Privacy Policy

Last Updated: January 17, 2013 MDx-HL Holdings, LLC ("HealthLeap") is strongly committed to protecting your privacy. We created this Privacy Policy ("Privacy Policy") to give you confidence as you visit and use the HealthLeap services (the "Services") provided via the HealthLeap website (collectively, "Website"), and to demonstrate our commitment to fair information practices and the protection of privacy. Your use of the Website is governed by this Privacy Policy and the Terms of Use.

If you have questions or concerns regarding this statement, you should first contact HealthLeap at privacy@healthleap.com.

1. About This Privacy Policy and Our Services

This Privacy Policy is only applicable to the HealthLeap Website and not to any other websites that you may be able to access from the Website (whether through an advertisement, service, or content link) or any website of HealthLeap's partners, each of which may have data collection, storage, and use practices and policies that differ materially from this Privacy Policy.

While you may use some of the functionality of HealthLeap without registration, many of the specific tools and services on the Website require registration. If you use our Website withoutwith out registering, the only information we collect will be Non-Personal Information through the use of cookiesCookies or web beacons.Web Beacons (please see Section 2). If you choose to register with our Website for certain Interactive Tools or other services, we require you to submit certain Personal Information, which is information that personally identifies you, including, for patients, your first and last name, e-mail address, username and password, date of birth and gender, and for doctors and dentists ("Providers"), your first and last name, credentials, the name and address of your practice, username and password, your time zone, date of birth and NPI. Depending on the Service you have selected, we may also collect Personal Health Information (please see Section 7) or billing information. You are responsible for ensuring the accuracy of the Personal Information, including but not limited to Personal Health Information, you submit to HealthLeap. Inaccurate information will affect the information you receive when using our Website and our ability to contact you as described in this Privacy Policy.

2. Information We Automatically Collect About You

Even if you do not register with HealthLeap, we collect Non-Personal information about your use of our Website, special promotions and emails.

A. Cookies

We use "cookies" to customize your experience on the Website and, if you create a password, to store your password so you do not have to re-enter it each time you visit the Website. "Cookies" are small computer files that are transferred to your computer's hard drive that contain information such as your user ID, user preferences, the pages you've visited and the activities you've performed while using the Website. We do not link the information stored in cookies to any of your Personal Information you submit while on the Website. You may block cookies or delete cookies from your hard drive; however, by disabling cookies, you may not have access to all of the features of the Website. Some of our business partners also use cookies to provide us with anonymous data and information regarding your use of the Website. We do not have access or control over these cookies, our privacy policy does not cover the use of third party cookies.

B. Web Beacons

Us or our third party tracking utility company also use "web beacons" to collect anonymous information about your use of our Website and the websites of selected sponsors and advertisers, and your use of emails, special promotions or newsletters we send to you. Web beacons are tiny graphic image files embedded in a web page or email that provide a presence on the web page or email and send back to its home server information from the user's browser. The information collected by web beacons allows us to statistically monitor how many people are using our Website and selected sponsors' and advertisers' sites and opening our emails, and for what purposes. Our web beacons are not used to track your activity outside of our Website or those of our sponsors'. We do not link non-personal information from web beacons to Personal Information without your permission and do not use web beacons to collect or store Personal Health Information about you.

C. Traffic Data

We automatically track and collect the following categories of information when you visit our Website: (1) IP addresses; (2) domain servers; (3) types of computers accessing the Website; (4) types of web browsers used to access the Website; (5) referring source which may have sent you to the Website; and (6) other information associated with the interaction of your browser and the Website (collectively "Traffic Data"). We do not link non-personal information from Traffic Data to Personal Information without your permission and do not use Traffic Data to collect or store Personal Health Information about you.

3. Personal Information We Collect About You

A. Registration

In order for you to access certain areas of the Website, we may require you to register and provide us with certain Personal Information. Personal Information includes the following categories of information: (1) Contact Data (such as your e-mail address, phone number and HealthLeap password); (2) Demographic Data (such as your gender, your date of birth and your zip code); (3) Insurance Data (such as your insurance carrier and insurance plan); and (4) Medical Data (such as your previous Providers visited, your reason for visit and your date of visit, and other medical information you choose to share with us). We use the Personal Information that you provide to respond to your questions, provide you the specific Services you select, send you emails about Website maintenance and updates, and inform you of significant changes to this Privacy Policy. You may choose not to provide us with any Personal Information. In such case, you can still access and use much of the Website; however you will not be able to access and use those portions of the Website that require your Personal Information.

Feedback page: We use a third party service provider to host our feedback page. You may submit contact information such as email address. Such information is used only to respond to your inquiries and is governed by this Privacy Policy.

