Privacy Policy

Mighty Oak Privacy Policy

 

Credit Card Information

Chart Talk does not store credit card information.

Accessibility

Mighty Oak is a service provider to Subscribers and may be referred to as an “business associate”, or  “service provider” of the Subscriber. Mighty Oak will keep Subscriber Data stored securely as described in the Chart Talk SaaS Terms and Conditions. Mighty Oak will only access Subscriber Data if authorized to do so or at the request of a Subscriber or its users; where needed to access Subscriber Data to prevent or address technical problems affecting the Services; in order to investigate or prevent fraud; or if required to do so by law, regulation or court order. Mighty Oak may also periodically review non personally identifiable Subscriber Data for subscription auditing purposes or to ensure compliance with these Terms. Mighty Oak will not use, disclose, modify, archive, or destroy Subscriber data except as directed by the Subscriber or in accordance with the Chart Talk SaaS Terms and Conditions.

Compliance with Laws

We may disclose personal information to governmental or judicial authorities (to respond to a request, subpoenas, registrations, or legal processes) or other third parties (as required by law, to comply with our legal and regulatory obligations, or to protect and secure our interests, rights, and our assets), to enforce security requirements, or to respond to an emergency which we believe, in good faith, requires us to disclose personal information.  We may also be required to disclose personal information to enforce our legal rights, to enforce security requirements, or to respond to an emergency which we believe, in good faith, requires us to disclose personal information. In such instances, we carefully review a request to make sure it complies with applicable law; if we consider the request to be too broad, we may try to narrow it to minimize the scope of the request, and, if permissible, we will make every reasonable effort to give you as much notice and detail as we can regarding the disclosure of your personal information, what information was disclosed and why. We will not disclose Patient Data unless legally required to do so.

Patient Data

Subscribers use our clinic management platform to collect personal information from their patients and create patient records. These records may include a patient’s name, address, health insurance and billing information, medical charts, appointment history and other patient data (“Patient Data”). This information is sometimes referred to as “personal health information”, “protected health information”, “data concerning health” or “sensitive data” depending on the location of the Subscribers and the privacy laws applicable to them. If you are a Patient, Patient Data is collected from you when you visit your Subscriber clinic or practitioner and when you create a profile or book appointments with the Subscriber clinic through our online booking Service.

Subscriber’s Role

Subscribers retain sole control over Patient Data and may be referred to as a “health information custodian”, a “covered entity” or a “controller” depending on their location and the privacy laws applicable to them. Subscribers determine:

• What Patient Data to collect;
• How the Subscriber will use the Patient Data;
• Who has access to Patient Data;
• How long the Subscriber will store Patient Data; and
• On what basis the Subscriber may delete Patient Data.

Subscribers are responsible for complying with laws and regulations governing the use of Patient Data, and for determining the legal basis for such use.

Mighty Oak’s Role.

Mighty Oak is a service provider to Subscribers and may be referred to as an “agent”, “business associate” or “processor” of the Subscriber. Mighty Oak stores Patient Data in its secure data centers and makes it available to Subscribers and their users through our clinic management platform. Therefore, except in relation to Patient Authentication Information, Mighty Oak otherwise has no control over Patient Data. Mighty Oak will only access Patient Data on the instructions of the Subscriber or its representatives or, in rare cases, where needed in order to prevent or address technical problems, your requests for support, or if required by law or court order. Please note that in order for Mighty Oak to verify that we have true consent to access your account and its data, that we may verify the person requesting that we access. We may store and access non-identifiable usage data in connection with managing your subscription and licenses.

Patient Rights

Patients have certain rights with respect to their Patient Data, which may include knowing what information your Subscriber clinic has about you, correcting any inaccurate Patient Data, obtaining a record of your Patient Data and, in certain circumstances, deleting or removing your Patient Data. Please note that Subscribers have strict legal and regulatory obligations around Patient Data and may not always be permitted to delete or remove Patient Data.

Questions about Patient Data

If you have any questions about your Patient Data or wish to exercise any of your patient rights, please contact your Subscriber clinic or practitioner. If your Subscriber clinic or practitioner has any questions about the management of Patient Data in the Services, they may contact us and we will support them as needed to respond to your request. Please note that, in order to maintain strict security of your Patient Data, we can only access Patient Data upon instruction from the Account Owner of the Subscriber.

Sharing Your Information

We do not sell or distribute personal information to third parties for their own commercial or marketing purposes.