California Privacy Policy

California Privacy Notice

The California Consumer Privacy Act (“CCPA”) is a state privacy law which protects California residents’ (“Consumers”) rights regarding how their personal information is used and disclosed. This Notice covers personal information of users of this website, employees, contractors, job applicants, business contacts, and customers and others who reside in the State of California (“consumers” or “you”). This Notice describes the categories of consumer personal information HealthTrackRx collects and the purposes for which it is used. It also describes your rights with respect to your personal information.

When we use the term “personal information” in this notice, we are referring to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household such as your real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. Personal information does not include publicly-available information and certain other information that is regulated by certain other applicable laws that are exempted from the requirements of the CCPA.

The CCPA does not apply to how we collect, use or disclose medical information about individuals. To learn more about how HealthTrackRx may use and disclose medical information, and your rights under HIPAA, please see our Notice of Privacy Practices.

For general information on the use and disclosure of personal information we collect, please see our Online Privacy Policy.

Collecting Your Personal Information

Our business purposes for processing your personal information

We may use the personal information you provide us:

• To fulfill or meet the reason for which the personal information is provided.
• To provide you with information, products or services that you request from us.
• To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
• To improve our website(s) and present its contents to you.
• For testing, research, analysis and product development.
• As necessary or appropriate to protect the rights, property or safety of us or others.
• As part of the job application process.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To carry out day to day business operations, including:
  • payroll management;
  • performance management;
  • human resources activities;
  • background screening;
  • benefit management;
  • online work collaboration tools;
  • learning management;
  • recruitment activities;
  • asset management;
  • enterprise resource planning (ERP);
  • website analytics;
  • use of operating systems and platforms;
  • travel and expense management; and
  • use of social networking websites and platforms.
• As described to you when collecting your personal information directly or as otherwise set forth in the CCPA.

Categories of personal information we may process

We may process the following categories of personal information, as appropriate for the relevant processing activity:

• name
• contact details, including postal, telephone number, and e-mail addresses
• Internet protocol address
• Internet or other similar network activity, such as browsing history, search history, or information on your interaction with a website, application, or advertisement
• employment-related information
• information about education and professional qualifications, including professional specialties, prescribing data, and verification of credentials
• audio or call recordings between you and our Customer Service Team
• age
• gender

Categories of sensitive personal information we may process

We may process the following categories of sensitive personal information, as appropriate for the relevant processing activity:

• government issued identification
• financial information, insurance policy number, or social security number
• health data

Our business purposes for processing your sensitive personal information

We may use the sensitive personal information you provide us to:

• To fulfill or meet the reason for which the personal information is provided.
• To provide you with information, products or services that you request from us.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
• As necessary or appropriate to protect the rights, property or safety of us or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To carry out day to day business operations:
  • payroll services;
  • human resources activities;
  • background screening;
  • benefit management;
  • enterprise resource planning (ERP); and
  • travel and expense management.

Sources of personal information

You may provide personal information to us directly or via our service providers, such as those providing the following types of services:

• payroll services;
• financial institution;
• background screening;
• recruitment activities;
• website analytics service provider;

We may also receive your personal information from third parties as authorized by you or your agent(s).

The recipients or categories of recipients of the personal information

We may share your personal information with:

• our subsidiaries, joint ventures, or other companies under a common control (“Affiliates”), in which case we will require our Affiliates to honor this Notice;
• our service providers under appropriate contractual restrictions;
• companies or individuals who advise us in the course of running our business;
• third parties in connection with or during negotiation of any merger, financing, acquisition or dissolution, transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of an insolvency, bankruptcy or receivership, personal information may also be transferred as a business asset. If another company acquires our company, business or assets, that company will possess the personal information collected by us and will assume the rights and obligations regarding your personal information as described in this Notice;
• relevant authorities, or other recipients as required in litigation, if HealthTrackRx believes in good faith that such disclosure is necessary (i) in connection with any legal investigation; (ii) to comply with relevant regulatory requirements and laws, such as laws requiring the disclosure of payments made to healthcare providers, (iii) to respond to subpoenas or warrants served on HealthTrackRx; (iv) to protect or defend the rights or property of HealthTrackRx; or (v) to investigate or assist in preventing any violation or potential violation of the law.
• Third parties as requested by you or your agent(s).

