This Privacy Notice relates to www.urac.org and any related or local sites, including but not limited to telemed.org and www.chqi.com. It also relates to the services provided through our portals and software services, such as AccreditNet and ParityManager™.
This Privacy Notice explains how URAC controls, processes and protects your personal information. This policy applies where we are the data controller. In other words, where we determine the means and purposes of how your personal data is processed. If you do not agree to the following policy, you may wish to stop using this website and / or refrain from submitting your personal data to us.
Key Policy Definitions:
- “I”, “our”, “we”, or “us” refer to the business, URAC
- “you”, “the user”, refer to the person(s) using this website or submitting data
- Cookies mean small files stored on a user’s computer or device
- What data do we collect?
- Your data protection rights
- Data security and protection
- Privacy policies of other websites
- Providing your personal data to others
- How to contact us
What Data We Collect
URAC controls any personal data that has been lawfully and voluntarily submitted electronically. We collect data that includes but is not limited to names, email addresses, business affiliations, times, dates, IP addresses, opens, clicks, geographic and demographic data.
We may collect data about your use of our website and services ("usage data"). Usage data may include IP address, location, browser type, length of visit and page views. It may also include information about the frequency and pattern of your use of our website. We use Google Analytics and HubSpot for collecting usage data. This usage data may be processed for the purposes of analyzing the use of the website and making improvements. We will process your information for this purpose until you withdraw consent, or it is determined your consent no longer exists.
We may process information contained in any inquiry you submit about our products or services ("enquiry data"). This data may be processed to market or sell relevant products or services to you. We will process your information until you withdraw consent, or it is determined your consent no longer exists.
We may process information contained in any commercial transaction you submit to buy our products or services ("ecommerce data"). This data may be processed to complete the sale of a product or service to you. We will process your information until you withdraw consent, or it is determined your consent no longer exists.
We may process your user account data ("account data"). The account data may include your name, email address and business information. The source of the account data is you or your company. The account data may be used for providing services, maintaining back-ups of databases and communicating with you. We will process your information until you withdraw consent, or it is determined your consent no longer exists.
We may process information that you submit to subscribe to email alerts and/or newsletters ("notification data"). The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. We will process your information until you withdraw consent, or it is determined your consent no longer exists.
URAC may collect additional data so that we can process orders, process employment applications, request voluntary information related to surveys or contests, address compliance or legal obligations and more ("miscellaneous data"). The miscellaneous data may be processed for the purposes of sending you relevant information and/or updates. We will continue to process your information until you withdraw consent, or it is determined your consent no longer exists.
URAC may collect data from third-party sources, such as social media platforms, third-party data providers and our joint marketing partners. We take steps to ensure that such third parties are legally or contractually permitted to disclose such information to us and have provided proper notification of the sharing of this data. This data may include information such as name, email address, company information, location, and click data. This data may be processed for the purposes of sending you relevant information about URAC. We will continue to process your information until you withdraw consent, or it is determined your consent no longer exists.
Please do not supply any other person's personal data to us, unless we prompt you to do so.
URAC securely stores your data, including the above-mentioned data, for seven (7) years or until we receive a deletion request. Once this period has expired, we anonymize and remove your data from our systems.
Under no circumstances will URAC sell your personal data.
We use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the "What Data We Collect" section above. Any email marketing messages we send are done so through an email marketing service provider (EMS). An EMS is a third-party service provider of software that allows marketers to send email marketing campaigns.
Email marketing messages we send may contain tracking beacons, tracked links or similar technologies. This is to track subscriber activity within email marketing messages. Such messages may record a range of data such as: times, dates, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations, will show the activity each subscriber made for that email campaign.
Any email marketing messages we send are in accordance with privacy laws. We provide you with an easy method to withdraw your consent via unsubscribe or manage your preferences at any time. See any marketing message for instructions on how to unsubscribe or manage your preferences.
Our EMS provider is HubSpot, Inc.
