Effective Date: November 12, 2024

Introduction

Welcome to https://www.mynmchealth.org (“NMC Health Site”, The “Site”, or “Sites”). This Privacy Policy explains how Newton Healthcare Corporation d/b/a NMC Health (“NMC Health,” “we,” “our,” or “us”) collects, uses, discloses, and protects data that we gather through your use of our Site.

In addition to this Privacy Policy, users of the NMC Health website should read our Website Terms of Use. A separate Notice of Privacy Practices explains how Protected Health Information (PHI) is protected and managed.

This Privacy Policy refers to all Sites where it is posted. Other NMC Health online properties may have their own privacy policies applicable to those sites, such as social media and review websites. You should review the privacy policies of other sites when using those sites.

Data We Collect

We receive and store some data that you enter on our Sites. The personal data we may collect includes the following kinds:

• Data that may identify you like your name, postal address, billing address, shipping address, e-mail address, telephone numbers, age, date of birth, social security number, insurance policy number, physical characteristics, sexual orientation, IP address, bank account number, payment card number, national origin, ancestry, veteran status, medical conditions, race, citizenship, and other examples referred to as personal data.
• Data that you provide by filling in forms on our Sites.
• Records and copies of your correspondences if you contact us.
• Your responses to surveys.
• Details of payments you carry out through our Sites. You may be required to provide financial information before placing an order through our Sites.
• Data you post in public areas of the Sites or transmit to other users of our Sites.

We may also collect non-personal data automatically from web server logs when you visit our Site, such as:

• Your Internet protocol address.
• The kind of computer you use.
• Number of links you click within our Sites.
• State or country from which you accessed our Sites.
• Date and time of your visit.
• Name of your internet service provider.
• Third party websites you linked to from our Sites.
• Area you viewed within our Sites.

This data is used to analyze and improve our Sites for security purposes and to help make our Sites more useful.

We may use cookies, pixel tags, Local Shared Objects, and similar technologies to automatically collect this data. You consent to our use of these technologies by using our Sites.

We may also collect technical data to address and fix problems with our Sites. Your settings may permit you to control the collection of this technical data. This technical data may be collected on our behalf by a third party.

How We Use Your Data

We use the data we collect to:

• operate and maintain our Sites.
• improve, personalize, and expand our services.
• understand how you use our Sites.
• develop new products, services, and features.
• process your payments.
• communicate with you.
• send you updates about your account.
• market to you
• prevent prohibited activities.
• comply with the law.

Sharing Your Data

We may share the data we collect with:

• authorized third-party vendors with specialized services. These third-party vendors may not use your data for purposes other than those related to the services they are providing to us.
• our corporate affiliates.
• legal bodies in response to subpoenas, court orders, legal process, law enforcement requests, legal claims or government inquiries.
• HIPAA permits organizations to transfer PHI in circumstances of a transfer of the assets of the organization, merger, consolidation, bankruptcy.
• We may transfer your PHI as described in the Notice of Privacy Practices and permitted under HIPAA.
• With your consent or at your direction, we may share data for any other purposes disclosed to you at the time we collect the data.

If you choose to engage in public activities on the third-party sites that we link to, such as social media and review websites, you should read the privacy policies of those sites. We are not responsible for the data you choose to submit in public areas.

No data provided by patients during medical consultations or requests for medical appointments is ever used for marketing purposes.

Data Retention

We will retain your data for as long as your account is active. We will also retain your data to comply with our legal obligations. You may request that we delete your data by contacting us as provided below, but we may not be able to honor that request in all instances.

Security of Your Data

We follow security measures to maintain the safety of your Personal Health Information from loss and unauthorized access in accordance with HIPAA. We use encryption, firewalls, secure socket layer (SSL) technology, and other digital security measures to protect your data from theft, loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure.

Your Choices

You have the right to:

• access and update personal data.
• opt-out of receiving marketing communications from us.
• request the deletion of your personal data in accordance with applicable law.
• object to the processing of your personal data.
• withdraw any consent you have given us to process your data.

• disable cookies by adjusting your settings.
• exercise any of these rights by contacting us using the information provided below.

We do not share Protected Health Information (PHI) with third parties for their own direct marketing purposes.

For Use by Adults

No one under age of 18 years old may provide any data to our Sites without parent or guardian permission. We do not collect personal data from unauthorized users under 18 years old, except for potential job applicants who must be at least 16 years old. If you are under 18 years old, do not use our Sites without permission from parents or guardian. If we learn we have collected or received personal data from an unauthorized user under 18 years old, we will delete that data.

Our Patient Portals are available to patients 18 years old or older. It is also open to patients who are between the ages of 13 years old and 17 years old with the permission from a parent or guardian.

International Users

We maintain data in accordance with the laws of the United States of America. By using our Sites and providing your data, you agree that your data may be transferred to and stored on servers located outside your resident country.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

Newton Healthcare Corporation d/b/a NMC Health
600 Medical Center Drive, Newton KS 67114

Phone: 316.283.2700

Email: nmcmarketing@mynmchealth.org

Thank you for trusting NMC Health with your personal information. We are committed to protecting your privacy and providing you with a safe and secure experience on our Sites.