PRIVACY POLICY

Effective July 31, 2023

Please Review This Notice Carefully

A. OUR COMMITMENT TO YOUR PRIVACY:

MetroDerm, P.C. (“we”, “our”, “us” and “Company”) values and respects your privacy. This Privacy Policy provides information about how we collect, protect, and use information provided when you use our website, as well as any related applications, platforms, and services that link to this Privacy Policy (hereinafter referred to as the “Services”). This Privacy Policy also describes the choices you can make about our use of your information. 

Any password-protected areas of the Services may be subject to additional terms or agreements with us. Our Patient Portal is operated by Modernizing Medicine, Inc., and your use thereof is subject to the privacy policy located at www.modmed.com/privacy-policy/.

We may update or modify this Privacy Policy at any time, by posting the amended version including the effective date of the updated version. Please review this Privacy Policy periodically for any updates or changes. By using the Services and accepting these terms, you agree to the terms of this Privacy Policy and the collection and use of information in accordance with this Policy. This Privacy Policy is binding on all those who access, visit, and/or use our Services. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms of Use.

B. HOW TO CONTACT US. 

You can update your preferences and information by updating your contact information through our Services or contacting us at the e-mail address or phone number below. Additionally, if you have any questions or concerns about our use of your Personal Information (defined below), please do not hesitate to contact us through the link below.

You can write to us at:

https://uniteddermpartners.com/contact/

C. PERSONAL INFORMATION.

While using our Services, we may ask you to provide us with certain personally identifiable information (“Personal Information”).  Personal Information is information about a natural person who is either identified or who can be identified from data and other information either in our possession or likely to come into our possession. 

We collect information from you both when you provide it voluntarily and also automatically when you use our Services.  We may also collect Personal Information from other sources, as described below. 

In addition, we also collect Personal Information about you from third parties in connection with our Services, including from the following sources:

  • Service providers, including data analytics service providers and email, and other communications service providers
  • Social Media Platforms

D. INFORMATION WE COLLECT AND HOW WE USE YOUR INFORMATION.

Protected Health Information.

If you are a patient of ours, your Personal Information in our possession is protected health information (“PHI”) governed by the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”), and the applicable provisions of the Health Information Technology for Economic and Clinical Health (HITECH) Act. In addition to this Privacy Policy, our separate HIPAA Notice applies to your PHI.

Cookies.

Cookies are the best way to offer you a hassle-free experience by retaining information about your preferences, browser, etc. so that we can present the Services in the most relevant manner possible. Information collected through cookies, tags and other tracking technology may be combined with your personal information from our records and other sources. If you would prefer not to receive cookies, you can alter the configuration of your browser to refuse cookies. If you choose to have your browser refuse cookies, it is possible that some features of the Services will not function properly when you interact with them.

You can opt-out of receiving cookies by disabling non-essential cookies through your browser settings. You may also opt out of receiving interest-based ads from Facebook, Instagram and Google. You will continue to see ads on each platform, but they will not be personalized as a result of your actions on the Site. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.  Please visit the links below if you wish to opt out or update your preferences: 

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

E. SHARING YOUR INFORMATION. 

We share aggregated information about our users and non-Personal Information with third parties at our discretion. 

In connection with our Services, we may share your Personal Information with certain third parties who we engage to help us run our business and perform the services, including under the following circumstances:

  • Software and service providers we use to manage and process your information, for example, providers of payment processing software (e.g., bill payment processing software) and appointment scheduling platform providers.
  • Web analytics providers who monitor and analyze the use of our Services.  
  • We use Google Analytics, a service provided by Google, Inc., to gather information about how you and other users engage with the Site. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners. 
  • Marketing service providers we use to communicate with you. 
  • Advertising service providers we use to assist us in providing you more relevant advertising.
  • Hosting providers that provide database storage for our business.
  • Other third parties that you expressly request us to share your Personal Information with.

We may also disclose your Personal Information to our subsidiaries and affiliates, or to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our Site users is among the assets transferred. Additionally, we will share your Personal Information with third parties where required by law, where it is necessary in connection with our Services or services, to enforce or apply our Terms of Use and other agreements (including for billing and collection purposes), or where we have another legitimate interest in doing so.

Most of the third parties with whom we share your Personal Information are located and store your information in the United States, although some may be located or store your information outside of the United States.

F. ACKNOWLEDGEMENT

To the extent that you provide or transmit any information, including, but not limited to, any Personal Information and any information that identifies any other individual (including without limitation name, email address and/or telephone number), to Company or our third-party service or data providers, licensors, or distributors (“Representatives”) through the Services, you warrant that (a) you are providing or obtaining only your own information or the information of others which you are authorized to provide to third parties and/or obtain from third parties on their behalf; and (b) the use of such information by Company and its Representatives will not infringe upon or misappropriate the intellectual property rights or otherwise violate the rights of any third parties. 

