PUBLICATION DATE: 07/22/07; REVISION DATE:11/07/08

MYHEALTHARCHIVE PRIVACY AND CONFIDENTIALITY POLICY

1. Our Philosophy. Your trust is our greatest asset. We make every reasonable effort to ensure that information held by PatientCentral Technologies, LLC as MyHealthArchive (MHA) is confidential and secure. We disclose our information-security practices to you as clearly and fully as possible. These practices receive continuous oversight, and many of our business decisions, including Web design, technology selections, and third-party business relationships, begin and end with considerations concerning your privacy.
2. Changes to Our Policy. While our philosophy will not change, the details of the policy will change over time as we add additional services and form relationships with new business partners. Please refer back to this page periodically. The date the policy was last revised will always appear at the top of the policy pages. 
3. Contacting Us. If you have any questions about this Privacy and Confidentiality Policy, the practices of MHA, your dealings with MHA, or would like to provide comments, please contact us at info@myhealtharchive.com .  This e-mail address is being protected from spam bots, you need JavaScript enabled to view it or by phone, toll-free, at (866) 436-6110, within the United States or Canada.
4. Site Ownership, Scope, and Applicability of The Policy. This Policy applies only when you are within the MHA environment and only to information that MHA collects. If you follow a link to a 3rd party website you will no longer be interacting with an MHA server, and you will no longer see any MHA trademarks or legends that refer to MHA. If you leave the MHA environment in this can no longer be assured that the operator of the other site or service will follow the privacy policies and information security practices that are described in this Policy.  In the event that PatientCentral Technologies, LLC or the portion of its assets comprising MHA is acquired by a third party through a sale, merger, or other disposition by any means, information collected via this web site, including your personally identifiable information, may be acquired by such third party.
5. Activity Tracking. We collect and use activity statistics so we can understand the ways in which our site and services are being utilized. We also provide this data, stripped of all personal identifiers, to business partners. Activity related data is stored anonymously and it is only used in the form of aggregated statistics. Activity related data cannot be used to target you with solicitations of any kind.
6. Collection and Stewardship of Personal Information. We only collect information that is required in order to provide you with services. Our site has been designed so that you must make express, informed choices to use services that ask for personal information and authorize us to have access to your personal information. If you do choose to provide us with personal information, we will hold that information in confidence taking reasonable steps to protect it. At any time, you can opt out of any service you have been using and revoke your authorization for our access to your information. We monitor and adopt best practices from industry guidelines and applicable statutes, and we follow appropriate information security practices. 
7. Third Parties; Personal Information Not Sold. We work with business partners to provide the highest-quality service available. Our business partner contracts include protective language regarding consumer privacy in those cases where we feel the nature of the partner's role demands it. We do not sell personal information under any circumstances. We do not share your information with insurance companies or employers. Your privacy is paramount.
8. Use of Cookies. A cookie is a small text file that Web sites use to recognize a user. At its simplest, cookie technology works by carrying a unique ID generated by the server that creates the cookie. A cookie does not pose a threat to the computer that accepts it. We use non-persistent session state cookies to establish and sustain login sessions. These cookies disappear after you close your browser. The cookies are used to monitor your session and to automatically log you out of our service if you exceed 60 minutes of inactivity. Other sites cannot use cookies created by our sites, and we do not use cookies to track your activities outside of our site. 
9. Protecting Children.  MHA is committed to protecting the privacy of children and others with limited decision-making capacity. Parents or legal guardians may use MHA to establish a personal health record for a minor or a person with limited decision-making capacity. The parent or legal guardian is responsible for supervising use of the website, including its use by the minor or person with limited decision-making capacity.
10. Law Enforcement Requests. MHA cooperates with law enforcement inquiries as a matter of policy. We will use IP addresses and other available information to attempt to identify a user when we are legally compelled to do so or when we believe it is necessary to protect our services, sites, customers, or others.
11. Your Privacy Responsibilities. You are responsible for selecting a password that no one else should be able to guess. You are also responsible for ensuring that your login information remains confidential. If you choose to download your MHA information onto a local or portable device, you are responsible for ensuring that any stored data is adequately protected. Accessing MHA from publicly available computers may compromise the privacy of your personal information, as a local copy of your information, including your login name and password, may be automatically saved on the computer.  MHA acts in accordance with U.S. law. Other countries may provide more protection for your personal information than does the U.S., so it is up to you to determine whether you are content to risk the loss of such protections.
12. Legal Disclaimer. Unfortunately, no data protection method or combination of methods can be guaranteed 100 percent secure. We take all reasonable steps to protect your personal information as described throughout this policy, but we cannot guarantee our ability to do so. As a result, you use MHA content, products, and services at your own risk. MHA will not be liable for disclosures of your personal information due to errors in transmission or unauthorized acts of third parties.