Privacy Policy

This policy is effective as of January, 2023.

At InSite Health, Inc. (“InSite Health”) your privacy is important to us. Our Privacy Policy describes the information we collect, how we collect the information, the reasons we collect information, and how we share or use the information we collect. This Privacy Policy also describes the choices you have with the information we collect, including how you can manage, update, or request to delete information.

Please take a moment to review this Privacy Policy. You may scroll through this Privacy Policy or use the headings below. It is important that you understand this Privacy Policy. By using our Platform, you are agreeing to the terms of this Privacy Policy. If you have any questions or concerns about this Privacy Policy, you may Contact Us at any time.

I. Who is InSite Health?

InSite Health works to transform psychiatry into the accessible, human, and empowering experience it should be.

InSite Health is not a medical group or a health care provider. InSite provides its users with the ability to obtain a telemedicine consultation provided by independent medical practitioners including, but not limited to, MCCD Psychiatry Services, PLLC and the members of its affiliated covered entity (“Medical Group”), an independent medical group with a network of United States based health care providers (each, a “Provider”). Medical Group (or your own medical provider if you do not use a Medical Group Provider) is responsible for providing you with a Notice of Privacy Practices describing its collection and use of your health information, not InSite Health.

II. Key Terms & Definitions and Our Privacy Policy

It is helpful to start by explaining some of our key terms and definitions used in this Privacy Policy. 

Key Term – Definition

When does our Privacy Policy apply? 

This Privacy Policy describes the types of information we may collect from you when:

When does our Privacy Policy not apply?

This Privacy Policy does not apply to information collected by any other website operated either by us or by a third party, unless the website is listed above or links to this Privacy Policy. It also does not apply to any website that we may provide a link to or that is accessible from our Platform. 

This Privacy Policy does not apply to information collected from users who log-in to the password-protected and secure portions of our Platform (“Secure Platform”). The Secure Platform allows users who obtain the Services (“Customers”) to perform certain functions or obtain the Services (such as telehealth visits from Medical Group or Providers). All information collected and stored by us or added by Customers into such Secure Platforms is considered Protected Health Information (“PHI“) and/or medical information and is governed by applicable state and federal laws that apply to that information, for example the Health Insurance Portability and Accountability Act (“HIPAA”). How we use and disclose such PHI is in accordance with the applicable Notice of Privacy Practices provided to you by the Medical Group. We will not use or disclose information collected from the Secure Platform or received from Medical Group or your Provider for advertising, marketing, or other use-based data mining purposes except as otherwise permitted by HIPAA and other applicable law. We will not sell any PHI in violation of HIPAA. 

Our Privacy Policy and Terms of Use.

This Privacy Policy is incorporated into our Terms of Use, which also apply when you use our Platform. 

III. Personal Information

What is Personal Information?

Personal information is information from and about you that may be able to personally identify you. We treat any information that may identify you as personal information. For example, your name and e-mail address are personal information. 

What types of Personal Information do we collect? 

We may collect and use the following personal information (hereinafter, collectively referred to as “Personal Information”):

Health Information

Some Personal Information we collect may constitute PHI under HIPAA. As set forth above, your Provider will provide you with a Notice of Privacy Practices describing their collection and use of your health information, not InSite Health. We will only collect and use PHI for the purposes of providing the Services and we only collect the minimum amount necessary to fully perform and provide the Services on our Platform. We may combine your PHI with Personal Information that we have either obtained from you or through a third-party, such as your Provider, health insurer, employee benefits program, or other health care providers. PHI will only be used and disclosed as outlined in the Notice of Privacy Practices and as permitted by HIPAA and other applicable law. 

How do we collect your Personal Information?

We collect most of this Personal Information directly from you. For example, when we speak to you by phone, text message, and e-mail. Additionally, we will collect information from you when you visit our Platform and fill out forms or purchase our Services. 

We may also collect Personal Information in the following ways:

We will also collect information automatically as you navigate through our Platform. We use the following technologies to automatically collect data: 

How do we use your Personal Information? 

We may use your Personal Information for the following purposes: 

How do we share your Personal Information? 

We may share Personal Information with third parties in certain circumstances or for certain purposes, including:

Your choices about how we share your Personal Information. 

This section of our Privacy Policy provides details and explains how to exercise your choices. We offer you choices on how you can opt out of our use of tracking technology, disclosure of your Personal Information for our advertising to you, and other targeted advertising. We do not control the collection and use of your information collected by third parties. These third parties may aggregate the information they collect with information from their other customers for their own purposes. You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative’s (NAI) opt-out page and the Digital Advertising Alliance’s (DAA) opt-out page.

Each type of web browser provides ways to restrict and delete cookies. Browser manufacturers provide resources to help you with managing cookies. Please see below for more information. 

Google Chrome

Internet Explorerf

Mozilla Firefox

Safari (Desktop)

Safari (Mobile)

Android Browser

Opera

Opera Mobile

For other browsers, please consult the documentation that your browser manufacturer provides.

