Personal Information, which is information that identifies an individual or relates to an identifiable individual. Personal Information may include, but is not limited to, the name, physical address, telephone number, e-mail address, or company affiliation and associated interests of you or another person.

    In addition to Personal Information, Providers may also collect other information through your interaction with, and use of, the Channels and non-Provider websites, which does not reveal your specific identity or does not directly relate to an individual (“De-Identified Information”). De-Identified Information may include, but is not limited to, browser and device information, data collected through automated electronic interactions, application usage data, demographic information, geographic or geo-location information, statistical and aggregated information.

    De-Identified Information may also include statistical and aggregated information that does not directly identify a specific person but may be derived from Personal Information. For example, we may aggregate Personal Information to calculate the percentage of users in a particular zip code.

    In some instances, we may combine De-Identified Information with Personal Information, such as combining a precise geographical location with your name. If we combine De-Identified Information with Personal Information, we will treat the combined information as Personal Information.

  9. How We Use and Share Information

  10. 5.1 Personal Information

    Providers use and share the Personal Information we collect (unless otherwise restricted by applicable law), to perform the following activities:

    (a) Engage in Transactions. We may use Personal Information to engage in and process transactions with you. We may also use Personal Information along with financial, credit card, and payment information to process your transactions. If you provide us with Personal Information containing health information in accordance with a Business Associate Agreement and any additional agreement with us, we will use the health information for purposes of such agreements, and we will treat that health information in accordance with applicable law.

    (b) Provide Support or Other Services. We may use your Personal Information to provide support or other services you have ordered, as well as product updates, product patches and fixes and other similar operational communications. Also, we may use your Personal Information to confirm certain information about your order, discuss the order and confirm your compliance with licensing and other terms of use. In our compliance review, we may share your Personal Information with your employer or affiliated company.

    (c) Marketing, Advertising and Alerts. We may use your Personal Information to notify you about new product releases, alerts, updates, prices, terms, special offers, associated campaigns and service developments, and to advertise our products and services to you in accordance with this Policy. Also, we may use your Personal Information to communicate with you about a trade show, conference or event hosted or co-sponsored by Providers or one of our partners.

    (d) Online Communities. Some Channels may permit you to: participate in interactive discussions; create a profile (“Profile”); post comments, opportunities or other content; communicate directly with another user; or otherwise engage in networking activities. Some of these services may be moderated and all may be accessed for technical reasons. Providers do not control the content that users post to these forums or social networks. You should carefully consider whether you wish to submit Personal Information to these forums or social networks and whether you wish to make your Profile available to other users, and you should tailor any content you submit appropriately. You should also review any additional terms and conditions that may govern your use of these Channels. To manage or remove your Personal Information from our online communities, please fill out a request form or otherwise notify us through our Contact Us page. If we are not able to remove your Personal Information, we will let you know.

    (e) Interact with You on Third Party Social Networks. We may use your Personal Information to interact with you on third party social networks. Provider’s interactions with you on a third party social network would be subject to that network’s privacy policies and terms of use.

    (f) Post Testimonials. We may post testimonials on our Channels that may contain Personal Information. Prior to posting a testimonial, we will obtain your consent to use your name and testimonial. If you wish to update or delete your testimonial, please fill out a request form (or otherwise notify us through our Contact Us page), and be sure to include your name, testimonial location, and contact information.

    (g) Improve Quality. We may use your Personal Information to evaluate and improve our products, services, marketing, and customer relationships. We may also use your Personal Information to help create and personalize content on our Channels, facilitate your use of the Channels (for example, to facilitate navigation and the login process, avoid duplicate data entry, enhance security, keep track of shopping cart additions and preserve order information between sessions), improve quality, track marketing campaign responsiveness (including online advertising and e-mail marketing), and evaluate page response rates.

    (h) Joint Sales or Product Promotions. Providers and their partners may engage in joint sales or product promotions. Such promotions will reference the partners involved. Both Providers and the partner(s) will have access to that information, and Providers or our partners may provide you the sales or product promotion information. Each party will be responsible for managing its own use of the Personal Information collected for the joint sale or product promotion. We recommend you review the privacy policies of these partners to address any questions you have regarding their handling of your information.

    (i) Contact a Referral/“Tell a Friend”. If you elect to use our referral service to inform a friend about our products or services, we will ask you for the friend’s contact information. Providers will then send your friend a one-time contact related to your referral request. Providers use the Personal Information you provide in this situation solely for the purpose of sending the one-time contact and tracking the success of our referral program. Your friend may contact Providers through our inquiry form to be removed from the referral program.

