Privacy Policy
Privacy Notice
Effective Date: September 22nd, 2023
At DocDay, Inc. (“DocDay,” “we,” or “us”), our most important value is ‘Patients First’, which means that we are committed to protecting your privacy and we take great care with your personal information we gather when you access or use DocDay.com and related websites, applications, and services owned and operated by DocDay and that link to this Privacy Policy (collectively, the “Services”). This Privacy Policy is meant to help consumers who use our Services (“Consumers”, “you”, or “your”) to explore providers or book appointments understand how we treat your personal information. This Privacy Notice (or “Notice”) outlines the personal information that DocDay may collect, how DocDay uses and safeguards that information, and with whom we may share it.
DocDay encourages our customers, vendors, employees, independent contractors, visitors, business associates, investors, and other interested parties to read this Privacy Notice, which applies to all users interacting with any portion of the Service. If you are a job applicant, employee, independent contractor, or are otherwise engaged with DocDay on an employment, contractual, or professional basis please note that there may be separate policies or notices that apply to you.
THIS SERVICE IS OFFERED FROM THE UNITED STATES (“US”), IN PARTICULAR, IT IS NOT INTEDED FOR USE IN THE EUROPEAN UNION (“EU”). For individuals located outside of the US, please note that DocDay is a US based company. If you use the Service, all information, including personal information, will be transferred to DocDay in the US and used as described in this Notice.
BY USING OR ACCESSING THE SERVICES IN ANY MANNER, YOU ACKNOWLEDGE THAT YOU ACCEPT THE PRACTICES AND POLICIES OUTLINED IN THIS PRIVACY POLICY, AND YOU HEREBY CONSENT THAT WE WILL COLLECT, USE, AND SHARE YOUR INFORMATION IN THE FOLLOWING WAYS. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU MAY NOT USE THE SERVICES. IF YOU USE THE SERVICES ON BEHALF OF SOMEONE ELSE (SUCH AS YOUR CHILD) OR AN ENTITY (SUCH AS YOUR EMPLOYER), YOU REPRESENT THAT YOU ARE AUTHORIZED BY SUCH INDIVIDUAL OR ENTITY TO ACCEPT THIS PRIVACY POLICY ON SUCH INDIVIDUAL’S OR ENTITY’S BEHALF.
A Consumer’s use of DocDay’s Services is at all times subject to the Agreement (as the term “Agreement” is defined in our Terms of Use , which incorporates this Privacy Policy). Thank you so much for choosing DocDay.
Note on HIPAA and PHI
As part of engaging with the Service, you may engage with the Service in a manner regulated by the Health Insurance Portability and Accountability Act (“HIPAA”). Specifically, when DocDay, acting as a “Business Associate” (as such term is defined in HIPAA) receives identifiable information about a Consumer from or on behalf of a Consumer, or Customer’s doctor, dentist, or other healthcare specialist, professional, provider, organization or agent or affiliate thereof (collectively, “Healthcare Providers”), this information is considered PHI. HIPAA provides specific protections for the privacy and security of PHI and restricts how PHI is used and disclosed. DocDay may only use and disclose PHI in the ways permitted by a Consumer’s Healthcare Provider(s) or authorized by a Consumer.
This Privacy Notice is not intended for compliance with HIPAA, nor should you take such notice as a reflection of your rights under HIPAA. If you are a patient viewing this Privacy Notice, please contact your Healthcare Provider for information regarding your medical records and/or HIPAA privacy disclosures, or you may review our HIPAA Notice of Privacy Practices.
What personal information do we collect about you?
Personal information (also commonly known as personally identifiable information (PII) or personal information) is information that can be used to identify you, or any other individual to whom the information may relate. Certain information that we collect from you may be considered “sensitive” depending on your jurisdiction, warranting further data subject rights or privacy protections.
The personal information that we collect directly from those registering for the Service, includes the following categories, where such collection is permitted by law:
- Name and contact information (e.g. address; phone number; email, fax).
- Demographic information (e.g. gender, age, date of birth, zip code, race, ethnicity).
- Account information (e.g. login credentials, passwords).
- Billing Information (e.g. credit card, bank account, billing contact information).
- Medical Information (e.g. health conditions, healthcare provider visits, reasons for visits, dates of visits, medical history and health information that you provide to us).
- Insurance Information (e.g. insurance carrier, insurance plan, Member ID, Group ID, Payer ID).
- Communication Information (e.g. information contained in emails, letters, or other forms of communication with us).
- Social Network Data (e.g. email, phone number, username, IP Address, Device ID).
- Information contained in posts you may on the public forums and interactive features of the Service.
- Geolocation Data.
- Information in DocDay's cookie notice (the "Cookie Notice”), the degree to which such information is defined as personal information under the laws of a particular jurisdiction;
- Other information that may be exchanged in the course of engaging with the Service. You will be aware of any subsequently collected information because it will come directly from you.
In addition, we may use information that is neither personal information nor PHI (including non-PHI personal information that has been de-identified and/or aggregated) to better understand who uses DocDay and how we can deliver a better digital healthcare experience, or otherwise at our discretion. Such information has been deidentified and/or anonymized consistent with the law and industry standards prior to retention and use.
Collection of User Generated Content
We may invite you to post content on the Service, including your comments and any other information that you would like to be available on the Service, which may become public (“User Generated Content”). If you post User Generated Content, all of the information that you post will be available to authorized personnel of DocDay and may be made available to the public at our discretion. You expressly acknowledge and agree that we may access in real-time, record, and store archives of any User Generated Content on our servers to make use of them in connection with the Service. If you submit a review, recommendation, endorsement, or other User Generated Content through the Service, or through other websites including Facebook, Instagram, Google, Yelp, and other similar channels, we may share that review, recommendation, endorsement, or content publicly on the Service.
What are the sources of personal information collected by DocDay?
When providing personal information to DocDay as described in this Privacy Notice, that personal information is often collected directly from you, and you will know the precise personal information being collected by us. For example, DocDay may collect information from you in the following circumstances:
- When you create an account or use our interactive tools and services, such as searching for Healthcare Providers or available appointments with Healthcare Providers and completing Medical History Forms prior to Healthcare Provider appointments.
- When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys and questionnaires, or post reviews.
- When you send us an email or otherwise contact us.
- When personal information is automatically collected from your device as described in our Cookie Notice or in the following circumstances:
- If you download and install certain applications and software we make available, we may receive and collect information transmitted from your computing device for the purpose of providing you the relevant Services, such as information regarding when you are logged on and available to receive updates or alert notices.
- If you download our mobile application or use a location-enabled browser, we may receive information about your location and mobile device, as applicable.
In certain circumstances, third parties may collect information on behalf of DocDay, though such collection will always be within the context of the Service:
- Healthcare Providers: We may receive certain data from your Healthcare Provider to facilitate booking of appointments or other activity.
- Service Providers: Third parties may help us provide you with customer support. We may use service providers to obtain information to generate leads and create user profiles. Consistent with the practices in our Cookie Notice, we may use also analytics providers to analyze how users interact and engage with the Services.
- Third-Party Website Login: You may be offered the opportunity to log in to the site via a third-party website or service (e.g. Google, Apple), and you understand some content and/or information in those accounts may be transmitted into your account with us.
How does DocDay use Personal Information and What is the Purpose of Processing?
Subject to the terms of this Privacy Notice, DocDay uses the above-described categories of personal information in several ways. Unless otherwise stated specifically, the above information may be used for any of the following purposes:
- Providing, Customizing, and Improving the Services
- Creating and managing your account or other user profiles.
- Supporting the operation of the Service, such as for billing, account maintenance, and record-keeping purposes Providing you with the products, services, and information you request.
- Meeting or fulfilling the reason you provided the information to us.
- Providing support and assistance for the Services.
