RELAYHEALTH PRIVACY POLICY SUMMARY


Effective Date: March 2, 2016

RelayHealth, a division of McKesson Technologies Inc., and its affiliates (collectively, “RelayHealth,” “we,” “us,” or “our”) understand that privacy is important to you. We have prepared this Privacy Policy Summary to give you an overview of our Privacy Policy and privacy practices including the following information:

  • Who is collecting your information;
  • What information we collect and your choices about that information;
  • How we use your information;   
  • How and with whom we share your information;  
  • How we protect your information; and
  • How to contact us.

IMPORTANT: You should only use this Privacy Policy Summary as an overview of our privacy practices. We urge you to read our complete Privacy Policy so that you can understand the full extent of our privacy practices.

Who Is Collecting Information About You

RelayHealth collects information from you when you use our website or services (the “RelayHealth Services”). When you use the RelayHealth Services, and when you enter information into your health record, we provide the RelayHealth Services as a service to you on your behalf. This Privacy Policy governs your use of the RelayHealth Services. RelayHealth agrees to use, disclose and secure your information as described in this Privacy Policy.

We also provide services to healthcare providers. When we provide services to your healthcare provider, we may be acting as a business associate and our obligations to protect your health information in those instances is governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and our contract with your healthcare provider.

At RelayHealth, we take your privacy seriously. We are committed to complying with all laws that apply to us when we provide services to you and your healthcare providers.

You can read more about RelayHealth on our main website at www.relayhealth.com.

Read more about our commitment to your privacy in our Complete Policy

Information We Collect About You And Your Choices About Your Information

We collect information about you – such as your name, address, telephone number, email address, or health information – when you use RelayHealth Services or communicate with us including in the following ways:

  • When you send an email to RelayHealth;
  • When you register for and/or use the RelayHealth Services, including managing your RelayClinical Record;
  • When you update your profile through the RelayHealth Services; or
  • When communicate with your healthcare provider using the RelayHealth Services such as secure messaging or webVisit®.

If you do not want us to use information you enter through the RelayHealth Services, do not register for and/or use those RelayHealth Services. You can correct, update or review information you have submitted to us by signing in and updating your account. If you have registered and no longer want RelayHealth to use the information you have provided through the RelayHealth Services, you should read the complete Privacy Policy to understand how you can control your information and any limitations related to removing information you have entered.

When you access the RelayHealth site, even if you have not registered for the RelayHealth Services, we may automatically collect other information about you through cookies and web beacons.

Most browser software can be set to reject cookies. If you set your browser to reject cookies, you may not be able to use our RelayHealth Services, because we use session cookies to help keep your log-in secure.

Read more in our Complete Policy

How We Use Information We Collect About You

We use information we collect about you to:

  • Administer your account;
  • Provide the RelayHealth Services to you;
  • Respond to your inquiries and send you administrative communications;
  • Ask for your feedback about our sites and our offerings;
  • Statistically analyze user behavior and activity;
  • Conduct research and measurement activities;
  • Send you personalized electronic messages through or about the RelayHealth Services;
  • Send you educational resources about medical and health related topics;
  • Detect, prevent, and respond to fraud, intellectual property infringement, violations of our Terms of Use, violations of law or other misuse of the RelayHealth Services; or
  • As otherwise described in this Privacy Policy.

Read more in our Complete Policy

How and With Whom We Share Your Information

We will not rent, license, sell or share your information except as described in the complete Privacy Policy. We disclose your information for several reasons described in the Privacy Policy, including:

  • To your healthcare providers on your behalf through the RelayHealth Services when you choose to connect to a healthcare provider;
  • To comply with legal requirements such as a law, regulation, search warrant, subpoena, or court order;
  • To our vendors and suppliers who work on our behalf;
  • In the event of a corporate change in control such as a merger, a sale of assets, or bankruptcy; or
  • In special cases, such as a threat to your or someone’s safety.

Read more in our Complete Policy

How We Protect Your Information

We protect your information with technical, physical, and administrative safeguards.