    (j) Obtain Third Party Services. We may also share Personal Information with third parties who provide services to Providers, such as credit card processing services, order fulfillment, analytics, event / campaign management, web site management, information technology and related infrastructure provision, customer service, e-mail delivery, auditing, and other similar services. When we share Personal Information with third party service providers, we require that they use your Personal Information only for the purpose of providing services to us and subject to terms consistent with this Policy.

    (k) Protect our Employees, Sites, Facilities, and Operations. Providers may disclose your Personal Information as we deem necessary or appropriate to protect the health and safety of our employees and visitors, our physical and online operations, our property, rights, and privacy, and/or that of our affiliates, you or others. If you visit our offices, you may be photographed or videotaped as part of maintaining the security of our facilities. Facility security photography will be treated as sensitive information and will only be used for security and investigation purposes.

    (l) Comply with Legal Requirements and Corporate Transactions. Providers may disclose your Personal Information as we believe to be necessary or appropriate: (i) under applicable law, including laws outside your country of residence; (ii) to comply with legal process, including legal warrants and seizure orders issued by courts or law enforcement officials; (iii) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (iv) to enforce our terms and conditions; and (v) to allow us to pursue available remedies or limit the damages that we may sustain. Additionally, in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings), we may transfer the Personal Information we have collected to the relevant third party.

    5.2 De-Identified Information

    We may use, disclose, lease, out-license, sell, transfer, distribute, disclose and commercialize the De-Identified Information we collect or create for any purpose, except where applicable law requires otherwise. If we are required to treat De-Identified Information as Personal Information under applicable law, then we will only use it in the same way that we are permitted to use and disclose Personal Information.

    Providers may use some third parties to administer a limited set of Provider advertisements on third party electronic channels. No Personal Information will be provided to the advertisers as part of this process, but aggregate Profile information or De-Identified Information may be used in the selection of advertising to make sure that it has relevance to the user.

    Providers may also use advertising technologies and participate in advertising technology networks that collect De-Identified Information from Providers and non-Provider websites, as well as from other sources, to show you Provider-related advertisements on Providers’ own and third-party websites.

  11. How We Collect Information

  12. 6.1 Collection Methods

    Providers and their third party service providers may collect both Personal Information and De-Identified Information from a variety of sources that generally fall into the following categories:

    (a) Direct Interactions. This category is based on your use of and interaction with us through the Channels and other activities such as account creation, submission of registrations and forms, or sales inquiries and transactions.

    (b) Publicly Available Data / Data from Third Parties. This category is based on automated interactions on non-Provider websites, or other data you may have made publicly available, such as social media posts, or data provided by third party sources, such as third party marketing opt-in lists, or data aggregators.

    (c) Automated Interactions. This category is based on the use of technologies such as electronic communication protocols, cookies, embedded URLs or pixels, or widgets, buttons and tools.

    6.2 Automated Collection Methods

    Although Providers’ use of automated interactions may change over time as technology evolves, the following descriptions are designed to provide you with additional detail about Providers’ current approach to information collected from automated interactions.

    (a) Electronic Communications Protocols. As is true when you visit most websites and apps, Providers may automatically receive information from you as part of the communication connection itself, which often consists of network routing information (where you came from), equipment information (browser type), your IP address (which may identify your general geographic location or company), and date and time.

    (b) Tracking. Providers may also automatically receive and record information about your interaction with the Channels, such as clickstream information (when each Provider webpage was visited and how much time was spent on the page), or general geo-location data.

    (c) Cookies. Providers’ server may query your browser to see if there are "cookies" previously set by our electronic Channels. A cookie is a small piece of information sent by a Web server to store on a Web browser so it can later be read back from that browser. Cookies may collect information, including a unique identifier, user preferences, Profile information, membership information, and general usage and volume statistical information. Cookies may also be used to collect individualized website use data, provide electronic Channel personalization, or conduct and measure the effectiveness of advertising in accordance with this Policy. Some cookies may remain on users' computers after they leave the website. While the majority are set to expire within 1-24 months of your last visit to the website that set the cookie, others may not expire because of their nature, such as cookies that remember opt-out preferences.

    (d) Your Control of Cookies. Your browser may provide you with information and control over cookies. You can set your browser to alert you when a cookie is being used, and accept or reject the cookie. You can also set your browser to refuse all cookies or accept only cookies returned to the originating servers. You can generally disable the cookie feature on your browser without affecting your ability to use the website, except in some cases where cookies are used as an essential security feature necessary for transaction completion. If you have any problems disabling the cookie feature, please fill out an inquiry form or otherwise notify us through our Contact Us page. You should keep in mind that Cookies are important to the proper functioning of a website, and disabling them may degrade your experience and interfere with website features and customizations.

