Deborah® Digital Privacy Policy
Effective Date/Last Revised: February 3, 2025 | Originally Published: September 14, 2022
This website should NOT be used in urgent or emergency medical situations. If you have a medical emergency, call 911 immediately.
This Digital Privacy Policy applies to the following websites, their subpages and any other websites or domains operated by Deborah Heart and Lung Center (“we”, “us”, or “our”), Deborah Specialty Physicians, and the Deborah Hospital Foundation, an affiliated not-for-profit hospital foundation (each a “Service” or collectively, “Services”) that we link to this Digital Privacy Policy:
Deborah Specialty Physicians is a private physician practice. Deborah Heart and Lung Center manages the Deborah Specialty Physicians’ and Deborah Hospital Foundation websites. The name and logo “Deborah” is a registered trademark of Deborah Heart and Lung Center and is used under license granted by Deborah. All Rights Reserved.
IMPORTANT NOTE: This Digital Privacy Policy applies to information that is linked or reasonably linkable to you as an identified or identifiable person (“Personal Data”) where you provide such data to us when using the Services or where such data is collected in relation to your use of the Services. In general, Personal Data includes information such as your name, address and contact information. It also may include Web Browsing Data as described below. This Digital Privacy Policy does not apply to Protected Health Information (as described below), information which is de-identified, or information about you which is publicly available.
Protected Health Information
Some information collected when you are using the Services may be considered “Protected Health Information” (or “PHI”) which is protected by the Health Insurance Portability and Accountability Act (“HIPAA”). Use and disclosure of PHI is subject to the Deborah Heart and Lung Center HIPAA Notice of Privacy Practices and/or the Deborah Specialty Physicians’ HIPAA Notice of Privacy Practices (the “HIPAA Notices”), such as if you use the “Request an Appointment” feature and schedule an appointment with us. The HIPAA Notices are separate documents that (i) describe how Deborah Heart and Lung Center and Deborah Specialty Physicians can use and share your PHI, and (ii) describe your rights with respect to your PHI. If there is ever any conflict between this Digital Privacy Policy and the HIPAA Notices with respect to PHI, the HIPAA Notices will apply. The HIPAA Notices do not apply to any information that is not PHI.
Web Browsing Data
We may collect certain Internet information when you visit our website and use the Services. This includes but is not limited to Internet protocol address (“IP Address”), device and advertising identifiers, browser type, operating system, Internet service provider, web page information such as what page was visited and the date/time of such visit, standard server information, and other web browsing data when you are browsing the Internet and our Services (“Web Browsing Data”). Some of this Web Browsing Data may also include certain anonymized geolocation information, such as mobile device GPS signal and location data, WiFi access points, cell towers and similar geolocation data. We do not, however, collect your precise geolocation. When we collect Web Browsing Data, we may do so in the form of cookies, pixels, tags, and scripts, and similar technologies. Web Browsing Data is generally not PHI and in such case, is only subject to this Digital Privacy Policy. Please refer to the HIPAA Notices for more information on how we may use and share PHI. Note that some of the Web Browsing Data that we collect may be de-identified or publicly available information, and therefore, it will also not be Personal Data subject to this Digital Privacy Policy.
I. COLLECTION OF INFORMATION
We may collect the following kinds of Personal Data when you use a Service:
Information You Provide Directly to Us
For certain Services or activities, such as when you register with a Service, use the “Request an Appointment” feature, use the “Contact Us” feature, utilize one of our general Health Quizzes or Risk Assessments, subscribe to our alerts, or contact us directly, we may collect some or all of the following types of information.
- Contact information, such as your full name, email address, mobile phone number, and address;
- Username and password, for example, if you are registered for a mobile application connected to this Digital Privacy Policy;
- Personal information, including date of birth, occupation, availability, contact preferences, information about your diagnosis, previous treatments, general health, and insurance information that you may provide to us;
- Financial and other donation-related information, such as if you make an on-line donation or purchase one of our tributes;
- Doctor reviews that you may choose to submit; and
- Any other information you provide to us, such as questions you may submit about the Services.
You should not use the “Contact Us” forms, Health Quizzes or Risk Assessments for urgent or emergency questions or questions of a medical nature. Using these does not constitute or create a doctor-patient relationship between us and any recipient. You should not send us any medical, confidential or sensitive information for physicians in the “Contact Us” forms. Whatever you disclose to us in that manner will not be privileged or confidential. Health Quizzes and Risk Assessments will only screen for certain risk factors, do not constitute a physical exam and may not be relied upon for medical advice. For the diagnosis of a medical problem, you must see a physician for a complete medical exam.