Read more in our Complete Policy

Contact RelayHealth

You can send us an email at privacy@relayhealth.com or use the Contact Us link at the bottom of every page of our site to send us questions for any reason.

You can also contact RelayHealth’s Privacy Office at the following mailing address:

RelayHealth
Attn: Privacy Officer, RelayHealth
5995 Windward Parkway,
Mail Stop 3035
Alpharetta, GA 30005

Read more in our Complete Policy

Complete RelayHealth Privacy Policy

RelayHealth Complete Patient Privacy Policy

Effective:  March 2, 2016

RelayHealth, a division of McKesson Technologies Inc., and its affiliates (collectively, “RelayHealth,” “us,” “we,” or “our”) understand that privacy is important to you. We have prepared this Privacy Policy to describe how we collect, use, and disclose information about you through our patient access portal currently located at app.relayhealth.com when we provide you Internet-based services such as secure healthcare consultation and communications with your healthcare provider and their authorized staff, medical information storage and interoperability, online healthcare information, and patient education services and content (collectively, the “RelayHealth Services”). You agree to this Privacy Policy when you click “I Agree” and/or continue to use the RelayHealth Services. If you do not agree with this Privacy Policy, you are not authorized to use the RelayHealth Services.

Who Is Collecting Information

RelayHealth collects information about you when you register for and use the RelayHealth Services. We may also receive information about you, including information about your health, from your healthcare providers. Your “healthcare providers” include physicians, medical groups or practices, or other healthcare providers who use services from RelayHealth. Your “healthcare provider” also includes any healthcare provider in the same practice or group and any other users, such as nurses, medical staff or assistants, authorized to act on behalf of your healthcare provider. Any information that you provide to RelayHealth or that we collect on your behalf is subject to this Privacy Policy.

At RelayHealth, we take your privacy seriously. We will protect your information as described in this Privacy Policy. We are committed to complying with all laws that apply to us when we provide services to you and your healthcare providers.

The RelayHealth Services may include features that allow you to send and receive messages to and from your healthcare providers or that allow you to receive information about your medical care from a healthcare provider. We provide these features directly to you and on your behalf.

RelayHealth may also provide other services directly to your healthcare provider. When we provide those services, we may agree to act as a business associate to your healthcare provider and our obligations to protect your health information in those circumstances is governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). In those cases, we enter into a contract with your healthcare provider that describes our privacy and security requirements. There may be times when our contracts contain more restrictive requirements than what is described in this Privacy Policy.

Back to Summary

Information We Collect About You And Your Choices About Your Information

We collect information about you in a number of ways as you use and explore the RelayHealth Services, including but not limited to the following ways:

Personal Information

We collect your information when you register for the RelayHealth Services and manage your health record (“RelayClinical Record”). We collect information when you update existing information in a RelayClinical Record or if your healthcare provider creates, updates or sends information into a RelayClinical Record. This information may include information that we can use to identify or contact you, such as your name, address, telephone number or email address. It also includes health information about you such as your health conditions, allergies and medications. You are responsible for the accuracy of the information that you submit to RelayHealth. You are also responsible for confirming any information that your healthcare provider submits to your RelayClinical Record. Inaccurate or incomplete information may affect your experience when you use the RelayHealth Services. It can also prevent or hinder our ability to contact you as described in this Privacy Policy.

Information Requests

You can request information from RelayHealth by email without registering for the RelayHealth Services. If you contact us to request general information using the Contact Us link, you are required to give us your contact information so that we can respond to your email.

Registration

When you register to use the RelayHealth Services, you may provide additional information (for example, your health plan subscriber ID number, home phone number, and/or home address). Providing this information will enable your optimal use of our RelayHealth Services. When you register for RelayHealth Services, we require you to create a unique identifier (user ID) and password for your account.

The RelayHealth Services are not intended for use by minors under 13

The RelayHealth Services are not directed to, and we will not knowingly collect information from, any user we know to be under the age of 13.

