Arizona Oncology Online Scheduling Website Privacy Policy

Our policy regarding the collection and use of your information via the Arizona Oncology Online Scheduling Website is set forth below. The Online Scheduling Website is owned and managed by McKesson Specialty Health (MSH), and MSH is committed to disclosing its privacy and data security policies.

Agreement to Privacy Policy

YOUR ACCESS AND USE OF THIS WEBSITE IS SUBJECT TO YOUR AGREEMENT WITH THE BELOW POLICY, ALONG WITH THE ARIZONA ONCOLOGY ONLINE SCHEDULING WEBSITE TERMS & CONDITIONS OF USE AND YOUR PATIENT REGISTRATION AGREEMENT OR PRACTICE ACCESS AGREEMENT, AS APPLICABLE. BY USING THIS WEBSITE, YOU EXPRESSLY AGREE TO THE TERMS OF THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION AND USE OF INFORMATION AS DISCUSSED IN THIS PRIVACY POLICY.

IF YOU DO NOT AGREE WITH THE BELOW POLICY, PLEASE DO NOT USE OR ACCESS THIS WEBSTIE FOR ANY PURPOSE. PLEASE PRINT A COPY OF THIS PRIVACY POLICY FOR YOUR RECORDS.

Modifications to Privacy Policy

MSH MAY REVISE THIS POLICY REGARDING THE COLLECTION OF INFORMATION AT ANY TIME. SHOULD ANY NEW POLICY TAKE EFFECT, MSH WILL GIVE NOTICE TO YOU AND ALL USERS BY POSTING A NOTICE REGARDING THE NEW POLICY ON THIS WEBSITE, AND THE NEW POLICY WILL APPLY ONLY TO INFORMATION COLLECTED THEREAFTER.

BY ACCESSING OR USING THIS WEBSITE AFTER SUCH CHANGES ARE POSTED, YOU AGREE AND CONSENT TO ALL SUCH CHANGES.

Applicability of this Privacy Policy

This Privacy Policy applies solely to the Online Scheduling Website and provides you information on the specific information that MSH may collect from you via the Online Scheduling Website and how MSH may use it in connection with this Online Scheduling Website, whether you are using the Website as a patient or a physician office.

If you are a patient or legal representative, your physician's use and disclosure of your identifiable health information is subject to your physician's Notice of Privacy Practices. We cannot control any physician's use of a patient's identifiable health information. If you are a patient or legal representative of a patient, please contact your physician for a copy of their Notice of Privacy Practices. MSH provides this Online Scheduling Website on behalf of your physician and therefore protects identifiable health information as required by the applicable agreement between MSH and your physician and in accordance with applicable law. If you have any issues with the identifiable health information managed by your physician’s practice, please contact them directly, as we have no ability to change the information you have provided them.

Disclosure of Information Practices

Whether you are a patient or a physician office, if we collect information from or about you via the Online Scheduling Website, we will tell you what information we are collecting. The amount and type of information that we receive depends on how you use this Online Scheduling Website and the information you choose to submit to us via the Portal.

Whether you are a physician office or patient user, we may track use of your user name and may also capture the paths taken as you move from page to page (i.e., your "click stream" activity). When you log in, your user name and encrypted password will be logged by our system in an audit log but will not be used by us.

Identifiable Health Information

You are not required to provide identifiable health information to visit this Website. However, if you are a patient or the legal representative of a patient, you must provide certain identifiable health information in order to complete your registration.

If you are a patient (or the legal representative of a patient), we will collect identifiable health information from you with your knowledge during the registration process and in the event you request information or services. We may collect any identifiable health information that you provide to us, such as your name, address, e-mail address, gender, birth date and phone number.

When you register for the Online Scheduling Website via the Website, the registration process requires you to choose a user name and password for your account, which you should keep and maintain as confidential. If you choose to share your user name and password you understand that those individuals to whom you share that information will have access to your identifiable health information and will be able to add to your identifiable health information as though they were you. You will be responsible for all activities by users resulting from sharing or not maintaining the confidentiality of your user name or password.

Non-Identifiable Health Information

Either MSH or our third web statistics vendor on behalf of MSH may also collect non-identifiable information, which is automatically collected as you browse or otherwise access this Website. We may collect such information by tracking, or asking our third party vendor to track, your click-stream activity when such information is not tied to a user ID through the use of "cookie" technology or by tracking internet protocol (IP) addresses, as explained below.

