SAFHIR Developer Portal
Privacy Policy
This Privacy Policy (this "Privacy Policy") governs how Onyx Technology LLC ("Onyx," "we," "our," "us") collects, uses, and treats personal information that you (as defined below) provide to us: (i) through our SAFHIR developer portal website at https://portal.safhir.io (the "Website" or "Site"), or (ii) while using the services and information available via the Website (the "Services") (the Services, together with the Website, the "SAFHIR Developer Portal"). This Privacy Policy establishes our rights and obligations with respect to your personal information, and lets you know your associated rights. Your use of the SAFHIR Developer Portal is also subject to our Terms of Use, which is available at: https://portal.safhir.io/terms-of-use.
1.Scope of this Privacy Policy. Except as otherwise set out in this Section 1 (Scope of this Privacy Policy), our Privacy Policy applies to anyone using the SAFHIR Developer Portal (collectively, "you" and "your"), including Developers and Payers (as each term is defined in the Terms of Use).
2.Your Consent to this Privacy Policy. You indicate your consent to this Privacy Policy in different ways, depending on your relationship with us, as set forth below. Please read this Privacy Policy carefully; once you consent to this Privacy Policy and its terms, it creates legal obligations on you and on us.
2.1Consent by Non-Registered Users. You are able to view a limited amount of information about the SAFHIR Developer Portal without registering an account with us. By accessing the SAFHIR Developer Portal, you are acknowledging that you have read and understood this Privacy Policy and agree to be legally bound by it.
2.2Consent by Registered Users. Certain portions of the SAFHIR Developer Portal are available only to users who have registered with us to create user accounts ("Registered Users"), namely, Developers and Payers, as further explained in our Terms of Use.
2.3Consent by User Acting in a Representative Capacity. If you are agreeing to our Privacy Policy on behalf of a company or other legal entity ("Your Organization"), then (i) you represent and warrant that you have authority to act on behalf of, and to bind, your Organization, and (ii) for all purposes in this Privacy Policy, the term "you" means your Organization on whose behalf you are acting.
3.The Information We Collect. The information that we collect about you falls into certain categories as further described in this Section 3 (The Information We Collect). This information consists of the following:
3.1Personal Information. We collect certain information that identifies you as an individual (collectively, "Personal Information"). The Personal Information we collect may include the following categories of information:
3.2Online Activity Information. We also collect technical and device-related information through the SAFHIR Developer Portal (collectively, "Online Activity Information"). Online Activity Information is typically collected automatically by technical means and, subject to Section 3.4 (Treatment of Combined Information), for purposes of the SAFHIR Developer Portal, may consist of the following:
To the extent that statutes, regulations, and any other laws that apply to the SAFHIR Developer Portal (collectively, "Applicable Law") establish that Online Activity Information constitutes Personal Information, and such Applicable Law applies to information we collect from you, then we will treat the relevant Online Activity Information as Personal Information. In addition, sometimes Online Activity Information can be associated with your Personal Information, in which case we will treat it as Personal Information (as described in Section 3.4 (Treatment of Combined Information)). Otherwise we consider, and treat, Online Activity Information as Anonymous Information.
3.3Anonymous Information. The SAFHIR Developer Portal also collects, processes, and/or uses information that does not identify you or your devices, including Personal Information that has been made anonymous by: (i) removing identifying fields and aggregating the information with other information so that individual subjects of the information cannot be re-identified, or (ii) anonymizing the information with techniques that remove or modify the identifying data so as to prevent re-identification of the anonymized information (collectively, "Anonymous Information"). Information that meets these criteria might include, for example, demographic information, statistical information (e.g., page views and hit counts), and general tracking information. We use Anonymous Information for our business operations, for example, to engage in marketing and other activities in a manner that protects our customers. Because Anonymous Information does not include Personal Information, Anonymous Information is outside the scope of this Privacy Policy.
3.4Treatment of Combined Information. To enable us to better understand the characteristics of our users and/or to provide Services tailored to your needs, we may link your Personal Information with Online Activity Information associated with you or other Anonymous Information. If we combine Online Activity Information or Anonymous Information with Personal Information, then we will treat the resulting combination as Personal Information.
4.How We Collect this Information. We collect the above information through the following means and technologies:
4.1Registration; Linked Accounts. To register an account with us, you will need to provide us with certain information, including Personal Information. We will use this information to: (i) set up your account; (ii) verify your identity and, as applicable, your employment or other association with Your Organization; (iii) authenticate your sign-on information; and (iv) manage other functionalities relating to your account.
