Secure Portal Privacy Policy

The Portal enables you to securely send and receive data from devices such as laptops and mobile devices. When Cheiron sends you information via the Portal, you will receive an email notification with instructions for accessing the Portal.

Sign-in credential information for your account will be used solely for the purpose of authentication.

To help you understand how Cheiron, Inc. (hereon referred to as “Cheiron”, “we”, or “us”) collects and uses your data when you use our secure online portal, this Privacy Policy outlines what specific data you provide, how we collect it, and what we do with it. We take your privacy seriously and as according to our own values, we take care to ensure that all data you provide to us is kept safe and will only be used as declared.

We collect information that you submit to us directly when you use the Portal. This generally includes

• Actuarial Data. This may include, but is not limited to, employee data, claims data, protected health information, and financial information that is necessary for us to provide services.
• Other Information: We will collect any other documentation that we specifically ask you for or that is necessary for us to provide our services or for business operations.
• Ask that we delete the personal information we hold about you, except that we are not required to comply with a request to delete personal information if the personal health information is necessary for our business operations or completion of the services for which it was collected;
• File a complaint with the Department of Health and Human Services in the case you believe your rights are being denied or your protected health information is not being protected; and
• Equal service and price, even if you exercise your privacy rights.

When you access or use our website, we may automatically collect information about you. This includes:

• Archival Information. We may log non-personally identifying and potentially personally identifying information when you access and use our website. This may include your Internet Protocol (IP) address, user-agent string, browser type, operating system, device information, pages visited, links clicked, the requested URL, hardware settings, and search terms.

Our services are dependent upon the information you provide. The specific terms of usage for collected data will be outlined in the contracts for services Cheiron renders. This data may be further processed for statistical purposes, to better our understanding and capability in providing new, innovative services. By using cheiron.us, you consent to any such further processing.

Data that we collect automatically will be used to monitor the usage and activity on our website, allowing us to maintain and improve online interaction for our services. We do not disclose such information, except under the same conditions that we use and disclose other personally-identifying information, as described below.

Certain interactions with cheiron.us will require the transaction of personally-identifying information. The type and amount of information will depend on the nature of the interaction, as outlined in Data Collection.

Cheiron uses personally identifying information solely for business purposes or to provide client services. Such use shall be reasonably necessary and proportionate to achieve the purpose for which the personal information was collected.

Cheiron does not disclose any potentially personally-identifying information and personally-identifying information to anyone beyond its employees, contractors, and affiliated organizations that (i) need to know the information to process it on Cheiron’s behalf or to provide services available at Cheiron.us, and (ii) that have agreed not to disclose it to others. We are HIPAA compliant with regards to all protected health information.

Cheiron.us does not rent or sell (i) potentially personally identifying information, (ii) personally identifying information, or (iii) protected health information to anyone. Other than to the employees, contractors, and affiliated organizations mentioned above, Cheiron.us will only disclose potentially personally-identifying and personally-identifying information when required to do so by law, if you give permission to have your information shared, or when Cheiron believes in good faith that disclosure is reasonably necessary to protect the property or rights of Cheiron, third parties, or the public at large.

Cheiron will retain provided data (as outlined in What You Provide to Us) that is necessary to render services to clients. This data may also be used to provide future services requested by you. By using cheiron.us, you consent to such use for future services.

All such data will be deleted upon a leaving client’s request.

Data automatically collected by Cheiron will be retained for a 14-month period, after which it will be automatically deleted.

Individuals have certain rights under various data privacy laws in relation to the personal information held about them. If cheiron.us maintains your personal information you have a right to:

• Know what personal information is being collected about you and the source from which it is collected;
• Request a copy of the personal information we hold about you, including any health records;
• Ask that we delete the personal information we hold about you, except that we are not required to comply with a request to delete personal information if the personal health information is necessary for our business operations or completion of the services for which it was collected;
• File a complaint with the Department of Health and Human Services in the case you believe your rights are being denied or your protected health information is not being protected; and
• Equal service and price, even if you exercise your privacy rights.

Information about how you use our website is collected automatically using cookies. Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This information is used to add functionality, track visitor uses of the website and compile statistical reports on website activity. Cheiron is not responsible for any loss of functionality caused by blocking cookies on our website.

Though most changes are likely to be minor, Cheiron reserves the right to make changes to its Privacy Policy at any time, at its own behest. You will be notified of any changes. The Privacy Policy will always be available to access through a link at the bottom of our website. By continuing to use Cheiron.us after any Privacy Policy change, you consent to all such changes.