A parent or guardian, however, may use the RelayHealth Services to establish a personal health record for a minor. The parent or guardian is solely responsible for providing supervision of the minor’s use of the RelayHealth Services. The parent or guardian assumes full responsibility for ensuring that the registration information is kept secure and that the information is accurate. The parent or guardian also assumes full responsibility for the interpretation and/or use of any information or suggestions provided through the RelayHealth Services for the minor.

In certain circumstances, your healthcare provider may require that a minor’s RelayClinical Record is separated from a parent or guardian’s record in order to comply with applicable state or federal laws or professional standards.

Patient (Subscriber) Health Information

We collect health information about you in the following additional ways:

RelayClinical Record

The RelayClinical Record is a tool included in the RelayHealth Services that allows you to enter and store health and personal information online, including your health conditions, allergies and medications. You can enter information into your RelayClinical Record yourself. You can authorize another person (a "Patient Authorized Representative") to access your RelayClinical Record, which gives those individuals the ability to view and enter information into your RelayClinical Record on your behalf. If you choose to connect (or link) to a healthcare provider, the healthcare provider and their designated users may also view and enter information into your RelayClinical Record.

If you do not connect (or link) with a healthcare provider through our RelayHealth Services, that healthcare provider will not have access to information in your RelayClinical Record.

Communications With Your Healthcare Provider

RelayHealth gives you and your healthcare provider the ability to communicate with each other, including communications about medical and/or general health issues, using our secure messaging service. Either you or your healthcare provider may send secure messages to each other. We maintain these messages and use the information to update your RelayClinical Record. We will not edit the content of the messages between you and your healthcare provider.

By submitting a message to a healthcare provider, you understand that the healthcare provider may include your message in their records or in your patient files. This means your healthcare provider may share your messages with other healthcare providers in accordance with their privacy practices.

RelayHealth may block or remove any communications that are reported as offensive or inappropriate.

Information From Your Healthcare Provider

Your healthcare provider may update or supplement your RelayClinical Record with information from their systems such as patient files or electronic health records. We receive information from your healthcare providers to populate your RelayClinical Record on your behalf. When you agree to connect (or link) with your healthcare provider through the RelayHealth Services, you also agree that your healthcare provider may submit information into your RelayClinical Record. You also understand that RelayHealth may share your RelayClinical Record with your healthcare provider to update and supplement patient files or other information or systems maintained by your healthcare provider. We share that information with your healthcare provider on your behalf as a service to you.

webVisit®

The webVisit is a voluntary online questionnaire that guides you through a series of questions that your healthcare provider may use as he or she makes a medical assessment for you. Your healthcare provider has access to your RelayClinical Record during the webVisit. When we send your information and your webVisit results to your healthcare provider, a copy of the information may be stored in the healthcare provider’s systems. Information maintained by your healthcare provider is subject to the privacy practices of the healthcare provider and is not protected by this Privacy Policy.

Important: Your healthcare provider may charge you a fee to use the webVisit service (see Credit Card Information).

Credit Card Information

RelayHealth asks for your health insurance and guarantor information on the Personal Information page of your RelayClinical Record. If your healthcare provider charges a fee for any particular service provided through the RelayHealth Services, you must enter your credit card information on the Account tab. We only use credit card information to send a payment to your healthcare provider, such as for a webVisit charge or a bill pay service.

Information Automatically Collected From You

We automatically collect technical and statistical information from your computer or mobile device through the use of cookies or web beacons. Statistical and technical information includes IP addresses, browser type, operating system, pages viewed, and number of visitors or other similar attributes. These collection and use mechanisms include those described below.

Cookies

An Internet “cookie” is a small text file that stores information on your computer’s hard drive when you visit Internet sites. RelayHealth uses two different types of cookies: persistent and session cookies.

Persistent cookies allow us to collect information about how you use our RelayHealth Services, browser information, operating system and other similar information. We use persistent cookies to track unique visits to the RelayHealth Services. They also tell us how you arrived at the RelayHealth Services (such as through an email link) and the type of user (patient or provider). Persistent Cookies allow us to count unique users only once and they can remain on your computer for any duration.

