Privacy Policy
This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally identifiable information’ (PII) is being used online. PII, as used in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website (www.cstcm.edu and ceuseminars.www.cstcm.edu).
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
What personal information do we collect from the people that visit our blog, website or app?
When requesting information or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, or other details to help you with your experience.
When do we collect information?
We collect information from you when you register on our site, fill out a web-form, register for a seminar or enter information on our site.
How do we use your information?
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
- To personalize user’s experience and to allow us to deliver the type of content and product offerings in which you are most interested.
- To improve our website in order to better serve you.
- To allow us to better service you in responding to your customer service requests.
- To quickly process your transactions.
- To send periodic emails regarding your order or other products, services and fundraisers.
How do we protect visitor information?
Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible.
We use regular Malware Scanning.
Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user places an order to maintain the safety of your personal information.
All transactions are processed through a gateway provider, Authorize.net, and are not stored or processed on our servers.
Do we use ‘cookies’?
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
We use cookies to:
- Help remember and process the seminars you register for.
- Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted third party services that track this information on our behalf.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer) settings. Each browser is a little different, so look at your browser’s Help menu to learn the correct way to modify your cookies.
If users disable cookies in their browser:
If you disable cookies off, some features will be disabled. It will turn off some of the features that make your site experience more efficient and some of our services will not function properly.
However, you can still register for seminars, or request information by contacting the office over the telephone.
Third Party Disclosure
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide you with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Third party links
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. We have not enabled Google AdSense on our site but we may do so in the future. See more at: https://support.google.com/adwordspolicy/answer/1316548?hl=en
California Online Privacy Protection Act
CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require a person or company in the United States (and conceivably the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this policy. See more at: http://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf
According to CalOPPA we agree to the following:
Users can visit our site anonymously.
Once this privacy policy is created, we will add a link to it on our home page, or as a minimum on the first significant page after entering our website.
Our Privacy Policy link includes the word ‘Privacy’, and can be easily be found on the page specified above.
Users will be notified of any privacy policy changes:
- On our Privacy Policy Page
Users are able to change their personal information:
- By emailing us
- By calling us
- Updating via online contact form
How does our site handle do not track signals?
We honor do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
Does our site allow third party behavioral tracking?
It’s also important to note that we allow third party behavioral tracking.
COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under 13, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online. We do not specifically market to children under 13.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
We will notify the users via in site notification within 7 business days.
We also agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.
CAN-SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
- Send information, respond to inquiries, and/or other requests or questions.
- Process seminar registration requests and orders and to send information and updates pertaining to these.
To be in accordance with CAN-SPAM we agree to the following:
- NOT use false or misleading subjects or email addresses
- Identify the message as an advertisement in some reasonable way
- Include the physical address of our business or site headquarters
- Monitor third party email marketing services for compliance, if one is used.
- Honor opt-out/unsubscribe requests quickly via email
If at any time you would like to unsubscribe from receiving future emails, you can email us at admin@cstcm.edu and we will promptly remove you from ALL correspondence.
Disclosure of Your Health Care Information
The Colorado School of Traditional Chinese Medicine is required, by law, to maintain the privacy and confidentiality of your protected health information and how to provide our patients with notice of our legal duties and privacy practices with respect to your protected health information.
Treatment
We may disclose your health care information to other healthcare professionals within our practice for the purpose of treatment, payment or healthcare operations. (Example)
“On occasion, it may be necessary to seek consultation regarding your condition from other health care providers associated with CSTCM.”
“It is our policy to provide a substitute health care provider, authorized by CSTCM to provide assessment and/or treatment to our patients, without advanced notice, in the event of your primary health care provider’s absence due to vacation, sickness, or other emergency situation.”
Payment
We expect payment at the time the services are rendered but in the event you file an insurance claim, we may disclose your health information to your insurance provider for the purpose of payment or health care operations.
(Example) “Since you pay for your health care services personally, we will, as a courtesy, provide an itemized billing to your insurance carrier for the purpose of reimbursement to you. The billing statement contains medical information, including diagnosis, date of injury or condition, and codes which describe the health care services received.”
Worker’s Compensation
We may disclose your health information as necessary to comply with State Workers’ Compensation Laws.
Emergencies
We may disclose your health information to notify or assist in notifying a family member, or another person responsible for your care about your medical condition or in the event of an emergency or of your death.
