We have strived to design and manage our site to meet current industry standards of privacy and security, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA) as amended by the Health Information Technology for Economic and Clinical Health Act Section 13402 ("HITECH Act") and implementing regulations (collectively referred to as "HIPAA Regulations"). While no website can be 100% secure, MedImpact has security measures in place to protect against the loss, misuse and alteration of the information under our control. MedImpact's Web Server uses encryption technology to ensure private and authenticated communication by encrypting (via 128-bit SSL encryption standard) all user-identifying data between two parties (customer and Website). In addition, MedImpact's Websites have the added benefit of "secure site verification" for Internet customers issued by Equifax™ (The Certificate Issuing Authority) that MedImpact is indeed a real company.
Access to MedImpact's database is protected by physical security, with access limited to few personnel. MedImpact's database IP is only accessible through our application and not visible over the Internet. MedImpact's servers are continuously monitored for network intrusion. The Information We Collect
MedImpact collects and stores your Profile in order for you to manage your health. You may be required to pre-enroll though a provider or health plan, which will then start the enrollment process with us. You can logon to your health plan's website to obtain a user id and password before you access your protected healthcare information.
This Website's registration form may require that you give MedImpact your personal and controlled e-mail address (we strongly recommend that this not be your work-related address) and certain personal information (currently your first and last name, member ID number, and birth date). Using your registration information, MedImpact develops a Profile for you in order for you to receive optimal benefits when you are using our Website.
In addition, MedImpact automatically gathers general statistical information about our Website and visitors, such as IP addresses, browsers, pages viewed, number of visitors, etc., but in doing so we do not reference you by individual name, e-mail address, home address, or telephone number. MedImpact uses this data in the aggregate to determine how much our customers use parts of our Website so we can improve our Website. MedImpact also provides this statistical information to third parties.
The Way We Use information
MedImpact is not engaged in rendering medical advice. There are instances in which MedImpact might use the personal information you voluntarily submit internally. In addition, MedImpact may disclose your personal information – as described herein – to our agents, third-party partners, and affiliates to enable them to perform certain functions for us.
MedImpact uses your personally identifying information to statistically analyze Website usage, to improve our content and product offerings and to customize our Website's content, layout, and services. MedImpact may ask you to provide us voluntarily with additional information regarding your personal or business interests, experience or requests, which we may use to customize our service for you. MedImpact may use your e-mail address, your mailing address, and phone number to contact you regarding administrative notices, new product offerings and communications relevant to your use of the Website. MedImpact may also use or disclose information to resolve disputes, investigate problems, or enforce our User Agreement. At times, MedImpact may review status or activity of multiple users to do so. MedImpact may disclose or access information whenever we believe in good faith that the law so requires or if we otherwise consider it necessary to do so to maintain service and improve our products and services.
MedImpact uses your IP address to help diagnose problems with our server, to manage our Website and to enhance our Website based on the usage pattern data we receive. Third Party Practices
This Website contains links to other sites. MedImpact is not responsible for the privacy practices of such sites. MedImpact recommends that you review the privacy and security policies of such sites should you so desire. Member Communications and Forums
You are responsible for the content and information contained in any communications you may send to this Website, including its truthfulness and accuracy. You agree that you will not upload or transmit any communications that infringe any patent, trademark, trade secret, service mark, copyright or other proprietary rights of any party. You warrant that your communications comply with federal, local and international laws respecting trademark, trade secret, service mark, copyright or other proprietary rights of any party.
By using MedImpact's Website, you consent to the collection and use of this information in the manner we describe.