Through its Invisible Bracelet SM Emergency Health Registry (“iB”) service (accessible at www.invisiblebracelet.org), Docvia, LLC, an Oklahoma limited liability company (“Docvia”), acts as an application service provider dedicated to providing secure online communication services to individuals and emergency medical services providers (“EMS Providers”) for the transmission of secure medical, prescription and insurance information. References below to “we” and “us” refer to Docvia, and references below to “you” and “your” refer, as applicable, to individuals accessing the invisiblebracelet.org website, to individual members of the iB service or to EMS Providers.
Security Policy
Docvia employs a high degree of security consciousness. The environment at Docvia currently encompasses the security tenants of the Health Insurance Portability and Accountability Act of 1996 and the accompanying regulations (“HIPAA”). The overall priorities of Docvia as an organization are to assure the security of information provided to Docvia by iB members and be fully compliant with HIPAA, as it may be amended from time to time. Access, integrity, availability, ownership, authorization, dependability, authentication, and confidentiality are all major considerations within Docvia’s Security Policy.
Docvia upholds its stringent Security Policy with the following security measures:
Audit Trail. Docvia maintains an audit trail and log of accesses to information provided by you in connection with the iB service.
Auto-Logoff. Docvia protects you against accidentally leaving your personal information active on a computer browser screen. The iB service ends your “session” if you are logged in to invisiblebracelet.org but have not actively used the service for a set period of time. This prevents others from accessing your account when you leave a session and forget to log out.
Business Partners. We require people we do business with to agree to comply with HIPAA and other privacy and security laws.
Confidentiality. Docvia has internal policies that keep your data private and confidential. Docvia will not share your data with any unauthorized party.
Data Security. The third party that owns and operates the servers at the data center at which your data is maintained takes all reasonable measures to secure your data. The data center is administratively, physically and technically secure. The servers are separated from the Internet by a firewall that prevents Internet traffic that fails to meet certain security criteria in an effort to block access by unauthorized parties and reduce Internet traffic from non-legitimate sources.
Digital Certificates. Docvia uses a digital certificate issued by Network Solutions, LLC, a leading Secure Server Certification Authority. This gives you the confidence that you are connected to a website operated by Docvia, and authenticated as such.
Disaster Recovery. In the case of a disaster which affects the primary third-party data center used by Docvia, redundant systems are maintained geographically by the third party to minimize downtime. Upon detection of such a situation, a managed domain name system (DNS) provider will begin routing traffic to a secondary third-party data center facility where redundant systems will immediately begin servicing requests.
Encryption. All communication between you and the third-party server used by Docvia is secured by using TLS/SSL, which uses up to 256-bit encryption depending upon the Internet browser in use.
High Availability. The third-party data center used by Docvia maintains redundant subsystems, such as multiple Internet trunks coming into the data center from multiple sources, fully redundant power on the premises, and backup generators to avoid outages caused by power failures, fires, natural disasters and other matters. Additionally, data is regularly backed up by the third party and stored off-site at a geographically dispersed data center location owned by the third party.
Login ID and Password. Access to your iB membership account is controlled by a login ID and a password, which you chose. Strict login ID and password rules are designed to eliminate the unauthorized user from gaining access to your iB membership account.
Monitoring and Emergency Preparedness. Our systems are fully monitored both by the third-party data center staff and a third-party system monitoring agent. Upon detection of any failure, Docvia staff is notified immediately and is trained to respond by quickly assessing the situation to determine if automated recovery means have been triggered and are performing as expected. If not, immediate action is taken with the assistance of data center staff to correct the situation and restore service as soon as possible.
Temporary Read-Only Access. EMS Providers are granted temporary read-only access to your information, meaning that an EMS Provider does not have the ability to alter or modify your information.
Sensitive Information. You should follow the EMS Provider’s policy on communicating sensitive information when dealing with personnel of the EMS Provider.
Privacy Policy
Docvia respects your privacy and takes Internet privacy very seriously. By accepting Docvia’s Terms of Use, you consent to the use and disclosure of personally identifiable information provided to us as outlined in this Privacy Policy and in Docvia’s Terms of Use.
Who Is Collecting Information?
Because the iB service provides a service for communication between you and EMS Providers, we ask you for the sort of personal health information EMS Providers need in order to streamline their response to an emergency.
