Last updated January 26, 2022.
To access your healthcare provider’s HIPAA Notice of Privacy Practices please visit your healthcare provider’s website.
In order to provide users with a friendly, customized, and efficient experience, we collect personal information of several types. We also collect personal information received from your healthcare provider in order to provide Services to you and to your healthcare provider including but not limited to care management, health tracker, and patient portal solutions. We collect personal information from your device or browser, and directly from you. We may use personal information we collect in order to provide you with our Services, to address your questions, comments or requests, to develop and analyze our products and Services, to personalize your experience with our Services, comply with out legal and contractual obligations, and protect our rights, property, and safety (or the rights, property and safety of others). We have collected these categories of information within the last twelve months.
A) Information You Provide to Us:
We may receive and store information you enter on the Sites or otherwise provide to us through the Services, including information that we receive as a result of our back-office integration with your healthcare provider’s clinical systems.
B) Automatic Information:
We may receive and store certain types of information whenever you interact with the Sites or Services. Navigating Cancer may automatically receive and record certain "traffic data" on our server logs from your browser including your Internet Protocol (IP) address, geo-location, search history, browsing history, the uniform resource locator (URL), the website you linked from, Navigating Cancer cookie information, and the page you requested.
In addition, we may automatically collect data regarding your use of our Services, such as the types of content you interact with and the frequency and duration of your activities. We may combine your information with information that other people provide when they use our Services, including information about you when they tag you. We may also use Google Analytics and other service providers to collect information regarding visitor behavior and visitor demographics on our Services.
C) E-mail and SMS Communications:
We may communicate with you via email and text messaging (SMS), for example for registration purposes, to provide educational materials, and to notify you when your clinic has updated your patient portal. We may also send out emails with news or promotions. If you do not want to receive e-mail or other mail from us, please notify us by e-mail at firstname.lastname@example.org and include sufficient information for us to identify your account.
D) Information from Other Sources:
In order for us to develop a more personalized service offering, we may receive information about you from other sources and add it to our account information.
We do not sell any personally identifiable information to anyone without your consent, and within the last twelve months we have shared your information consistent with the statements below. We will not share your personal information (described above) except in the following circumstances:
Navigating Cancer may disclose personal information when you have provided consent to do so.
B) Consistent with HIPAA:
C) Business Transfers:
Navigating Cancer may transfer your personal information to any successor to all or substantially all of its business or assets that concern the Services.
D) Government Entities/Security:
We may share personal information in response to a court order, subpoena, search warrant, law or regulation. We may also use personal information to comply with our legal, regulatory, security and risk management obligations, including defending legal claims. We may cooperate with law enforcement authorities in investigating and prosecuting activities that are illegal, violate our rules, or may be harmful to other visitors. We may share personal information, to address fraud, security or other technical issues. We may also share personal information to protect against harm to Navigating Cancer or other third parties.
E) Service Providers:
We may share any personal information we collect about you with our third-party service providers. The categories of service providers to whom we entrust personal information include IT and related services; information and services; services such as Google Analytics, customer service providers; and vendors to support the provision of the Services.
F) International Data Transfers:
You agree that all information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We have taken appropriate safeguards to require that your personal information will remain protected and require our third-party service providers and partners to have appropriate safeguards as well.
G) Information You Share with Third Parties:
You should be aware that by providing third parties with your name (User ID) and password, you may inadvertently enable unauthorized persons to review, modify or delete your health records. If you provide a third party with your user credentials, Navigating Cancer cannot monitor their use of the Site or Services.
H) Information You Share with the Public:
The Sites will allow you to post information into a public forum. If you post personal information into a public forum, the public will have access to such information. Please note, once you make a public posting through the Sites, you may not be able to change or remove it.
Navigating Cancer may de-identify your personal information, including your healthcare information. Navigating Cancer and its partners may use and disclose de-identified and or aggregated information gathered from your profile and your usage of the Sites and related statistics. If we are de-identifying personal healthcare information then, such de-identification will be in compliance with HIPAA requirements and such de-identified information will not include personally identifiable information relating to users such as name, email address, or address, but may include gender, height, weight, postal code, and medical information such as diagnosis and stage of illness. We will not attempt to re-identify the de-identified information, except we may attempt to re-identify the information solely for the purpose of determining whether our de-identification processes satisfy legal requirements. Aggregated information is information from multiple users that cannot be “re-identified,” or associated with any individual user or account. This de-identified data may also include data extracted on an anonymous basis from the health care information we receive from your physician or other care providers once you have agreed to the use of our Services. We will require any of our partners that receive de-identified data from us to agree to not re-identify the data.
Your Navigating Care account information is protected by a password for your privacy and security. You are responsible to protect against unauthorized access to your account and to your computer by logging off once you have finished using a shared computer, and to your mobile phone by enabling your device’s security features.
It is our policy to protect the confidentiality of Social Security numbers ("SSNs”) that we receive or collect in the course of business. We secure the confidentiality of SSNs through various means, including physical, technical, and administrative safeguards that are designed to protect against unauthorized access. It is our policy to limit access to SSNs to that which is lawful, and to prohibit unlawful disclosure of SSNs.
“Do Not Track.” Do Not Track (“DNT”) is a preference you can set in your web browser to let the websites you visit know that you do not want them collecting data about you. At this time, this Site does not respond to DNT or similar signals.
The Services may contain links to other websites, and other websites may reference or link to our website or other Services. These other websites are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve and are not responsible for the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk.
Cookies are alphanumeric identifiers that we may transfer to your computer’s hard drive through your Web browser to enable our systems to recognize your browser and tell us how and when pages in our Sites are visited and by how many people. Navigating Care cookies do not collect personal information, and we do not combine information collected through cookies with other personal information to tell us who you are or what your email address is.
Attn: Privacy Officer
1008 Western Avenue Suite 206
Seattle, Washington 98104
B) The right to request deletion of personal information. You, or your authorized agent, have the right to request that we delete the Personal Information that we have collected about you. Subject to HIPAA, other laws, and our legal obligations (including contractual obligations) we may deny your request. There may be exceptions under California law that may allow Navigating Cancer to maintain and use your personal information notwithstanding your request for deletion. We will inform you of our reasons for denying your request.
C) The right to opt-out of the sale of personal information. Under California law, you have the right to opt-out of the sale of personal information; however, Navigating Cancer does not sell your personal information.
D) The right to non-discrimintation for the exercise of a consumer’s privacy rights. You have the right to not receive discriminatory treatment by Navigating Cancer for the exercise of your privacy rights conferred by California law. Please note that if you exercise certain rights you may not be able to use or access all of Navigating Cancer’s Services.
E) Submission of requests. You may submit requests by contacting email@example.com. We may request identity verification before processing your requests (e.g. ensuring that your information matches the identifying information that we have within our system) and we will not process your request without sufficient information to reasonably verify your identity, or the identity of your authorized agent and their authority to submit this request.
F) The California “Shine the Light” law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed your personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties.