Warning: Undefined array key 0 in /home/u558259128/domains/docnao.com/public_html/wp-content/themes/listingpro/templates/popups.php on line 176
Warning: Attempt to read property "widgetType" on null in /home/u558259128/domains/docnao.com/public_html/wp-content/themes/listingpro/templates/popups.php on line 176
At Docnao, we place a strong emphasis on safeguarding your privacy, and we handle your personal information with the utmost care when you use docnao.com and associated websites, apps, and services owned and operated by Docnao, which are linked to this Privacy Policy (collectively referred to as the “Services”). The purpose of this Privacy Policy is to provide clarity to users of our Services, including those seeking healthcare providers or making appointments (“Users”), as well as doctors, dentists, and other healthcare professionals, organizations, or their representatives who utilize our marketing services (“Healthcare Providers”). Together, we refer to both groups as “you” or “your.”
By using or accessing the Services in any manner, you acknowledge your acceptance of the practices and policies outlined in this Privacy Policy. Consequently, you grant consent for us to collect, use, and share your information in the ways described herein. If you do not agree with the terms of this Privacy Policy, you are not permitted to use the Services. If you use the Services on behalf of someone else (such as your child) or an entity (such as your employer), you affirm that you have the necessary authorization from that individual or entity to accept this Privacy Policy on their behalf. Please note that any use of Docnao Services is perpetually subject to the Agreement, as defined in our Terms of Use, which incorporates this Privacy Policy.
You can obtain a printed copy of this Privacy Policy by clicking here. We sincerely appreciate your decision to choose Docnao.
HIPAA and Protected Health Information (PHI)
Certain information related to demographics, health, and healthcare that Docnao collects from Users while delivering our services to Healthcare Providers may qualify as “protected health information” or “PHI.” This information is subject to the rules of the Health Insurance Portability and Accountability Act (HIPAA) and its associated regulations. Specifically, when Docnao provides administrative, operational, and other services to a Healthcare Provider that is considered a “Covered Entity” under HIPAA, and Docnao receives identifiable information about a User on behalf of the Healthcare Provider to offer these services, Docnao is classified as a “Business Associate” as defined by HIPAA, and this identifiable information is treated as PHI.
HIPAA enforces specific safeguards to protect the privacy and security of PHI and dictates how PHI can be utilized and disclosed. To gain a comprehensive understanding of how your PHI may be used and shared, we recommend reviewing your Health Provider’s Notice of Privacy Practices. It’s important to note that HIPAA regulations do not apply to Personal Data (defined below) that is not classified as PHI. Personal data shared by a User with Docnao when Docnao is not functioning as a Business Associate is not considered PHI. This includes instances such as when you create an account, search for Healthcare Providers or available appointments with Healthcare Providers, complete general medical history forms that are not mandated or provided by a specific Healthcare Provider (“General Medical History Forms”), post reviews, or provide device/IP information or web analytics data while browsing our websites (as described below).
Individual Information
The subsequent sections elaborate on the types of individual information that we gather, both presently and over the previous two years. “Individual Information” encompasses any data that identifies or pertains to a specific person, encompassing details often referred to as “personally identifiable information” or “personal information” according to relevant data privacy laws, rules, or regulations. Within each category of individual information, these sections additionally specify the origin of such data, our commercial or business rationale for its collection, and the groups of third parties with whom we may share this individual information. Further details concerning these origins and categories can be found below.
Data Protection
We place a high priority on safeguarding your Personal Data. Our objective is to shield your Personal Data from unauthorized access, utilization, and disclosure by implementing suitable physical, technical, organizational, and administrative security measures, taking into account the nature of the Personal Data and how it is processed. We strive to adhere to commonly accepted industry standards for safeguarding the Personal Data you provide, whether in transit or at rest. For instance, our Services incorporate industry-standard Secure Sockets Layer (SSL) technology to facilitate the encryption of Personal Data. Your data is stored and processed on our servers, both within the United States and abroad. We maintain what we consider to be industry-standard backup and archival systems.
You also play a crucial role in protecting your data. This includes making prudent choices when selecting and safeguarding your password and other login methods, restricting access to your computer or device and web browser, and logging out after completing your account access. While we take proactive steps to safeguard the security of your account and other data within our records, such as storing Personal Data in a secure, non-public operating environment, it’s essential to recognize that no method of transmitting or storing data on the internet is entirely impervious to security breaches. We cannot guarantee the absolute security of any information you share with us, except as explicitly mandated by law. Consequently, we do not assume responsibility for the theft, loss, destruction, or inadvertent disclosure of your data or content.
In the event we suspect a compromise of the security of your Personal Data at any point during or after our association, we will make reasonable efforts to notify you accordingly. Should notification be warranted, we will strive to do so as expeditiously as the circumstances permit. If we have your email address, we will notify you via the most recent email address in your account profile. We encourage you to keep your email address current within your account. You have the flexibility to update this email address at any time in your account profile. Should you receive a notification from us, you have the option to print and retain a copy. By using our services, you consent to our use of email as the means of notification. If you prefer to receive notifications through the U.S. Postal Service, please contact us at Privacy@docnao.com and include your address in your request. This preference can be altered at any time, and it applies to notifications issued after a reasonable processing period following your request. Additionally, you can use this email address to request a no-cost print copy of an electronic notification regarding a breach of your Personal Data that we may have sent you.
Data Storage Duration
We uphold your Personal Data for the duration necessary to provide our Services or fulfill our business or commercial objectives that warranted the collection of your Personal Data. When determining the retention period for specific data categories, we take into account the data’s origin, our requirement for it, the reasons behind its collection, and the sensitivity of the data. In certain instances, we may retain Personal Data for an extended period if it is essential for meeting our legal responsibilities, resolving disputes, collecting outstanding fees, delivering our Services, or is otherwise permissible or mandated by relevant laws, rules, or regulations. Moreover, we may continue to hold information in an anonymous or aggregated format, provided that such information cannot be used to personally identify you.
For instance:
Your account information and login credentials will be retained for as long as your account remains active.
We will preserve device/IP data for the duration required to ensure the optimal operation, effectiveness, and efficiency of our systems.
Protected health information (“PHI”) will be maintained in compliance with our commitments outlined in our Business Associate Agreements with Covered Entities and HIPAA.