We use a third-party service to manage our persistent cookies and we assign a different cookie to each computer that accesses our website. Each cookie contains a random, unique number.

We also use session cookies to help protect your privacy. We use session cookies to keep track of your login session and to help ensure that no other user can access your login session. Session cookies are temporary and expire when you log out of our RelayHealth Services or close your browser.

Browser software can be set to warn you about cookies or reject all cookies. The "Help" section of your browser toolbar provides directions and information about how you can reject, remove, or monitor cookies. If you reject our cookies, you will not be able to use the RelayHealth Services.

Web Beacons

“Web Beacons” are graphic image files embedded in a web page that are typically used to monitor activity on that page and send information to the beacon’s home server (which can belong to the host site, a network or other third party) from your browser. That information may include your IP address, the URL of the page on which the beacon is located, the type of browser that is accessing the site and the ID number of any cookies on your computer previously placed by that server. Unlike cookies, you cannot reject Web Beacons.

Log Files

Internet log files contain information about your Internet browser, operating system, IP address, and other Internet usage information. RelayHealth stores log file information even if you do not register for our RelayHealth Services. We also record the date and time you visit our website and the URL of the website you used to link to RelayHealth. We use log file information to analyze trends, monitor traffic and usage patterns for internal security purposes and to help make our website more useful.

Do Not Track

We do not currently respond to web browser “do not track” signals or other mechanisms that provide a method to opt out of the collection of information across the networks of websites and RelayHealth Services in which we participate. If we do so in the future, we will describe the process in this Privacy Policy. Visit the website, “All About Do Not Track” at www.allaboutdnt.org, for more information on this developing area.

Aggregate Data

In addition to the information described above, we may de-identify your information by removing data that is typically used to identify you. We may combine your data with data from other users of the RelayHealth Services. We may also combine your aggregate information with other third party anonymous information to create "aggregate data."  Aggregate data does not contain any information that identifies you individually. We use aggregate data to determine how you use our website, to make website improvements, for our own market research purposes to improve our products and services, and to understand patterns and usage habits of our users as a group.

We may also share statistical, aggregate information with third parties. We will not provide any information in this aggregate form that identifies you individually without your permission.

Back to Summary

How We Use Information We Collect About You

We use your information in several ways including to:

  • Administer your account;
  • Provide the RelayHealth Services to you;
  • Respond to your inquiries and send you administrative communications;
  • Ask for your voluntary feedback about our sites and our offerings;
  • Statistically analyze user behavior and activity;
  • Conduct internal research and measurement activities;
  • Send you personalized electronic messages, including secure messages received on your behalf from your healthcare provider, through or about the RelayHealth Services;
  • Allow you to send and receive electronic messages to and from your healthcare provider;
  • Send you educational resources about medical and health related topics;
  • Detect, prevent, and respond to fraud, intellectual property infringement, violations of our Terms of Use, violations of law or other misuse of the RelayHealth Services; or
  • As otherwise described or contemplated in this Privacy Policy.

RelayHealth monitors who has accessed your information. We also monitor how your information is accessed, including by you, your Patient Authorized Representative, our employees and your healthcare providers. We also keep track of any changes made to your account and/or RelayClinical Record.

If a Patient Authorized Representative manages your account, the Patient Authorized Representative may view all information entered into the RelayHealth Services or RelayClinical Record by you or on your behalf. For example, a spouse may view and manage his or her partner’s account, or a parent may manage a child’s account if they are a Patient Authorized Representative.

On your behalf, we permit your healthcare provider to receive and use information stored in your RelayClinical Record for many purposes including, but not limited to:

  • Create and/or update your RelayClinical Record;
  • Screen for drug and allergy interactions;
  • Identify and provide educational materials or wellness information;
  • Send you appointment reminders;
  • Send prescription information to pharmacies;
  • Update your RelayClinical Record based on communications and your use of the RelayHealth Services (including prescription information); or
  • Update or supplement their records with information you submit in your RelayClinical Record.