If you do not wish to have your e-mail address used by InSite Health to promote our own Products and Services, you can opt-out at any time by clicking the unsubscribe link at the bottom of any e-mail or other marketing communications you receive from us or logging onto your Account Preferences page. This opt out does not apply to information provided to InSite Health as a result of a product purchase, or your use of our Platform and/or the Services. You may have other options with respect to marketing and communication preferences through our Platform.

You may also see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based, and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests. 

How do I access and correct my Personal Information?

You may also Contact Us  to review and change your Personal Information or to inform us of any changes or errors in any Personal Information we have about you to ensure that it is complete, accurate, and as current as possible or to delete your account. We cannot delete your personal information except by also deleting your account with us. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect.

IV. Who may use the Services?

InSite Health operates subject to state and federal regulations, and the Platform and/or the Services may not be available in your state. You represent that you are not a person barred from enrolling for or receiving the Services under the laws of the United States or other applicable jurisdictions in which you may be located. Access to and use of the Platform and/or the Services is limited exclusively to users located in states within the United States where the Platform and/or the Services is available. The Platform and/or the Services are not available to users located outside the United States. Accessing the Platform and/or obtaining the Services from jurisdictions where content is illegal, or where we do not offer the Platform and/or the Services, is prohibited.

V. Children’s Privacy

InSite Health is committed to protecting the privacy of children in connection with the use of our Services. This section explains our online information collection, disclosure, and parental consent practices with respect to information collected from children under the age of 13 (“child” or “children”) in accordance with the U.S. Children’s Online Privacy Protection Act and its rules (collectively, “COPPA”). For purposes of this section, any references to a parent also encompasses legal guardians. This section only applies to children under the age of 13 and supplements the other provisions of this Privacy Policy.

Our Services include online services that maybe used to facilitate mental health support for a child. A parent or legal guardian can create an account on behalf of a dependent child and attest that they have legal authority to do so. We require that all child accounts be created by a parent or legal guardian, and associated with the parent’s or legal guardian’s account, in order to ensure that we can comply with our notice and consent obligations under COPPA.

During the account registration process, the parent or legal guardian can create a child’s account by following our instructions for doing so and providing certain information about the child,including name, date of birth, email address, and/or mailing address. We may also collect information directly from your child as the child uses our Services, such as when your child interacts with our Platform or during appointments with your child.

When creating an account for a child, parents and legal guardians are asked to review and consent to our COPPA Notice, which provides parents and guardians with direct notice of our information practices before we collect any Personal Information from their child. Parents and guardians give their consent by checking the appropriate boxes on the account registration page. In addition,before we collect Personal Information from a child, we obtain the parent or guardian’s verifiable parental consent through a video conference with the parent or guardian or through another method acceptable under COPPA for obtaining verifiable parental consent.

Ifa parent or legal guardian chooses not to consent to the collection and use of their child’s Personal Information, they may not create an online account for the child. At any time, a parent or legal guardian may revoke their consent. Once consent is revoked, a child may not use any Services online,unless a new consent is obtained.

The above sections of this Privacy Policy contains details about the information we collect,which extend to information we collect about children. The information we collect will be used and disclosed for the purposes described above. We will not require a child to disclose more information than is reasonably necessary to participate in an activity.

No Personal Information about a child will be made available to the public or sold. We may share information with our service providers if necessary for them to perform business, professional, or technology services for us, always in accordance with all applicable laws, including HIPAA. You have the right to agree for us to collect and use your child’s Personal Information but still not allow disclosure to third parties unless such disclosure is part of our Services.

In addition to your right to revoke your consent for the collection of your child’s Personal Information, you may request to review the Personal Information we have collected from your child or ask to delete the Personal Information we have collected from your child unless we are required by law to maintain that Personal Information. Please submit your request or any questions to us at [email protected].

VI. Does InSite Health respond to Do Not Track signals?

Some web browsers have a “Do Not Track” feature. This feature lets you tell websites you visit that you do not want to have your online activity tracked. These features are not yet uniform across browsers. Our Platform honors do not track signals from browsers.

VII. Data Security

We have taken steps and implemented administrative, technical, and physical safeguards designed to protect against the risk of accidental, intentional, unlawful, or unauthorized access, alteration, destruction, disclosure, or use. The Internet is not 100% secure and we cannot guarantee the security of information transmitted through the Internet. Where you have been given or you have chosen a password, it is your responsibility to keep this password confidential. 

The sharing and disclosing of information via the internet is not completely secure. We strive to use best practices and industry standard security measures and tools to protect your data. However, we cannot guarantee the security of Personal Information transmitted to, on, or through our Services. Any transmission of Personal Information is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on our Platform, in your operating system, or mobile device. 

VIII. Changes to our Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our privacy practices, laws, and best practices. We will post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on our Website’s homepage. If we make material changes to our practices with regards to the Personal Information we collect from you, we will notify you by e-mail to the e-mail address specified in your account and/or through a notice on the Platform. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable e-mail address for you, and for periodically accessing the Platform and reviewing this Privacy Policy to check for any changes. 

IX. Contact Us

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy or otherwise need to contact us, you may contact us at the contact information below or through the “Contact Us” page on the Platform. 

InSite Health, Inc.

Telephone: 833-494-6724

E-mail: [email protected]