Support Section: If you use the support section of the site we ask for your name and email address so that you may create and account and send your support requests. You are also able to upload a photo of yourself if you choose to, please be aware that your profile may be viewed by other users of the site. We use our third party platform provider's software on this area of the site, but all collection and use of information within this area of the site is governed by our privacy policy.

B. Email to You

We may use your contact data to send you information to contact you when necessary, including registration verification emails and to remind you of upcoming or follow-up appointments, and in conjunction with your use of certain Interactive Tools. In some cases, when you click on a link or an advertisement in an e-mail, your browser may be momentarily directed to the website of a third party which, acting on behalf of HealthLeap (see Section 5 below), notes or "counts" your response to the e-mail before re-directing your browser to your selected destination; this re-direction process may not be apparent to you.

C. Text Messages to You

Text message communication is only used to remind you of upcoming appointments and we will only contact you through text messages if you choose this form of communication. Out of respect for your privacy, we provide you a way to unsubscribe. Please see "Choice and Opt-out" in Section 10.

D. Refer this Provider to Family and Friends

If you choose to use our Refer this Provider service to tell a friend about a particular Provider on HealthLeap, we will ask you for your name, your email address and your friend's email address. We will automatically send your friend a one-time email, containing the profile of the Provider with a link to his/her online schedule on our Website using your name and email address as the from email address. We will only use the information you provide to send the email you request. We may only on an aggregate (i.e. non-personally identifiable) basis share statistical information to Providers (i.e., how many people referred Dr. "X").

E. Invite a Provider to Join HealthLeap

If you choose to use our invitation service to tell a Provider about our Website, we will ask you for information needed to send the invitation to the Provider, such as the email address of the Provider. We will send the Provider an email in your name inviting him or her to visit the Website, and may send up to two reminders to them. HealthLeap stores this information to send the initial invitation and reminders, to notify you if your invitation is accepted and to track the success of our referral program. The Provider may contact us at privacy@healthleap.com to request that we remove this information from our database.

F. Blog

If you use the blog on this Web site, you should be aware that any personally identifiable information you submit there can be read, collected, or used by other users of these blogs, and could be used to send you unsolicited messages. We are not responsible for the personally identifiable information you choose to submit in these blogs.

G. Interactive Tools

We also collect other information, some of which may be Personal Information that you voluntarily provide to us when you choose to use some of the Website's interactive tools and services ("Interactive Tools"), such as searching for Providers and appointments with them. We also collect information you provide voluntarily in free-form text boxes on the Website and through responses to surveys, questionnaires and the like. Some of the free Interactive Tools on our site ask you for health-related Personal Information.

H. Children

We do not knowingly collect Personal Information from children under the age of 13.

I. Market Research

From time to time the HealthLeap market research department, or its operations contractors acting on its behalf, may conduct online research in order to gather feedback about our site and our sponsors through email invitations, pop-up surveys and online focus groups. When participating in a survey, we may ask you to submit Personal Information. This Personal Information is used for research purposes, and is not used for sales solicitations. When a survey is sponsored by a third party, aggregate information of the survey results is reported to the sponsor. Personal Information collected through market research will be used only by HealthLeap and its service providers and contractors and will not be given or sold to a third party without your consent or as otherwise permitted by this Privacy Policy. We will not knowingly accept survey responses from or conduct interviews with any person under the age of 18. In addition to collecting survey responses from our members, cookies may be used to authenticate respondents or to help you pick up where you left off in a survey. If you have cookies disabled you may not be able to participate in some studies. Cookies may be used to connect survey data with HealthLeap site usage characteristics. You will be notified when we would like to use cookies in this way and your consent will be requested for these cookies.

4. HealthLeap's Use of your Information

We may use your contact data to send you information about HealthLeap or our products or Services, to contact you when necessary, including to remind you of upcoming or follow-up appointments, and in conjunction with your use of certain Interactive Tools. We may use your Demographic Data, your Traffic Data, your Insurance Data or your Medical Data to customize and tailor your experience on the Website, in emails and in other communications, displaying content that we think you might be interested in and according to your preferences.