We will not sell, share or rent information that is collected in the iB service to others in ways different than from what is disclosed in this Privacy Policy or Docvia’s Terms of Use. Docvia collects information from you at several points in our service.
What Information Is Collected?
Information Request. If you wish to request more information about the iB service prior to registering, you are required to provide contact information (for example, name and email address). It is optional for you to provide additional contact information. This information will be used by Docvia to contact you about our services.
Registration. No matter how you arrive at invisiblebracelet.org, we require the collection of certain contact information as part of the registration process (for example, name, email address, home zip code, birth date). You may provide additional contact information (for example, health plan, primary health care provider, phone numbers, and home address). We encourage you to provide this information in order to enable optimal use of the iB service. In many cases, you will be asked to enter this contact information directly. In other cases, that information may be pre-filled if you have already provided it through a related product or registration process of a business partner website and have consented to its disclosure to Docvia through that business partner website. In circumstances where the information has been pre-filled by someone other than you, you will be asked to confirm the information provided and agree to Docvia’s Terms of Use before being able to use the iB service. If you arrive at invisiblebracelet.org directly, the registration process requires you to choose a unique identifier (for example, sign in name and password) for your account. If you arrive at invisiblebracelet.org through a business partner website (for example, your local EMS Provider’s website) the business partner website may provide a unique identifier that confirms to Docvia that you are an authorized member from the business partner website. You will be asked to confirm the information provided and agree to Docvia’s Terms of Use before being able to use the iB service.
EMS Provider-Patient Communications. The purpose of the iB service is to provide EMS Providers that participate in the iB service with the ability to access certain medical information concerning you during an emergency. The iB service offers various messaging platforms relating to specific requests and/or purposes to facilitate these communications (for example, “In Case of Emergency” or “ICE” email or SMS text notifications). Your provision of information in connection with the iB service is voluntary and you therefore have a choice whether or not to disclose this information.
Health Information. The iB service permits you to provide and store health information online, including health conditions, allergies and medications (your “Health Information”). You have the ability to enter information into your Health Information directly.
Pre-Filled Health Information. In certain cases and at your election, you may be able to opt-in to having your Health Information pre-filled and updated by a business partner of Docvia where that business partner has obtained the necessary consents from you to disclose this information to Docvia. In addition, at your option and based upon consents received from you by your physician, your physician may elect to pre-fill medical information and collect your personal health information via the iB service. The collection of personal health information may include your contact information, as well as certain health information about you, including health conditions, medications and allergies. The provision of this information is optional by your physician based upon consents your physician has received from you. This information may be used by Docvia to contact you about our services. In order to register to use the iB service, you will be asked to confirm the information provided, review your Health Information and agree to Docvia’s Terms of Use. You have the ability to request not to receive information from Docvia at any time.
Your Credit Card Information. You must provide credit card or debit card information to participate in the iB service. This information is used for Docvia’s billing purposes.
Your Log Files. In connection with your use of the iB service, Docvia collects and stores the Internet Protocol (IP) address of the computer you are using; the name of the domain and host from which you access the Internet; the browser software you use and your operating system; the default language on your Internet browser or your operating system; the date and time you access the service; and the Internet address of the website from which you directly linked to invisiblebracelet.org. Docvia uses this log file information to analyze trends, administer the service, and monitor service traffic and usage patterns for internal security purposes and to help make the iB service more useful.
EMS Provider and Provider-Designated User Information.
EMS Provider Registration. No matter how an EMS Provider arrives at invisiblebracelet.org, we require the collection of certain contact information as part of the EMS Provider registration process. In many cases, the EMS Provider will be asked to enter this contact information directly. In other cases that information may be pre-filled if the EMS Provider has already provided it through a related product or registration process of a business partner's website and has consented to its disclosure to Docvia through that business partner website. In circumstances where the information has been pre-filled by someone other than the EMS Provider, the EMS Provider will be asked to confirm the information provided and agree to Docvia’s Application Service Provider Agreement before being able to use the iB service. If an EMS Provider arrives at invisiblebracelet.org directly, the registration process requires the EMS Provider to choose a unique identifier (for example, sign in name and password) for its account. If the EMS Provider arrives at invisiblebracelet.org through a business partner website, the business partner website may provide a unique identifier that confirms to Docvia that the EMS Provider is an authorized member from the business partner website. The EMS Provider will be asked to confirm the information provided and agree to Docvia’s Application Service Provider Agreement before being able to use the iB service.
