Effective Date: December 11, 2024
PayMedix and its affiliates (“PayMedix,” “we,” “us” or “our”) recognizes the importance of protecting the privacy of our customers and online visitors. The following privacy policy (“Privacy Policy”) is the way we handle information learned about you from our interactions with you, including but not limited to your visits to our websites available at https://paymedix.com/, https://onlineaccess.hps.md/ and all other websites and mobile applications operated by PayMedix from which you are accessing this Privacy Policy (collectively, the “Site”).
PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. When you access or use the Site or submit information to or through the Site, you consent to our collection, use, disclosure and retention of your information as described in this Privacy Policy and accept the terms of our Terms of Service.
1. Information We Collect
a. Personal Information
PayMedix collects personal information from you, which may include:
- Name
- Address
- Email address
- Telephone number
- Date of birth
- Gender
- Last four digits of Social Security number
- Account login information (i.e., username and password)
- Payment information (e.g., credit card number, heath savings account information, billing address, card expiration date, security code, bank account information)
- Protected health information, including but not limited to the procedures/services performed, name of healthcare provider, name of facility, date of visit, and your insurance information (e.g., policy group number, member identification number, other members on your insurance plan)
- What kind of company you work for
- Geolocation through your IP address
- Any other information you may provide to us when you contact us, including but not limited to when you engage with the chat functionality on the Site.
This information is collected when you register an account with us, create your own payment plan, engage with the Site’s chat functionality or otherwise contact us. This information is also collected through benefit enrollment applications and through interaction with our partners who facilitate the delivery of your healthcare.
Where permitted by applicable law, we may combine your personal information with other non-personally identifiable information we have collected from you. We may also combine your personal information with information we receive about you from other sources, such as our service providers and partners who facilitate the delivery of your healthcare.
2. Information Collected Automatically
In addition, information about your computer hardware and software is automatically collected by PayMedix when you access or use the Site. This information may include:
- Browser type
- Language preference
- Access times and dates
- Device type
- Referring website addresses
- Search queries
- Internet service provider
- IP address
- Geographic location based on your IP address
- Other technical information such as protocol status and substatus, bytes sent and received, and server information.
We may also collect information regarding traffic patterns and your interaction with our Site and advertisements. This information is used by us for our business purposes, including for the operation and improvement of the Site, for technical troubleshooting, to maintain quality of the Site and to provide general statistics regarding use of the Site. We may also receive similar data from our business partners, including online advertising networks.
3. Cookies and Other Information Collection Tools
Cookies
A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences and other information.
We may use “session cookies” or “persistent cookies.” Session cookies are temporary and expire once you close your browser or once your session ends. Persistent cookies remain on your device for much longer or until you or your browser erase them. Persistent cookies have varying durations that are dependent on their expiration date.
We may also use third-party cookies, like Google Analytics, for example, which sets cookies on the Site to help analyze how visitors use the Site. If you would like to opt-out from the use of your information by Google Analytics, you may use Google Analytics’ opt-out browser add-on designed for this purpose. For more information on how Google uses information from the sites or apps that use its services, please click here.
Cookies help us improve the Site by providing us with information about which parts of the Site are most popular, enabling us to analyze technical and navigational information about the Site, and helping us to detect and prevent fraud. We also use cookies and other data collection tools, such as pixels, to help improve your experience with the Site.
Web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to manage and delete cookies, visit www.allaboutcookies.org. Some web browsers provide settings that allow a user to reject cookies or to alert a user when a cookie is placed on the user’s computer, tablet or mobile device. Most mobile devices also offer settings to reject mobile device identifiers. Although users are not required to accept cookies or mobile device identifiers, blocking or rejecting them may prevent access to some features available through the Site. You may manage your cookie preferences on the Site by clicking here.
Web Beacons and Pixels
A pixel is an HTML code snippet embedded in a website or email that collects information about user behaviors and interactions with the website or email.
We may utilize pixels both on certain aspects of the Site and in HTML-formatted email messages to you. Pixels may be used for the purpose of, among other things, measuring the success of our marketing campaigns, compiling statistics about Site usage and tracking the activities of users of the Site and email recipients. For instance, we may use Bing Pixel on the Site to enable us to create targeted advertisements and measure the effectiveness of our advertisements. For additional information on interest-based advertising, please see Section 2 (Interest-Based Advertising).
4. Interest Based Advertising
We may collect information about your online activities on our Site to provide you with advertising about products tailored to your individual interests. We also may obtain information for this purpose from third-party websites on which our advertisements are served.
