WEBSITE PRIVACY POLICY
Effective Date: 02/21/2025
This Website Privacy Policy explains how PIMSY EHR (“PIMSY,” “we,” “us,” or “our”) treats personal information we collect, including personal information collected through our various company websites, including but not limited to www.pimsyehr.com (collectively, the “Company Site”).
We use the Company Site to make information, products, and services available to you. The term “personal information” means information that you provide to us that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you, such as your name, phone number, email address, and any other data that is tied to such information.
What Personal Data We Collect and Why We Collect It
We collect personal information when you use our Company Site or obtain information, products, and services from us. This may include your name, address, email address, phone number, organization name, specialty, the number of users in your organization, and any other information you provide to us when you contact us.
No one is required to provide any information to us at any time. However, if you do not provide us with the information we request, we may be unable to provide you with the information, products, or services you have asked for. In other cases, your decision not to provide us with information may preclude your access to certain features and functions of our products and services we offer.
How Do We Collect Personal Information
a. Information You Give Us
We obtain personal information in several ways. For example, we obtain personal information when you provide it to us through the Company Site by using forms such as our “Contact Us” form that seek information, including your interests and concerns, preferences for products and services, or contact information. We also collect information through email and other communications, and in other routine operations in the ordinary course of our business.
b. Information We Collect from Other Sources
If an organization you are affiliated with purchases our Products and Services, we may obtain personal information about you for account creation and maintenance purposes, such as name, email, username, and password. Occasionally, we may obtain business contact information you make publicly available, including from third parties, for our marketing purposes.
How We Use the Information We Collect
We use the information we obtain to:
- Provide and improve the Company Site
- Provide our products and services and information resources
- Develop new and updated products, services, and information resources
- Administer, protect, and manage the Company Site, our products, services, and information resources
- Communicate with individuals concerning our products and services, including marketing and promotional communications and, where applicable, fulfillment of promotional offers
- Enable you to log in to your account to use and access the sections of the Company Site reserved for customer use
- Text, call, or email in response to an inquiry or request submitted by an individual on our “Contact Us” form
- Investigate, enforce, and apply our contractual terms
- Protect against and prevent fraud and other criminal activity, claims and other liabilities
- Comply with and enforce applicable legal requirements, relevant industry standards, and policies
- Fulfill other purposes we disclose to you when we collect your personal information
- We do not share or sell consumer personal information (including phone numbers) to third parties or affiliates for marketing or lead generation
Children
The Company Site and our products and services are not directed to or designed to be used by children. We do not knowingly collect personal information online from children under the age of eighteen (18).
Do Not Track
The Company Site does not currently take any action when it receives a Do Not Track request. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For details, including how to turn on Do Not Track, visit www.donottrack.us.
Patient Information
We do not request any patient information through the general Company Site, such as www.pimsyehr.com. Certain web-based services provided by us, such as PIMSY Provider Portal, PIMSY Client Portal, PIMSY Intake Assistant, and certain support operations involve access to and the processing of patient information. This information is provided to us lawfully by (i) healthcare professionals who have obtained their patients’ consent or authorization to provide us with their patient information or (ii) by the patient themselves (or, if the patient is a minor, through their parent or guardian).
Such information may be considered Protected Health Information (“PHI”) as that term is defined in the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations (“HIPAA”). Such information may also be regulated by certain state laws. We process PHI on behalf of our customers, subject to contractual agreements with such customers, including business associate agreements. This Privacy Policy does not apply to our use and disclosure of PHI. If you have any questions or concerns regarding PHI you believe may be processed by our products and services, please contact the provider with whom you have a clinical relationship directly.
Cookies
We, and certain third-party analytics, may also collect information automatically as you use the Company Site through the use of common data-gathering technologies, such as cookies. Cookies and other technologies collect certain information about the web browsers and devices of users of the Company Site and our products and services, such as IP addresses, access times, and what web pages they visit. We use this for technical troubleshooting, to better understand how the Company Site and our products and services are used, to personalize your visit to the Company Site and use of our products and services.
Embedded Content from Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Except as set forth herein, we do not share Your personal information with those third parties and are not responsible for their privacy practices. We therefore have no responsibility or liability for the content and activities of these linked sites. We suggest you read the privacy policies on all such third-party sites.
Analytics
We use Google Analytics™ web analytics services on our Company Site. Google Analytics is a service provided by Google LLC (“Google”). To opt out of Google Analytics’ use of your information, please use Google Analytics opt-out browser add-on designed for this purpose at https://tools.google.com/dlpage/gaoptout.
Who We Share Your Data With
We may disclose information we obtain to our third-party vendors who provide us with services to assist us in providing, developing, promoting, marketing and supporting our products, services, and information resources and in running our day-to-day business activities. For example, we use third party vendors to provide hosting. We contract with our third-party vendors to limit their use and disclosure of any information we disclose to them.
