Last Updated: December 1, 2016

DocResponse, Inc. (“DocResponse,” “we,” “us,” “our”) knows that you care how information about you is used and shared. This Privacy Policy (“Policy”) describes what information we collect when you visit and use our sites, including www.docresponse.com, clinic.docresponse.com, and our online services and tools (collectively, the “Technology”), and how that information is used.

Information We Collect

We collect three types of information through our Technology, and we collect it in two different ways.
The three types of information we collect are general information, personal information and performance data.

  • General information includes non-personal information from visitors to the Technology (such as the time of day the Technology is accessed, the IP address of the visitor, the website from which the visitor comes or the website to which the visitor goes after leaving our Technology, which areas of our Technology the visitor accesses, etc.), information in aggregate form (such as statistics relating to the number and frequency of visitors, which pages are visited most frequently), and information in de-personalized form (such as the number of visitors of a certain gender or age, or the number of visitors from a certain region, etc.). If you have provided us with personal information, general information can be coupled with your personal information, or it can be de-coupled from your personal information.
  • Personal information is specific to you and includes such things as your e-mail address, name, social security number, date of birth and mailing address. This type of information is sometimes called “personally identifiable information.” This may also include information that you provided via your registration for DocResponse tools and services.
  • Performance data refers to data input by users as they use services available on the Technology. For example, when users use materials from our Technology, such as surveys, they may input data and information. Performance data can be coupled with personal information provided about a user, or it can be de-coupled from that information.

The two ways we collect information are by you directly providing the information, or by us indirectly monitoring and collecting the information.

  • Information you directly provide refers to any information that you actually input into the Technology and provide to us. For example, when you register to access various portions of the Technology, you may be required to provide certain information (such as name, email address, username, password, content you post, etc.), and when you access various services on the Technology via a subscription, you may be required to provide certain additional information, such as gender, age, date of birth, and ethnicity.  Additionally, when you use our services, you may input performance data, such as healthcare information in response to survey questions.
  • We may also collect information indirectly through the use of cookies, web beacons, embedded scripts, web performance analytics, IP addresses, and other similar means. A cookie is a small file that is stored on a user’s computer for record-keeping purposes. Cookies can store both information you provide as well as general information and performance data. Cookies may be placed on your computer by DocResponse or by third parties that provide content on our Technology (e.g., advertisers, business partners, etc.). Web beacons are similar to cookies and can be used to monitor a user’s activities. DocResponse may use web beacons to monitor the number of people using the Technology, number of people opening e-mails sent from DocResponse, or other data collection. An “embedded script” is programming code that is designed to collect information about your interactions with the Technology, such as the links you click on. The code is temporarily downloaded onto your computer, mobile or other device from our server or a third party service provider. We may also collect information using a variety of reports from web traffic and web performance analytics companies to improve our Technology. This information allows us to better understand users of the Technology, and to customize the Technology while also tracking our success at reaching new audiences. This Privacy Policy does not govern the ability of any third party analytics company to use and share information collected by such company. An IP address is a number that is assigned to your computer, mobile or other computing device whenever you are surfing the Internet. Web servers (computers that “serve up” web pages) automatically identify your computer or other computing device by its IP address. When users request pages from our website, our servers may log their IP addresses.

How We Use Information We Collect

Anonymous General Information and Performance Data
DocResponse uses general information and performance data that has been de-coupled from any personal information for a broad range of purposes. For example:

  • We may use de-personalized performance data to help assess the effectiveness of various survey materials and may use the results of these assessments to improve those survey materials;
  • We may use de-personalized general data to determine characteristics of visitors to our Technology, which characteristics may be used to improve our Technology and services or to better market our services; and
  • We may provide any of this data to unaffiliated third parties for the same or similar uses (e.g., we may provide de-personalized performance data to unaffiliated third parties, such as health care centers, hospitals, clinics, research institutions, physicians or clinicians, who may use that data for research and other purposes).