Cookies

Like many companies, we may use "cookie" technology on and off of the Website and Portal. “Cookies” are small pieces of information that are stored by your browser on your computer’s hard drive. They enhance your online experience by saving your preferences while you are visiting a particular website. The cookies do not contain any identifiable health information and cannot profile your system or collect information from your hard drive.

When you view our Website or Portal we may place a cookie on your computer, which may be either temporary or permanent. Temporary cookies are used to complete transactions with this Website or Portal and for other purposes such as counting the number of visits to our certain web pages. These temporary cookies are eliminated when you exit your browser.

A permanent cookie may also be stored on your computer by your browser. When you log in, this type of cookie tells us whether you've visited us before or if you are a new visitor. The cookie doesn't obtain any identifiable health information about you or provide us with any way to contact you, and the cookie doesn't extract any information from your computer.

The "help" portion of the toolbar on most browsers will tell you how to prevent your browser from accepting certain types of cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Please note that disabling temporary cookies may prevent you from using and accessing this Website and Portal. Disabling permanent cookies may also impact your use and access of the Website and will not allow you to see any personalization that you may activate.

In addition, if you visit our Website again after deleting a cookie, a new cookie may be activated.

Since third parties may use their own cookies when you click on a hypertext link to their site or service, you should carefully review the privacy policy of other sites you link to from our Website.

IP Addresses

We may also log and track IP addresses for systems administration purposes and for reporting usage trends. Your IP address is usually associated with the physical place from which you enter the Internet, the name of the domain and host from which you access the Internet, the browser software you use and your operating system, and the date and time you access the Website. By collecting your IP address, we may record the page that linked you to this Website, the web pages you visit, the ads you see or click on, and other information about the type of web browser, computer, platform and settings you are using, and any search terms you enter on this Website. IP addresses are not used to track an individual user’s session. This information only helps us determine how often different areas of our Website are visited.

We may combine non-identifiable information collected automatically (such as through IP addresses, cookies or click-stream monitoring) with any previously submitted personal information that we may have received from you.

Geographic Location

We may collect your geographic location based on your IP address and other location-based data.

Analytics

We may also use various third party internet vendors to collect, track and analyze track analytical data regarding Website usage and trends.

Surveys

Users of the Online Scheduling Website may have the opportunity to participate in various MSH surveys depending on the survey and as permitted by law.

Any survey responses that you choose to submit may be aggregated, deidentified and provided or sold to third parties as set forth below.

How Will Your Information Be Used And Disclosed?

We will not sell, share or rent the information that is collected via the Online Scheduling Website to others in ways that differ from what is disclosed in this Privacy Policy.

We may use any identifiable health information or other information that you voluntarily provide us in order to provide you with information, products or services that you may request from MSH.

If you are a patient or the legal representative of a patient, any identifiable health information that you share via the Online Scheduling Website will be made accessible to your physician and will become a part of the records maintained by your physician, which records are subject to your physician's Notice of Privacy Practices. MSH has no control over or responsibility for your physician's use or disclosure of information that you may provide via the Website.

To the extent permitted by applicable law, MSH may use your participation in the Portal to communicate to you special offers and featured items from third parties, MSH, MSH's affiliates, and/or other suppliers and vendors. If you are receiving additional communications and special offers, you may revoke your authorization to receive such materials from MSH via the Portal at any time by contacting us using the contact information below or as outlined in the applicable communication. We will implement your revocation as soon as is commercially reasonable. MSH cannot control any communications and other materials that you may receive directly from third parties.

We will also use your information to customize your browsing experience and communicate with you and otherwise respond to your questions and suggestions regarding use of the Online Scheduling Website as may be permitted by applicable law.

We may share your information only with our suppliers and vendors to the limited extent permitted by applicable law. We require those suppliers and vendors to comply with all applicable data privacy laws and regulations, including HIPAA. We do not sell, lease or rent your identifiable health information. We may also use your geographic location to provide you with specific content and direct you to your closest service providers to the extent permitted by applicable law.

