Legal

Privacy Policy.

Date of Last Revision: 09/28/2023

When using our Sites, you may choose to interact with features from third parties that operate independently from Index Health, such as social media widgets and links to third-party websites. Index Health has no control over and is not responsible for the privacy practices of such third parties. This Privacy Policy does not apply to the extent Index Health does not own or control any linked websites or features you visit or use. We recommend that you familiarize yourself with the privacy practices of those third parties.

Index Health, Inc., on its own behalf and its respective affiliates (collectively, “Index Health,” “we”, “us”, or “our”), is committed to maintaining the privacy of your Personal Information. This Privacy Policy describes the types of Personal Information we collect from visitors of our public websites and mobile applications and our practices for using, maintaining, sharing, and protecting it. It also describes the rights and choices you may have with respect to your Personal Information and how you may contact us about our privacy practices. This Privacy Policy applies to visitors to the following public websites that are owned and operated by Index Health:www.indexclinic.com (collectively, the “Websites,” and collectively with any affiliated mobile application (“App”) the “Sites”). For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Sites.

Please read this Privacy Policy and our Terms of Use carefully. By accessing or using our Websites, you consent to the collection, transfer, manipulation, storage, disclosure and other uses of your information described in this Privacy Policy. If you do not want your information used or disclosed in the manner described in this Privacy Policy, then you should not use our Websites or provide us with your information.

This Privacy Policy also does not apply to information collected from visitors who register and log-in (“Members”) to the password-protected and secure portions of our Sites (“Secure Platforms”). The Secure Platforms allow eligible Members to perform certain transactions and use Index Health’s services (such as telehealth and expert medical services). All information collected and stored by Index Health or added by our Members into such Secure Platforms is considered Protected Health Information (“PHI”) and/or medical information and is governed by applicable state and federal laws that apply to that information, for example the Health Insurance Portability and Accountability Act (HIPAA). How Index Health uses and discloses such PHI is in accordance with the applicable Notice of Privacy Practices for the associated Secure Platform.

California residents should read the information available in Section 13 below about the categories of personal information to be collected from them and the purposes for which the personal information will be used.

This Privacy Policy is not a contract and does not create any contractual rights or obligations.

Types of Personal Information We Collect

While using our Sites, you may provide us with certain information about you. We or our advertising partners also may automatically collect information through the use of cookies and other tracking technologies (see below).

Personal Information that we collect through your use of the Sites may include IP Address, Device ID, and online identifier. business contact information (if you provide us with such information). We may use that Personal Information and link it to Internet or other electronic network activity information, and we may draw inferences about you from the information we collect. We may also collect your name, title, business contact information, phone number, date of birth, state, country, zip code, your health plan, email address or login identification information only if you provide us with such information directly to us when you begin registration to use a Secure Platform or complete a web form seeking more information.

How We Collect Personal Information

We may collect Personal Information using the following methods:

  • Directly from you when you provide it to us (such as information you enter into web forms, inquiries, responses, activity on the Sites, and during registration to use a Secure Platform).
  • From third parties, such as analytics and email marketing service providers.
  • Automatically through tracking technologies (cookies, web beacons, log files), including over time and across third-party websites or other online services.

“Cookies” are small files that a website stores on a user’s computer or device. The Sites may use cookies for various purposes, including to keep the information you enter on multiple pages together. Some of the cookies we use are “session” cookies, meaning that they are automatically deleted from your hard drive after you close your browser at the end of your session. Session cookies are used to optimize performance of the Sites and to limit the amount of redundant data that is downloaded during a single session. We also may use “persistent” cookies, which remain on your computer or device unless deleted by you (or by your browser settings). We may use persistent cookies for various purposes, such as statistical analysis of performance to ensure the ongoing quality of our services. We and third parties may use session and persistent cookies for analytics and advertising purposes, as described herein. Most web browsers automatically accept cookies, but you may set your browser to block certain cookies (see below). In accordance with applicable law, we may obtain your consent separately before collecting information by automated means using cookies or similar devices.

Our Sites may use Active Campaign, Acuity Scheduling, Cerbo EHR, FreshPaint, Google Analytics, Google Fonts, Google Tag Manager, Stripe, TypeForm, Webflow, a vendor’s service that uses cookies, web beacons, web pixels and/or similar technology to collect and store anonymous information about you. You can learn more about Google Analytics’ privacy policy and ways to opt out from Google Analytics tracking by visiting Google Analytics’ website.

For more information about how we use Personal Information collected through tracking technologies and the ways you may be able to manage it, see below.

