Platform Privacy Policy

Who this policy covers

This Platform Privacy Policy governs use of the Eadar Platform and Service by Users, User Administrators, Authorized Employees, and/or Guest Users of an Organization.

Note: Eadar is not a healthcare provider, and this Privacy Policy shall not be construed as the HIPAA or 42 C.F.R. Privacy Policy that governs the relationship between a patient and their treatment provider(s). Eadar has either a Business Associate Agreement ("BAA") and/or a Qualified Service Organization Agreement ("QSOA") with the Organization that governs the use of any protected health information.

Your use of the Platform is also governed by our Terms of Use and, for non-Guest Users, your Organization's Software as a Service Agreement ("SaaS Agreement"), including any exhibits and addendums.

If you are a general visitor to eadarhealth.com, please refer to our Website Privacy Policy. If you are unsure which policy applies to you, contact us at admin@medrecordsrequest.com.

Eadar ("Eadar," "we," "us," or "our") provides its Platform to act as a connector between the record systems of the Organizations that use it and/or is a tool for Organizations to facilitate the sharing of records to its authorized Users, Administrative Users, Organizations, and/or Guest User(s) for a permitted purpose in accordance with Federal and/or State Law.

"Personal Information" means any information that may relate to an identified or identifiable person, including a person's name, personal profile, phone number, license type, credential type, email address, and identifiable other information inputted at the time of registration to login to the Platform.

By accessing or using the Eadar Platform, you agree and consent to this Privacy Policy, in addition to the Eadar Terms of Use, both of which may be amended from time to time.

1. Introduction

The privacy of our Users and Site visitors is important to us. This Privacy Policy explains our online data practices and the choices you can make about the way your Personal Information is collected and used.

We strongly urge you to read this Privacy Policy and make sure you fully understand and agree with its terms. If you do not agree, please discontinue and avoid using the Sites and/or Service.

If you wish to use the Eadar Platform, as a User or Guest User, you must provide us with Personal Information and do so at your own free will. If you do not agree to provide such data, please do not browse, enter, or login to our Sites or use our Platform.

2. What Personal Information We Collect and How We Collect It

Eadar, through its Platform, collects several types of data from and about Users, User Administrators, Authorized Employees, Guest Users and other users of our Service. All such users have agreed to be bound by this Privacy Policy and the Terms of Use.

User Account

Each individual who wishes to use the Eadar Platform must have a separate User Account (or Guest Account). A User Account or Guest User account can be created by someone with the administrative rights of an Organization. Eadar only creates the first Administrative User Account at the time an Organization begins using the Platform. User Account registration requires, minimally, your first and last name, mobile phone number, and email address. Eadar may contact you via phone call, SMS text message, or email regarding verification and to confirm your account. Eadar may also send a one-time secret passcode for multi-factor authentication (MFA) to log into your User Account if you have chosen the SMS as your MFA. By accessing Eadar's Platform, you provide unequivocal consent to receive MFA messages via SMS and/or email. If you wish to use another MFA, such as through a third-party authenticator (e.g., Google Authenticator), you may opt out of the SMS messages.

Contact Us & Feedback Information

When you contact us through the Sites, you may choose or be required to provide contact information such as name, phone number, license type, credential, role, and email address. These records and communications may be logged, monitored, or recorded for quality service and training purposes.

User Generated Content

This section applies to content submitted through the eadarhealth.com website (e.g., contact forms, feedback, reviews). The Platform does not accept user-submitted content; records accessed through the Platform are governed by your Organization's SaaS Agreement, BAA, and/or QSOA.

When you submit content to the Sites (such as a contact form or feedback), we collect, store, and process that information, including investigating any possible violations of our Terms or this Privacy Policy.

Usage Data

We may collect and record data about how you access and use the Sites and Service, including administrative and support communications, features and content you interact with, and third-party integrations you use.

Purchases

Certain portions of the Service require payment. We will require certain information from your Organization to complete transactions, including credit card, ACH, or bank wire information and related billing data. If your Organization fails to pay an outstanding invoice, you may lose access to the Eadar Platform.

Log Files

We may use log files containing data such as IP addresses, browser type, device type, ISP, and date/time stamps to administer the Sites and Service and gather statistical data for compliance-related activities.

Cookies and Other Tracking Technologies

Our Sites and Service utilize cookies, anonymous identifiers, and other tracking technologies to provide our Service and analyze performance of the Platform. We do not change our practices in response to "Do Not Track" browser signals. We do not use cookies for any non-permissible purposes, such as marketing in connection to the Eadar Platform.

Mobile Device Data

We may collect limited data from your mobile device, including device type, device ID, and date/time stamps of Service use, to provide the Service and analyze performance of the Platform.