    (e) Third Party Cookies. Providers may engage one or more third party service providers to track and analyze both individualized usage and volume statistical information from interactions with electronic Channels. The service provider(s) may set cookies on behalf of Providers. Providers also may use other third party cookies to provide advertising and personalization services in accordance with this Policy, and to track the performance of Provider advertisements on their websites and Provider e-mails.

    (f) Embedded URLs. We may use a tracking technique that employs embedded URLs to allow use of the electronic Channels without cookies. Embedded URLs allow limited information to follow you as you navigate the electronic Channels, but are not associated with Personal Information and are not used beyond the session.

    (g) Embedded Pixels and Similar Technologies: On the electronic Channels, Providers and their service providers may use embedded pixel technologies for the purposes of identifying unique user visits (as opposed to aggregate hits), and for advertising purposes. In addition, embedded pixels or other technologies may be used in e-mails and our online display advertising to provide information on when the e-mail or ad was opened to track marketing campaign responsiveness; information collected using these technologies may be associated with the recipient's e-mail address.

    (h) Widgets, Buttons, and Tools. Our electronic Channels may include widgets, which are interactive mini-programs that run on our website to provide specific services from another company (e.g., links to bookmarked sites), along with buttons or other tools that link to other companies' services (e.g., a "Like" button or third party map). The widget, button or tool may collect and automatically send Personal Information, such as your e-mail address, or De-Identified Information (such as your browser information, or IP address), to a third party. Cookies may also be set or used by the widgets, buttons or tools to enable them to function properly or for other purposes, which may include advertising. Information collected or used by a widget, button or tool, including cookie settings and preferences, is governed by the privacy policy of the company that created it.

    (i) Physical Location. We may collect the physical location of your device and use it to provide you with personalized location-based services or content. In some instances, you may be permitted to allow or deny such use of your device's location, but if you choose to deny such use, we may not be able to provide you with the applicable personalized services or content.

  13. Registration, Preferences, and Opt-Out

  14. 7.1 Registration

    Providers may allow you to establish a registration Profile or user account Profile for your transactions and communication management associated with the Channels. You may use the Profile to customize and control your preferences for receiving electronic information, including any feature that we might implement for opting into (or out of) communities, newsletters and general interest areas. You may return to the registration Profile to change your elections or modify your Profile by logging into your user account. Please login as usual and follow the prompts to update your Profile.

    7.2 Preferences and Opt-Out

    (a) E-mail Marketing and Analytics. Providers might implement a feature that enables you to opt out of marketing communications. Such feature, if implemented, may enable you to opt out of e-mail marketing by modifying your online Profile as described above or by using our general unsubscribe automated link that is included in Providers’ marketing e-mails. Also, Providers might implement a feature that enables you to opt out of personalized (non-anonymized) website analytics. If such feature is implemented, you may change your website analytics preferences at any time. If you have any problems changing or opting out of these features, please fill out an inquiry form or otherwise notify us through our Contact Us page.

    (b) Interest-Based Ads. Providers may display advertisements tailored to your perceived interests using retargeting and behavioral advertising technologies, a set of practices referred to as interest-based advertising. Retargeted or behavioral advertisements served to your browser (or your browser settings) may contain information that informs you about how to opt-out of viewing such advertisements. For assistance with opting-out, please fill out an inquiry form or otherwise notify us through our Contact Us page. Opting-out does not mean that you will stop receiving ads from Providers. It means that you still stop receiving ads from Providers that have been targeted to you based on your visits and browsing activity across websites over time.

    (c) Unavailability of General Opt-out. Some non-marketing communications may not be subject to general opt-out, such as communications related to product access or download, sales transactions, software updates and other support related information, patches and fixes, conferences or events for which you have registered, disclosures to comply with legal requirements, and (where permitted by law) quality assurance surveys. Some additional communications with partners may also not be subject to general-opt out, including product alerts, updates, contractual marketing and sales materials, and other notices related to partner status.