Personal Data
DocResponse uses personal information (either coupled or de-coupled with performance data) that we collect to provide you with information and services via the Technology. Where the information or service is one that is offered on our Technology but provided by a third party (“Third Party Provider”), we may provide your personal information (either alone or combined with performance data) to that Third Party Provider solely for the purpose of relaying the information or service to you.
Please be aware that a Third Party Provider may use your personal information(either alone or combined with performance data) in order to offer you additional information, products and/or services provided directly by the Third Party Provider or other third parties. It’s important to note that such other information, products and services are not associated with, endorsed by, sponsored by, or otherwise provided by DocResponse, and DocResponse is not responsible for any information, products or services, including their quality, effectiveness, accuracy, or appropriateness, which may be provided by a Third Party Provider or its affiliates or agents.

DocResponse may also use personal information that is coupled with general information and performance data to improve your experience on our Technology by providing you with information that is relevant to you.
DocResponse may also use personal information we collect (including any corresponding general information and performance data) to provide you information about other information, products or services offered by DocResponse. If you do not wish to receive these kinds of communications, you can opt out by sending an email to optout@docresponse.com, or by changing your profile on the Technology.

Note, DocResponse may provide any of the above information to our service providers, but our service providers will be instructed not to use the information for their own benefit, they may only use the information as necessary to provide services to DocResponse.
We may use your personal information (excluding patient name, but including demographic information) for the purposes of aggregating that information and providing data for medical research.
Finally, some of DocResponse’s business partners, including advertisers, use cookies on the Technology, but DocResponse has no access to or control over these cookies. This Policy covers the use of cookies by DocResponse only and does not cover the use of cookies by any advertisers.

How We Use Publicly Posted Information

The Technology may allow you to contribute content to one or more publicly accessible blogs, forums, or groups or to communicate by means of online functions. Any information you contribute to these public forums is, by design, open to the public (“Public Content”). What you have written may be seen, disclosed to or collected by third parties and may be used by others in ways we are unable to control or predict, including to contact you for unauthorized purposes. As with any public forum on any Technology, this information may also appear in third-party search engines like Google, Yahoo, MSN, etc. Any information you provide via any of these public forums is not subject to this Policy, and instead, is subject to the license provided for in the Terms of Use.

How We Use Feedback to DocResponse

DocResponse has feedback functionality on the Technology that allows you to submit comments, suggestions, or bugs found. DocResponse may collect your name or username and email address to follow up with you or thank you for a suggestion.

This Policy does not apply to content, business information, ideas, concepts or inventions that you transmit to us. If you want to keep content or business information, ideas, concepts or inventions private or proprietary, do not send them to DocResponse. By sending them to DocResponse, you are expressly authorizing DocResponse to use this information in any manner deemed appropriate by DocResponse.

Security

DocResponse cares about protecting the security and integrity of your personal information. To that end, we have put in place reasonable security procedures and practices to protect your personal information from unauthorized access, destruction, use, modification, or disclosure. If you have any questions about the steps taken to protect the privacy of your data, or you wish to receive any additional information, please contact us.
Notwithstanding the above commitments to protect your information from loss, misuse or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the Internet.  No method of transmission over the Internet is 100% secure. There is also some risk that others could find a way to thwart our security systems. AS A RESULT, WHILE WE STRIVE TO PROTECT YOUR INFORMATION, WE CANNOT ENSURE OR WARRANT THE SECURITY AND PRIVACY OF ANY INFORMATION YOU TRANSMIT TO US, AND YOU DO SO AT YOUR OWN RISK.

Information Provided to Third Party Sites Linked to Our Technology

This Technology may contain links to other sites. DocResponse is not responsible for the privacy practices of such other sites. DocResponse encourages users to be aware when they leave our Technology and to read the privacy statements of sites the Technology links to. This Policy applies only to information collected on our Technology.

Correction/Updating of Personal Information

If you wish to change any personal information you have provided, you may do so via the Technology.

Business or Asset Transfer or Sale

DocResponse’s business, or portions thereof, may be sold or otherwise transferred to third parties through various means (e.g., sale of stock, sale of assets, merger, etc.). In such transactions, DocResponse may, and likely will, transfer information collected through the Technology, or give the acquirer a license to use that information. DocResponse will make a reasonable effort to provide notice on the Technology.