- Improving the Services, including testing, research, internal analytics, and product development.
- Personalizing the Services, website content and communications based on your preferences.
- Fraud protection, security and debugging.
- Marketing the Services
- Marketing and selling the Services.
- Showing you advertisements, including interest-based or online behavioral advertising.
- Corresponding with You
- Responding to correspondence that we receive from you, contacting you when necessary or requested, including to remind you of an upcoming appointment, and sending you information about DocDay or the Services.
- Sending emails and other communications that display content that we think will interest you and according to your preferences including notifying you about certain resources, Healthcare Providers or services.
- Legal Requirements
- Fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.
- Protecting the rights, property or safety of you, DocDay or another party.
- Responding to claims that any posting or other content violates third-party rights.
- Carrying out DocDay’s obligations and enforcing rights arising from any contracts between you and DocDay or arising from applicable laws and regulations.
- Investigating and detering activity that we, in our reasonable discretion, suspect or determine to be fraudulent, illegal or otherwise inappropriate; and
- Resolving disputes.
Depending on how an applicable privacy law defines a “sale,” we may sell personal information to third parties. For instance, if you are a resident of Colorado or Connecticut, our use of cookies and tracking technologies constitutes a sale of personal information to third-party advertisers. We also use cookies and other tracking technologies to display information about DocDay products on other sites you may visit. This is “targeted advertising” under applicable privacy laws. For more information about how this information may be used via the sites, please review our Cookie Notice. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.
Aside from the above specific instances of “sale” or “sharing” of personal information as defined by those particular U.S. State laws, DocDay does not sell, re-sell, or distribute for re-sale your personal information.
How does DocDay share your Personal Information with third parties?
We may provide any of the described categories of personal information to DocDay employees, consultants, affiliates or other businesses or persons for the purpose of processing such information on our behalf in order to provide the Service to you. In such circumstances, we require that these parties agree to protect the confidentiality of such information consistent with the terms of this Privacy Notice. Third parties receiving personal information and the purposes for such sharing include:
-
Service Providers
- Payment Processors: Our payment processing partner (currently Stripe, Inc. (“Stripe”)) collects your voluntarily provided payment card information necessary to process your payment. Please see Stripe’s terms of service and privacy policy for information on its use and storage of personal information.
- Security and Fraud Prevention Consultants: Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
-
Hosting, Technology and Communications Providers; Fulfillment Providers; Data Storage Providers; Analytics Providers; Insurance Verification Providers; Staff Augmentation Personnel:
- To perform operational services (such as hosting, billing, fulfillment, data storage, security, insurance verification, web service analytics) and/or make certain services, features or functionality available to our users.
- Debugging to identify and repair errors that impair existing intended functionality.
- Short-term, transient use of Personal information that is not used by another party to build a consumer profile or otherwise alter your consumer experience outside the current interaction.
- Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- Undertaking internal research for technological development and demonstration.
- Undertaking activities to verify or maintain the quality or safety of our services.
-
Other Select Recipients
- Health Information Exchanges: Health Information Exchanges and related organizations that collect and organize Consumer information (such as Regional Health Information Organizations) to make your information more securely and easily accessible to your Healthcare Providers. The goal of such organizations is to facilitate access to health information to improve the safety, quality, and efficiency of patient-centered care.
- Healthcare Providers: Healthcare Providers with whom Consumers choose to schedule through the Services. For example, if you complete a Medical History Form using the Services in advance of an appointment and elect to share it with your selected Healthcare Provider. If you choose to use the applicable Services, Healthcare Providers to enable them to refer you to and make appointments with other Healthcare Providers on your behalf or to perform analyses on potential health issues or treatments. Your personal information may also be shared with Healthcare Providers in the event of an emergency.
- Insurance Providers: To determine eligibility and cost-sharing obligations, and to otherwise obtain benefit plan information on your behalf.
- Government agencies, courts, or other legal entities: In response to legal process or other requests, where permitted by law.
-
Parties You Authorize, Access or Authenticate
- Third-Party Business Partners You Access Through the Services: We will share certain Personal information if you choose to use any service to log in to the Services, or to meet or fulfill the reason you provided the information to us.
- Other Users: Any information that you may reveal in a review posting or online discussion or forum is intentionally open to the public and is not in any way private. We recommend that you carefully consider whether to disclose any Personal information in any public posting or forum. What you have written may be seen and/or collected by third parties and may be used by others in ways we are unable to control or predict.
Except as described above, we will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you have the ability to opt-in or opt-out.
In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce any provision of the Terms of Service , protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any user, or protect the public welfare; (iii) when disclosure is required to maintain the security and integrity of the Service, or to protect any user’s security or the security of other persons, consistent with applicable laws (iv) to respond to a court order, subpoena, search warrant, or other legal process, to the extent permitted and as restricted by law; (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets; or (vi) for an additional purpose that is directly related to the original purpose for which the personal information was collected.
How long does DocDay retain your personal information?
DocDay will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Notice consistent with all internal policies and procedures. We will retain and use personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
To determine the appropriate retention period for your personal information, we will consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we use your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
DocDay will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Sites and/or Portals, or we are legally obligated to retain this data for longer periods.
US State Privacy Rights and Disclosures
Depending on the state in which you reside, you may have certain privacy rights regarding your personal information. If you are a California resident, please see our “Notice to California Residents” section below. For other state residents, your privacy rights may include (if applicable in your state of residence):
- The right to confirm whether or not we are processing your personal information and to access such personal information;
- The right to obtain a copy of your personal information that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
- The right to delete personal information that we collected from and/or about you, subject to certain exceptions;
- The right to correct inaccurate personal information that we maintain about you, subject to certain exceptions;
- The right, if applicable, to opt out of the processing of your personal information for purposes of (1) targeted advertising; (2) the “sale” of your personal information (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
- If we are required by applicable law to obtain your consent to process sensitive personal information, the right to withdraw your consent; and
- The right not to receive discriminatory treatment by us for the exercise of your privacy rights.
Depending on how the applicable privacy law defines a “sale,” we may sell personal information to third parties. For instance, if you are a resident of Colorado or Connecticut, our use of cookies and tracking technologies constitutes a sale of personal information to third-party advertisers. We also use cookies and other tracking technologies to display information about DocDay jobs or products on other sites you may visit. This is “targeted advertising” under applicable privacy laws. For more information about how this information may be used via the Services, please review our Cookie Notice. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.
Aside from the above specific instances of “sale” or “sharing” of personal information as defined by those particular U.S. State laws, DocDay does not sell, re-sell, or distribute for re-sale your personal information.
In order make a request regarding your personal information and/or to inquire about the availability of the above privacy rights, please contact help@docday.com.
Notice to California Residents
The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the Privacy Notice is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.
The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern.
Notice at Collection of Personal Information
We currently collect and, in the 12 months prior to the effective date of this Notice, have collected the categories of personal information listed above in this Privacy Notice.
We collect personal information directly from California residents and from the above-described sources. We do not collect all categories of personal information from each source. In addition, we collect personal information for the purposes stated above.
Sale, Sharing, and Disclosure of Personal Information
The CCPA defines “sale” as the transfer of personal information for monetary or other valuable consideration. Although we do not “sell” personal information as that term may be commonly interpreted, we engage in online activities that may constitute a sale or a sharing of personal information under California law. This may include showing you advertisements on other websites related to your activity on the website or associated with the job applicant website.
The following table identifies the categories of personal information that we sold or shared, as defined by California law, to third parties in the 12 months preceding the Effective Date of this Privacy Notice and, for each category, the categories of third parties to whom we sold or shared personal information:
Category of personal information |
Categories of Third Parties |
· Demographic Data · Web analytics or other similar network activity information |
· Advertising networks · Data analytics provider. |
We sold or shared personal information to third parties for the following business or commercial purposes:
- To better understand how you use our websites across the various devices you use, and to deliver tailored promotions to you;
- To track page content and viewing information, pages viewed, keystroke activity, time spent on pages, scroll activity, click/touch information, and mouse movements;
- To better understand your specific preferences and track your activity across our web-based offerings and advertisements.
