CMETRIC - U.S.

Privacy Policy

Last revision: July 1st 2020

Introduction

Thank you for choosing CMETRIC. We put patients first, both in our commitment to your privacy, and in the great care we take in protecting your data. This Privacy Policy (the “Policy”) will help you understand how we use and protect your data in accordance with applicable privacy laws. If you have any questions, feel free to contact us at security@cmetrichealth.com.

Our Policy will help you interpret what information we collect, how we use or disclose it, and what rights you have. When we talk about “CMETRIC,” “we,” “our” or “us”, we are referring to CMETRIC Inc., the company which provides the services. When we talk about the “Services” in this Policy, we are referring to CMETRIC’s modules and applications. CMETRIC services may be available via various affiliated clinics’ certified Electronic Medical Records (EMR) providers, our website or via a specific application on your mobile device.

Changes to this Policy

The Policy is subject to regular review by CMETRIC. Any changes to the Policy will be reflected on our website. Incidentally, we encourage you to frequently check this page to stay informed about how we are protecting the data we collect and to print or save a copy of the Policy for your records.

By accessing and using this website and CMETRIC services, you signify your acceptance of this Policy. Your continued use of the website following the posting of changes to this Policy will be deemed your acceptance of those changes.

We will inform you, before or at the time of collecting personal information, of the purposes for which we are collecting the information, how we will use it, and the categories of individuals to whom it may be disclosed including by providing you with this Policy. We don’t provide additional notification when a user provides information for an obvious purpose as this is implied consent. We may collect, use or disclose personal information without consent only as required or authorized by law.

An individual may withdraw consent to the collection, use or disclosure of his or her personal information at any time, unless the personal information is necessary for us to fulfill our legal obligations. We will respect your decision, but as a result of the withdrawal of consent, we may no longer be able to provide you certain products or services.

Collecting your Personal Information

We may ask you to provide us certain information that personally identifies you or could be used to personally identify you (“Personal Information”). We may collect personal information from you in multiple ways, including, but not limited to, when you visit our website, create a new CMETRIC account, book an appointment online, fill out a medical form, use the “Contact Us” function, subscribe to the newsletter, or fill in any other form on our website.

Personal Information includes (but not limited to) the following: (1) identifying information (such as your first name, last name or identifier); (2) contact information (such as your email address and phone number); (3) demographic data (such as your address, gender, and postal code); (4) login information (such as your IP address); and (5) medical data (such as the doctors, dentists or other healthcare specialists, providers, or organizations you have visited, your reasons for visit, dates or your visit, health insurance number, your medical history, and other medical and health information you share with us).

If you apply for an open position in the “careers” section of our website, you will also be asked to include a resume or other related documents that may include Personal Information.

Using your Personal Information

We regard the lawful and correct use of personal information as important to the achievement of our objectives, to the success of our operations and to maintaining confidence between us and those with whom we collaborate.

We may use your personal information for the following objectives, among others:

  • To provide the services retained by the clinic, i.e. the online appointment booking, automated reminders or self-registration kiosk modules, of the application “Magic Seat”;
  • To create your account, identify yourself as a user of our website and communicate with you regarding your account;
  • To establish authorization to communicate with you regarding our services;
  • To personalize, conduct, and improve our services or our website;
  • To understand how you use our services and website;
  • To respond to your requests and questions;
  • To provide you information regarding our service and other services or products, or to redeem promotional offers (according your communications preferences);
  • To review and communicate with you about your application for employment if you apply for a position;
  • To prevent errors and fraud and;
  • To meet legal requirements.

Disclosing your Personal Information

We may disclose your personal information in the following instances:

  • To the clinic’s EMR or the clinic where you wish to book an appointment;
  • To our suppliers or services providers who help us administer our business relationship with you. These suppliers or service providers contractually guarantee that they will use your personal information only to provide specific services, that they will keep your personal information confidential in accordance with this Policy, and that they will destroy or return your personal information to us once the service has been provided, without retaining a copy;
  • When we feel the need to investigate potential violations of our user agreement, to enforce the user agreement, or where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud or potential threats against individuals, property or the systems on which we operate the service.