Your Data Protection Rights
Your principal rights are:
- the right to be informed – we must make it clear what personal data of yours is being processed, why, and who it is being passed to;
- the right to access - you can ask for copies of your personal data;
- the right to rectification - you can ask us to rectify inaccurate personal data and to complete incomplete personal data;
- the right to erasure - you can ask us to erase your personal data;
- the right to data portability - you can ask that we transfer your personal data to another organization or to you;
- the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent; and
- the right to equal services and price - you cannot be discriminated against for exercising any of these above rights.
These rights are subject to certain limitations and exceptions.
You may exercise any of your rights in relation to your personal data by written notice to us, using the contact details set out below.
Cookies may be either "persistent" cookies or "session" cookies. A persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date. A session cookie will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user. But personal data that we store about you may be linked to the information stored in and obtained from cookies.
You can change or withdraw cookie consent by deleting all cookies for the website. You can also change your browser settings to block cookies or to alert you when cookies are being delivered. Please refer to your browser instructions to learn more about how to adjust or change your settings at:
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=en-GB&hlrm=nl&answer=95647
- Firefox: http://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences?s=cookies&r=5&as=s
- Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
- Microsoft Edge: https://support.microsoft.com/en-us/help/4027947/windows-delete-cookies
You can also delete cookies already stored on your computer.
URAC uses Google Analytics to understand how visitors engage with urac.org. It may use a set of cookies to collect information and report website usage statistics without personally identifying individual visitors to Google. The main cookie used by Google Analytics is the ‘__ga’ cookie. Click here to learn more about Google Analytics Cookie Usage on Websites. Learn more about Google Analytics here: “How Google uses data when you use our partners' sites or apps" (www.google.com/policies/privacy/partners/)
Cookies are not the only way to recognize or track visitors to a website. Web beacons (sometimes called "tracking pixels" or "clear gifs") are tiny graphics files that contain a unique identifier. This identifier enables us to recognize when someone has visited our website or taken an action in relation to our website. In many instances, these technologies are reliant on cookies to function properly. As a result, declining cookies will impair their functioning.
Data security and protection
We secure your data by using secure storage technologies and procedures in how we store, access and manage that information. Our security measures are designed to protect your information from loss, disclosure, alteration or destruction. This includes the use of Secure Sockets Layer (SSL) technology, which encrypts information you input. This protects your information and helps prevent unauthorized access.
Offline, personal data is stored within secured data servers. Although we take measures to protect your information, no system is completely secure. We cannot guarantee the complete security of information transmitted to or through the website. Any transmission is at your own risk.
In case of a data breach, system administrators will immediately take appropriate countermeasures. We will also notify affected users and local authorities.
Privacy Policies on Other Websites
Providing Your Personal Data to Others
We may disclose your data to suppliers and service providers. This enables such parties to perform functions on our behalf and under our instructions. We require such parties by contract to be compliant with privacy laws and provide reasonable security and to use and process such data on our behalf only.
We do not provide your data to third countries or international organizations without consent. Additionally, the country or organization must have adequate levels of protection in place.
In addition to the disclosures of personal data set out above, we may also disclose your personal data to comply with any subpoena, court order or other legal process, or other governmental request. We also share personal data to establish or protect our legal rights, property or safety; or the rights, property or safety of others; or to defend against legal claims.
Privacy with Respect to Minors
URAC does not obtain or use information from children under the age of 18. The content of the URAC website is suitable for a user of any age, however, the website is not designed for anyone under the age of 18. We do not knowingly collect, use, or disclose any personal data from those under the age of 18 without the consent of a parent or legal guardian. By accessing and using the URAC website, you acknowledge that you are at least 18 years of age or older.
How to Contact Us
This website is owned and operated by URAC. Our principal place of business is at 1220 L Street NW, Suite 900, Washington, DC 20005. You may contact us the following ways:
- By mail: URAC Compliance Department, 1220 L Street NW, Suite 900, Washington, DC 20005
- By email: firstname.lastname@example.org
- By telephone: 202-326-3941