The following table identifies the categories of personal information that we disclosed for a business purpose in the 12 months preceding the Effective Date of this Privacy Notice and, for each category, the categories of recipients to whom we disclosed personal information.
Category of personal information (see above list for specific examples) |
Categories of Recipients |
· Name and contact information. · Demographic information. · Account information. · Billing Information. · Medical Information. · Insurance Information. · Communication Information. · Social Network Data. · Information contained in posts you may on the public forums and interactive features of the Service. · Geolocation Data. |
· Our affiliates and related companies. · Service providers. · Parties you authorize, access, or authenticate. |
· Name and contact information. · Demographic information. · Medical Information. · Insurance Information. |
· Healthcare Providers · Health Information Exchanges · Insurance Providers |
· Any information that you may reveal in a review posting or online discussion. |
· Other Users |
We disclosed your personal information for the business or commercial purposes stated in the section “How does DocDay User personal information and What is the Purpose of Processing?” For information about the purposes of specific data disclosures, please contact us as provided in this Notice.
We do not knowingly collect or sell or share the personal information of consumers under 16 years of age. We do not collect or process sensitive personal information for the purpose of inferring characteristics about individuals and, consequently, do not collect sensitive personal information or use it for purposes other than those allowed by the CCPA and its regulations.
Your California Privacy Rights
If you are a California resident, you have the following rights with respect to your personal information:
- The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected personal information, the business or commercial purpose for collecting, selling, or sharing personal information (if applicable), the categories of third parties to whom we disclose personal information (if applicable), and the specific pieces of personal information we collected about you;
- The right to delete personal information that we collected from you, subject to certain exceptions;
- The right to correct inaccurate personal information that we maintain about you;
- If we sell or share personal information, the right to opt-out of the sale or sharing;
- If we use or disclose sensitive personal information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
- The right not to receive discriminatory treatment by us for the exercise of privacy rights conferred by the CCPA.
How to Submit a Request to Know, Delete, and/or Correct
You may submit a request to know, delete, and/or correct by contacting help@docday.com. Depending on the nature of your relationship with DocDay, we may ask you to confirm separately that you want your personal information deleted.
If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.
In addition to the CCPA rights discussed above, California law provides individuals the right to request certain information relating to their employment, such as the right to access their personnel file and payroll records. Because these requests are governed by laws that contain different requirements than the CCPA, we handle such requests separately from CCPA requests. If you would like to make such a request please contact your manager or HR.
Our Process for Verifying a Request to Know, Delete, and/or Correct
We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. Our verification process may differ depending on whether you maintain a password-protected account with us.
If you maintain a password-protected account, we may verify your identity through existing authentication practices available through your account. Prior to disclosing or deleting the personal information, we will ask you to re-authenticate yourself with respect to that account.
If you do not maintain a password-protected account, or if you are an account-holder but we suspect fraudulent or malicious activity with your account, we will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the personal information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. To do so, we will ask you to verify data points based on information we have in our records concerning you.
Right to Opt-Out of Sale or Sharing of personal information
If you are a California resident, you have the right to direct us to stop selling or sharing your personal information.
You may inquire about opt-outing out of sales or sharing by contacting help@docday.com. DocDay does not engage in any activity that would constitute a “sale” or “sharing” of personal information outside of the use of cookies and similar tracking technology on our websites.
Right to Limit Use of Sensitive Personal Information
California residents have the right to limit our use or disclosure of sensitive personal information if we use it for purposes other than those allowed by the CCPA and its regulations. You may submit a request to limit our use of your sensitive personal information or inquire about DocDay’s use of sensitive personal information by emailing help@docday.com.
International Data Transfer
If you are located outside the United States, in particular if you are located in Canada, Brazil, the European Union (“EU”), the European Economic Area (“EEA”), New Zealand, the Republic of South Africa, Switzerland, the United Kingdom, or other countries with similar data privacy laws, please note that we and our servers are located in the United States. DocDay does not market to or solicit customers from outside the United States, therefore, users of the Service should not expect to avail themselves of the rights provided under the EU’s General Data Protection Regulation (“GDPR”) or similar laws. Any information that you provide to us may be transferred to and processed in the United States. By engaging with and providing personal information and other data that DocDay may legitimately collect, process, use or transfer in connection with your relationship with DocDay, you unambiguously consent to your information being collected, processed, used, and transferred as disclosed herein.
Third-Party Advertisers
We may allow other companies, called third-party ad servers or ad networks, to serve advertisements within the Service. These third-party ad servers or ad networks use technology to send, directly to your device, the advertisements and links that appear on the Service. They automatically receive your device ID and IP address when this happens. They may also use other technologies (such as cookies, JavaScript, or Web Beacons) to measure the effectiveness of their advertisements and to personalize the advertising content you see. You should consult the respective privacy policies of these third-party ad servers or ad networks for more information on their practices and for instructions on how to opt-out of certain practices. This Privacy Notice does not apply to them, and we cannot control their activities.
Information Security and User Responsibility
We employ industry-standard security measures designed to protect the security of all information submitted through the Service. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes or unauthorized access to or losses or unauthorized use of data.
Users of the Service are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of the Service. In order to protect you and your information, we may suspend your use of any of the Service, without notice, pending an investigation, if any breach of security is suspected.
External Links
The Service may contain links to other websites maintained by third parties. Please be aware that we exercise no control over linked sites and DocDay is not responsible for the privacy practices or the content of such sites. Each linked site maintains its own independent privacy and data collection policies and procedures, and you are encouraged to view the privacy policies of these other sites before providing any personal information.
You hereby acknowledge and agree that DocDay is not responsible for the privacy practices, data collection policies and procedures, or the content of such third-party sites, and you hereby release DocDay from any and all claims arising out of or related to the privacy practices, data collection policies and procedures, and/or the content of such third-party sites.
Children’s Privacy
The Service is not intended for children under the age of 18, and DocDay does not knowingly collect the personal information of children under the age of 18.
Changes to this Privacy Notice
DocDay reserves the right to modify this Privacy Notice from time to time in order that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Privacy Notice, DocDay will post the revised Privacy Notice on our website. This Privacy Notice was last modified as of August 2023.
Contact Us
If you have any questions or comments about this Privacy Notice or the Service provided by DocDay, please contact us at help@docday.com.
COOKIE NOTICE
This Cookie Notice applies to any website operated by or on behalf of DocDay Inc., including (without limitation) our website (DocDay.com), (referred to in this Cookie Notice as “DocDay” or “we” and through similar words such as “us,” “our,” etc.), which may include other websites, applications, or interactive properties through which our services or products are delivered (collectively, the “Sites”).
By clicking to accept cookies, you are consenting to our use of cookies and similar technologies in accordance with this Cookie Notice and as further described by following the link in the footer to our Cookie Management Page. If you do not agree to our use of cookies and similar technologies, please review the “How You Can Manage Cookies” section below or contact help@docday.com. Although you are not required to accept cookies when you visit the Sites, please be aware that restricting cookies may impact how the Sites operate for you, and you may be unable to use all of the functionality of the Sites if you reject certain cookies.
The website tools we use or allow are an accepted part of e-commerce and important to your use of the Sites. Like many online platforms, DocDay and its analytics vendors use server logs and automated data collection tools, such as browser cookies, pixel tags, scripts and web beacons. These tools are used for analytics purposes to enable DocDay to understand how users interact with the Sites.