EMS Provider-Designated User Registration. No matter how an EMS Provider-Designated User arrives at invisiblebracelet.org, we require the collection of certain contact information as part of the EMS Provider-Designated User registration process. In many cases, the EMS Provider-Designated User will be asked to enter this contact information directly. In other cases that information may be pre-filled if the EMS Provider-Designated User has already provided it through a related product or registration process of a business partner website and has consented to its disclosure to Docvia through that business partner website. In circumstances where the information has been pre-filled by someone other than the EMS Provider-Designated User, the EMS Provider-Designated User will be asked to confirm the information provided and agree to Docvia’s Application Service Provider Agreement before being able to use the iB service. If the EMS Provider-Designated User arrives at invisiblebracelet.org directly, the registration process requires the EMS Provider-Designated User to choose a unique identifier (for example, sign in name and password) for his or her account. If the EMS Provider-Designated User arrives at invisiblebracelet.org through a business partner website, the business partner website may provide a unique identifier that confirms to Docvia that the EMS Provider-Designated User is an authorized member from the business partner website. The EMS Provider-Designated User will be asked to confirm the information provided and agree to Docvia’s Application Service Provider Agreement before being able to use the iB service.
Billing Information. Docvia requests billing information from each EMS Provider. Here the EMS Provider must provide Docvia with billing information (for example, credit card information) for its use and access to the iB service. This information is used for billing purposes.
How Will Your Information Be Used And Disclosed?
In addition to the uses and disclosures of information outlined above, your information may also be used and disclosed as follows:
Use of iB Member Information
Docvia maintains an audit trail that keeps track of who has seen your iB membership account and/or Health Information and whether any changes to your account and/or Health Information have occurred. You have the ability to view this audit trail to see all viewers of your account and/or Health Information.
You can always view all the information you entered in the iB service voluntarily.
If another individual is managing your account with your permission (for example, a mother managing the account of her son), this person can view all your information entered in the iB service on your behalf.
Your EMS Provider or an EMS Provider-Designated User can use contact and/or health information about you stored by Docvia in connection with the provision of emergency medical services.
Docvia uses the contact and health information you supply to: 1) invite you to register for the iB service, 2) construct and update your Health Information based upon your use of the iB service, 3) determine service use, 4) survey you to evaluate and improve the iB service, 5) operate the iB service and to decide what services will meet our members’ needs, 6) provide information as required by law, 7) communicate back to you about customer service issues, and 8) update you on service and iB benefits.
Certain features of the iB service may be used in conjunction with other Docvia products, and those features may share information to provide a better user experience and to improve the quality of our services.
Disclosure of iB Member Information.
Health Information. When an EMS Provider determines that you are in need or may be in need of emergency medical services and that you are an iB member, you are deemed to have agreed to permit the EMS Provider and EMS Provider-Designated Users to have access to your Health Information. In addition, if the EMS Provider transports you to a facility, you are deemed to have agreed to permit notification of such transport to your “in case of emergency” (ICE) contacts provided through the iB service.
Compliance with Laws. Docvia will not disclose personal information (contact, health and/or billing) to third parties other than as provided in this Privacy Policy or in Docvia’s Terms of Use, except when we believe in good faith that the law requires it or you have otherwise consented to additional use or disclosure of the information.
Business Partners. Docvia works with many business partners in making the iB service available to consumers. It is our policy to ask companies with whom we do business to support the same privacy policy we do. When you sign up for these services, we will share information only as necessary for the third party to provide these services. These parties are not allowed to use personally identifiable information except for the purpose of providing these services.
Third Parties. If you use invisiblebracelet.org to link to another website, you may decide to disclose personal information at that website. For example, you might provide your contact information to obtain an information packet from an organization. Please be aware that in contacting that website, or in providing information on that website, that third party may obtain personal information about you. This Privacy Policy does not apply when you leave invisiblebracelet.org and go to a third party website from invisiblebracelet.org. We structure the invisiblebracelet.org service so that no personal is sent (either via the URL string or post data) when you move from the invisiblebracelet.org service to a linked website. We encourage you to be aware when you leave our service and to read the privacy statements of each and every website that collects personally identifiable information.