4.2User Generated Content. We may give you the ability through the SAFHIR Developer Portal to engage with us and others, and these may include opportunities for you to provide descriptions about your apps or Your Organization, profile information, feedback, comments, and other input (collectively, the "Submitted Content"). Please understand that, if you include Personal Information in Submitted Content others will be able to read, collect, republish, and otherwise freely use the information. We are not responsible for Personal Information you decide to include in Submitted Content, and we will not take down, remove, or edit Submitted Content, except as required by Applicable Law. If you include in your Submitted Content any Personal Information relating to others, you represent that you have full permission and authority to do so.
4.3Contacting us. You can contact us with questions or comments using the contact methods available on the SAFHIR Developer Portal or using the information provided in Section 14 (Contact us). In order to communicate with us, you must provide certain Personal Information.
4.4Information Provided to Third Parties. As explained further in Section 6.2 (Our Service Providers), we may engage third parties to perform certain services for us or on our behalf. For example, the SAFHIR Developer Portal may include web forms that are managed by service providers, and we may obtain from the applicable service provider the information that you provide using such forms.
4.5Device Identifiers; Logs; IP Addresses. To determine whether your device is supported by the SAFHIR Developer Portal, we may collect certain information about your device and network, including your IP address, your operating system and browser, your device model, information about your use of the SAFHIR Developer Portal, as well as the presence of any software that the SAFHIR Developer Portal may require to operate with your device, or other third party software or mobile apps on your device. We automatically receive and record this information in log files, and this is generally Online Activity Information.
4.6Cookies. A cookie is a small amount of data that is sent to your browser from a website's computers and stored on your computer's hard drive. Cookies can be used to provide you with a tailored user experience and to make it easier for you to use a website upon a future visit. We may include cookies on the SAFHIR Developer Portal and use them to recognize you when you return to the SAFHIR Developer Portal. You may choose not to accept cookies; however, you may need to enable cookies if you wish to access certain personalized features of our Services.
4.7Click-Throughs. We may send email messages or display links that use a "click-through URL" linked to the SAFHIR Developer Portal or to another resource. When you click one of these URLs, you pass through our web server before arriving at the destination website page or other resource. Click-throughs may use and collect Anonymous Information and Online Activity Information. We may track this click-through data to help determine interest in particular topics and measure the effectiveness of our user communications.
5.How We Use this Information. We use the information we collect or process, including Personal Information, Online Activity Information, and Anonymous Information, as permitted under Applicable Law, and consistent with the terms of this Privacy Policy. More specifically, we use the information we collect for the following purposes:
In addition to the uses specifically identified above, there may be instances where you request information and Services from us that are not described in this Privacy Policy. In our discretion, we can use information that you submit in order to provide such information and Services.
6.How We Share this Information. We value your privacy, and we share the information we collect only in the manner set out below.
6.1Registered Users. We will share your information with Registered Users to the extent necessary to complete, fulfill, or otherwise process your requests for Services, such as to enable interactions between Developers and Payers with respect to requesting or granting access requests.
6.2Our Service Providers. We engage third parties to perform functions on our behalf, and these may include maintaining the SAFHIR Developer Portal, responding to and sending email or other messages, and other functions useful to our business. In this capacity, we may provide service providers with Personal Information, Online Activity Information, and Anonymous Information (as applicable). The following are examples:
We require our service providers to contractually commit to protect the privacy and security of the Personal Information they process on our behalf.
6.3Questions of Harm; Legal Process. We may disclose your Personal Information and Online Activity Information to third parties, including law enforcement agencies, attorneys, and private investigators, where it is necessary, or where we have a good faith belief that it is necessary, to: (i) comply with legal process; (ii) protect and defend our rights and property, including the SAFHIR Developer Portal and associated content; (iii) protect against misuse or unauthorized use of the SAFHIR Developer Portal and associated content; (iv) protect the personal safety or property of SAFHIR Developer Portal users or the public, including your personal safety or property (it being understood that we assume no duty to provide, or monitor the need for, such protections); and (v) cooperate with public and government authorities including, where required, authorities outside your jurisdiction.
While you are not able to opt out of this use of information, we will take reasonable steps to limit such use, and disclose only the information we reasonably believe is necessary for the above purposes. If we receive legal process calling for the disclosure of your Personal Information, then we will attempt to notify you within a reasonable amount of time, unless such notification is not permitted.
6.4Corporate Transactions. We shall be entitled to transfer information that we collect (including Personal Information) to a third party in connection with or in contemplation of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition (including a disposition in connection with a bankruptcy or similar proceedings) of all or substantially all assets or stock of the business unit or division responsible for the information under this Privacy Policy; provided the acquiring third party has agreed to safeguard your Personal Information with protections that are compatible with those set out in this Privacy Policy.
6.5Our Affiliates. We may choose to rely on and share the information we collect with our affiliates. By "affiliate" we mean an entity that is closely related to us, such as an entity that controls, is controlled by, or is under common control with, Onyx Technology LLC. Our affiliates will be bound by the terms materially similar to this Privacy Policy.