The information collected by cookies does not explicitly identify you by name, but some information may be considered personal information in certain jurisdictions; it includes, but is not limited to, general information about your computer settings, your connection to the Internet (e.g. operating system and platform, IP address, your browsing patterns, and timings of browsing on the website), and your location. DocDay and its analytics vendors may also tie the information gathered by the website tools to the identity of users. Location data may be collected through targeting cookies and is typically used for purposes such as providing targeted advertisements that are relevant to your geographical location but will not provide precise location information.
Further details about the types of cookies that DocDay utilizes can be found below. Any personal information you do provide to us through the Sites would be governed by DocDay’s Privacy Notice
What is a Cookie?
Cookies (and similar technologies like pixels, web beacons, etc.) are pieces of data issued by a website that, among other things, allow your computer to utilize all the features on the website. If and when your computer accepts a cookie, the cookie may be stored on the computer’s hard drive.
Below we provide more information about the specific types of cookies utilized by the Sites, and what those cookies do.
What data is collected by Cookies?
Each time a computer visits the Sites we may collect certain data from that computer. This data is automatically collected from the computer’s web browser and may include data such as the following:
- the type of web browser software the computer uses (for example, Google Chrome or Internet Explorer);
- the name of the domain from which the computer accessed the Internet;
- the Internet address of the website from which the computer linked directly to the Sites;
- the date and time the computer accessed the Sites.
We may use this data to help us make the Sites more useful to you and for other business purposes. For example, we may tell business partners how many computers visited the Sites or what pages were most popular. We may prepare reports and other materials using the data. We may use this data for any other purposes as described herein and may share the data with third parties.
What kind of cookies do the Sites use?
Session cookies are used to identify a particular visit to Sites and collect information about your interaction with those Sites. These cookies expire after a short time or when the user closes their web browser after using the Sites. DocDay uses these cookies to identify a user during a single browsing session. This helps DocDay improve the Sites, as well as improve the users' browsing experience.
A persistent cookie will remain on a user's device for a set period of time specified in the cookie or until you manually delete your cookies via your browser. These cookies do not expire when you close your browser. By assigning your computer a unique identifier through a persistent cookie, we are able to create a database of your previous choices and preferences which can be provided by us automatically, saving you time and effort on future visits.
In addition, DocDay may use tracking technology to determine if a certain page was visited or whether an email sent by DocDay was opened or clicked on by a user and to customize the experience of individual users by recommending specific content.
Strictly Necessary Cookies
Strictly necessary cookies enable basic functions on the Sites, like page navigation and access to secure areas of the Sites. The Sites cannot function properly without these cookies. As such, necessary cookies will always be collected regardless of your cookie settings. Necessary cookies are used for the following purposes, including:
- Preserving your website session state across page requests;
- Distributing traffic to the Sites across several servers in order to optimize response times and improve your website experience;
- Identifying trusted web traffic to keep the Sites secure;
- Storing your cookie consent state for the current Sites you’re visiting.
We use Google reCAPTCHA, a free service provided by Google, Inc., to protect our Sites from spam and abuse. Google reCAPTCHA uses advanced risk analysis techniques to decipher humans and bots. Google reCAPTCHA works differently depending on what version is deployed. For example, you may be asked to check a box indicating that you are not a robot or Google reCAPTCHA may detect abusive traffic without user interaction. Google reCAPTCHA works by transmitting certain types of information to Google, such as the referrer URL, IP address, visitor behavior, operating system information, browser and length of the visit, cookies, and mouse movements. Your use of Google reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service. More information as to Google reCAPTCHA and how it works is available here.
Functional/Preference Cookies
Functional (also referred to as Preference) cookies, which are a type of persistent cookie, enable the Sites to remember information that changes the way the website behaves or looks during your experience, like your preferred language, the font text appears in, or the region that you’re located in. Preference cookies are used to establish a unique user ID that recognizes you on returning visits in order to improve and personalize your website experience. For example, DocDay uses preference cookies in the following ways:
- provide a more personalized experience to users with more relevant content and content recommendations;
- allow users to more easily log in to use the Sites;
- remember information about a user's browser and settings preferences, such as preferred language, to make a your experience more functional and customized;
- make the experience of using the Sites better, like remembering the sound volume level selected by the user;
- test different versions of the Sites to see which particular features or content users prefer to optimize the Sites;
- authentication and security cookies to enable you to log in or stay logged in to access the Sites, protect user accounts against fraudulent log-ins by others, and help detect and protect against abuse or unauthorized usage of user accounts.
Performance/Statistics Cookies
Performance (also referred to as Statistics) cookies help us understand how visitors interact with the Sites by collecting and reporting information anonymously. Statistics cookies are used for the following purposes:
- Anonymously logging details about your browser and computer;
- Collecting anonymous data on your visits to the Sites, such as the number of visits, average time spent on the website and what pages have been loaded, in order to generate reports for optimizing the Sites’ content;
- Determining what type of device (smartphones, tablets, computers, TVs etc.) is being used to access the Sites;
- Gathering anonymous, technical information regarding your browser, operating system, IP address and screen resolution as well as your navigation on the website.
We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the Site and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, please see our “How You Can Manage Cookies” section below.
Targeting/Advertising Cookies
Targeting (also referred to as Advertising or Marketing) cookies are used to track visitors across the Sites and possibly other websites. The intention is to display ads that are relevant and engaging for each individual user of the Sites. You may opt out of the collection of marketing cookies at any time. Marketing cookies are used for the following purposes:
- Registering a unique ID that identifies your device for the purpose of targeted ads, auto-populating forms, validating if certain contact information is correct, keeping statistics about third party sites used/accessed through the Sites;
- Registering anonymized user data, such as IP address, geographical location, visited websites, and what ads you have clicked, with the purpose of optimizing ad display based on your movement on websites that use the same ad network;
- Collecting data on your visits to the website, such as what pages have been accessed, number of visits, average time spent on the website, in order to categorize your interest and demographic profiles in terms of resales for targeted marketing, identifying traffic patterns on the Sites, and carrying out surveys to better understand your preferences;
- Evaluating efficacy of advertisements and likelihood of groups to engage with the Sites and purchase DocDay products or services;
- Registering your sharing of content via social media.
We use Google AdWords, a service provided by Google, Inc. Google AdWords helps businesses reach online target markets through its search engine platform and partner sites. Google AdWords uses Cookies or other tracking technologies to assist us in re-engaging visitors that may be likely to become customers based on that visitor’s behavior across websites. The technologies used by Google AdWords may collect information such as your language preferences, information related to your session on the Site, and other information to improve the Site and Services. To learn more about Google’s AdWords services and to learn how to opt-out of this service by Google, please see our “How You Can Manage Cookies” section below.
Do third parties get my cookie information?
DocDay may use Service Providers to provide site metrics and other analytics services, for example:
- Reviewing and analyzing user browser and wireless device technical information;
- Reviewing user activity across site(s) (for example, DocDay analyzes trends, user traffic and usage information to determine the performance of content, research reports, or events);
- Measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Sites; and
- Determining the popularity of certain content, and to better understand how you use our Sites.
We and/or such third parties also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).
Additionally, our Sites may include social media features, such as the Facebook Like button. Our integration of these features may allow third-party social media to collect certain information, such as your IP address and which page(s) you are visiting when using our Sites, and to set a cookie to enable that feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing such features.
The Service Providers that we engage are bound by confidentiality obligations and other restrictions with respect to their use and collection of your information.
Third Party Ad Networks
DocDay may use third parties, such as network advertisers, to serve advertisements on third party websites or other media (for example, a third-party social networking website). This enables DocDay and these third parties to target advertisements on those third-party websites to you for products offered by us and products and websites offered by third parties in which you might be interested. Third party ad network providers, advertisers, sponsors, and/or traffic measurement websites may use cookies, JavaScript, Web beacons, flash cookies, or local shared objects and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you.