Unless prohibited by law, we may store your personal information outside of your country of residence. While we use contractual and other measures to ensure the protection of personal information, laws and regulations relating to privacy and personal information protection in other legal jurisdictions may not be the same as, or similar to, your local privacy laws. In an effort to respect your privacy, we will not disclose your personal information to law enforcement, other government officials, or other third parties without a subpoena, court order or substantially similar legal procedure, except when we believe in good faith that the disclosure of information is necessary to prevent imminent physical harm, financial loss or to report potentially illegal or fraudulent activity.

Whenever we need to disclose personal information about you, we will endeavour not to disclose more information than is required in the circumstances.

Protecting your Personal Information

CMETRIC Inc. has created and implemented various internal policies and procedures, available to all staff, outlining individual and organizational data protection responsibilities. Responsibility for upholding this Policy is truly company-wide under the authority of the chief privacy and security officer, who encourages the personal commitment of all staff to address information security.

We maintain appropriate data collection, storage and processing practices, and adequate security measures to protect us against any unauthorized access, change, disclosure, copying or destruction of your personal information.

We implement physical, organizational and administrative security measures that are reasonable given the sensitivity of the personal information you transmit to us. However, internet data transmissions cannot be guaranteed to be 100% secure, and we cannot ensure the security of information during its transmission between you and us. Accordingly, you acknowledge that when you transport such information, you do so at your own risk.

Data Retention

We retain your personal information when it is necessary and relevant for the operation of our service. Upon request, your personal information will be deleted as soon as possible after your account is closed or deactivated. Occasionally, we may retain information, including your personal information, after your account is closed to prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigation, enforce our agreement, comply with applicable legal data retention obligations and take other actions permitted by law. As soon as the retention of your personal information is no longer required, CMETRIC will dispose of your personal information in a secure manner, according to our data retention and deletion policies in effect at that time.

Web Browser Cookies

“Cookies” are small computer files transferred to your computing device that contain information such as your user ID, your IP address, the browsers used to access our Website, your geolocation data, your user preferences, lists of pages visited and activities conducted while using the services. We use cookies to improve or tailor the services or customize advertisements by tracking your navigation habits, measuring performance, storing authentication status so that re-entering credentials is not required, customizing user experiences with the services and for analytics and fraud prevention.

You may choose to set your Web browser to refuse cookies or to alert you when cookies are being sent. If you block cookies, some parts of the website may not function properly. Although you are not obliged to accept cookies or identifiers from CMETRIC mobile devices, if you block or refuse them, you may not have access to all the functionalities of our services or website.

Online Advertising

We may use a type of advertising commonly known as interest-based or online behavioral advertising. This means that some of our partners use tracking tools to display CMETRIC ads on other websites or services based on information about your use of the services or your interests (as inferred from online activity). Such partners may include third-party service providers, advertisers, advertising networks or platforms, and agencies. Other tracking tools used by our partners may collect information when you use the services, such as IP address, mobile device ID, operating system, browser, web page interactions, geographic location and demographic information, such as gender and age range. These tracking tools help CMETRIC learn more about our users’ demographics and internet behaviors.

If you do not wish for cookies to be used for advertising or remarketing purposes by a third party, you may visit the Network Advertising Initiative and opt out. In addition, you may also control the use of device identifiers by changing the settings on your mobile or desktop device. You can opt out of Google Analytics by downloading the opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

We may use information collected from cookies to serve advertising to audiences similar to you based on information you have shared.

Newsletter

If you decide to subscribe to our mailing list, you will receive emails containing news from CMETRIC and updates related to product and service information. If you wish to unsubscribe from future emails, you will find detailed instructions to unsubscribe at the bottom of each email.

Other Websites

Our website may contain links to or embedded content from third party services and/or website. A link to or embedded content from a non-CMETRIC website does not mean that we endorse that website, the quality or accuracy of the information presented on the non-CMETRIC website or the individuals or entities associated with the non-CMETRIC website. If you decide to visit a third-party website, you are subject to the privacy policy of the third-party website as applicable and we are not responsible for the policies and practices of the third-party website. We encourage you to ask questions before you disclose your information to others.