You may see certain advertisements on other websites because we work with advertising partners (including advertising networks) to engage in remarketing and retargeting activities. Our advertising partners allow us to target our messaging to users through demographic, interest-based and contextual means. These partners track your online activities over time and across websites, including our Site, by collecting information through automated means, including through the use of third-party cookies, web server logs and web beacons. They use this information to show you advertisements that may be tailored to your individual interests. The information our advertising partners may collect includes data about your visits to websites that participate in the relevant advertising networks, such as the pages or advertisements you view and the actions you take on the websites. This data collection takes place both on our Site and on third-party websites that participate in the ad networks. This process also helps us track the effectiveness of our marketing efforts. For example, we utilize certain of our advertising partners’ targeted advertising services to show you our advertisements on other websites based on your prior visits to our Site and other online activity.
Provided that a company participates in industry-developed programs designed to provide consumers choices about whether to receive targeted advertising, you may opt out of interest-based advertising generally through the Network Advertising Initiative website or by visiting http://www.aboutads.info/choices/ (web-based advertising) or http://www.aboutads.info/appchoices (for mobile advertising). To learn more, please visit the websites operated by the Network Advertising Initiative and Digital Advertising Alliance at www.networkadvertising.org/choices. Opting-out does not mean that you will stop receiving advertisements from us. It means that you still stop receiving advertisements from us that have been targeted to you based on your visits and browsing activity across websites over time.
5. How Information is Used
We may use the information we collect for any of the following purposes:
- To provide the Site to you;
- To create and manage your account with us;
- To provide our products and services, including but not limited to administering our SuperEOBs;
- To fulfil your requests, such as those related to payment;
- To enable you to create your own payment plan;
- To operate and personalize the products and services we offer, and to give each user a more consistent and personalized experience when interacting with us;
- Personalize our advertising and marketing communications;
- If you sign up for our email list or to receive promotional text messages, to send you emails or text messages about products or services that we think might be of interest to you;
- For customer service, security, to detect fraud or illegal activities, and for archival and backup purposes in connection with the provision of the Site;
- For research and analytics purposes;
- To respond to your inquiries and communicate with you, including, without limitation, via the Site’s chat functionality;
- For our other business purposes, such as data analytics, audits, developing new products and services, enhancing our Site, improving our products and services, identifying Site usage trends, corporate governance and determining the effectiveness of our promotional campaigns;
- As we believe to be necessary or appropriate: (i) under applicable law; (ii) to comply with legal process; (iii) to respond to requests from public and government authorities; (iv) to enforce this Privacy Policy and our Terms of Service; (v) to protect our operations; (vi) to protect our rights, privacy, safety or property, and/or that of you or others; and (vii) to allow us to pursue available remedies or limit the damages that we may sustain.
6. Sharing of Information
We may disclose your information:
- With Third Party Service Providers Performing Services on Our Behalf. We share your personal information with our service providers to perform the functions for which we engage them. For example, we may use third parties to host the Site or assist us in providing functionality on the Site, provide data analytics and research on the Site, send out emails and text messages about the Site and our products or services, provide the chat functionality on the Site and to process payments.
- Through Tracking Technologies. We may share information collected through tracking technologies set on the Site with our website analytics and digital advertising service providers.
- For Legal Purposes. We also may share information that we collect from users as needed to enforce our rights, protect our property or protect the rights, property or safety of others, or as needed to support external auditing, compliance and corporate governance functions. We will disclose personal information as we deem necessary to respond to a subpoena, regulation, binding order of a data protection agency, legal process, governmental request or other legal or regulatory process. We may also share personal information as required to pursue available remedies or limit damages we may sustain.
- Changes of Control. We reserve the right to transfer or assign the information that we have collected from users in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
PayMedix does not share your personal information with third parties for those third parties’ direct marketing purposes.
7. Links to External Websites and Online Services
Our Site may contain links to third-party websites and online services. Any access to and use of such third-party websites or online services is not governed by this Privacy Policy, but is instead governed by the privacy policies of those third-party websites or online services, and we are not responsible for the information practices of such third-party websites or online services.
8. Consent to Receive Communications
You may decide to subscribe to one of our short code mobile message programs (the “Program”) to receive SMS/text messages from PayMedix. If you choose to opt-in and consent, such as by providing your telephone number to us and clicking submit online, we will collect information about your interactions with the SMS/text messages that we may send to you from time to time as part of the Program(s) in which you are enrolled.
By providing your telephone number and clicking submit online, you agree to this Privacy Policy, and authorize us to make or initiate sales calls, text messages and prerecorded voicemails to that phone number using an automated system. Your agreement is not a condition of purchasing any products, goods or services. Message & data rates may apply, and message frequency may vary.