This Cookie Notice does not apply to those third parties, and we cannot control their activities. You should consult the respective privacy or cookie policies of these third-party ad servers or ad networks for more information on their practices and for instructions on how to opt-out of certain practices. For example, you may go to the Digital Advertising Alliance (“DAA”) Consumer Choice Page for information about opting out of interest-based advertising and choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (“NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and choices regarding having information used by third party companies who are NAI members.
Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will remove you from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through the Sites or on other third party websites. Even if you opt-out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page, you may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt-out on the DAA or NAI websites, your opt-out action may not be effective. Additional information is available on the DAA’s website at www.aboutads.info or the NAI’s website at https://www.networkadvertising.org/.
How You Can Manage Cookies
Your Preferences
When you first visit our Sites, you may be presented with a banner that offers you choices about whether to accept or reject Cookies or tracking technologies of different types. If the banner is not appearing on the websites, please email help@docday.com to exercise your rights.
Browser Settings
Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites. You can find out more about Cookies and how to manage them by visiting www.AllAboutCookies.org.
Platform Controls
You can opt out of Cookies set by specific entities by following the instructions found at these links:
- Google: https://adssettings.google.com
Contact Us
If you have any questions or comments about this Privacy Notice or the Service provided by DocDay, please contact us at help@docday.com.
Privacy Notice
Effective Date: September 22nd, 2023
At DocDay, Inc. (“DocDay,” “we,” or “us”), our most important value is ‘Patients First’, which means that we are committed to protecting your privacy and we take great care with your personal information we gather when you access or use DocDay.com and related websites, applications, and services owned and operated by DocDay and that link to this Privacy Policy (collectively, the “Services”). This Privacy Policy is meant to help consumers who use our Services (“Consumers”, “you”, or “your”) to explore providers or book appointments understand how we treat your personal information. This Privacy Notice (or “Notice”) outlines the personal information that DocDay may collect, how DocDay uses and safeguards that information, and with whom we may share it.
DocDay encourages our customers, vendors, employees, independent contractors, visitors, business associates, investors, and other interested parties to read this Privacy Notice, which applies to all users interacting with any portion of the Service. If you are a job applicant, employee, independent contractor, or are otherwise engaged with DocDay on an employment, contractual, or professional basis please note that there may be separate policies or notices that apply to you.
THIS SERVICE IS OFFERED FROM THE UNITED STATES (“US”), IN PARTICULAR, IT IS NOT INTEDED FOR USE IN THE EUROPEAN UNION (“EU”). For individuals located outside of the US, please note that DocDay is a US based company. If you use the Service, all information, including personal information, will be transferred to DocDay in the US and used as described in this Notice.
BY USING OR ACCESSING THE SERVICES IN ANY MANNER, YOU ACKNOWLEDGE THAT YOU ACCEPT THE PRACTICES AND POLICIES OUTLINED IN THIS PRIVACY POLICY, AND YOU HEREBY CONSENT THAT WE WILL COLLECT, USE, AND SHARE YOUR INFORMATION IN THE FOLLOWING WAYS. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU MAY NOT USE THE SERVICES. IF YOU USE THE SERVICES ON BEHALF OF SOMEONE ELSE (SUCH AS YOUR CHILD) OR AN ENTITY (SUCH AS YOUR EMPLOYER), YOU REPRESENT THAT YOU ARE AUTHORIZED BY SUCH INDIVIDUAL OR ENTITY TO ACCEPT THIS PRIVACY POLICY ON SUCH INDIVIDUAL’S OR ENTITY’S BEHALF.
A Consumer’s use of DocDay’s Services is at all times subject to the Agreement (as the term “Agreement” is defined in our Terms of Use , which incorporates this Privacy Policy). Thank you so much for choosing DocDay.
Note on HIPAA and PHI
As part of engaging with the Service, you may engage with the Service in a manner regulated by the Health Insurance Portability and Accountability Act (“HIPAA”). Specifically, when DocDay, acting as a “Business Associate” (as such term is defined in HIPAA) receives identifiable information about a Consumer from or on behalf of a Consumer, or Customer’s doctor, dentist, or other healthcare specialist, professional, provider, organization or agent or affiliate thereof (collectively, “Healthcare Providers”), this information is considered PHI. HIPAA provides specific protections for the privacy and security of PHI and restricts how PHI is used and disclosed. DocDay may only use and disclose PHI in the ways permitted by a Consumer’s Healthcare Provider(s) or authorized by a Consumer.
This Privacy Notice is not intended for compliance with HIPAA, nor should you take such notice as a reflection of your rights under HIPAA. If you are a patient viewing this Privacy Notice, please contact your Healthcare Provider for information regarding your medical records and/or HIPAA privacy disclosures, or you may review our HIPAA Notice of Privacy Practices.
What personal information do we collect about you?
Personal information (also commonly known as personally identifiable information (PII) or personal information) is information that can be used to identify you, or any other individual to whom the information may relate. Certain information that we collect from you may be considered “sensitive” depending on your jurisdiction, warranting further data subject rights or privacy protections.
The personal information that we collect directly from those registering for the Service, includes the following categories, where such collection is permitted by law:
- Name and contact information (e.g. address; phone number; email, fax).
- Demographic information (e.g. gender, age, date of birth, zip code, race, ethnicity).
- Account information (e.g. login credentials, passwords).
- Billing Information (e.g. credit card, bank account, billing contact information).
- Medical Information (e.g. health conditions, healthcare provider visits, reasons for visits, dates of visits, medical history and health information that you provide to us).
- Insurance Information (e.g. insurance carrier, insurance plan, Member ID, Group ID, Payer ID).
- Communication Information (e.g. information contained in emails, letters, or other forms of communication with us).
- Social Network Data (e.g. email, phone number, username, IP Address, Device ID).
- Information contained in posts you may on the public forums and interactive features of the Service.
- Geolocation Data.
- Information in DocDay's cookie notice (the "Cookie Notice”), the degree to which such information is defined as personal information under the laws of a particular jurisdiction;
- Other information that may be exchanged in the course of engaging with the Service. You will be aware of any subsequently collected information because it will come directly from you.
In addition, we may use information that is neither personal information nor PHI (including non-PHI personal information that has been de-identified and/or aggregated) to better understand who uses DocDay and how we can deliver a better digital healthcare experience, or otherwise at our discretion. Such information has been deidentified and/or anonymized consistent with the law and industry standards prior to retention and use.
Collection of User Generated Content
We may invite you to post content on the Service, including your comments and any other information that you would like to be available on the Service, which may become public (“User Generated Content”). If you post User Generated Content, all of the information that you post will be available to authorized personnel of DocDay and may be made available to the public at our discretion. You expressly acknowledge and agree that we may access in real-time, record, and store archives of any User Generated Content on our servers to make use of them in connection with the Service. If you submit a review, recommendation, endorsement, or other User Generated Content through the Service, or through other websites including Facebook, Instagram, Google, Yelp, and other similar channels, we may share that review, recommendation, endorsement, or content publicly on the Service.
What are the sources of personal information collected by DocDay?
When providing personal information to DocDay as described in this Privacy Notice, that personal information is often collected directly from you, and you will know the precise personal information being collected by us. For example, DocDay may collect information from you in the following circumstances:
- When you create an account or use our interactive tools and services, such as searching for Healthcare Providers or available appointments with Healthcare Providers and completing Medical History Forms prior to Healthcare Provider appointments.
- When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys and questionnaires, or post reviews.
- When you send us an email or otherwise contact us.
- When personal information is automatically collected from your device as described in our Cookie Notice or in the following circumstances:
In certain circumstances, third parties may collect information on behalf of DocDay, though such collection will always be within the context of the Service:
- Healthcare Providers: We may receive certain data from your Healthcare Provider to facilitate booking of appointments or other activity.
