Vesica Health, Inc. Privacy PolicyÂ
Vesica Health (“we”, “our” or “us”) respects your right to the privacy of your information. We are committed to being transparent about how we use, share, and protect your information. To help further our commitment, we have developed this Privacy Policy to help you better understand the types of information we collect, why we collect it, how we will use it, and the various options you have to manage the privacy of your Personal Information.
​
For purposes of this Privacy Policy, “Personal Information” means any information that can be used to identify, contact, or locate you, such as: your name, address, email address, or phone number, but does not include any information that has been fully anonymized so that a specific individual can no longer be identified from it.
Please take a moment to read the following to learn more about our information practices, including what type of Personal Information is gathered, how the Personal Information is used and for what purposes, to whom we disclose Personal Information, and how we safeguard your Personal Information.
Privacy Practices
Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements (“Applicable Data Protection Laws”). According to Applicable Data Protection Laws, you may be entitled to know the identity of your “Data Controller” i.e. the legal entity which determines why and how your Personal Information is processed. We are the controller of the data you submit on this website.
​
Within Vesica Health, our most important asset is our relationship with our user community. We are committed to maintaining the confidentiality, integrity, and security of your Personal Information. We respect your privacy and want you to know how we protect your information submitted or collected through your use of our website.
​
US Privacy Notice: As a healthcare provider in the United States, we are required by law to provide US residents with a notice of our privacy practices (“NPP”) detailing how we may use and disclose their protected health information (“PHI”), as well their rights and our obligations with respect to that PHI.
​
If you reside in the European Economic Area (“EEA”), you have certain rights with respect to your Personal Information that we collect and process. As a data subject, your rights include: the right to erasure of data, to rectify data, to access data, the portability of data, to withdraw consent to processing, to object to processing and to lodge a complaint with the relevant supervisory authority.
​
Information We Collect
We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we may collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We may also collect personally identifiable information (including name, email, password, communications); payment details (including credit card information), comments, feedback, service reviews, recommendations, and personal profile.
​
How we collect information?
When you conduct a transaction on our website, as part of the process, we collect personal information you give us such as your name, address and email address. Your personal information will be used for the specific reasons stated above only.
Why do we collect information?
We collect such Non-personal and Personal Information for the following purposes:
​
-
To provide and operate the Services;
-
To provide our Users with ongoing customer assistance and technical support;
-
To be able to contact our Visitors and Users with general or personalized service-related notices and messages;
-
To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we may use to provide and improve our respective services;
-
To comply with any applicable laws and regulations.
How we store, use, share and disclose your personal information?
Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
​
Will we share or sell your Personal Information?
We will not sell or rent your Personal Information, except where we are required to share your information with any third parties who provide services on our behalf. To operate our company effectively, we may use shared systems between our company, resources and subcontractors so Personal Information and anonymous information may be shared between these parties, stored or processed outside the country where you are located. Where we do so, we will ensure that any transfer is subject to appropriate safeguards and this Policy.
How long do we keep your data?
We keep Personal Information in accordance with regulatory obligations and good practice. The time depends on the nature of the information. The time also may change. We endeavor not to keep your Personal Information for any longer than is necessary.
​
Children
​
Vesica Health does not intend to collect, and will knowingly collect, Personal Information from children under age 16. If we become aware that a child under 16 has provided us with Personal Information, we will take reasonable steps to remove such information from our systems and terminate the applicable account.
​
How we communicate with site visitors?
We may contact you to notify you regarding your inquiry, to verify your data, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes we may contact you via email, telephone, text messages, and postal mail.
Cookies
​
Some of our Web pages may contain “cookies,” which are data that may be sent to your Web browser and stored on your computer. Any information obtained consequently is used on an anonymous, aggregated basis and you cannot be identified from it. Most Web browsers can be configured to not accept cookies, or to notify you if a cookie is sent to you.
​
We may use two types of cookies on our website:
​
-
Cookies that are necessary in order to enable the visitor to use the website. These are deleted when you close the browser.