PayMedix does not sell information that we obtain from you through our Program, including personal information you submit to us online to consent and opt-in to the Program, and we do not share that information with non-affiliated third parties for any purpose other than to provide the services, and other information requested by you, or to fulfill our legal obligations.
9. Your Rights and Choices
You may choose to stop receiving our marketing emails and text messages by following the unsubscribe instructions included in such emails and text messages, updating your communications preferences in your membership account on the Site or contacting us at info@paymedix.com or (888) 477-7968.
You may change any of your personal information in your account by editing your profile within your account or by contacting us at info@paymedix.com or (888) 477-7968.
10. Security Used & Retention of Personal Information
PayMedix uses reasonable security measures designed to prevent unauthorized intrusion to the Site and the alteration, acquisition or misuse of personal information. However, please note that no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. It is your responsibility to protect the security of your login information.
We will retain your personal information for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws or regulation.
11. Do Not Track
Our Site does not currently take any action when it receives a Do Not Track request. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For details, including how to turn on Do Not Track, visit www.donottrack.us.
12. Children
We do not knowingly collect or maintain personal information from any “minors” as defined under applicable laws. No parts of our Site are directed to or designed to attract anyone who is considered a “minor” under applicable laws.
13. Nevada Residents
Under Nevada law, PayMedix does not sell your personal information. However, if you are a Nevada resident, you may submit a request that we not sell any personal information we have collected about you by contacting us at info@paymedix.com or (888) 477-7968.
14. California Residents
The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) provides California residents with specific rights regarding their personal information. Please note that the CPRA excludes from its definition of personal information, protected health information. Accordingly, references to personal information in this Section excludes any protected health information.
The below describes such rights and how you may exercise such rights, and our information practices, including the categories of personal information we collect, use, retain, disclose, sell or share, and how and why we collect, disclose, sell or share such information.
Consumer Rights
Right to Know
You have the right to request that we disclose what personal information we collect, use, disclose, sell or share. Specifically, you may request that we disclose to you the following:
- The categories of personal information we have collected about you.
- The categories of sources from which the personal information is collected.
- The business or commercial purpose for collecting, selling or sharing personal information.
- The categories of third parties with whom we disclose personal information.
- The specific pieces of personal information we have collected about you.
You may also request that we disclose to you:
- The categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each third party to whom the personal information was sold or shared.
- The categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
Right to Delete
You have the right to request that we delete any personal information about you which we have collected from you. If it is necessary for us to maintain your personal information for certain purposes, we are not required to comply with your deletion request. If we determine that we will not delete your personal information when you request us to do so, we will inform you and tell you why we are not deleting it.
Right to Opt-Out of Sale or Sharing of Personal Information
You have the right to direct a business that sells or shares personal information about you to third parties not to sell or share your personal information. We do not sell your personal information for monetary consideration. However, we do use cookies and other tracking technologies (e.g., pixels) for targeted advertising purposes. The collection of data through certain tracking technologies for our targeting advertising purposes may be considered a “sale” and is considered “sharing” under the CPRA. To opt-out of having your information sold and shared with third-party website analytics and digital advertising service providers for this purpose, visit our “Do Not Sell or Share My Personal Information” web page.
Right to Correct Inaccurate Personal Information
You have the right to request a business that maintains inaccurate personal information about you to correct that inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
Right to Limit Use and Disclosure of Sensitive Personal Information
You have the right to direct a business that collects sensitive personal information about you to limit its use of your sensitive personal information (1) to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services; (2) for certain business purposes; and (3) as authorized by the implementing regulations of the CPRA. PayMedix does not use or disclose your sensitive personal information for any purpose other than those permitted under the CPRA and PayMedix does not sell your sensitive personal information.
No Discrimination
You have the right not to be discriminated against because you exercised any of your aforementioned rights.
How to Submit a Request
To exercise the rights described above, you must submit a verifiable request to us. You can do so by calling us at (888) 477-7968 or emailing info@paymedix.com.
To submit a verifiable request, you will be asked to provide certain information to help us verify your identity. The information we ask you to provide to initiate a request may differ depending upon the type of request, the type, sensitivity and value of the personal information that is the subject of the request, and the risk of harm to you that may occur as a result of unauthorized access or deletion, among other factors.
You may designate an authorized agent to make a request on your behalf by providing the agent with signed written permission to do so.
If we cannot verify your identity or authority to make the request, we will not be able to comply with your request. We will inform you if we cannot verify your identity or authority. We will only use personal information provided in a verifiable request to verify the requestor’s identity or authority to make the request.