- Service Providers: Third parties may help us provide you with customer support. We may use service providers to obtain information to generate leads and create user profiles. Consistent with the practices in our Cookie Notice, we may use also analytics providers to analyze how users interact and engage with the Services.
- Third-Party Website Login: You may be offered the opportunity to log in to the site via a third-party website or service (e.g. Google, Apple), and you understand some content and/or information in those accounts may be transmitted into your account with us.
How does DocDay use Personal Information and What is the Purpose of Processing?
Subject to the terms of this Privacy Notice, DocDay uses the above-described categories of personal information in several ways. Unless otherwise stated specifically, the above information may be used for any of the following purposes:
Providing, Customizing, and Improving the Services
- Creating and managing your account or other user profiles.
- Supporting the operation of the Service, such as for billing, account maintenance, and record-keeping purposes Providing you with the products, services, and information you request.
- Meeting or fulfilling the reason you provided the information to us.
- Providing support and assistance for the Services.
- Improving the Services, including testing, research, internal analytics, and product development.
- Personalizing the Services, website content and communications based on your preferences.
- Fraud protection, security and debugging.
Marketing the Services
- Marketing and selling the Services.
- Showing you advertisements, including interest-based or online behavioral advertising.
Corresponding with You
Responding to correspondence that we receive from you, contacting you when necessary or requested, including to remind you of an upcoming appointment, and sending you information about DocDay or the Services.
Sending emails and other communications that display content that we think will interest you and according to your preferences including notifying you about certain resources, Healthcare Providers or services.
- Legal Requirements
- Fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.
- Protecting the rights, property or safety of you, DocDay or another party.
- Responding to claims that any posting or other content violates third-party rights.
- Carrying out DocDay’s obligations and enforcing rights arising from any contracts between you and DocDay or arising from applicable laws and regulations.
- Investigating and detering activity that we, in our reasonable discretion, suspect or determine to be fraudulent, illegal or otherwise inappropriate; and
- Resolving disputes.
Depending on how an applicable privacy law defines a “sale,” we may sell personal information to third parties. For instance, if you are a resident of Colorado or Connecticut, our use of cookies and tracking technologies constitutes a sale of personal information to third-party advertisers. We also use cookies and other tracking technologies to display information about DocDay products on other sites you may visit. This is “targeted advertising” under applicable privacy laws. For more information about how this information may be used via the sites, please review our Cookie Notice. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.
Aside from the above specific instances of “sale” or “sharing” of personal information as defined by those particular U.S. State laws, DocDay does not sell, re-sell, or distribute for re-sale your personal information.
How does DocDay share your Personal Information with third parties?
We may provide any of the described categories of personal information to DocDay employees, consultants, affiliates or other businesses or persons for the purpose of processing such information on our behalf in order to provide the Service to you. In such circumstances, we require that these parties agree to protect the confidentiality of such information consistent with the terms of this Privacy Notice. Third parties receiving personal information and the purposes for such sharing include:
- Service Providers
- Other Select Recipients
- Parties You Authorize, Access or Authenticate
Except as described above, we will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you have the ability to opt-in or opt-out.
In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce any provision of the Terms of Service , protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any user, or protect the public welfare; (iii) when disclosure is required to maintain the security and integrity of the Service, or to protect any user’s security or the security of other persons, consistent with applicable laws (iv) to respond to a court order, subpoena, search warrant, or other legal process, to the extent permitted and as restricted by law; (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets; or (vi) for an additional purpose that is directly related to the original purpose for which the personal information was collected.
How long does DocDay retain your personal information?
DocDay will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Notice consistent with all internal policies and procedures. We will retain and use personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
To determine the appropriate retention period for your personal information, we will consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we use your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
DocDay will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Sites and/or Portals, or we are legally obligated to retain this data for longer periods.
US State Privacy Rights and Disclosures
Depending on the state in which you reside, you may have certain privacy rights regarding your personal information. If you are a California resident, please see our “Notice to California Residents” section below. For other state residents, your privacy rights may include (if applicable in your state of residence):
- The right to confirm whether or not we are processing your personal information and to access such personal information;
- The right to obtain a copy of your personal information that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
- The right to delete personal information that we collected from and/or about you, subject to certain exceptions;
- The right to correct inaccurate personal information that we maintain about you, subject to certain exceptions;
- The right, if applicable, to opt out of the processing of your personal information for purposes of (1) targeted advertising; (2) the “sale” of your personal information (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
- If we are required by applicable law to obtain your consent to process sensitive personal information, the right to withdraw your consent; and
- The right not to receive discriminatory treatment by us for the exercise of your privacy rights.
Depending on how the applicable privacy law defines a “sale,” we may sell personal information to third parties. For instance, if you are a resident of Colorado or Connecticut, our use of cookies and tracking technologies constitutes a sale of personal information to third-party advertisers. We also use cookies and other tracking technologies to display information about DocDay jobs or products on other sites you may visit. This is “targeted advertising” under applicable privacy laws. For more information about how this information may be used via the Services, please review our Cookie Notice. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.
Aside from the above specific instances of “sale” or “sharing” of personal information as defined by those particular U.S. State laws, DocDay does not sell, re-sell, or distribute for re-sale your personal information.
In order make a request regarding your personal information and/or to inquire about the availability of the above privacy rights, please contact help@docday.com.
Notice to California Residents
The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the Privacy Notice is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.
The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern.
Notice at Collection of Personal Information
We currently collect and, in the 12 months prior to the effective date of this Notice, have collected the categories of personal information listed above in this Privacy Notice.
We collect personal information directly from California residents and from the above-described sources. We do not collect all categories of personal information from each source. In addition, we collect personal information for the purposes stated above.
Sale, Sharing, and Disclosure of Personal Information
The CCPA defines “sale” as the transfer of personal information for monetary or other valuable consideration. Although we do not “sell” personal information as that term may be commonly interpreted, we engage in online activities that may constitute a sale or a sharing of personal information under California law. This may include showing you advertisements on other websites related to your activity on the website or associated with the job applicant website.
The following table identifies the categories of personal information that we sold or shared, as defined by California law, to third parties in the 12 months preceding the Effective Date of this Privacy Notice and, for each category, the categories of third parties to whom we sold or shared personal information:
Category of personal information
Categories of Third Parties
· Demographic Data
· Web analytics or other similar network activity information
· Advertising networks
· Data analytics provider.
We sold or shared personal information to third parties for the following business or commercial purposes:
- To better understand how you use our websites across the various devices you use, and to deliver tailored promotions to you;
- To track page content and viewing information, pages viewed, keystroke activity, time spent on pages, scroll activity, click/touch information, and mouse movements;
- To better understand your specific preferences and track your activity across our web-based offerings and advertisements.
The following table identifies the categories of personal information that we disclosed for a business purpose in the 12 months preceding the Effective Date of this Privacy Notice and, for each category, the categories of recipients to whom we disclosed personal information.
Category of personal information
(see above list for specific examples)
Categories of Recipients
· Name and contact information.
· Demographic information.
· Account information.
· Billing Information.
· Medical Information.
· Insurance Information.
· Communication Information.
· Social Network Data.
· Information contained in posts you may on the public forums and interactive features of the Service.
· Geolocation Data.
· Our affiliates and related companies.
· Service providers.
· Parties you authorize, access, or authenticate.
· Name and contact information.
· Demographic information.
· Medical Information.
· Insurance Information.
· Healthcare Providers
· Health Information Exchanges
· Insurance Providers
· Any information that you may reveal in a review posting or online discussion.
· Other Users
We disclosed your personal information for the business or commercial purposes stated in the section “How does DocDay User personal information and What is the Purpose of Processing?” For information about the purposes of specific data disclosures, please contact us as provided in this Notice.