7.How We Safeguard the Information We Collect. We recognize the sensitivity of our users' Personal Information and we have put in place security systems designed to prevent unauthorized access to, or disclosure of, this information. Our security systems include physical, technical, and administrative information security controls, and we take commercially reasonable steps to secure and safeguard such Personal Information in accordance with Applicable Law.
8.Accessing and Updating Your Information. If you would like to review, correct, or update the Personal Information that you have provided to us, or if you would like to request an electronic copy of this Personal Information for purposes of transmitting it to another company (to the extent Applicable Law provides you with this right to data portability), then you may make such requests by us as provided in Section 14 (Contact us).
9.Your Choices Regarding your Personal Information; Opting Out. To allow appropriate control over Personal Information, you can view, change, delete, or update discretionary information that you have previously submitted either by contacting us as provided in Section 14 (Contact us) below or by accessing your account on the Website, if such functionality is made available to you. Note that requests to delete your information are subject to a number of limitations, for example, we may keep Personal Information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, to process transactions and facilitate you requests, and for other internal business purposes consistent with the terms under which it was collected.
10.State-Specific Notices Regarding your Privacy Rights.
10.1California Shine the Light Disclosure. California law requires certain businesses to respond to requests from California users who ask about business practices related to disclosing Personal Information to third parties for their own direct marketing purposes. The California "Shine the Light" law further requires us to allow California residents to opt out of certain disclosures of Personal Information to third parties for their own direct marketing purposes.
10.2Do Not Track Notice. The Website does not change its behavior when receiving "Do Not Track" signals from browser software, and handles all Personal Information consistent with this Privacy Policy.
10.3Nevada Disclosure. For Nevada residents, please note that we do not sell personal information as defined by Nevada law. You can submit a request to us as set out in in Section 14 (Contact us) below.
11.Advisory Regarding Participation by Children and Teens. WE DO NOT ALLOW INDIVIDUALS WHO WE KNOW OR BELIEVE ARE UNDER 18 TO USE THE SAFHIR DEVELOPER PORTAL. YOU MUST BE AT LEAST 18 YEARS OLD TO USE THE SAFHIR DEVELOPER PORTAL. If you believe that we might have received Personal Information from an individual under 18 years old, please contact us as directed in Section 14 (Contact us) below.
12.Complaints. We want your feedback. If you have a suggestions on how we can improve or complaints you would like us to address, please contact us at the address set out in Section 14 (Contact us). If you are a California resident, you may report complaints to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs. Other states may provide similar avenues for lodging complaints. Please check with your state's consumer protection authority.
13.Changes to this Privacy Policy. From time to time, we may change this Privacy Policy for our business purposes and to comply with changes in Applicable Law. If we make any substantive or material changes, then we will communicate these changes to you by posting the updated Privacy Policy on the SAFHIR Developer Portal and/or notifying you of the change via the SAFHIR Developer Portal, email, or other methods. Your continued use of the SAFHIR Developer Portal following such notice constitutes your agreement to follow and be bound by the updated Privacy Policy.
14.Contact us. If you have any questions about this Privacy Policy, or the SAFHIR Developer Portal, please contact us at: https://www.onyxhealth.io/contact/.
15.Relationship to Terms of Use and Other Contracts. This Privacy Policy must be read in conjunction with (i) other agreements into which you and Onyx may enter concerning the SAFHIR Developer Portal (if any), and (ii) our Terms of Use. The provisions of our Terms of Use are incorporated herein. To the extent this Privacy Policy conflict with the our Terms of Use, this terms of this Privacy Policy shall control. Similarly, to the extent this Privacy Policy conflict with terms and conditions of any specific agreement you enter with us, the terms and conditions of such specific agreement shall control.
16.Linked Sites. Our Site may link to (or be linked from) third party websites or third party features ("Linked Sites"), as further explained in the section of our Terms of Use titled "Linked Sites". We have no control over such third parties and are not responsible for the content, availability, or security of such Linked Sites. Third parties may use your information for their own purposes, including behavioral or advertising purposes. The inclusion of a link on the SAFHIR Developer Portal to a Linked Site is provided for your convenience only and does not imply our endorsement of the Linked Site, the third party, or its products or services. If you decide to access any of the Linked Sites, you do so subject to the terms and conditions of use for such Linked Sites. Any Personal Information that you provide through a Linked Site will be subject to the privacy policy of its operator and not this Privacy Policy.
17.Effective Date; Legal Notice. The effective date of this Privacy Policy is June 1, 2021. © 2021 Onyx Technology LLC All rights reserved. No part of this content may be reproduced, stored in any form without written permission from Onyx Technology LLC
#84886073_v4