-
Cookies that collect information about how the visitor uses the website in order that we can improve the performance of the website. We may use your IP address to resolve any problems with our server, to administer our website and improve our website. We may perform IP lookups to determine which domain a visitor is coming from to understand the demographics of the visitors. The usage is not combined with Personal Information.
Third-Party Cookies
​
Certain cookies are placed by a third party, for example Google Analytics to measure the use of the website. These cookies are found in other companies’ internet tools which we use to enhance our site, which are controlled by them. If you do not want a website to place cookies on your device, you can change the settings of your browser.
Important Information for California Residents – Your California Privacy Rights
We do not share your Personal Information with third parties for their direct marketing purposes, as defined by California Civil Code Section 1798.83, unless we give you choice (opt-in or opt-out) before sharing with those third parties.
​
If you are a California resident and you have questions about our practices with respect to sharing information with third parties for their direct marketing purposes and your ability to exercise choice, please contact us at Vesica Health, Inc., c/o Legal / Compliance, 17595 Harvard Avenue Suite C #10109, Irvine, California 92614. You must put the statement “Your California Privacy Rights” in the body of your request, as well as your name, street address, city, state, and zip code. In the body of your request, please provide enough information for us to determine if this applies to you. Please note that we will not accept inquiries via the telephone, email, or by facsimile, and we are not responsible for notices that are not labelled or sent properly, or that do not have complete information.
Security
​
We are committed to protecting the security and privacy of your Personal Information. We will use appropriate technical and organizational measures to restrict access to Personal Information to those of our employees, agents, contractors, or representatives who require access to such information to perform tasks assigned to them by us. All Personal Information gathered is stored by us in a secure, password-protected database. We will protect Personal Information provided to us by using reasonable security safeguards against loss, theft, unauthorized access, disclosure, copying, use, or modification.
Your Privacy Choices
​
To seek access to Personal Information about you, to file a concern, complaint, or request for correction, or to opt-out of particular programs, please:
​
-
Contact our Legal & Compliance team by clicking on the “Contact Us” link on the Vesica Health Site you are using
-
Contact us by emailing public.relations@vesicahealth.com
You may also send a letter to either of the following address:
Vesica Health, Inc
Attention: Legal/Compliance
17595 Harvard Avenue
Suite C #10109
Irvine, California 92614
We will respond to all reasonable requests in a timely manner and may need to further confirm your identity in order to process certain requests. Please note that even if you request for your Personal Information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity.
​
Vesica Health reserves the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
​
Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires Vesica Health to protect the privacy of your protected health information (PHI), and to provide you with notice of our legal duties and privacy practices regarding PHI. Generally, protected health information is health information, including demographic information, collected from you or created or received by a healthcare Company, a healthcare clearing house, a health plan, or your employer on behalf of a group health plan, from which it is possible to individually identify you and that relates to:
(a) your past, present, or future physical or mental health or condition;
(b) the provision of health care to you; or
(c) the past, present, or future payment for the provision of health care to you.
We are required to notify affected individuals in the event of a breach involving unsecured protected health information. Vesica Health is committed to protecting the privacy of your PHI. If you have questions or comments regarding this Notice of Privacy Practices, please contact us.
Your Rights Regarding PHI
Subject to certain exceptions, HIPAA establishes the following patient rights with respect to PHI:
Receive and Inspect PHI
You have a right to inspect the PHI about you that we have in our records, and to receive a copy of it. This right is limited to information about you that is kept in records that are used to make decisions about you. You also have the right to direct Vesica Health to transmit a copy to another person you designate, provided such request is in writing, signed by you, and clearly identifies the designated person and where to send the copy of your PHI.
If you want to review or receive a copy of these records, you must make the request in writing. We will respond to your request within 30 days. We may deny you access to certain information. If we do, we will inform you of the reason, in writing. We will also explain how you may appeal the decision.
Request Restrictions
You have the right to request that we limit how we use and disclose your PHI for treatment, payment, and health care operations activities or our disclosure of PHI to individuals involved in your care or payment for your care. Any request must be in writing and state the specific restriction requested and to whom you want the restriction to apply. You may not limit the uses and disclosures that we are legally required to make. If we agree to your request, Vesica Health will honor the restriction until you revoke it or we notify you.