G HOW WE SAFEGUARD YOUR INFORMATION. 

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure and any payment transactions will be encrypted using SSL technology.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

H. HOW LONG WE STORE YOUR INFORMATION.

We will retain your Personal Information only for as long as is necessary for the legitimate business purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal, accounting, or reporting obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. Additionally, we may continue to store your Personal Information contained in our standard back-ups. 

We also will retain Usage Information for internal analysis purposes. Usage Information is generally retained for a shorter period of time, except when Usage Information is used to strengthen the security or to improve the functionality of our Services or services, or we are legally obligated to retain Usage Information for longer periods.

I. YOUR RIGHTS AND CHOICES REGARDING YOUR INFORMATION. 

Marketing Preferences. You can opt out from receiving future marketing communications from us at any time by using the unsubscribe function in the email you receive from us, or contacting us as set forth under “How to Contact Us” above. Please allow sufficient time for your preferences to be processed. Even if you opt out of receiving marketing messages, we may still contact you for transactional purposes like confirming or following up on an order or service request, asking you to review a product or service you have ordered, or notifying you of product recalls. If you later opt back into getting marketing communications from us, we will remove your information from our opt-out databases.

Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the preferences or settings page of your web browser. However, these features are not yet uniform, so we do not currently respond to such features or signals. Therefore, if you select or turn on a “do not track” feature in your web browser, we and our third-party providers may continue collecting information about your online activities as described in this Privacy Policy.

You can choose to limit the data that third party services (e.g., Social Media Platforms) share with us using the options provided to you by the applicable third party service (for example, the options provided by a third party social media platform when you connect your social media account with our Services).  You can also disconnect your use of our Services from the third-party service at any time using the options provided to you by the applicable third-party service.  Please note, however, that if you disconnect from the third-party service, that will not delete the data we may have previously collected while you were connected.

J. TRANSFER OF DATA; SPECIAL NOTICE TO NON-U.S. USERS.

Your information, including Personal Information, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Information, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. 

We will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other Personal Information.

If you are located in a country outside the U.S. and submit Personal Information to us, you consent to the general use and disclosure of such information as provided in this Privacy Policy and to the transfer and/or storage of that information to the U.S. and other countries outside your home country. 

K. SENSITIVE PERSONAL INFORMATION. 

Subject to the following paragraph, when you use, access or otherwise interact with our website, we ask that you not send us, and you not disclose, any sensitive personal information as this term is defined under applicable data protection and privacy laws (for example, social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, criminal background or trade union membership) on or through the Services or otherwise to us.

If you send or disclose any sensitive personal information to us, you consent to our processing and use of such sensitive personal data in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such content to our Services.

L. POLICY ON CHILDREN’S INFORMATION. 

Our Services are not created for anyone under the age of 13 (“Children” or “Child”). By using our Services, you represent that you are at least 13 years old.  If you do not meet this age requirement, then you must not access or use our Services.

We do not knowingly collect personally identifiable information from anyone under the age of 14, and we do not target the Services to children under the age of 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us though one of the methods listed under “How to Contact Us”, above. If we become aware that we have collected Personal Information from Children without verification of parental consent, we take reasonable steps to remove that information from our servers.

For more information about the Children’s Online Privacy Protection Act (“COPPA”), which applies to websites that direct their services to children under the age of thirteen (13), please visit the Federal Trade Commission’s website https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions.

M. LINKS TO OTHER SITES.

Our Services contain links to third-party websites. If you click on one of those links, you will be taken to websites we do not control. This Privacy Policy does not apply to the information practices of those third-party websites, including the Patient Portal operated by Modernizing Medicine, Inc. You should read the privacy policies of third-party websites carefully. We are not responsible for the content, privacy policies, actions or security of third-party websites.

N. GOVERNING LAW AND JURISDICTION.

This Privacy Policy shall be construed and governed under the laws of the United States and State of Delaware (without regard to rules governing conflicts of laws provisions). You agree that venue for all actions, arising out of or relating in any way to your use of our Services, shall be in federal or state court of competent jurisdiction located in Nashville, Tennessee, within one (1) year after the claim arises. Each party waives any objections based on forum non conveniens and waives any objection to venue of any action instituted hereunder to the extent that an action is brought in the courts identified above. Each party consents to personal jurisdiction in the courts identified above.

36058738.2