We do not knowingly collect or sell or share the personal information of consumers under 16 years of age. We do not collect or process sensitive personal information for the purpose of inferring characteristics about individuals and, consequently, do not collect sensitive personal information or use it for purposes other than those allowed by the CCPA and its regulations.
Your California Privacy Rights
If you are a California resident, you have the following rights with respect to your personal information:
- The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected personal information, the business or commercial purpose for collecting, selling, or sharing personal information (if applicable), the categories of third parties to whom we disclose personal information (if applicable), and the specific pieces of personal information we collected about you;
- The right to delete personal information that we collected from you, subject to certain exceptions;
- The right to correct inaccurate personal information that we maintain about you;
- If we sell or share personal information, the right to opt-out of the sale or sharing;
- If we use or disclose sensitive personal information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
- The right not to receive discriminatory treatment by us for the exercise of privacy rights conferred by the CCPA.
How to Submit a Request to Know, Delete, and/or Correct
You may submit a request to know, delete, and/or correct by contacting help@docday.com. Depending on the nature of your relationship with DocDay, we may ask you to confirm separately that you want your personal information deleted.
If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.
In addition to the CCPA rights discussed above, California law provides individuals the right to request certain information relating to their employment, such as the right to access their personnel file and payroll records. Because these requests are governed by laws that contain different requirements than the CCPA, we handle such requests separately from CCPA requests. If you would like to make such a request please contact your manager or HR.
Our Process for Verifying a Request to Know, Delete, and/or Correct
We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. Our verification process may differ depending on whether you maintain a password-protected account with us.
If you maintain a password-protected account, we may verify your identity through existing authentication practices available through your account. Prior to disclosing or deleting the personal information, we will ask you to re-authenticate yourself with respect to that account.
If you do not maintain a password-protected account, or if you are an account-holder but we suspect fraudulent or malicious activity with your account, we will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the personal information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. To do so, we will ask you to verify data points based on information we have in our records concerning you.
Right to Opt-Out of Sale or Sharing of personal information
If you are a California resident, you have the right to direct us to stop selling or sharing your personal information.
You may inquire about opt-outing out of sales or sharing by contacting help@docday.com. DocDay does not engage in any activity that would constitute a “sale” or “sharing” of personal information outside of the use of cookies and similar tracking technology on our websites.
Right to Limit Use of Sensitive Personal Information
California residents have the right to limit our use or disclosure of sensitive personal information if we use it for purposes other than those allowed by the CCPA and its regulations. You may submit a request to limit our use of your sensitive personal information or inquire about DocDay’s use of sensitive personal information by emailing help@docday.com.
International Data Transfer
If you are located outside the United States, in particular if you are located in Canada, Brazil, the European Union (“EU”), the European Economic Area (“EEA”), New Zealand, the Republic of South Africa, Switzerland, the United Kingdom, or other countries with similar data privacy laws, please note that we and our servers are located in the United States. DocDay does not market to or solicit customers from outside the United States, therefore, users of the Service should not expect to avail themselves of the rights provided under the EU’s General Data Protection Regulation (“GDPR”) or similar laws. Any information that you provide to us may be transferred to and processed in the United States. By engaging with and providing personal information and other data that DocDay may legitimately collect, process, use or transfer in connection with your relationship with DocDay, you unambiguously consent to your information being collected, processed, used, and transferred as disclosed herein.
Third-Party Advertisers
We may allow other companies, called third-party ad servers or ad networks, to serve advertisements within the Service. These third-party ad servers or ad networks use technology to send, directly to your device, the advertisements and links that appear on the Service. They automatically receive your device ID and IP address when this happens. They may also use other technologies (such as cookies, JavaScript, or Web Beacons) to measure the effectiveness of their advertisements and to personalize the advertising content you see. You should consult the respective privacy policies of these third-party ad servers or ad networks for more information on their practices and for instructions on how to opt-out of certain practices. This Privacy Notice does not apply to them, and we cannot control their activities.
Information Security and User Responsibility
We employ industry-standard security measures designed to protect the security of all information submitted through the Service. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes or unauthorized access to or losses or unauthorized use of data.
Users of the Service are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of the Service. In order to protect you and your information, we may suspend your use of any of the Service, without notice, pending an investigation, if any breach of security is suspected.
External Links
The Service may contain links to other websites maintained by third parties. Please be aware that we exercise no control over linked sites and DocDay is not responsible for the privacy practices or the content of such sites. Each linked site maintains its own independent privacy and data collection policies and procedures, and you are encouraged to view the privacy policies of these other sites before providing any personal information.
You hereby acknowledge and agree that DocDay is not responsible for the privacy practices, data collection policies and procedures, or the content of such third-party sites, and you hereby release DocDay from any and all claims arising out of or related to the privacy practices, data collection policies and procedures, and/or the content of such third-party sites.
Children’s Privacy
The Service is not intended for children under the age of 18, and DocDay does not knowingly collect the personal information of children under the age of 18.
Changes to this Privacy Notice
DocDay reserves the right to modify this Privacy Notice from time to time in order that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Privacy Notice, DocDay will post the revised Privacy Notice on our website. This Privacy Notice was last modified as of August 2023.
Contact Us
If you have any questions or comments about this Privacy Notice or the Service provided by DocDay, please contact us at help@docday.com.
COOKIE NOTICE
This Cookie Notice applies to any website operated by or on behalf of DocDay Inc., including (without limitation) our website (DocDay.com), (referred to in this Cookie Notice as “DocDay” or “we” and through similar words such as “us,” “our,” etc.), which may include other websites, applications, or interactive properties through which our services or products are delivered (collectively, the “Sites”).
By clicking to accept cookies, you are consenting to our use of cookies and similar technologies in accordance with this Cookie Notice and as further described by following the link in the footer to our Cookie Management Page. If you do not agree to our use of cookies and similar technologies, please review the “How You Can Manage Cookies” section below or contact help@docday.com. Although you are not required to accept cookies when you visit the Sites, please be aware that restricting cookies may impact how the Sites operate for you, and you may be unable to use all of the functionality of the Sites if you reject certain cookies.
The website tools we use or allow are an accepted part of e-commerce and important to your use of the Sites. Like many online platforms, DocDay and its analytics vendors use server logs and automated data collection tools, such as browser cookies, pixel tags, scripts and web beacons. These tools are used for analytics purposes to enable DocDay to understand how users interact with the Sites.
The information collected by cookies does not explicitly identify you by name, but some information may be considered personal information in certain jurisdictions; it includes, but is not limited to, general information about your computer settings, your connection to the Internet (e.g. operating system and platform, IP address, your browsing patterns, and timings of browsing on the website), and your location. DocDay and its analytics vendors may also tie the information gathered by the website tools to the identity of users. Location data may be collected through targeting cookies and is typically used for purposes such as providing targeted advertisements that are relevant to your geographical location but will not provide precise location information.
Further details about the types of cookies that DocDay utilizes can be found below. Any personal information you do provide to us through the Sites would be governed by DocDay’s Privacy Notice
What is a Cookie?
Cookies (and similar technologies like pixels, web beacons, etc.) are pieces of data issued by a website that, among other things, allow your computer to utilize all the features on the website. If and when your computer accepts a cookie, the cookie may be stored on the computer’s hard drive.
Below we provide more information about the specific types of cookies utilized by the Sites, and what those cookies do.
What data is collected by Cookies?
Each time a computer visits the Sites we may collect certain data from that computer. This data is automatically collected from the computer’s web browser and may include data such as the following:
- the type of web browser software the computer uses (for example, Google Chrome or Internet Explorer);
- the name of the domain from which the computer accessed the Internet;
- the Internet address of the website from which the computer linked directly to the Sites;
- the date and time the computer accessed the Sites.