Information We Collect Automatically
We may collect certain Web Browsing Data automatically when you use the Services, such as by browsing our website pages using the Internet. Information which may be collected automatically includes but is not limited to your computer’s IP Address, device and advertising identifiers, browser type, operating system, Internet service provider, pages that you visit before using the Services, the date and time of your use of the Service, information about the links you click and pages you view within the Services, and other standard server log information.
We may use cookies, pixel tags, Local Shared Objects, and similar technologies to automatically collect Web Browsing Data. Cookies are small bits of information that are stored by your computer’s web browser. Pixel tags are very small images or small pieces of data embedded in images, also known as “web beacons” or “clear GIFs,” that can recognize cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your computer or device. A Local Shared Object is a data file that is stored in a computer by visiting a website that uses a Flash application and that functions like a cookie. By using the Services, you consent to our use of cookies, pixels and similar technologies.
We may also collect and use technical data to address and fix technical problems and improve the Services. Your device or browser settings may permit you to control the collection of certain technical and other data. By using the Services, you are consenting to us or any party acting on our behalf collecting this technical and other data unless you have otherwise disabled such through your device or browser controls.
Information from Third-Party Services
We use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use the Services. We also place digital advertisements on other third party websites or online services. If you access the Services from one of our digital advertisements on a third party website, application, or other service (a “Third-Party Service”) we may receive information from the owner of the Third-Party Service related to you and that advertisement.
Third-Party Services companies may independently place or recognize a unique cookie on your browser (including through the use of pixel tags which the third party may place on your browser). They may also use these technologies, along with Web Browsing Data or other information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop. If you would like more information about these third party practices, and to learn how to opt out of it in desktop and mobile browsers on your devices, you can visit these third party links, http://optout.aboutads.info and http://optout.networkadvertising.org. The Network Advertising Initiative is a third party consumer educational resource website designated to educate and assist consumers with their digital privacy. We are not responsible for their content or web pages. You may also download third party applications designated to help you opt out in mobile apps, and should review any such third party terms or privacy policies if doing so.
These third parties do not receive from us any PHI or any information which you provide in our online Health Quizzes and Risk Assessments.
Information We Obtain from Other Sources
We may receive information about you from other sources, including through third-party services and organizations. We may combine our first-party data, such as your email address or name, with other data from other sources and use this to contact you (e.g. through direct mail). For example, if you visit one of our websites and you also visit one of our in-person community Heart Check Center kiosks and provide your contact information, we may combine this data in order to identify which of our services you may be interested in.
II. USE OF INFORMATION
We may process and use the Personal Data we collect to:
- Provide, maintain, enhance and operate the Services;
- Preserve the availability, integrity or security of the Services;
- Contact you;
- Fulfill your requests for our, Deborah Specialty Physician, Deborah Hospital Foundation or our affiliates’ products, services, and information;
- Send you information about additional clinical services or general wellness from us or on behalf of Deborah Specialty Physicians, the Deborah Hospital Foundation or our affiliates and partners;
- Analyze the use of the Services and user data to understand and improve the Services;
- Conduct market research using your information;
- Aggregate or de-identify information;
- Comply with our legal obligations, including federal and state applicable laws and regulations;
- As related to our Terms of Use, including compliance, enforcement, security measures, or prevention of potentially prohibited or illegal activities as described in our Terms of Use; and
- For any other purposes disclosed to you at the time we collect your information or pursuant to your consent.
III. SHARING OF INFORMATION
We are committed to maintaining your trust, and we want you to understand when and with whom we may share Personal Data that we collect.
- Authorized vendors and service providers. We may share Personal Data with vendors and service providers, for example, that help us or Deborah Specialty Physicians with specialized services, including billing, payment processing, customer service, email deployment, business analytics, marketing our Services (including but not limited to advertising, attribution, deep-linking, direct mail, mobile marketing, optimization and retargeting) performance monitoring, hosting, and data processing. These vendors and service providers may not use your information for purposes other than those related to services they are providing to us. The categories of Personal Data we may share with these vendors and service providers may include your name, contact information, Web Browsing Data, and personal and other information that you may provide to us, such as if you use our Contact Us box or take one of our Risk Assessments.
- Affiliates. We may share certain of your information with Deborah Hospital Foundation, our not-for-profit fundraising affiliate. The categories of Personal Data we may share include your name, contact information and personal and other information that you may provide to us, such as related to a Tribute you purchase or a donation, or if you use our Contact Us box or take one of our Risk Assessments.
- Legal purposes. We may disclose Personal Data if necessary to attorneys, government agencies, court officials, law enforcement, or similar individuals in order to respond to subpoenas, court orders, legal process, law enforcement requests, legal claims or government inquiries, and to protect and defend the rights, interests, health, safety, and security of Deborah Heart and Lung Center, Deborah Specialty Physicians and Deborah Hospital Foundation. The categories of Personal Data we may share with these individuals and entities may include your name, contact information, Web Browsing Data and personal and other information that you may provide to us.