    (d) Cookies and Do Not Track Preferences. Providers might implement a feature that enables you to opt out of cookies that are not required to enable core website functionality. Providers use their cookies preferences tool in a way that processes Internet advertising and tracking preferences, but does not process any other Do Not Track signals. If such feature is implemented, once you have set your cookie preferences, Providers will follow the specific choices you made there. Please remember that if you delete your cookies, or use a different browser or computer, you will need to set your cookies preferences again. If such feature is implemented, you may access or change your cookie preferences at any time. If you have any problems using any such cookie preference mechanism, please fill out an inquiry form or otherwise notify us through our Contact Us page.



  15. For California Residents

  16. Under California Civil Code Section 1798.83 (also known as Information-Sharing Disclosure, Shine the Light), if you are a California resident and your business relationship with Providers is primarily for personal, family, or household purposes, you may request certain data regarding Providers’ disclosure, if any, of Personal Information to third parties for the third-parties’ direct marketing purposes. To make such a request, please fill out an inquiry form or otherwise notify us through our Contact Us page; you may make such a request up to once per calendar year. In accordance with California Civil Code Section 1798.83, we will provide you, by e-mail, a list of the categories of Personal Information disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, along with the third parties’ names and addresses and any other information required by California Civil Code Section 1798.83.

  17. For European Union Residents

  18. If you are a resident or citizen of a member-country of the European Union, the General Data Protection Regulation ((EU) 2016/679)) may provide you with certain rights beyond the rights stated in this Policy. Before using the Channels, please contact us at our Contact Us page so we may provide you with a “click to accept form” in accordance with such regulation.

  19. Access, Correction, and Profile Updates

  20. You may request to review, correct, update, suppress, or otherwise modify any of your Personal Information that you have previously provided to us through the Channels, or object to the use or processing of such Personal Information by us. You have the ability to update your Profile and related Personal Information at any time. To change this information, please login to your user account and follow the prompts to update your Profile. If you have privacy concerns regarding access to or the correction of your Personal Information, please contact us through our inquiry form or Contact Us page, or write to us at the following address:

    HSBlox, Inc.
    3780 Mansell Road, Suite T-30
    Alpharetta, Georgia 30022
    Attn: Account Administrator
    Email Address: ar@hsblox.com

    In your request, please make clear what Personal Information you would like to have changed or whether you would like to have your Personal Information that you have provided to us suppressed from our database.

    While the majority of questions and issues related to access can be handled quickly, complex requests may take more research and time. In such cases, issues will be addressed, or we will use our best efforts to contact you regarding the nature of the problem and appropriate next steps, within thirty (30) days.

  21. Retention Period

  22. We will retain your Personal Information for a period that begins when you first use any Channel and ends upon the later of: (a) the deactivation of your user account; (b) the completion of our obligation to provide you with products or services; (c) the end of the purposes outlined in this Policy; (d) the end of our need to use your Personal Information to comply with our legal obligations, resolve disputes or enforce our agreements; (e) the termination of our right to use your Personal Information pursuant to any agreements in place between you and us; and (f) the end of the period during which we are required or authorized to retain your Personal Information in accordance with applicable law (“Retention Period”).

    At the end of the Retention period, we will destroy, delete, encrypt or disable access to your Personal Information in a manner designed to ensure that it cannot be reconstructed or read.

  23. Security

  24. The security of your Personal Information is very important to us. We use physical, electronic, and administrative safeguards that are designed to protect your Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction.

    In addition, Providers use standard security protocols and mechanisms to exchange the transmission of sensitive data such as credit card details. When you enter sensitive Personal Information such as your credit card number on our website, we encrypt it using secure socket layer (SSL) technology or other industry-standard security measures.

    In the event that your Personal Information is acquired, or is reasonably believed to have been acquired, by an unauthorized person and applicable law requires notification, Provider will attempt to notify you by e-mail, fax, or U.S. mail. Providers will attempt to give you notice promptly, consistent with the reasonable needs of law enforcement or Providers to determine the scope of the breach and to investigate and restore the integrity of the data system. If your e-mail address in your user account is inoperable and we do not have you current facsimile number or street address, we will be unable to provide you with written notice of any such breach.

  25. Cross Border Transfers/Storage

  26. Providers might offer their products and services on a worldwide basis and might rely upon the services or facilities of affiliates located in the United States and other countries. Pease note that your Personal Information may be transferred, accessed and stored globally as necessary for the uses stated above in accordance with this Policy. You hereby consent to the transfer of information to countries outside of your country of residence, which may have different data protection rules than those of your country.

  27. Policy Updates

  28. We may update this Policy from time to time. Below this Section, we will post a notice to indicate when this Policy has been most recently revised. To see the prior version of this Policy, click here.

    End of Privacy Policy

    Last Revised: August 24, 2018.