We may use this data to help us make the Sites more useful to you and for other business purposes. For example, we may tell business partners how many computers visited the Sites or what pages were most popular. We may prepare reports and other materials using the data. We may use this data for any other purposes as described herein and may share the data with third parties.
What kind of cookies do the Sites use?
Session cookies are used to identify a particular visit to Sites and collect information about your interaction with those Sites. These cookies expire after a short time or when the user closes their web browser after using the Sites. DocDay uses these cookies to identify a user during a single browsing session. This helps DocDay improve the Sites, as well as improve the users' browsing experience.
A persistent cookie will remain on a user's device for a set period of time specified in the cookie or until you manually delete your cookies via your browser. These cookies do not expire when you close your browser. By assigning your computer a unique identifier through a persistent cookie, we are able to create a database of your previous choices and preferences which can be provided by us automatically, saving you time and effort on future visits.
In addition, DocDay may use tracking technology to determine if a certain page was visited or whether an email sent by DocDay was opened or clicked on by a user and to customize the experience of individual users by recommending specific content.
Strictly Necessary Cookies
Strictly necessary cookies enable basic functions on the Sites, like page navigation and access to secure areas of the Sites. The Sites cannot function properly without these cookies. As such, necessary cookies will always be collected regardless of your cookie settings. Necessary cookies are used for the following purposes, including:
- Preserving your website session state across page requests;
- Distributing traffic to the Sites across several servers in order to optimize response times and improve your website experience;
- Identifying trusted web traffic to keep the Sites secure;
- Storing your cookie consent state for the current Sites you’re visiting.
We use Google reCAPTCHA, a free service provided by Google, Inc., to protect our Sites from spam and abuse. Google reCAPTCHA uses advanced risk analysis techniques to decipher humans and bots. Google reCAPTCHA works differently depending on what version is deployed. For example, you may be asked to check a box indicating that you are not a robot or Google reCAPTCHA may detect abusive traffic without user interaction. Google reCAPTCHA works by transmitting certain types of information to Google, such as the referrer URL, IP address, visitor behavior, operating system information, browser and length of the visit, cookies, and mouse movements. Your use of Google reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service. More information as to Google reCAPTCHA and how it works is available here.
Functional/Preference Cookies
Functional (also referred to as Preference) cookies, which are a type of persistent cookie, enable the Sites to remember information that changes the way the website behaves or looks during your experience, like your preferred language, the font text appears in, or the region that you’re located in. Preference cookies are used to establish a unique user ID that recognizes you on returning visits in order to improve and personalize your website experience. For example, DocDay uses preference cookies in the following ways:
- provide a more personalized experience to users with more relevant content and content recommendations;
- allow users to more easily log in to use the Sites;
- remember information about a user's browser and settings preferences, such as preferred language, to make a your experience more functional and customized;
- make the experience of using the Sites better, like remembering the sound volume level selected by the user;
- test different versions of the Sites to see which particular features or content users prefer to optimize the Sites;
- authentication and security cookies to enable you to log in or stay logged in to access the Sites, protect user accounts against fraudulent log-ins by others, and help detect and protect against abuse or unauthorized usage of user accounts.
Performance/Statistics Cookies
Performance (also referred to as Statistics) cookies help us understand how visitors interact with the Sites by collecting and reporting information anonymously. Statistics cookies are used for the following purposes:
- Anonymously logging details about your browser and computer;
- Collecting anonymous data on your visits to the Sites, such as the number of visits, average time spent on the website and what pages have been loaded, in order to generate reports for optimizing the Sites’ content;
- Determining what type of device (smartphones, tablets, computers, TVs etc.) is being used to access the Sites;
- Gathering anonymous, technical information regarding your browser, operating system, IP address and screen resolution as well as your navigation on the website.
We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the Site and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, please see our “How You Can Manage Cookies” section below.
Targeting/Advertising Cookies
Targeting (also referred to as Advertising or Marketing) cookies are used to track visitors across the Sites and possibly other websites. The intention is to display ads that are relevant and engaging for each individual user of the Sites. You may opt out of the collection of marketing cookies at any time. Marketing cookies are used for the following purposes:
- Registering a unique ID that identifies your device for the purpose of targeted ads, auto-populating forms, validating if certain contact information is correct, keeping statistics about third party sites used/accessed through the Sites;
- Registering anonymized user data, such as IP address, geographical location, visited websites, and what ads you have clicked, with the purpose of optimizing ad display based on your movement on websites that use the same ad network;
- Collecting data on your visits to the website, such as what pages have been accessed, number of visits, average time spent on the website, in order to categorize your interest and demographic profiles in terms of resales for targeted marketing, identifying traffic patterns on the Sites, and carrying out surveys to better understand your preferences;
- Evaluating efficacy of advertisements and likelihood of groups to engage with the Sites and purchase DocDay products or services;
- Registering your sharing of content via social media.
We use Google AdWords, a service provided by Google, Inc. Google AdWords helps businesses reach online target markets through its search engine platform and partner sites. Google AdWords uses Cookies or other tracking technologies to assist us in re-engaging visitors that may be likely to become customers based on that visitor’s behavior across websites. The technologies used by Google AdWords may collect information such as your language preferences, information related to your session on the Site, and other information to improve the Site and Services. To learn more about Google’s AdWords services and to learn how to opt-out of this service by Google, please see our “How You Can Manage Cookies” section below.
Do third parties get my cookie information?
DocDay may use Service Providers to provide site metrics and other analytics services, for example:
- Reviewing and analyzing user browser and wireless device technical information;
- Reviewing user activity across site(s) (for example, DocDay analyzes trends, user traffic and usage information to determine the performance of content, research reports, or events);
- Measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Sites; and
- Determining the popularity of certain content, and to better understand how you use our Sites.
We and/or such third parties also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).
Additionally, our Sites may include social media features, such as the Facebook Like button. Our integration of these features may allow third-party social media to collect certain information, such as your IP address and which page(s) you are visiting when using our Sites, and to set a cookie to enable that feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing such features.
The Service Providers that we engage are bound by confidentiality obligations and other restrictions with respect to their use and collection of your information.
Third Party Ad Networks
DocDay may use third parties, such as network advertisers, to serve advertisements on third party websites or other media (for example, a third-party social networking website). This enables DocDay and these third parties to target advertisements on those third-party websites to you for products offered by us and products and websites offered by third parties in which you might be interested. Third party ad network providers, advertisers, sponsors, and/or traffic measurement websites may use cookies, JavaScript, Web beacons, flash cookies, or local shared objects and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you.
This Cookie Notice does not apply to those third parties, and we cannot control their activities. You should consult the respective privacy or cookie policies of these third-party ad servers or ad networks for more information on their practices and for instructions on how to opt-out of certain practices. For example, you may go to the Digital Advertising Alliance (“DAA”) Consumer Choice Page for information about opting out of interest-based advertising and choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (“NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and choices regarding having information used by third party companies who are NAI members.
Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will remove you from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through the Sites or on other third party websites. Even if you opt-out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page, you may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt-out on the DAA or NAI websites, your opt-out action may not be effective. Additional information is available on the DAA’s website at www.aboutads.info or the NAI’s website at https://www.networkadvertising.org/.
How You Can Manage Cookies
Your Preferences
When you first visit our Sites, you may be presented with a banner that offers you choices about whether to accept or reject Cookies or tracking technologies of different types. If the banner is not appearing on the websites, please email help@docday.com to exercise your rights.
Browser Settings
Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites. You can find out more about Cookies and how to manage them by visiting www.AllAboutCookies.org.
Platform Controls
You can opt out of Cookies set by specific entities by following the instructions found at these links:
- Google: https://adssettings.google.com
Contact Us
If you have any questions or comments about this Privacy Notice or the Service provided by DocDay, please contact us at help@docday.com.