3. The Way We Use Personal Information and With Whom We Share It

We may use Personal Information to:

Provide and improve our Service, perform verification, and authenticate access to non-public parts of the Sites and Service
Understand our registered users and improve the content and features of our Service
Administer Services and diagnose technical problems
Generate and review reports and conduct research on Service usage patterns
Send you updates and news regarding the Service (you may opt out as explained in Section 5)
Send service and administrative emails, including security notices and responses to support requests — these are integral to the Service and cannot be opted out of while you remain a user

We do not sell Personal Information. We will not sell, share, rent, or otherwise distribute Personal Information to others in ways different from what is disclosed in this Privacy Policy. We may, however, use your personal information to provide internal marketing services of Eadar-related services, which you can opt out of.

We may share or provide access to your Personal Information with selected third-party service providers to assist with our business operations, including hosting and server co-location services, communications and content delivery networks, data and cyber security services, billing and payment processing, fraud detection and prevention, email distribution, performance measurement, and our legal and financial advisors.

We may share your Personal Information with other individuals employed by your Organization, including other Users, User Administrators, Authorized Employees, and Guest Users. We may also disclose Personal Information per your specific instructions, or if we have a good faith belief that disclosure is necessary to comply with law, enforce our Terms, detect or prevent fraud or security issues, or protect against harm to Eadar, our Sites, Service, or Users.

In the event of a merger, acquisition, bankruptcy, or comparable event, we reserve the right to transfer or assign your Personal Information in connection with such events.

4. How We Protect Your Data

We have implemented physical, electronic, and managerial procedures to safeguard and help prevent unauthorized access to your information and to maintain data security. We follow generally accepted industry standards to protect your Personal Information during transmission and once received.

However, the Internet is an inherently dangerous place. We assume no liability for disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond our control. You should not share your username, password, or security information with anyone.

Security questions: admin@medrecordsrequest.com

5. Your Rights as a Data Subject

To the extent you wish to exercise your rights under applicable law (e.g., the EU GDPR) to request access to, rectification, or erasure of your Personal Information, or to restrict or object to its processing, please contact us, your User Administrator, or edit your Personal Information through your User Account. You may also contact our support team at admin@medrecordsrequest.com. We will comply with all such requests in accordance with applicable law.

Opting Out (Email)

You may choose not to receive future promotional materials by clicking "unsubscribe" in any email we send, or by emailing admin@medrecordsrequest.com. We will still respond to "Contact Us" requests and send administrative emails necessary to facilitate your use of the Service.

Multi-Factor Authentication (MFA)

Eadar utilizes MFA to help prevent unauthorized access to its Platform. By accessing and logging into the Service, you unequivocally consent to receive MFA SMS messages and/or emails. MFA cannot be disabled for any account with access to health records. You may withdraw consent to SMS delivery, but doing so will require an alternative authentication method (e.g., Google Authenticator) or will end your access.

Choice

You may choose whether or not to provide Personal Information. If you choose not to provide Personal Information required to fully use our Service, you may still visit publicly available parts of the Sites, but may not be able to access features that require authentication.

6. Additional Notices

Third-Party Products

The Sites and Service may contain links to or enable interaction with third-party websites and services not owned or controlled by us. We are not responsible for the privacy practices of such Third-Party Services. We encourage you to review their terms and privacy policies before use.

Accessing and Correcting Your Personal Information

You may review, correct, or update Personal Information in your Profile page by logging into the Platform.

Data Storage

Eadar retains data for as long as we provide you with the Service, and thereafter in accordance with our internal policies and applicable law.

Children's Privacy

The Sites and Service are not intended for or marketed to children under the age of 18. We do not intend to collect Personal Information from anyone under 13. If we learn we have done so, we will delete it promptly. Contact us at admin@medrecordsrequest.com if you believe we may have such information.

California Online Privacy Rights

Eadar is a business-to-business service provider. We do not collect personal information directly from California consumers for purposes of selling or sharing for cross-context behavioral advertising. We do collect limited account information (such as name, email address, phone number, license type, credential, and Login Credentials) from authorized users as necessary to provide the Service. The personal information we process on behalf of covered entities under written agreements is processed in our capacity as a service provider under contract.

Authorized users who are California residents may contact us at admin@medrecordsrequest.com with questions about how their account information is handled. California residents under 18 who have publicly posted content may request its removal by contacting us with "California Minor Removal Request" in the subject line, in accordance with Section 22581 of the California Business and Professions Code.

7. Conditions of Use, Notices, and Modifications

Your use of the Sites or Service, and any related dispute, is subject to this Privacy Policy and our Terms of Use, including limitations on damages, resolution of disputes, and application of the laws of the State of Florida.

Eadar reserves the right to change the Sites and the terms of this Privacy Policy at any time and will do so through its website and updating the Last Updated Date. For material changes, Eadar will provide notice through the Platform or by email. It is your responsibility to review this Privacy Policy periodically. Continued use of the Sites or Service after a change constitutes acceptance of the new terms.

Any dispute arising from or relating to this Privacy Policy is subject to the dispute resolution provisions of the applicable Terms of Use.

8. Questions, Concerns, or Complaints

If you have any comments, questions, or concerns regarding this Privacy Policy, please contact us at admin@medrecordsrequest.com.