RelayHealth uses the contact, health and billing information in your RelayClinical Record to:

  • Create or update your RelayClinical Record;
  • Ask you about our services and to respond to customer service requests;
  • Use your healthcare provider and/or insurance plan information to customize your experience, or to display your healthcare providers’ and/or insurer's logo on RelayHealth web pages; and
  • Provide information as required by law.
Back to Summary

How and With Whom We Share Your Information and How You Can Change Your Information

Your Healthcare Provider

Once you are connected or “linked” with your healthcare provider through our RelayHealth Services, your healthcare provider may review your RelayClinical Record and update it and respond to your messages.

If you would like to update or change information that your healthcare provider added to your RelayClinical Record, you can send a secure message to your healthcare provider and state the requested change or correction or you can also contact your healthcare provider directly. You are not authorized to directly update, change or remove information in your RelayClinical Record that was contributed by a healthcare provider.

You can update, change or remove the information you have entered into your RelayClinical Record by logging in and updating or deleting the information you provided.

Your RelayClinical Record, contact, and other information are available to each of your connected (or linked) healthcare providers. The information may become part of your healthcare provider’s chart or patient file and, as such, it is subject to your healthcare provider’s control and their privacy practices and policies.

If you have authorized a Patient Authorized Representative to access your RelayClinical Record, those individuals have the ability to access and update information in your RelayClinical Record. The Patient Authorized Representative may also see any previous communications between you and your healthcare provider.

Your healthcare provider may decide to make a referral for you to another healthcare provider. You will receive a message that informs you that you are connected to a new healthcare provider.

You can deactivate a connection with any of your healthcare providers at any time. Deactivation of a link will prevent a healthcare provider from using the RelayHealth Service to view and access the information in your RelayClinical Record. Deactivation, however, will also prevent you from communicating with your healthcare provider through our RelayHealth Services. Deactivating the connection does not prevent your healthcare provider from using information that he or she may have downloaded or otherwise included into his or her records during the period you were connected.

Compliance with Laws

RelayHealth will not share your information with third parties except:

  • As described in this Privacy Policy;
  • If you have given us consent to share it or have used our RelayHealth Services to share it;
  • When we believe in good faith that the law requires it; or
  • When we believe in good faith that your personal safety or safety of others is at risk.

We will not sell, share, rent, or license any information that is typically used to identify you and that is collected through the RelayHealth Services to any third party unless we tell you about it in this Privacy Policy or get your permission first.

Vendors and Contractors

We work with vendors and contractors who may have limited access to collect, use, and disclose your information on our behalf.

We require our vendors and contractors to:

  • Protect your information consistent with this Privacy Policy; and
  • Agree they will not use or disclose your identifiable information for any purpose except to provide the service or function for us.

Acquisitions; Bankruptcies

We may disclose your information to affiliates, service providers, advisors, potential transactional partners or other third parties in connection with the negotiation or completion of a merger, acquisition, bankruptcy, liquidation, or sale of RelayHealth or some or all of RelayHealth’s assets.

Third Party Privacy Practices

When your information leaves our control, it is governed by the privacy policies, laws or obligations that apply to the third party recipient of the information.

Links to Third Parties

For your convenience, we include links to third party websites that we do not own or operate. RelayHealth does not disclose information that identifies you to these third party websites without your permission.

You should be aware that any information you disclose to other websites is not protected by this Privacy Policy. RelayHealth does not endorse and is not responsible for the content or the privacy practices of any third party website.

Always make sure you review and understand how any website collects and uses your information. We will try to make it obvious to you when you transition or link to another website by requiring you to click on a link.

Back to Summary

How You Can Control Access To Your Information

RelayHealth may receive invitations and communications on your behalf sent from your healthcare provider. You can choose not to receive future invitations or communications from your healthcare provider by telling your healthcare provider not to send them.