5. Information Collected by Third Parties Not Acting on Behalf of HealthLeap

Certain content and Services offered to you through our Website are served on Websites hosted and operated by a company other than HealthLeap ("Third Party Contractor Websites"). HealthLeap does not disclose your Personal Information to these Third Party Contractor Websites without your consent, but you should be aware that any information you disclose once you access these other Websites is not subject to this Privacy Policy. HealthLeap does not endorse and is not responsible for the privacy practices of these Third Party Contractor Websites. You should review the privacy policy posted on the other Website to understand how that Third Party Contractor Website collects and uses your Personally Identifiable Information. HealthLeap makes an effort to make it obvious to you when you leave our website and enter a Third Party Contractor Website, either by requiring you to click on a link or by notifying you on the site before you visit the third party site. In addition, if you see a phrase such as "Powered by" or "in association with" followed by the name of a company other than HealthLeap, then you are on a Website hosted by a company other than HealthLeap. HealthLeap also provides links to sites provided by Third Party Contractor Websites that have business arrangements with HealthLeap to pay commissions based on sales of products or services generated through HealthLeap.

6. Links to Other Websites

The Website contains links to third party websites to which HealthLeap has no affiliation. HealthLeap does not share your personal information with those websites and is not responsible for their privacy practices. Some web sites may have the look and feel of our Website. Please be aware that you may be on a different site and that this Privacy Policy only covers our Website. Should you decide to visit one of these third party websites, we suggest that you read its privacy policy.

7. Disclosure of Your Information

We share certain categories of information we collect from you in the ways described in this Privacy Policy. We may share Demographic Data with advertisers and other third parties only on an aggregate (i.e., non-personally-identifiable) basis. We may also share your Contact Data, Demographic Data, Insurance Data and Medical Data with Providers you choose to schedule on our Website.

We also share Personal Information and Traffic Data with our business partners who assist us by performing core services (such as web site hosting, billing, data storage and security) related to our operation of the Website and/or by making certain Interactive Tools available to our users. We use a software company that provides a platform for our support section, all information collected within this platform is governed by our Privacy Policy. Those business partners and our third party service provider shall be bound to uphold the same standards of security and confidentiality that we have promised to you in this Privacy Policy, and they will only use your Contact Data and other Personal Information to carry out their specific business obligations to HealthLeap and to provide your requested medical care and services.

Last, we may transfer information about you to another company in connection with a merger, sale or acquisition by or of HealthLeap. In this event, we will use reasonable efforts to notify you before information about you is transferred and becomes subject to a different privacy policy. HealthLeap does not share, sell, rent or trade your Personal Information with any third parties for their promotional purposes.

We reserve the right to disclose your personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on our Web site.

8. Providers

Providers, their employees, and their agents should be particularly aware of their obligations of patient confidentiality, including without limitation their obligations under the Health Insurance Portability and Accountability Act ("HIPAA"), in communicating with HealthLeap. HealthLeap does not have, and will not accept, any obligations of confidentiality with respect to any communications other than those expressly stated in this Privacy Policy and HealthLeap's Terms of Use.

9. How HealthLeap Handles Privacy and Security Internally

The security of your Personal Information is important to us. We follow generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and once we receive it. For example, when you enter sensitive information (such as personal health information or credit card information) on our Website, we encrypt that information using secure socket layer technology (SSL). Although we make good faith efforts to store Personal Information in a secure operating environment that is not open to the public, you should understand that there is no such thing as complete security, and we do not guarantee that there will be no unintended disclosures of your Personal Information. If we become aware that your Personal Information has been disclosed in a manner not in accordance with this Privacy Policy, we will use reasonable efforts to notify you of the nature and extent of the disclosure (to the extent we know that information) as soon as reasonably possible and as permitted by law.

10. Controlling Your Personal Information

As a registered user of the Website, you can modify some of the Personal Information you have included in your profile by logging in with your username and password and accessing the "my account" tab within your profile. Upon your request, HealthLeap will use commercially reasonable efforts to delete your account and the Personal Information in your profile; however, it may be impossible to remove your account without some residual information being retained by HealthLeap. Registered users who wish to close their account should contact privacy@healthleap.com with their registered email (username).

Choice/Opt-out
If you no longer wish to receive emails and/or text messages, including reminders of upcoming appointments, you may opt-out of receiving them by following the instructions included in each email/text message or by emailing us at http://www.vitals.com/about/contact.

or

MDx-HL Holdings, LLC
210 Clay Ave, Suite 140
Lyndhurst, NJ 07071

Phone: (201) 842-0760

11. Changes to This Privacy Policy

We reserve the right, at any time, to add to, change, update, or modify this Privacy Policy so please review it frequently. If we do, then we will notify you here, as well as by posting a notice on our Website and/or by e-mailing you, along with a description of any material changes and, where appropriate, a link to the modified policy so that you can review it. In all cases, use of information we collect is subject to the Privacy Policy in effect at the time such information is collected.

Copyright 2011, MDx-HL Holdings, LLC. All Rights Reserved.