Release of Information for Legal Reasons

DocResponse may release information concerning your use of DocResponse (including, but not limited to, posted Public Content, registration information, and network records) when it believes in good faith that such release is appropriate to comply with the law (for example, pursuant to a statutory demand, subpoena, warrant, or court order), to protect against fraudulent, abusive or unlawful use of the Technology, to protect DocResponse’s rights or property, enforce any contract between you and DocResponse, or if DocResponse reasonably believes that a situation involving danger of death or injury to any person requires disclosure.

Protection of Minors

Use of this Technology is not intended for children under the age of 13. Children under the age of 13 are not permitted to register on this Technology or use any functionality for which registration or subscription is required. DocResponse will not knowingly collect information from these children.  If  we  learn  we  have  collected  or  received  personal information  from  a  child  under  13  without verification of parental consent, we will delete that information.  If you believe we might have any information from or about a child under 13, please contact us via e-mail info@docresponse.com.  Any information submitted by a child under the age of 13 onto a public forum controlled by DocResponse will remain public until we have been notified of such publication and have had reasonable opportunity to remove that information accordingly.

Changes in This Privacy Policy

DocResponse may change this Policy at any time without prior notice to you, and the current version is always available to you. ANY CHANGES TO THIS PRIVACY POLICY WILL APPLY IMMEDIATELY UPON POSTING TO THE TECHNOLOGY.  Your continued use of the Technology will be deemed your agreement that your information (including information collected in the past) may be used in accordance with the new Policy. If you do not agree with the changes, then you should stop using the Technology, and you should notify us that you do not want your information to be used in accordance with the changes. The date of the last revision appears at the top of this Policy.

Do Not Track Policy

“Do Not Track” is a standard that is currently under development. As it is not yet finalized, we adhere to the standards set out in this privacy policy and we do not currently respond to “Do Not Track” signals on the Technology or on third-party websites or online services where we may collect information.

Your California Privacy Rights

California Civil Code Section 1798.83 permits users that are residents of California to request the following information regarding our disclosure of your personal information to third parties for those third parties’ direct marketing purposes: (i) a list of certain categories of personal information that we have disclosed to certain third parties for their direct marketing purposes during the immediately preceding calendar year, (ii) the identity of certain third parties that received personal information from us for their direct marketing purposes during that calendar year, and (iii) examples of the products or services marketed (if we have that information).  If you are a California resident and would like to make such a request, please email or write us at the contact information listed below.

Contact, Access, and Opt-Out Information

You may contact us as at the following contact information if: (a) you have questions or comments about our Policy; (b) wish to make corrections to any personal information you have provided; (c) want to opt-out from receiving future commercial correspondence, including emails; or (d) wish to withdraw your consent to sharing your personal information with others.  To protect your privacy and security, we will take reasonable steps to help verify your identity before granting access or making corrections.

Contact Information:
DocResponse, Inc.
Email: info@docresponse.com
Address: 9715 Stonecross Bend Drive
Houston, TX 77070

We will respond to your request and, if applicable and appropriate, make the requested change in our active databases as soon as reasonably practicable. Please note that we may not be able to fulfill certain requests while allowing you access to certain benefits and features of our Technology.

Governing Law

This Policy and any disputes related thereto shall be governed by and construed in accordance with the laws of the State of Texas, exclusive of its choice of law rules.

Users from Outside the United States

The Technology is hosted in the United States and is governed by United States law. If you are using the Technology from outside the United States, please be aware that your information may be transferred to, stored and processed in the United States where our servers are located and our central database is operated. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. By using the Technology, you consent to your information being transferred to our facilities and to the facilities of those third parties with whom we share it as described in this Policy.

Sole Statement

This Policy is the sole statement of our privacy policy with respect to the Technology, and no summary, modification, restatement or other versions thereof, or other privacy statement or policy, in any form, is valid unless we post a new or revised policy.