Public Health
As required by law, we may disclose your health information to public health authorities for purposes related to: preventing or controlling disease, injury or disability, reporting child abuse or neglect, reporting domestic violence, reporting to the Food and Drug Administration problems with products and reactions to medications, and reporting disease or infection exposure.
Judicial and Administrative Proceedings
We may disclose your health information in the course of any administrative or judicial proceeding.
Law Enforcement
We may disclose your health information to a law enforcement official for purposes such as identifying or locating a suspect, fugitive, material witness or missing person, complying with a court order or subpoena, and other law enforcement purposes.
Deceased Persons
We may disclose your health information to coroners or medical examiners.
Organ Donation
We may disclose your health information to organizations involved in procuring, banking, or translating organs and tissues.
Research
We may disclose your health information to researchers conducting research that has been approved by an Institutional Review Board.
Public Safety
It may be necessary to disclose your health information to appropriate persons in order to prevent or lessen a serious and imminent threat to the health or safely of a particular person or to the general public.
Specialized Government Agencies
We may disclose your health information for military, national security, prisoner and government benefits purposes.
Marketing
We may contact you for marketing purposes or fundraising purposes, as described below: (Example)
“As a courtesy to our patients, we may call your home, usually the day prior to your scheduled appointment to remind you of your appointment time. If you are not at home, we leave a reminder message on your answering machine or with, the person answering the phone. No personal health information will be disclosed during this recording or message other than the / date and time of your scheduled appointment along with a request to call our office if you need to cancel or reschedule your appointment.”
“It is our practice to participate in charitable events to raise awareness, food donations, gifts, money, etc. During these times, we may send you a letter, post card, invitation or call your home to invite you to participate in the charitable activity. We will provide you with information about the type of activity, the dates and times, and request your participation in such an event. It is not our policy to disclose any personal information about your condition for the purpose of CSTCM sponsored fund-raising events.”
Change of Ownership
In the event that CSTCM is sold or merged with another organization, your health information I record will become the property of the new owner.
Your Health Information Rights
- You have the right to request restrictions on certain uses and disclosures of your health information. Please be advised, however, that CSTCM is not required to agree to the restriction that you requested.
- You have the right to have your health information received or communicated through an alternative method or sent to an alternative location other than the usual method of communication or delivery, upon your request.
- You have the right to inspect and copy your health information. We will charge you reasonable cost-based fee expenses such as copies and staff time. The fee is set as base fee of $16.50 for 10 pages or less; additional fee of $.75 per page for pages 11-40; 50 cents per page for pages 61-400. The base fee must be paid at the time of the request and the balanced paid at the time of pick up.
- You have a right to request that CSTCM amend your protected health information. Please be advised, however, that CSTCM is not required to agree to amend your protected health information. If you request to amend your health information has been denied, you will be provided with an explanation of our denial reason(s) and information about how you can disagree with the denial.
- You have a right to receive an accounting of disclosures of your protected health information made by CSTCM.
- You have a right to a paper copy of this Notice of Practices at any time upon request.
Changes to this Notice of Privacy Practices
CSTCM reserves the right to amend this Notice of Privacy Practices at any time in the future, and will make the new provisions effective for all information that it maintains. Until such amendment is made, CSTCM is required by law to comply with this Notice.
CSTCM is required by law to maintain the privacy of your health information and to provide you with notice of its legal duties and privacy practices with respect to your health information. If you have questions about any part of this notice of if you want more information about your privacy rights, please contact the Administrative Director by calling this office at (303) 329 6355. If they are not available, you may make an appointment for a personal conference in person of by telephone within 2 working days.
Complaints
Complaints about your Privacy rights or how CSTCM has handled your health information should be directed to the Administrative Director by calling this office at (303) 329-6355 if the Director isn’t available, you may make an appointment for a personal conference in person or by telephone within 2 working days. If you are not satisfied with the manner in which this office handles your complaint, you may submit a formal complaint to:
DHHS, Office of Civil Rights
200 Independence Avenue, SW
Room 509F HHHF
Washington, VA 20201
This notice is effective as of April 1, 2003. I have read the Privacy Notice and understand my rights contained in the notice.
By using this website I acknowledge Receipt of Notice of Privacy Practices, I have provided CSTCM my authorization and consent to use and disclose my protected health care information for the purposes of treatment, payment of health care operations as described in the Privacy Notice.
Contacting Us
If there are any questions regarding this privacy policy you may contact us using the information below.
Address
CSTCM
1441 York St. Suite 202
Denver, Colorado 80206
United States
Phone
303 329 6355