Non-Identifiable Health Information

The non-identifiable, aggregated health information we collect may be shared with our suppliers and vendors and used in the aggregate to create summary statistics that help us analyze website usage trends, assess what information is of most and least importance, determine technical design specifications, arrange the Website in the most user-friendly way, and identify system performance or problem areas.

Aggregate Data

We may aggregate and deidentify in accordance with HIPAA identifiable health information, either alone or with other data to create anonymous "aggregate data" regarding the users of our Website. Aggregate and deidentified data is information that describes the habits, treatment plans, usage patterns, other medical record data and/or demographics of users as a group but does not reveal the identity of particular users. This data will not identify you, but will be used as statistical information to determine such things as user demographics and usage patterns of our Website. MSH may use aggregate data to understand the needs of our community of users and determine what kinds of programs and services we can help provide. Aggregate data may also be provided or sold to third parties, including for the purpose of getting targeted content to you by third party vendors, suppliers, business partners and/or affiliates a picture of our community and services and/or participation in surveys or receipt of emails from third parties.

Other Use and Ownership

We also reserve the right to share your information collected from this Website with third parties to the extent permitted by applicable law including but not limited to the requirements under HIPAA, and, in the case of identifiable health information, pursuant to MSH's business associate agreement with the applicable physician.

MSH maintains full rights to any information collected on this Website, and may freely collect, use and disclose such information unless prohibited by this Privacy Policy or applicable law as stated above.

Security

While no web site can guarantee security, we maintain physical, administrative, electronic, technical and procedural safeguards to help protect your personal information collected via the Portal as required by applicable law. While we cannot guarantee that loss, misuse or alteration to data will not occur, we use industry standards, such as Secure Socket Layers ("SSL") technology, to help safeguard against such occurrences. In certain areas, the information passed between your browser and our system is encrypted with SSL technology (which covers any messages, PII or communications a person directs to MSH or the clinician team) to create a protected connection between you and our website to ensure confidentiality.

Our data center is both physically and electronically secured. Our servers are protected from open access to the Internet by using firewall and encryption technology. We limit access to personally identifiable information about you to our employees and third-party agents, who we reasonably believe need to have access to your information to provide you with the information or services you request via the Online Scheduling Website.

In the event that a breach in our security systems occurs and there is a possibility that an unauthorized person acquires your personal information, we will notify you of such a breach as may be required by applicable law.

In order to help maintain security, you should never share your user ID or password and should always sign out when you are finished using the Online Scheduling Website.

Access

We will maintain your information and allow you to request updates at any time by logging into your Online Scheduling Website account to access your information. We will also take steps to make sure that any updates that you provide are processed in a timely and complete manner.

Third Party Websites

If you use the Online Scheduling Website to link to another web site, which is not controlled or maintained by MSH, you may decide to disclose personal information at that web site. For example, you might provide your contact information to obtain an information packet from an organization. Please be aware that in contacting that site, or in providing information on that site, that third party may obtain personal information about you. This Privacy Policy does not apply when you leave the Online Scheduling Website and go to a third party web site from the Online Scheduling Website. We structure the Service so that no personal or health information goes in the search string or URL when you move from the Online Scheduling Website to a linked web site. We encourage you to be aware when you leave our Service and to read the privacy statements of each and every site that collects personally identifiable information.

What if I am accessing the Online Scheduling Website from outside of the United States?

If you are visiting our Website from outside the United States, please be aware that your information may be transferred to, stored or processed in the United States, where our servers are located and our central database is operated. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country, but please be assured that we take steps to protect your privacy. By using the Website, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this privacy policy.

Transfer of Data

In the event of a change in control of MSH or sale by MSH of substantially all of its assets or other acquisition, merger or reorganization, any information owned by or in the control of MSH may be transferred to such MSH successor, who will comply with the terms of this Privacy Policy.

Important Note Regarding Children

This Website is not directed toward children under 18 years of age and MSH does not knowingly collect or use information from children under 18 through this Website. Any information submitted via the Online Scheduling Website regarding a minor under the age of 18 must be submitted by the minor's legal representative. To the extent permitted by applicable state law, minors may access their identifiable health information through their physician.

What if I have questions or concerns regarding this Privacy Policy?

If you have any questions about this Privacy Policy or the use of your information by MSH please contact us at:

McKesson Specialty Health
10101 Woodloch Forest
The Woodlands, TX 77380