We may also disclose information as we believe necessary to:
- Comply with applicable law and regulations, which may include disclosures made in response to any subpoena, document request, or other legal request seeking the disclosure of information that appears to have been lawfully issued.
- Perform under and enforce the terms and conditions under which our products and services are provided.
- Protect our rights, reputation, and property, or that of our users, affiliates, or the public or to pursue available remedies or limit damages we may sustain.
- Support our auditing, compliance and corporate governance functions; and
- Transfer or assign the information that we have collected from users in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy, including in any diligence process related to such a transaction.
How Long We Retain Your Data
We will retain the personal information we obtain for a period sufficient to provide the products and services that our customers request or as otherwise necessary to fulfill the purpose for which such information was collected and as necessary to comply with our legal obligations.
How We Protect Your Data
We use reasonable and appropriate security measures designed to protect the personal information we obtain from unauthorized alteration, loss, disclosure, or use, including technological, physical, and administrative controls over access to the systems we use to provide the Company Site and our products and services.
However, please note that the security of information transmitted through the internet can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data. Users of the Company Site are responsible for maintaining the security of any username, password or other form of authentication involved in obtaining access to password protected or secure areas of any of the Company Site. In order to protect us, you and your information, we may suspend your use of the Company Site, without notice, if any breach of security is suspected.
Additional Rights for Nevada Residents
Under Nevada law, we do not sell your personal information. However, if you are a Nevada resident, you may submit a request that we not sell any personal information we have collected about you by contacting us at hello@pimsyehr.com.
Additional Rights for California
California consumers have the right to request any of the following information from us regarding certain Personal Information collected about you during the preceding 12 months under the California Consumer Privacy Act of 2018 (CCPA):
- The categories of Personal Information collected about you.
- The categories of sources from which Personal Information is collected.
- The business or commercial purpose for collecting or selling Personal Information.
- The categories of third parties with whom we share Personal Information, if any.
- The specific Personal Information collected about you.
- For Personal Information sold or disclosed to a third party for a business purpose, you have a right to know the categories of Personal Information about you that we sold and the categories of third parties to whom the Personal Information was sold; and the categories of Personal Information that we disclosed about you for a business purpose.
We will provide this information free of charge up to two (2) times in any twelve (12) month period within 45 days of receiving your verifiable request (including verification of your identity and your California residency), subject to delays and exclusions permitted by law. Specific Personal Information about you or your account that is categorized as sensitive or confidential may be redacted.
As a California resident, you have the right to request that we delete any Personal Information that we have collected about you. We will honor this request subject to the range of exclusions permitted by law. For example, we are not required to delete Personal Information if it is necessary to complete a transaction or reasonably used for an ongoing business relationship or if it is used internally in a lawful manner that is compatible with the context in which the consumer provided the information.
As a California resident, you also have the right to opt out of the sale of your Personal Information to third parties. We do not sell your Personal Information. However, we are permitted to share your Personal Information with a service provider.
We will not discriminate against you if you choose to exercise any of these rights. California residents may exercise the rights described above by contacting us at hello@pimsyehr.com. We may require verification of your identity before further processing your request. In certain instances, we may be permitted by law to decline some or all such requests.
Please note that the CCPA does not apply to, among other things:
- Information that is lawfully made available from federal, state, or local government records.
- Consumer information that is deidentified or aggregated.
- Medical information governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or PHI that is collected by a covered entity or business associate governed by the privacy, security, and breach notification rules issued by the United States Department of Health and Human Services (HHS), Parts 160 and 164 of Title 45 of the Code of Federal Regulations, established pursuant to HIPAA and the Health Information Technology for Economic and Clinical Health (HITECH) Act (Public Law 111-5).
- A provider of health care governed by the Confidentiality of Medical Information Act (Part 2.6 (commencing with Section 56) of Division 1) or a covered entity governed by the privacy, security, and breach notification rules issued by HHS, Parts 160 and 164 of Title 45 of the Code of Federal Regulations, established pursuant to HIPAA, to the extent the provider or covered entity maintains patient information in the same manner as medical information or PHI as described in the paragraph above.
Automated Decision Making and/or Profiling
As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
- Details of your visits to our Company Site, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Company Site.
- Information about your device and internet connection, including your IP address, operating system, and browser type.
The information we collect automatically is statistical data and does not include Personal Information. It helps us to improve our Services.
Notification of Changes
Any changes to this Privacy Policy will be posted to this page so users are always aware of the information we collect and how we use it. Accordingly, please refer back to this Website Privacy Policy frequently as it may change.
Contact Us
You have the right to understand how we collect and use your information. Please direct and questions or comments about this Website Privacy Policy to: hello@pimsyehr.com.