Effective Date: 09/30/2013
Last Updated Date: 10/22/2015
- use, and
information we obtain through the “Recovery Record Service.”
The “Recovery Record Service” means the website located at www.recoveryrecord.com and any mobile application or Internet services under Recovery Record’s control, whether partial or otherwise, in connection with providing its services. The Recovery Record Service provides a web and mobile platform for eating disorder education and management so that individuals and clinicians can record and evaluate recovery goals and progress.
“Personal Information” means information that alone or when in combination with other information may be used to readily identify, contact, or locate you, such as: name, address, email address, or phone number. We do not consider Personal Information to include information that has been anonymized so that it does not allow a third party to easily identify a specific individual.
“Health-Related Information” means all individually identifiable health information, including demographic information and information related to an individual’s physical or mental health, the provision of health care to the individual, or the individual’s payment for the provision of health care. We treat Health-Related Information as Personal Information.
THE RECOVERY RECORD SERVICE COLLECTS YOUR INFORMATION
We collect Personal Information when you:
- register to use the Recovery Record Service;
- use the Recovery Record Service;
- communicate with us.
We also collect information, such as anonymous usage statistics, by using cookies, server logs, and other similar technology as you use the Recovery Record Service.
Personal Information Collection. You must register to use the Recovery Record Service. To register, you may need to provide Personal Information, such as your email address, username, and password. You may also provide other optional information.
Using the Recovery Record Service. We collect the information, including Personal Information and Health-Related Information, you post through the Recovery Record Service. For example, when you enter information into your diary or a clinician communicates with you through the Recovery Record Service, the Recovery Record Service will collect the information in such submissions, including any Health-Related Information.
Customer Support. We may collect Personal Information through your communications with our customer-support team.
Cookies, Automatic Data Collection, and Related Technologies. The Recovery Record Service collects and stores information that is generated automatically as you use it, including your preferences and anonymous usage statistics.
When you visit the Recovery Record Service, we and our third-party service providers receive and record information on our server logs from your browser, including your IP address, and from cookies and similar technology. Cookies are small text files placed in visitors’ computer browsers to store their preferences. Most browsers allow you to block and delete cookies. However, if you do that, the Recovery Record Service may not work properly.
By using the Recovery Record Service, you are authorizing us to gather, parse, and retain data related to the provision of the Recovery Record Service.
HOW RECOVERY RECORD USES YOUR INFORMATION
We use Personal Information to
- facilitate and improve our services; and
- communicate with you.
We may use aggregate information for any purpose, including for marketing purposes.
Internal and Service-Related Usage. We use information, including Personal Information, for internal and service-related purposes and may provide it to third parties to allow us to facilitate the Recovery Record Service. We may use and retain any data we collect to provide and improve our services.
Communications. We may send email to the email address you provide to us to verify your account and for informational and operational purposes, such as account management, customer service, or system maintenance.
Aggregate Data. We may anonymize and aggregate data collected through the Recovery Record Service and use it for any purpose.
RECOVERY RECORD MAY DISCLOSE YOUR INFORMATION
We may share your information:
- with our third-party service providers;
- with other Recovery Record Service users, such as clinicians;
- to comply with legal obligations;
- to protect and defend our rights and property; and
- with your permission.
We do not rent, sell, or share Personal Information about you with other people or nonaffiliated companies for their direct marketing purposes, unless we have your permission.
Compliance with HIPAA Privacy Rule. We voluntarily comply with the requirements of the “Privacy Rule” as defined by Health Insurance Portability and Accountability Act (“HIPAA”) of 1996.
We Use Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of the Recovery Record Service.
To Linked Clinicians. When you are linked to clinicians
through the Recovery Record Service, they may see information,
including Health-Related Information, about you. For example, a
clinician may be able to view the contents of your monitoring
history, symptom frequency, meal or thought logs, clinical
outcome scores, and other information through the Recovery
Record Service. The Recovery Record Service may permit
clinicians to see the names and other identifying information
about the other clinicians and their organizations to which you
are linked to facilitate the clinicians working together as a
team. When you are linked to clinicians, they may obtain the
information about you through the Recovery Record Service and
store it in their own systems. We are not responsible for
practices of the other users, including clinicians, who will
view and use the posted information.
To Linked Organizations. When you are linked to
clinicians’ organizations through the Recovery Record Service,
the organizations may see information, including Health-Related
Information, about you. For example, an organization may be
able to view your name, email address, your links to clinicians
within the organization, outcome evaluation survey scores, your
treatment setting, a general diagnosis, and aggregate statistics
for various attributes, including but not limited to: logs,
disordered behaviors, clinician interactions, goal completion,
coping tactic utilization, average feelings and urges.
Organizations may use the information available through the
Recover Record Service for medical diagnosis, treatment, and
general analysis reporting purposes. An organization will not
be able to view any message like text such as clinician messages,
team chat messages, linking messages. When you are linked to
organizations, they may obtain the information about you through
the Recovery Record Service and store it in their own systems.
We are not responsible for practices of the other users,
including organizations, that will view and use the posted
Severing a Link with Clinicians or Organizations. If a
link between you and a clinician or his/her organization is
severed, such clinician or organization may continue to access
for recordkeeping purposes the information posted by you before
the link was severed. However, after the link is severed, the
clinician or his/her organization will no longer receive updated
information about you unless you reconnect the link.
Marketing. We do not rent, sell, or share Personal Information about you with other people or nonaffiliated companies for their direct marketing purposes, unless we have your permission.
As Required By Law and Similar Disclosures. We may access, preserve, and disclose your Personal Information, other account information, and content if we believe doing so is required or appropriate to: comply with law enforcement requests and legal process, such as a court order or subpoena; respond to your requests; or protect yours’, ours’ or others’ rights, property, or safety.
Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction as permitted by law and/or contract. We cannot control how such entities may use or disclose such information.
We may also disclose your Personal Information with your permission.
By using the Recovery Record Service or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Recovery Record Service. If we learn of a security system breach, we may attempt to notify you electronically by posting a notice on the Recovery Record Service or sending an email to you. You may have a legal right to receive this notice in writing. To receive free written notice of a security breach (or to withdraw your consent from receiving electronic notice), please notify us at firstname.lastname@example.org.
We do not knowingly collect information from children under 13 and we do not want it. We will take steps to delete it if we learn we have collected it.
We do not knowingly collect, maintain, or use Personal Information from children under 13 years of age, and no part of the Recovery Record Service is directed to children under the age of 13. If you learn that your child has provided us with Personal Information without your consent, you may alert us at email@example.com. If we learn that we have collected any Personal Information from children under 13, we will promptly take steps to delete such information and terminate the child’s account.
By using the Recovery Record Service, you will transfer data to the United States.
UPDATE YOUR INFORMATION OR POSE A QUESTION OR SUGGESTION
Recovery Record, Inc.
1121 Clark Way,
Palo Alto, CA 94304