Our website may contain links to or embedded content from third party services and/or website. A link to or embedded content from a non-CMETRIC website does not mean that we endorse that website, the quality or accuracy of the information presented on the non-CMETRIC website or the individuals or entities associated with the non-CMETRIC website. If you decide to visit a third-party website, you are subject to the privacy policy of the third-party website as applicable and we are not responsible for the policies and practices of the third-party website. We encourage you to ask questions before you disclose your information to others.

Children's Privacy

We do not knowingly collect, use, process, disclose, or maintain PII from anyone under the age of 13. Any patient under age 18 must have consent of their legal guardian to use our Services or provide any personal information. If we become aware that any child under the age of 13 has provided PII through this website, we will delete this information.

Access Right and Accuracy

You have the right to request to see and access your own personal information held by us, subject to some exceptions. For example, we will not provide access to information that would reveal personal information about another individual.

You may request access to your personal information by writing to security@cmetrichealth.com. You must provide sufficient information in your request to allow us to identify the information you are seeking. We will respond in writing to your request within 30 days of the date we receive your written request, unless an extension is granted. If we refuse a request in whole or in part, we will provide in writing the reasons for the refusal and inform you of your recourse.

You may also request information about our use of your personal information and any disclosure of that information to persons outside our organization. In addition, you may request a correction of an error or omission in your personal information.

Additional Information for California Residents

In this section, we provide information for California residents, as required under California privacy laws, including the California Consumer Privacy Act (“CCPA”).

Categories of personal information (as defined in the CCPA) that we collect and disclose:
Our collection, use and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident. In general, we may (i) collect and (ii) disclose for a business purpose, the categories of personal information described in the “Collecting Your Personal Information” section above, and share with the persons and for the purposes, listed in the “Disclosing Your Personal Information” section above.

You may also request information about our use of your personal information and any disclosure of that information to persons outside our organization. In addition, you may request a correction of an error or omission in your personal information.

Categories of Personal Information Sold:
Except as required to provide the Services to you, we do not disclose personal information to third parties in exchange for monetary compensation from such third parties.However, as described above, we may make certain categories of personal information available to third parties in order to receive certain services from them, such as when we allow third party tags to collect browsing history and other information on our Sites to improve and measure our ad campaigns. This may include: (a) identifiers such as IP address; and (b) internet activity information, such as browsing history, search history, and information regarding your interaction with an Internet website, application, or advertisement.You may opt out of the sale of personal information to participating third party advertising companies at: https://www.privacyrights.info. We do not sell personal information about residents who we know are younger than 16 years old without opt-in consent.

California Residents’ Rights:
Subject to certain exceptions, California residents also have the following rights.

  • Do-not-sell: California residents have the right to opt-out of the sale of their personal information, but as described above we currently do not sell information to third parties.
  • Request to delete: California residents have the right to request, at no charge, deletion of their personal information that we have collected about them and to have such personal information deleted, except where an exemption applies. We will respond to verifiable requests received from California residents as required by law.
  • Request to know: California residents have the right to request and, subject to certain exemptions, receive a copy of the specific pieces of personal information that we have collected about them in the prior 12 months. California residents also have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months, including:
    - categories of personal information collected;
    - categories of sources of personal information;
    - business and/or commercial purposes for collecting and selling their personal information;
    - categories of third parties/with whom we have disclosed or shared their personal information;
    - categories of personal information that we have disclosed or shared with a third party for a business purpose; and
    - categories of third parties to whom the residents’ personal information has been sold and the specific categories of personal information sold to each category of third party.

California residents may make a Request to Know up to twice every 12 months, at no charge. We will respond to verifiable requests received from California residents as required by law.
California residents may submit requests under the CCPA through the contact options below.

Questions, Requests or Concerns

If you have questions, requests or concerns, please contact us through the following methods below:
Email : security@cmetrichealth.comMailing
Address: CMETRIC, 185 Alewife Brook Pkwy, Cambridge MA 02138

Ebooking
Enable patients to book online
Appointment Reminders
Automate all consultation reminders
Secure Messaging
Keep all communications in one place
Mobile Check-in
Offer contactless registration
Telehealth
Provide virtual care for patients
Queue Management
Create virtual medical waiting rooms