What does Docvia do with anonymous (de-identified) information?
Docvia removes your identity from your personal information (contact, health and/or financial) and may work with it as anonymous ("de-identified") information.
Individual information is information about a user presented in a form where information about one anonymous user would be indistinguishable from information relating to other anonymous users ("a 40-year-old female"). Individual information is not in a form that allows anyone studying the information to personally identify any user.
Aggregate information is information that describes the habits, usage patterns and/or demographics of users as a group but does not reveal the identity of particular users. Your anonymous data is combined with the anonymous data of other Docvia users and may become statistics.
We might use aggregate information within the iB service to understand the needs of the iB community of users and determine what kinds of programs and services we can offer to you. Docvia could use this anonymous information to give potential users, providers, or business partners a picture of the iB community and services.
Locator information is your name, electronic messaging address, physical address, and/or other data that enables someone to personally identify you.
Docvia and your Internet Service Provider (ISP) may use Locator Information as is necessary to enforce any of the terms of the Docvia Terms of Use.
Can Patients Opt Out or Opt In to Specific Uses Of Their Information?
Medical Information. If you no longer wish to allow an EMS Provider to view your medical information, you may deactivate your iB membership.
Invitations. If you no longer wish to receive invitations to register for the iB service, you may request that Docvia no longer send invitations to you using invisiblebracelet.org.
As we add services to the iB service that require the collection, use or disclosure of data other than as set forth in this Privacy Policy, we will offer users the option to opt in or out of those services.
Storage and Maintenance of Information. Docvia stores and maintains all electronic communications sent via the iB service, your Health Information, contact information and financial information for a period of at least ten (10) years.
Does invisiblebracelet.org Use Cookies or Web Beacons?
In order to personalize our service for you and to collect aggregate, non-personal information regarding service usage by all of our users, invisiblebracelet.org uses “cookies” and may also use “web beacons” on its website or via email. A “cookie” is a small text file that invisiblebracelet.org transfers to your computer’s hard drive. invisiblebracelet.org assigns each computer a different cookie. The cookie assigns a random, unique number to your computer. The cookie does not contain personally identifiable information, although other websites are able to access the random, unique number contained in cookies originating from invisiblebracelet.org. A “web beacon” is an object embedded in a webpage or email and is usually invisible to the user but allows for a party to check whether a user has viewed a particular webpage or email. Web beacons help us track usage of our services. While web beacons will be assigned a random, unique number, web beacons do not contain personally identifiable information.
Your browser software can be set to warn you of cookies or to reject all cookies. Most browsers offer instructions on how to reset the browser to reject cookies in the “Help” section of the toolbar. If you reject cookies originating from invisiblebracelet.org, you will not be able to use invisiblebracelet.org.
Sponsors or partners of Docvia may also use their own cookies when you click on a hypertext link to their website or service. We do not control these third parties’ use of cookies, or how they manage the non-personal information that they gather through them. You should review the privacy policy of other websites you link to from our service to understand how these other websites use cookies and how they use the information they collect through the use of cookies on their own websites.
What can I do to protect my Privacy?
In order to protect your privacy you should: 1) never share your sign in name or password, and 2) always sign out when you are finished using the service.
What if I have questions or concerns regarding this Privacy Policy?
If you have any questions about this Privacy Policy or the use of your information via the iB service, please contact support here. Information that you send via email is not subject to this Privacy Policy.
How will you be notified about changes to this Privacy Policy?
Docvia will only use your personally identifiable information in the manner described in the Privacy Policy in effect when we collected the information from you. However, we reserve the right to change the terms of this Privacy Policy at any time by posting those changes on our own service so you are always aware of what information we collect, how we use it, and under circumstances, if any, we disclose it. We urge you to check here periodically for any updates to this Privacy Policy from time to time. If you do not agree with any new Privacy Policy, you should stop using the iB service and deactivate your account.
Protecting Children
The iB service is designed and intended for use by adults, and is not intended for, nor designed to be used by children under the age of 18. A parent or guardian, however, may use the iB service on behalf of a minor child. The parent or guardian assumes full responsibility for ensuring that the authentication information is kept secure and that the information submitted is accurate.