How We Collect, Use, Disclose, Sell and Share Personal Information
PayMedix has collected the following categories of personal information and used, disclosed, sold or shared such information in the twelve (12) months prior to the effective date of this Privacy Policy:
- Identifiers, such as name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, Social Security number, address, telephone number, insurance policy number, bank account number, credit card number, debit card number, or any other financial information.
- Commercial information, such as records of procedures or services obtained.
- Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.
- Geolocation data.
- Sensitive personal information, such as Social Security number.
Each of the above categories are disclosed for a business or commercial purpose as described above in Section 3 (How Information is Used) to the third parties listed in Section 4 (Sharing of Information).
The following categories of personal information were sold or shared in the twelve (12) months prior to the effective date of this Privacy Policy:
- Identifiers, such as unique personal identifier, online identifier, Internet Protocol address, or other similar identifiers.
- Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.
- Geolocation data.
Such information is sold to or shared with our third-party website analytics and digital advertising service providers.
We share or sell such information to:
- Provide the Site to you and to improve the Site;
- Operate and personalize the products and services we offer, and to give each user a more consistent and personalized experience when interacting with us;
- Personalize our advertising and marketing communications;
- For security, to detect fraud or illegal activities, and for archival and backup purposes in connection with the provision of the Site;
- For research and analytics purposes;
- For our business purposes, such as data analytics, audits, enhancing our Site, improving our products and services, identifying Site usage trends, and determining the effectiveness of our promotional campaigns;
- As we believe to be necessary or appropriate: (i) under applicable law; (ii) to comply with legal process; (iii) to respond to requests from public and government authorities; (iv) to enforce this Privacy Policy and our Terms of Service; (v) to protect our operations or those of any of our affiliates; (vi) to protect our rights, privacy, safety or property, and/or that of our affiliates, you, or others; and (vii) to allow us to pursue available remedies or limit the damages that we may sustain.
PayMedix collects the personal information described above from or through the following categories of sources:
- You, directly and indirectly, including when you access the Site, register an account with us, create your own payment plan, engage with the Site’s chat functionality or otherwise contact us. We may also collect your personal information through benefit enrollment applications and through interaction with our partners who facilitate the delivery of your healthcare; and
- Service providers and business partners, specifically those that provide website analytics services to help us understand the activities taken on the Site and online advertising networks.
PayMedix will retain the personal information described above for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws or regulation.
Personal Information of Minors
PayMedix does not have actual knowledge that it sells or shares personal information about minors under the age of 16.
15. Texas Residents
The categories of personal information we process about you is set forth in Section 1 (Information We Collect). The purposes for processing such personal information are set forth in Section 3 (How Information is Used). We disclose the personal information we process about you with the third parties set forth in Section 4 (Sharing of Information).
If you are a Texas resident, you have the rights to:
- Confirm whether or not we are processing your personal information and access such personal information;
- Correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of your personal information;
- Delete personal information provided by or obtained about you;
- Obtain a copy of your personal information we process, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance, where the processing is carried out by automated means; and
- Opt out of the processing of personal information for purposes of:
- Targeted advertising;
- The sale of personal information; or
- Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
You may exercise these rights by calling us at (888) 477-7968 or by emailing info@paymedix.com.
The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information; and
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We reserve the right to verify your identity in connection with any requests regarding personal information to help ensure that we provide the information we maintain to the individuals to whom it pertains and allow only those individuals to exercise rights with respect to that information. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
In the event we deny your request, you may appeal our denial by contacting us in the same manner by which you submitted your request.
We process your personal information for the purposes of targeted advertising, and under Texas law, our processing may qualify as a “sale”. We share your Internet activity, such as your operating system type, browser type, language preference, access times and dates, device type, referring website addresses, search queries, browsing history, IP address, geographic location based on your IP address and other technical information such as protocol status and substatus, bytes sent and received, and server information with our third-party website analytics and digital advertising service providers. To opt-out of such sharing of information with our third-party website analytics and digital advertising service providers, please visit our “Do Not Sell or Share My Personal Information” web page. If you are an authorized agent making a request to opt-out on behalf of a consumer, we may require and request that you provide us with written permission signed by the consumer to verify that you are authorized to make such request.
16. Questions / Contact Us
If you have any questions regarding this Privacy Policy, please contact us at info@paymedix.com or (888) 477-7968.
17. Notification of Changes
Any changes to our Privacy Policy will be posted to this page so users are always aware of the information we collect and how we use it. Accordingly, please refer back to this Privacy Policy frequently as it may change.