- Business Transfers. We may transfer your Personal Data to third parties, attorneys, court officials and similar individuals as related to a transfer of assets in the event of a sale, merger, reorganization, consolidation or in the unlikely event of bankruptcy proceedings. The categories of Personal Data we may share related to these business transfers may include your name, contact information and personal and other information that you may provide to us.
- Protected Health Information. We may share your PHI as described in the HIPAA Notices and permitted under HIPAA. For example, if we share information containing PHI with the Deborah Hospital Foundation as described above, the HIPAA Notices will apply to such information sharing. We generally will not share PHI with third parties unless permitted by HIPAA and the HIPAA Notices. Please refer to the HIPAA Notices for more information on how we may use and share PHI.
- Consent. We may otherwise share your Personal Data with your consent or at your direction. We may share information for any other purposes disclosed to you at the time we collect the information or pursuant to your consent or direction. If you choose to engage in public activities on any third party sites that we link to, you should be aware that any information you share there can be read, collected, or used by other users of these sites and forums. You should use caution in disclosing Personal Data while participating in these areas. We are not responsible for the information you choose to submit in public areas.
IV. SECURITY
We take the technical side of security seriously. The Services employ industry standard security practices and safeguards. We use technical and other security measures to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. You should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100 percent secure. Any information that you choose to transmit over the Internet is done at your own risk and you accept the risks inherent with any use of the Internet or in connection with e-mail.
V. THIRD-PARTY LINKS, CONTENT, AND TRACKING
Some of the Services may contain links to content maintained by third parties that we do not control. We are not responsible for the privacy practices of these third parties, and the information practices of these third parties are not covered by this Digital Privacy Policy.
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Although we do utilize Google Analytics services, we use a third party that anonymizes your data so that we do not share any identifiable Personal Data with Google Analytics. However, Google Analytics may be independently enabled on your device and may use the data collected to track and monitor your access and use of other third party web sites. You may opt-out of Google Analytics by visiting this link. We are not responsible for the content or web pages that Google Analytics manages and provides on its websites nor any data which Google Analytics may collect directly from you.
The Services may contain links to other third party websites, and other third party websites may provide links to these Services. These links are provided for your convenience only. We do not control these other sites and do not endorse, nor do we assume any liability or responsibility for them, including any content or services provided to you by such sites. You should not consider any link to or from another site as an endorsement of that site by us unless we expressly state so.
For your convenience, the Privacy Policies/Terms of Service for some of these third party Web sites are provided below. You should read these any time you access any content or services provided by such sites.
VI. INTERNATIONAL USERS
We do not knowingly allow use of the Services outside of the United States of America. We maintain information in the United States of America and in accordance with the laws of the United States, which may not provide the same level of protection as the laws in other jurisdictions, and therefore, the Services are intended only for use within the United States. Please contact us directly by phone if you are outside of the United States of America and you need additional information. Any use of the Services and provision of information from outside of the United States of America in disregard of this is at your own risk and you understand and agree that your information may be transferred to and stored on servers located outside your resident jurisdiction in any such circumstance and thereafter processed within the United States.
VII. CHILDREN
We do not knowingly allow individuals under the age of 18 to create accounts that allow access to our Services or collect information from children under the age of 18. If you are under 18, do not use or provide any information on this site or on or through any of the Services.
VIII. CHANGES TO THE PRIVACY POLICY
We may update this Digital Privacy Policy from time to time. When we update the Digital Privacy Policy, we will revise the “Effective Date” date above and post the new Digital Privacy Policy on our website. We recommend that you review the Digital Privacy Policy each time you visit the Services to stay informed of our current privacy practices that apply to all information as of the revised Effective Date. You can always refuse to accept any changes by not continuing to use the Services.
IX. YOUR RIGHTS
You have certain rights with respect to your Personal Data that we process. Although certain limitations may apply, you generally have:
- The right to confirm whether we process and access your Personal Data;
- The right to correct inaccuracies you may identify in your Personal Data;
- The right to request that we delete your Personal Data;
- The right to obtain a copy of your Personal Data in a portable and readily usable format (if technically feasible);
- The right to opt out of any processing of your Personal Data for (a) targeted advertising, (b) a sale of such Personal Data; or (c) profiling in furtherance of decisions that product legal or similarly significant effects concerning the consumer.
If you wish to exercise any of these rights or for more information about these rights and any limitations that may apply, please contact the Digital Privacy Policy administrator at WebsitePrivacy@deborah.org. These rights do not apply to Personal Data that is PHI or to data which is not Personal Data. Please refer to the HIPAA Notices for more information about your rights for your PHI.
X. QUESTIONS?
If you have any questions about this Digital Privacy Policy or our practices, please email us at WebsitePrivacy@deborah.org.