This Zentrum Care Consumer Health Data Privacy Policy (“Health Privacy Policy”) supplements our Privacy Policy and applies to “consumer health data” subject to certain U.S. consumer health privacy laws such as the Connecticut Data Privacy Act, the Nevada Consumer Health Data Privacy Act, the Washington State My Health My Data Act, and similar state laws (collectively, and as applicable, “Consumer Health Privacy Laws”). Any capitalized but not defined terms in this Health Privacy Policy will have the definitions set forth in the Privacy Policy or Consumer Health Privacy Laws.
Consumer health data does not include information that is publicly available, de-identified, or aggregated. What consumer health data we collect may differ depending on your state of residence and how you interact with us.
This Consumer Health Data Privacy Policy does not apply to “protected health information” (“PHI”), which is regulated by the Health Insurance Portability and Accountability Act (“HIPAA”). HIPAA provides specific protections for the privacy and security of PHI. Please read the Notice of Privacy Practices of your health care provider to understand how your PHI can be used and disclosed.
Consumer Health Data We Collect
As described in the “Categories of Personal Data We Collect” section of our Privacy Policy, the data we collect depends on the context of your interactions with us, the choices you make, and the services and features you use. Because consumer health data is defined very broadly, many different types of data that we collect could also be considered consumer health data. Examples of consumer health data may include:
- Information that could identify your attempt to seek health care services or information, such as appointment data, including the healthcare providers you have considered or booked with.
- Information about health-related conditions, symptoms, status, testing, or treatments (including therapies, procedures, medications, or other interventions), including information relating to a child for whom you request or manage care.
- Information about health insurance coverage, including relevant ID numbers, copay, cost-sharing, and billing information.
- Other information that may be used to infer or derive data related to the above or other health information.
Sources of Consumer Health Data
As described in the “Categories of Sources of Personal Data” section of our Privacy Policy, we collect personal data (which may include consumer health data) directly from you when you use our services. We also may collect your personal data from your healthcare providers on Zentrum Care, such as provider-generated appointment confirmations in response to a booking request.
Why We Collect and Use Consumer Health Data
We collect and use consumer health data for the purposes described in the “Commercial or Business Purposes for Collecting Data” section of our Privacy Policy. Primarily, we collect and process consumer health data as reasonably necessary (1) to provide you with the services you have requested or authorized and (2) in relation to the purposes for which such consumer health data was collected. This may include delivering and operating the services and their features, ensuring the secure and reliable operation of the services and the systems that support them, troubleshooting and improving the products, and other essential business operations that support the provision of the services (such as analyzing our performance, meeting our legal obligations, and conducting research and development).
Our Disclosure of Consumer Health Data
We may disclose the categories of consumer health data described above for the purposes described in the “How We Disclose Your Personal Data” section of our Privacy Policy. In particular, we may disclose personal data, including consumer health data, with your consent or as reasonably necessary to complete any transaction or provide any product you have requested or authorized, as described above.
Third Parties To Whom We Disclose Consumer Health Data
As necessary for the purposes described above, we disclose consumer health data with the following categories of third parties:
Service Providers. We may disclose consumer health data with our third-party service providers who provide us with services including, but not limited to, web hosting and data storage, technology and communications, payment processing, analytics, eligibility and insurance verification, customer and technical support (including AI-assisted support), and security and fraud prevention. These service providers may have access to consumer health data that is necessary to perform their functions, but they are only permitted to use such data in connection with performing services for us. They are not authorized by us to use the information for their own benefit.
Healthcare Providers. Depending on your use of the service, we may disclose consumer health data with the healthcare providers you select in order to schedule, confirm, or manage the appointments you request.
Insurance Clearinghouse. We may disclose consumer health data with insurance clearinghouses to determine your eligibility and cost-sharing obligations, and to otherwise obtain benefit plan information on your behalf.
Business Partners. We may disclose consumer health data with other companies, for example, if you choose to use a third-party platform (such as Google) to log in to the services, or where you use the services to interact with another company.
Payment Processors. Our payment processing partner (currently Stripe) collects your voluntarily provided payment card information as necessary to process your payment.
Parties to a Corporate Transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
Government Agencies. We disclose consumer health data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to a valid legal process.
Other Third Parties. In certain circumstances, it may be necessary to provide consumer health data to other third parties, for example, to comply with the law or to protect our rights or those of our users.
Other Users and Individuals. If you use the services to interact with other users of the service or other recipients of communications, we will disclose data, including consumer health data, as directed by you and your interactions.
The Public. If you provide any consumer health data in a review posting or online discussion or forum that is intentionally open to the public, this information will not be kept private. We recommend that you carefully consider whether to disclose any consumer health data in any public posting or forum. Anything you have written may be seen and/or collected by third parties and may be used by others in ways we are unable to control or predict.
Consumer Health Data Rights
If you are a Connecticut, Nevada, Washington, or Virginia resident, you may have rights with respect to your consumer health data as described below. Your rights may be subject to certain conditions and exceptions under Consumer Health Privacy Laws.
Access and Portability: You may have the right to request confirmation of whether or not we are processing your consumer health data, to access your consumer health data, and to request a copy of your consumer health data in a machine-readable format, to the extent technically feasible. If you are a Nevada or Washington resident, you may also request a list of all third parties and affiliates with whom we have disclosed or sold your consumer health data and their contact information.
Correction: You may have the right to correct inaccuracies in your consumer health data, to the extent such correction is appropriate in consideration of the nature of such data and our purposes of processing your consumer health data.
Deletion: You may have the right to request that we delete the consumer health data that we have collected about you.
Opt-Out of Sale, Targeted Advertising, and Profiling: You may have the right to opt out of the sale and/or processing of your consumer health data for targeted advertising and profiling purposes. Zentrum Care does not sell your consumer health data and does not use your consumer health data for targeted advertising or profiling.
Consent: You may have the right to consent prior to our collection, processing, and/or disclosure of your consumer health data. You have the right to withdraw your consent for such collection, processing, and/or disclosure of your consumer health data.
Nondiscrimination: You have the right not to be discriminated against for exercising your rights as described above.
Appeal: If we refuse to take action on your request within a reasonable period of time after receiving your request, you may appeal our decision by contacting us at privacy@zentrumcare.com. If we deny your appeal, you have the right to contact the attorney general of your state of residence.
How to Exercise Your Rights
To exercise any of your privacy rights under Consumer Health Privacy Laws, you can do so through your account settings or by contacting us at:
E-mail: privacy@zentrumcare.com
Address: Zentrum Care LLC, 7901 Hispanola Ave, Apt 1605, North Bay Village, FL 33141
If you have an account with us, you can submit a request through your account settings. If you are a healthcare provider that does not have a Zentrum Care account, you can submit a request by contacting us at the email address above.