How We Use Your Information

We may use your Personal Information for the following purposes:

  • Operate, maintain, supervise, administer, and enhance the Sites, including monitoring and analyzing the effectiveness of content on the Sites, aggregate site usage data, and other usage of the Sites such as checking your eligibility and assisting you in completing the registration process.
  • Provide you with a tailored and user-friendly experience as you navigate our Sites.
  • Promote and market our Sites to you.
  • To complete the activity you specifically asked for, e.g., register on a Secure Platform, obtain more information, request a demo, or request an RFP.
  • Conduct research on users’ demographics, interests, and behavior based upon information provided during use of our Sites.
  • Anonymize and aggregate information for analytics and reporting.
  • Respond to law enforcement requests and court orders and legal process and carry out our legal and contractual obligations and enforce our rights.
  • Authenticate use, detect potential fraudulent use, and otherwise maintain the security of the Sites and safety of users.
  • Develop, test, improve, and demonstrate the Sites.
  • Any other purpose with your consent.

How We Share Your Information

We may share Personal Information with third parties in certain circumstances or for certain purposes, including:

  • We may share your Personal Information with vendors and service providers, including our data hosting and data storage partners, analytics and advertising providers, technology services and support, and data security. We also may share Personal Information with professional advisors, such as auditors, law firms, and accounting firms. We may disclose your name, email address, date of birth, phone number, and address if you provided it to us via a form on the website or during an incomplete or failed registration to Service Providers.
  • We may share your Personal Information with third parties if you request or direct us to do so. This includes your use of social media widgets on our Sites.
  • We may share your Personal Information to comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries.
  • We may share your Personal Information connection with an asset sale, merger, bankruptcy, or other business transaction.
  • We may share your Personal Information to enforce any applicable Terms & Conditions and Terms of Use, and to ensure the safety and security of the Sites and/or our users.
  • De-identified information. We may also disclose de-identified information, so that it cannot be reasonably used to identify any individual, with third parties for marketing, advertising, research, or similar purposes.
  • Third Party Analytics. We use Google Analytics and other similar analytics tools to understand and evaluate how visitors interact with our Platform and/or the Services. These tools help us improve our Platform and/or the Services, performance, and your experience.

We also may disclose deidentified information. Note that if you make any Personal Information publicly available on the Sites, anyone may see and use such information.

Social Features

Certain features of the Sites permit you to initiate interactions between the Sites and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to click and access Index Health’s pages on certain third-party platforms, such as Facebook, Twitter and LinkedIn as applicable, and from there to “like” or “share” our content on those platforms. Use of Social Features may entail a third party’s collection and/or use of your data. If you use Social Features or similar third-party services, information you post or otherwise make accessible may be publicly displayed by the third-party service you are using. Both Index Health and the third party may have access to information about you and your use of both the Sites and the third-party service.

Third Party Websites and Links

Our Sites may contain links to other online platforms operated by third parties. We do not control such other online platforms and are not responsible for their content, their privacy policies, or their use of your information. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms (such as Facebook, LinkedIn or Twitter) may also be viewable by other users of the Sites and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Sites. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of Personal Information by third parties. Any information submitted by you directly to these third parties is subject to that third party’s Privacy Policy.

Cookies and Information Used for Advertising

As discussed above, on our Sites, we may collect information about your online activities for use in providing you with advertising about products and services tailored to your individual interests. This section of our Privacy Policy provides details and explains how to exercise your choices. You may see certain ads on other websites because we participate in advertising networks (Google, Meta, LinkedIn). We may send your IP address and randomly generated device ID to advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests. The information our ad networks may collect includes information about your visits to websites that participate in the relevant advertising networks, such as the pages or advertisements you view and the actions you take on the websites. This data collection takes place both on our Sites and on third-party websites that participate in the ad networks. This process also helps us track the effectiveness of our marketing efforts.

Each type of web browser offers ways to restrict and delete cookies. You may disable or delete browser cookies through your browser settings. Cookies generally are easy to disable or delete, but the method varies between browsers. If you disable or delete cookies, or if you are running third-party software that intercepts or deletes cookies, please note that some parts of our Sites may not work properly.

You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative’s (NAI) opt-out page and the Digital Advertising Alliance’s (DAA) opt-out page at http://www.networkadvertising.org/choices/.

Some web browsers (including Safari, Internet Explorer, Firefox and Chrome) incorporate a “Do Not Track” (“DNT”) or similar feature that signals to websites that a visitor does not want to have his or her online activity and behavior tracked. If a website operator elects to respond to a particular DNT signal, the website operator may refrain from collecting certain personal information about the browser’s user. Not all browsers offer a DNT option and there is currently no industry consensus as to what constitutes a DNT signal. Although AHWA may respond to DNT signals, many website operators do not proactively respond to DNT signals. For more information about DNT signals, visit http://allaboutdnt.com.