Confidential Communications
You have the right to ask us to communicate with you at an alternative address or by alternative means (other than regular mail). For example, you can request that Vesica Health, Inc. only contact you at work or by mail. Vesica Health will accommodate reasonable requests.
Request Amendment
You have the right to ask us to amend PHI about you which you believe is not correct, or not complete. You must make this request in writing, and give us the reason you believe the information is not correct or complete. We will respond to your request in writing within 60 days. If we approve your request, we will make the correction or addition to your PHI. If we deny your request, we will tell you why and explain your right to file a written statement of disagreement.
Accounting of Disclosures
You have a right to receive a list of certain instances (accounting) in which Vesica Health disclosed your PHI for purposes other than treatment, payment and health care operations aspreviously described in this Notice of Privacy Practices. You have the right to receive specific information regarding these disclosures that have occurred six years prior to the date you ask. The right to receive this information is subject to certain exceptions, restrictions and limitations. We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
Obtain a Paper Copy or Electronic Copy of this Notice
You have the right to obtain a paper copy of this notice upon request, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.
Choose Someone to Act for You
If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.
Opt-Out of Fundraising Communications
If Vesica Health conducts or engages in fundraising communications, you shall have the right to opt-out of such fundraising communications.
Notified of a Breach
You have the right to be notified in the event that Vesica Health (or a Business Associate) commits or discovers a breach of unsecured protected health information.
Our Uses and Disclosures
How do we typically use or share your health information? We typically use or share your health information in the following ways:
Treat you
We can use your health information and share it with other professionals who are treating you.
Run Our Organization
We can use and share your health information to run our organization, improve your care, and contact you when necessary.
Bill Your Services
​
We can use and share your health information to bill and get payment from health plans or other entities.
​
Help with Public Health and Safety Issues
We can share health information about you for certain situations such as:
-
Preventing disease
-
Helping with product recalls
-
Reporting adverse reactions to medications
-
Reporting suspected abuse neglect or domestic violence
-
Preventing or reducing a serious threat to anyone’s health or safety
Do Research
We can use or share your information for health research.
Comply with the Law
We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.
Respond to Lawsuits and Legal Actions
We can share health information about you in response to a court or administrative order, or in response to a subpoena.
Address Workers’ Compensation, Law Enforcement, and Other Government Requests
We can use or share health information about you: for workers’ compensation claims, law enforcement purposes or, with a law enforcement official, with health oversight agencies for activities authorized by law, special government functions such as military, national security, and presidential protective services.
Uses and Disclosures that Require Your Authorization
The following uses and disclosures will be made by Vesica Health only with your authorization:
-
uses and disclosures for marketing purposes, including subsidized treatment communications;
-
uses and disclosures that constitute the sale of PHI;
-
and other uses and disclosures not described in this Notice.
You may revoke your authorization at any time, so long as the revocation is in writing. Once we receive your written revocation, it will only be effective for future uses and disclosures. It will not be effective for any information that may have been used or disclosed in reliance upon the written authorization and prior to receiving your written revocation.
How to Contact Vesica Health
To exercise any of your rights described in this notice or if you have questions or comments regarding the Vesica Health Notice of Privacy Practices, or have a complaint about our use or disclosure of your PHI or our privacy practices, please contact: privacy.compliance@VesicaHealth.com, call us at 949-787-0127 and ask for the Vesica Health HIPAA Privacy Officer, or send a written request to: HIPAA Privacy Officer, Vesica Health, 17595 Harvard Avenue Suite C #10109, Irvine, California 92614. You also may file a complaint with the Secretary of the U.S. Department of Health and Human Services Office for Civil Rights. Vesica Health will not take retaliatory action against you for filing a complaint about our privacy practices.
Changes to the Vesica Health Notice of Privacy Practices
Vesica Health reserves the right to make changes to this notice and to our privacy policies from time to time. Changes adopted will apply to any PHI we maintain about you. Vesica Health is required to abide by the terms of our notice currently in effect. When changes are made, we will promptly update this notice and post the information on the Vesica Health website at Vesica Health.com. Please review this site periodically to ensure that you are aware of any such updates.
​