When you connect (or link) to a healthcare provider as a patient via RelayHealth, the healthcare provider may assign users and/or members of his/her practice to receive your messages on his/her behalf. Those authorized practice members may also update and access your RelayClinical Record and other health information.

You may deactivate your connection to any healthcare provider at any time by following the directions for “Provider Deactivation Option” through the RelayHealth Services. If you select the deactivation option, that healthcare provider may still have access to the information in your RelayClinical Record as of the deactivation date because it has become part of that healthcare provider’s own patient files or records. They will not have access to any new activity or information added to your RelayClinical Record after the deactivation date.

You may also control how your information is shared using the privacy settings in your RelayClinical Record. This will prevent one healthcare provider from viewing information submitted into your RelayClinical Record by another healthcare provider unless explicitly authorized by the healthcare provider who submitted the information.

You can activate or deactivate a Patient Authorized Representative in accordance with the Patient Authorized Representative appointment processes described by RelayHealth. Please follow the instructions in the RelayHealth Services if you wish to activate or deactivate a Patient Authorized Representative. When you deactivate a Patient Authorized Representative, you can choose to allow the Patient Authorized Representative to have access to the information in your RelayClinical Record as of that date. They will not have access to any new activity or information added to your RelayClinical Record after the deactivation date. If the Patient Authorized Representative has copied or downloaded information from the RelayHealth Services before you deactivate his or her access, the Patient Authorized Representative may still have copies of your information.

You may also deactivate your account at any time by following the directions in your RelayClinical Record if you no longer want to use our RelayHealth Services.

Back to Summary

How We Protect Your Information

RelayHealth maintains administrative, technical and physical safeguards designed to protect the information collected through the RelayHealth Services. We protect our servers and data centers with firewalls (along with other software systems). However, no information system can be 100% secure. For example, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the Internet may be intercepted. We do not guarantee the absolute security of your information. We are not responsible for the security of information you send to the RelayHealth Services over networks that we do not control such as the Internet and wireless networks.

The security of your personal information is important to us. When you enter your information (including personal health information in various tools through RelayHealth Services), we encrypt the transmission of that information or use Secure Socket Layer (SSL) connection technology.

We will maintain a copy of your information as long as your account is active or as we determine necessary to provide you the RelayHealth Services. At any time you can remove the information you have entered (which does not include information that healthcare providers have added about you) or instruct us to remove it. It is not technologically possible to remove each and every record of the information you have provided to RelayHealth from our servers or from our backup media.

We will also keep your information as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Our security practices include but are not limited to:

Audit Trail: We maintain an audit trail and log of who views or accesses your information and profile.

Role-Based Access: We grant varying levels of access to employees with different levels of authority or need to view information.

Login ID and Password: We require you to access your account with a login ID and a password.

Auto-Logoff: The RelayHealth Services automatically log you out if you have not actively used the services for a set period.

Back to Summary

How to Contact Us

If you have any questions about this Privacy Policy or how we use your information, you can send an email to privacy@relayhealth.com.

You can also:

Use the Contact Us link at the bottom of every page of our website to send us questions or comments.

Contact RelayHealth’s Privacy Office in writing at the following mailing address:

RelayHealth
Attn: RelayHealth Privacy Officer
5995 Windward Parkway
Mail Stop 3035
Alpharetta, GA 30005
Back to Summary

Changes to this Privacy Policy

RelayHealth may change or update this Privacy Policy at any time and for any reason. If we update or change this Privacy Policy, we will post the updated Privacy Policy here on our site.

We will inform you about a material change to our Privacy Policy that involves your information by contacting you at the email address you provided to us when you registered and by posting notices on the RelayHealth site. We will give you the opportunity to opt-in to any material uses or disclosures of your information that you made available to us before the Privacy Policy change.

You should check our Privacy Policy often to make certain you have the most recent version for your records. We will always list the last date we reviewed or made changes to this Privacy Policy at the top of this document.

Skip Navigation Links