Healthocrates Professional Services Privacy Policy
Healthocrates understands how important the privacy of personal information is to our customers. Healthocrates is committed to honoring your privacy, and to offering special protections for any personal health information you choose to share with us. The document you are reading is our Privacy Policy for our Web sites that are accessible by physicians, nurses and healthcare professionals, and it describes what information we may collect about you, what uses we may make of it, how you can tell us what to do with your information, and what precautions we take against unauthorized access or use of your information.

Information We Collect
In this section of our Privacy Policy, we discuss the different types of information we may collect about you, and the ways in which we collect them.

Information We Collect When You Register
Customers registering for services on our Web sites are asked to provide us with identifying information, such as name, gender, contact information, and other personal information. On our registration screens, we clearly label which information is required for registration, and which information is optional and may be given at your discretion.

Other Information

• Discussion Boards: When you use a discussion board on one of our Web sites, you may post a message and your user name, which is available for all registered users to see. When you are posting publicly, any user of our site can see your message. You should not post any information you want or are required by law to keep private to a discussion board or other public forum on our Web sites.
• Member Lookup: When you are registering on some of our Web sites, you may have a choice about whether or not you want other members to be able to look you up and send you messages. If you opt not to be listed, no other members will be able to look you up.
• Additional Forms and Emails: We may also ask you to provide additional information after you register if you want to obtain additional services or information or to resolve complaints or concerns.

In addition, we gather information about you that is automatically collected by our Web server, such as your IP address and domain name. We will use this information for our own review only.

Use of Cookies
Cookies are a technology we use to keep track of users as they move through our Web sites. Your browser allows us to place some information on your computer's hard drive that is associated with the computer you are using. We use cookies to personalize our Web sites and to track your usage across all of our Web sites.

Your Web browser can be set to allow you to control whether you will accept cookies, reject cookies, or to notify you each time a cookie is sent to you. If your browser is set to reject cookies, Web sites that are cookie-enabled will not recognize you when you return to the Web site, and some Web site functionality may be lost. The Help section of your browser will tell you how to prevent your browser from accepting cookies.

Although cookies do not normally contain personally identifiable information, if you are a registered user, we may elect to associate your registration information with cookies our Web site places on your computer's hard drive. Associating a cookie with your registration data allows us to offer increased personalization and functionality. For example, you can elect to have our Web sites "remember" your user name and password and bypass the sign-in process on each visit to the site. Without cookies, this functionality would not be possible.

Children's Privacy
We are committed to protecting the privacy of children. Our Web sites are designed and intended for use by adults, and are not intended for, nor designed to be used by children under the age of 18. We do not collect personally identifiable information from any person we know is a child under the age of 18.

Uses We Make of Information
In this section of our Privacy Policy, we identify the ways we may use information about you that we have collected.

Aggregate Data
We create aggregate data about visitors to our Web sites for product development and improvement activities. We also use it for market analysis. We may provide information from our Web sites in aggregate form, with identifying information removed, to third parties. For example, we may tell a health care partner what percentage of our registered users reside in a particular geographical area. When aggregated health information is provided, we pool it from many individual records and strip it of any data that could be used to identify an individual before it is used. Any third party that receives aggregated health care data must agree not to attempt to re-identify the people it belongs to. For example, we may provide information to a potential advertiser of a product that would appeal to a diabetes patient about what percentage of our users have diabetes. Depending on our agreement with the third parties, we may or may not charge for this information.

Protection of Information
In this section of our Privacy Policy, we discuss the security measures we take to protect information that we have collected about you.

General Policies
We have implemented technology and security policies, rules and other measures to protect the personal data that we have under our control from unauthorized access, improper use, alteration, unlawful or accidental destruction, and accidental loss. We also protect your information by requiring that all our employees and others who have access to or are associated with the processing of your data respect your confidentiality.
We use security methods to determine the identity of its registered users, so that appropriate rights and restrictions can be enforced for that user. Reliable verification of user identity is called authentication. We use both passwords and usernames to authenticate users. Users are responsible for maintaining their own passwords.

Storage of Health Information
Personally identifiable health information you share with us is stored on our database servers at our data centers or hosted by third parties who have entered into agreements with us that require them to observe our Privacy Policy. We have a firewall to prevent unauthorized access. Data centers are physically secure and protected from unauthorized access by unauthorized persons. Physical access to the servers requires individual authorization and authentication.
Information in our data centers is backed up routinely, in order to aid in the recovery of information in the event of accidental damage of information or due to a natural disaster. The backup media are stored in a physically secure storage facility.

Access to Information and Choices
In this section of our Privacy Policy, we tell you how to obtain and correct information we have about you, and how to choose what types of information you may share with us.

Correction of Information We Have About You
If you believe that registration information collected by our Web site(s) is in error, you may edit your personal profile any time that you like. You can directly edit your user profile on your personal homepage. Requests for deletion of your record may result in your removal from the registry, but we may keep certain demographic information about you for product improvement purposes. You may contact Web Customer Support and ask for the changes that you would like to make.

Privacy Questions or Concerns
For privacy questions or concerns about one of our Web sites, please contact admin@healthocrates.com

Effective date: July 25, 2007