If a portion of our Services allows you to create an account with us, then you can review and update some of your Information by logging into that portion of our Services, visiting your account profile page and making changes.

If you have further questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

Children's Privacy

Our Sites are not intended for children under 18 years of age, and we do not knowingly collect or sell Personal Information from children under 18. If you are under 18, do not use or provide any information on these Sites or through any of its features. If we learn we have collected or received Personal Information from a child under 18 without verification of parental consent, we will delete it. If you are the parent or guardian of a child under 18 years of age whom you believe might have provided us with their Personal Information, you may contact us using the below information to request that it be deleted.

Security of Personal Information

We take steps to secure Personal Information through administrative, technical, and physical safeguards designed to protect against the risk of accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. Unfortunately, we cannot guarantee the security of information transmitted through the Internet, and where we have given you (or where you have chosen) a password, you are responsible for keeping this password confidential.

Retention of Personal Information

We generally retain records only as long as necessary and as required for our business operations, for archival purposes, and/or to satisfy legal requirements. When determining the appropriate retention period for Personal Information, we take into account various criteria, such as the amount, nature, and sensitivity of the Personal Information; potential risk of harm from unauthorized use or disclosure; purposes for which we process your Personal Information; whether we can achieve those purposes through other means; and business operations and legal requirements. Because we maintain our Sites to protect from accidental or malicious loss and destruction, residual copies of your Personal Information may be retained in our backup and archival systems for a limited period of time, after which the information will be automatically deleted or put beyond use where deletion is not possible.

International Users

Our Services are operated in the United States. Consumer Information may be processed by us in the country where it was collected as well as other countries (including the United States) where laws regarding processing of Consumer Information may be less stringent than the laws in the Consumer’s country. By using our Services or providing us with Consumer Information, the Consumer consent to this transfer and processing.

Updating This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our privacy practices. It is your responsibility to review the Privacy Policy from time to time to view any such changes.

Your Rights 

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

You have the right to:

  • Inspect and Obtain a Copy of Your PHI. You have the right to see or obtain an electronic or paper copy of the PHI that we maintain about you (right to request access). Some clarifications about your access rights: 
  • we may charge a reasonable, cost-based fee for the costs of copying, mailing, or other supplies associated with your request;
  • if you request a copy of your PHI, we will generally decide to provide or deny access within 30 days; and
  • we may deny your request for access in certain limited circumstances, however, if we deny your access request, we will provide a written denial with the basis for our decision and explain your rights to appeal or file a complaint. 
  • Make Amendments. You may ask us to correct or amend PHI that we maintain about you that you think is incorrect or inaccurate. For these requests:
  • we will generally decide to grant or deny your request within 60 days. If we cannot act within 60 days, we will give you a reason for the delay in writing and include when you can expect us to complete our decision, which will be no longer than an additional 30 days. 
  • Request Additional Restrictions. You have the right to ask us to limit what we use or share about your PHI (right to request restrictions). You can contact us and request us not to use or share certain PHI for treatment, payment, or operations or with certain persons involved in your care. For these requests:
  • we are not required to agree;
  • we may say "no" if it would affect your care; but
  • we will agree not to disclose information to a health plan for purposes of payment or health care operations if the requested restriction concerns a health care item or service for which you or another person, other than the health plan, paid in full out-of-pocket, unless it is otherwise required by law.
  • Request an Accounting of Disclosures. You have the right to request an accounting of certain PHI disclosures that we have made. For these requests:
  • we will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures, such as any you asked us to make; and
  • we will provide one accounting a year for free, but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
  • Request Confidential Communications. You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or at a specific address. For these requests: 
  • you must specify how or where you wish to be contacted; and
  • we will accommodate reasonable requests.
  • Choose Someone to Act for You.  If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
  • We will make sure the person has this authority and can act for you before we take any action.
  • Other Particularly Sensitive Conditions.  Certain other types of health information may have additional protection under state law. For example, health genetic testing results are treated differently than other types of health information under certain state laws. To the extent applicable, Index would need to get your written permission before disclosing these categories of information to others in many circumstances.
  • Make Complaints. You have the right to complain if you feel we have violated your rights. We will not retaliate against you for filing a complaint. You may either file a complaint:

directly with us by contacting hello@indexclinic.com. All complaints must be submitted in writing; or with the Office for Civil Rights at the US Department of Health and Human Services. Send a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/


Contact

Should you have any questions about our privacy practices or this Privacy Policy, please contact Index Health using the following contact details:

Index Health Inc
936 SW 1st Avenue, Box 950
Miami, FL 33130-4520

hello@indexclinic.com