The period for which the personal information will be stored, or the criteria for determining the retention period

How long we retain personal information varies according to the type of information in question and the purpose for which it is used. Certain laws may require us to store personal information for specified periods. We delete personal information within a reasonable period after we no longer need to use it for the purpose for which it was collected or for any subsequent purpose that is compatible with the original purpose. This does not affect your right to request that we delete your personal information before the end of its retention period. We may archive personal information (which means storing it in inactive files) for a certain period prior to its final deletion, as part of our ordinary business continuity procedures

Your Rights Over Your Personal Information

Right to Know

You have the right to request the following information:

• The categories of personal information HealthTrackRx has collected about you.
• The categories of sources from which the personal information was collected.
• The business purpose for collecting the personal information.
• The categories of third parties with whom HealthTrackRx has shared the personal information.
• The specific pieces of personal information HealthTrackRx has collected about you.

Right to Opt Out of the Sale of Your Information

HealthTrackRx does not sell your personal information.

Right to Request Deletion

Upon a verifiable request, made through one of the methods provided within the “Exercising Your Rights” section below, we will delete personal information we have regarding you and direct our service providers to delete your personal information from their records, to the extent required by the CCPA. Please note that HealthTrackRx may be required or permitted by law to not remove (or allow removal) of your personal information.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Right to Correct Inaccurate Personal Information

You have the right to request that we correct any inaccurate personal information we have about you. Upon a verifiable request, made through one of the methods provided within the “Exercising Your Rights” section below, we will use commercially reasonable efforts to correct inaccurate personal information we have about you.

Right to Be Free from Discrimination

HealthTrackRx will not discriminate against you for exercising any of your rights under the CCPA.

Exercising Your Rights

If you are a California resident and would like to exercise the rights described above, please contact us using one of the methods below. Upon receipt of a verifiable and reasonable consumer request to “know”, to “delete”, or to “correct”, HealthTrackRx will confirm receipt and process the request within 45 days of receiving the request. Only requests submitted by the consumer or someone legally authorized to act on the consumer’s behalf will be considered, and the request must provide sufficient information in order for HealthTrackRx to properly authenticate and fulfill the request.

Authorized agents

You may appoint an authorized agent to exercise any of the rights above on your behalf, if the authorized agent is a natural person or a business entity registered with the Secretary of State of California.

To appoint an authorized agent, you must also sign a written declaration giving the authorized agent permission to act on your behalf, or you can appoint such agent via a power of attorney pursuant to Probate Code sections 4000 to 4465.

To verify that your authorized agent acts on your behalf, we will ask for this written permission from your agent or for the power of attorney. In case you provided your authorized agent with a written permission, we will require that you also verify your identity, and we may also ask you to directly confirm with us that you provided the authorized agent permission to submit the request.

We will deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Verification of your identity to respond to your request to know, delete, and correct

To evaluate your request to know, delete, or correct, we need to be sure it was you who made the request.

We will verify your identity via signature verification.

For this verification we will need a copy of a government issued identification (i.e. driver’s license/state identification card, military ID, passport, etc.) that includes your signature.

We will only use the personal information you provide us in a request to verify the requestor’s identity or authority to make the request.

Response Timing of Our Responses

HealthTrackRx will provide the consumer with a disclosure of information, free of charge and in writing, within 45 days of receiving a verifiable and reasonable consumer request to “know”. As a business, our obligations with the consumer’s right to “know” are limited to no more than two (2) requests within a twelve (12) month period, and the amount of personal information collected in the twelve (12) month period prior to HealthTrackRx receipt of the consumer’s request. Additionally, if a consumer request is determined to be unfounded or excessive, HealthTrackRx reserves the right to charge a reasonable fee or refuse to fulfill the request and notify the consumer of the reason for refusal.

Toll-Free Phone Number: (866) 287-3218

E-mail: compliance@healthtrackrx.com

Mail:

HealthTrackRx

Attn: Compliance Department

1500 I-35 W

Denton, TX 76207

This Notice may be amended from time to time for any reason. Generally, we will notify you of any changes to this Notice by posting a new Notice on this page as indicated by changing the “Last updated” date below. However, if we intend to process your personal information for a purpose other than the purposes for which it was initially collected, we will take appropriate steps to contact you first and notify you of the new purpose.

Last updated: August 07, 2023