Effective date: 21st May 2018
NeedStreet Web Technologies Private Limited (hereafter referred to as “NeedStreet”), develops and operates an online healthcare platform for healthcare service providers to manage their services and engage with their patients, hereafter referred to as the ‘ContinuousCare Platform Services’. “We”, “our” and “us” currently refers to NeedStreet in the terms defined below.
This Privacy Policy is between NeedStreet and its Customers using its Virtual Practice product. It also applies to the Authorized Users in such Virtual Practices, all user types hereafter referred to as “you” or collectively as “users”.
Customer healthcare service providers having a Virtual Practice on the ContinuousCare Platform Service, can have their Team Users (employees and/or associates) and Patients Users log in to and use their Virtual Practice through appropriate interfaces using Authorized User accounts. All data created by users in a Virtual Practice, is owned by the Customer. This privacy policy covers all data generated collectively by these Customers and Authorized Users.
Your privacy is very important to us. This Privacy Policy describes how we handle and secure the personal information and data that you provide to us through our website and ContinuousCare Platform Services. By using our website, platform apps and services, you agree to be bound by the terms of this policy. This policy is part of our Terms of Use.
NeedStreet receives and collects the following type of data or information.
Data in a Virtual Practice can be added or created by Authorized Users in the Virtual Practice, whether they be Team users (healthcare service providers, administrative users) or Patient users. This data belongs to the Customer.
Administrative information about the services provided to Patient Users in the Virtual Practice.
Note: With regard to the definition of data controller and data processor, as defined by Data Protection laws in the EU, the Customer is the data controller of Customer Data and NeedStreet is the data processor. NeedStreet is the data controller of Other Data, as defined above.
The Customer is the owner and controller of the Customer Data, which is processed by NeedStreet as per the configuration settings and instructions of the Customer. The Customer alone decides which Authorized Users to create and terminate; and what access such Authorized Users have to add, update, delete, export or share the data. The Customer defines the policies, practices and usage terms for Authorized Users of the Virtual Practice and it is the sole responsibility of the Customer to enforce that. A Customer can terminate Authorized Patient User accounts at any time and such Patients will no longer have further access to their personal health information in event of that happening. Whether or not to share that information with the Patient User before termination of the Patient User account is the prerogative of the Customer only.
Other information and data provided to NeedStreet is used as follows:
We may disclose any information to government or law enforcement officials if we believe doing so is required to comply with law enforcement and legal process; to prevent or stop any illegal, unethical, or legally actionable activity; to protect your, our or others rights and safety.
Customers determine their own policies and practices for the sharing and disclosure of their own Customer Data and this is expected to be compliance with legal requirements. NeedStreet will disclose Customer Data only as per the request and instructions of the Customer, whether as defined in terms of the service configuration that they apply in use of the Virtual Practice or by direct requests. Disclosure of Customer Data to Authorized Users of the Customer’s Virtual Practice is determined by the Customer, while creating and configuring such Authorized User accounts. The Customer may also be able to request and view usage information of Authorized Users in the Customer’s Virtual Practice. All NeedStreet employees are bound by strict privacy policies and do not have access to Customer Data.
Sub-Processors: NeedStreet may utilize third party services to sub-process Other Information and support our business by providing hosting, storage, communications, webRTC and analytics services.
Third Party Services: Customers opting to configure certain third party services with their Virtual Practice, should check the privacy policy and settings of such services and should understand what data may be shared between such authorized services and NeedStreet, relevant to the integrated functioning expected.
If NeedStreet becomes involved in a merger, acquisition, or any form of sale of some or all of its assets, Other Information will be transferred to the new entity for the continued performance of service, subject to standard confidentiality agreements.
NeedStreet will retain Customer Data for as long as the Customer has an active Virtual Practice account on the ContinuousCare Platform Services. While operating an active Virtual Practice account, the Customer controls how this data is retained or deleted, using features and settings in the Virtual Practice. Deletion of Authorized User accounts in a Customer’s Virtual Practice are solely the responsibility of the Customer, NeedStreet does however reserve the right to deactivate or delete accounts of any user on the platform found to be in violation of our Terms of Use. On receiving a request to delete a Virtual Practice account, NeedStreet will delete the Virtual Practice account and all associated data. The deletion of Customer Data may result in the deletion and/or anonymization of associated Other Data. NeedStreet may retain such anonymized Other Data even after the Customer has deactivated their account if it is required to comply with legal obligations, for audits and for legitimate business needs.
NeedStreet uses cookies (both session-based and persistent cookies) and similar technologies like single-pixel gifs, on the domains operated by NeedStreet for its ContinuousCare Platform Services and website. We also use third party cookies of Google Analytics on our website.
We also use cookies in our website and Platform Services to save user preferences, preserve session settings, help auto-authentication of frequently used services if required by your settings, for certain marketing campaigns and to enable improved understanding of your feature and usage requirements and patterns. You may use browser settings to disable cookies when using our web services, however it may result in the features and services of the applications not functioning properly.
NeedStreet does not collect personal information about online activities of our Customers or visitors to our website across third-party websites or other online services. Do-no-track signals transmitted from web browsers, therefore do not apply to our Platform Services or website. It is important to note that most browsers allow you to disallow cookies from sites that you do not trust.
All data is stored only in our cloud infrastructure on the highly secure Amazon Web Service platform in the United States of America. We take all necessary measures in providing secure transmission of personal health information before it is transferred across the Internet from your personal computer or devices to our servers and in securing such personal information stored on our systems. However, you should be aware of possible risk involved in transmitting information over the Internet as no data transmission can be guaranteed to be 100% secure and of risk that others could find a way to thwart our security systems. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security and privacy of personal information you transmit to us, and you do so at your own risk.
All users of the ContinuousCare Platform Services are expected to be above 18 years of age. Customers are to ensure that only parents or authorized guardians of minors are allowed to operate Authorized Patient User accounts on their behalf. Any Authorized User providing, storing or submitting information on behalf of a child/person under guardianship assumes full responsibility over the submission, use, and transmission of such information.
If you believe that any Authorized User in a Virtual Practice is younger than the permitted age, immediately contact the Customer operating that Virtual Practice. If notified directly of such a violation of our Terms of Use, we will promptly delete the concerned user account and data.
Users located in the EU, have certain statutory rights with regard to their personal data as defined by the General Data Protection Regulation. You have the right to seek to request access to your personal data, delete or update it. The Platform Service features and settings support this to some extent. If you cannot use the service features to do this, please contact our support desk for help. In the case of Authorized Users of a Customer Virtual Practice, it is important to directly contact the Customer for such support including objection to processing of your data, as the Customer is the data controller of Customer Data. Based on its legitimate interests and compliance requirements, NeedStreet may process Other Data that includes user data for legitimate purposes.
Our website may contain links to other websites. The fact that we link to a website is not an endorsement, authorization or representation of our affiliation with that third party. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit personally identifiable information from you. Other sites follow different rules regarding the use or disclosure of the personally identifiable information you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit.
Please note that this Privacy Policy may change from time to time as we continue to offer evolve our services. In the event of any changes in our Privacy Policy, the updated version will be posted on the NeedStreet website and take effect from the moment of posting.
If you have any questions or concerns about this Privacy Policy, please email us at support@continuouscare.io.