Privacy policy

This Privacy Policy explains how Aro Medical ("Aro", “we”, “us” or “our”) collects, uses, discloses, and protects personal information obtained through our websites, including but not limited to aromedical.net (collectively, the “Company Site”).

Please note that this Privacy Policy does not apply to personal information collected and processed about Aro employees, job applicants or independent contractors. If you are a Aro employee, job applicant or independent contractor, please contact us at privacy@aromedical.net to obtain our privacy practices pertaining to you.

We use the Company Site to make information, products and services available to you. The term “personal information” means information that you provide to us which identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you, such as your name, phone number, email address, or any other information that could reasonably be linked to you.

What personal information do we collect?

We collect the personal information when you use our Company Site or obtain information, products and services from us. This may include your name, address, email address, phone number, organization name, specialty, the number of providers in your organization, and any other information you provide to us when you contact us. If you or your organization purchases a product or service from us, creates an account with us, or are an end user of our products and services, we may also collect username and password and medical account identifiers. For payment purposes, we may collect credit card number, security code, expiration date, shipping address and billing address.

No one is required to provide any information to us at any time. However, if you do not provide us with the information we request, we may be unable to provide you with the information, products or services you have asked for. In other cases, your decision not to provide us with information may preclude your access to certain features and functions of our products and services we offer.

How do we collect personal information?

Information you give us

We obtain personal information in a number of ways. For example, we obtain personal information when you provide it to us through the Company Site by using forms such as our “Contact us” form that seek information including your interests and concerns, preferences for products and services, or contact information. We also collect information through email and other communications, and in other routine operations in the ordinary course of our business.

Information we collect from other sources

If an organization you are affiliated with purchases our Products and Services, we may obtain personal information about you for account creation and maintenance purposes, such as name, email, username, and password. From time to time we may obtain business contact information you make publicly available, including from third parties, for our marketing purposes.

Information we collect automatically

We, and certain third party analytics and digital advertising vendors we engage, may also collect information automatically as you use the Company Site and our products and services through the use of common data gathering technologies, such as cookies. Cookies and other technologies collect certain information about the web browsers and devices of users of the Company Site and our products and services, such as IP addresses, access times, and what web pages they visit.

We use cookies and other data collection tools to operate and improve the Company Site and our products and services, for technical troubleshooting, to better understand how the Company Site and our products and services are used, to personalize your visit to the Company Site and use of our products and services, and to display advertisements to you.

We use the information we obtain to

• Provide and improve the Company Site.
• Provide our products and services and information resources.
• Develop new and updated products, services and information resources.
• Administer, protect and manage the Company Site, our products, services and information resources.
• Provide customer service.
• Communicate with individuals concerning our products and services, including marketing and promotional communications and, where applicable, fulfillment of promotional offers.
• Enable you to log in to your account to use and access the sections of the Company Site reserved for customer use.
• Text, call or email in response to an inquiry or request submitted by an individual on our “Contact Us” form.
• Process orders and payment.
• Investigate, enforce, and apply our contractual terms.
• Protect against and prevent fraud and other criminal activity, claims and other liabilities.
• Comply with and enforce applicable legal requirements, relevant industry standards and policies.
• Fulfill other purposes we disclose to you when we collect your personal information.

We may use information we collect to create aggregated data sets that are not identifiable to an individual. We may use and disclose this aggregated data for a variety of development, promotional, communications, and other business purposes.

How we disclose information

We may disclose information we obtain to our third party vendors who provide us with services to assist us in providing, developing, promoting, marketing and supporting our products, services and information resources and in running our day to day business activities. For example, we use third party vendors to provide infrastructure hosting, software, and payment processing services. We enter into contracts with our third party vendors that limit how they may use and disclosure of the information to the purposes for which we disclosed it to them.

We may also disclose information as we believe necessary to:

• Comply with applicable law and regulations, which may include disclosures made in response to any subpoena, document request, or other legal request seeking the disclosure of information that appears to have been lawfully issued.
• Perform under and enforce the terms and conditions under which our products and services are provided.
• Protect our rights, reputation, and property, or that of our users, affiliates, or the public or to pursue available remedies or limit damages we may sustain.
• Support our auditing, compliance and corporate governance functions.
• Transfer or assign the information that we have collected from users in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy, including in any diligence process related to such a transaction.

Children

The Company Site and our products and services are not directed to or designed to be used by children. We do not knowingly collect personal information online from children under the age of eighteen (18).

Third-Party links

The Company Site may contain links to third-party sites to provide additional, value-added services. Except as set forth herein, we do not share Your personal information with those third parties, and are not responsible for their privacy practices. We therefore have no responsibility or liability for the content and activities of these linked sites. We suggest you read the privacy policies on all such third-party sites.

Do Not Track

The Company Site does not currently take any action when it receives a Do Not Track request. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For details, including how to turn on Do Not Track, visit www.donottrack.us.

Patient information

Aro Medical provides web-based services that may involve the access and processing of patient information. This information is lawfully provided to us by: (i) healthcare professionals who have obtained their patients’ consent or authorization to share such information with us, or (ii) the patients themselves (or, if the patient is a minor, their parent or legal guardian).

Such information may be considered Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations. It may also be subject to applicable state laws.

Aro Medical maintains strict confidentiality over any patient data received and processes such data only in accordance with applicable privacy laws and our contractual obligations, including Business Associate Agreements where required. The use and disclosure of PHI is governed by these agreements and is therefore outside the scope of this general Privacy Policy. If you have any questions or concerns regarding PHI that may be processed by our products or services, we recommend that you contact the healthcare provider with whom you have a relationship directly.

In some cases, Aro Medical may process medical notes containing sensitive patient information. When this occurs, we apply industry-standard de-identification techniques to remove or obfuscate personally identifiable information (PII) and any other protected data. These de-identified notes are used strictly for coding assistance, quality improvement, or other permitted uses in compliance with applicable laws and regulations.

Data security and retention

We use reasonable and appropriate security measures designed to protect the personal information we obtain from unauthorized alteration, loss, disclosure, or use, including technological, physical and administrative controls over access to the systems we use to provide the Company Site and our products and services.

However, please note that the security of information transmitted through the Internet can never be guaranteed. We are not responsible for any interception or interruption of any communications through the Internet or for changes to or losses of data. Users of the Company Site are responsible for maintaining the security of any username, password or other form of authentication involved in obtaining access to password protected or secure areas of any of the Company Site. In order to protect us, you and your information, we may suspend your use of the Company Site, without notice if any breach of security is suspected.

We retain personal information only for as long as necessary to provide the products and services that our customers request or as otherwise necessary to fulfill the purpose for which such information was collected and as necessary to comply with our legal obligations.

Sale of personal information

Aro Medical does not, and will not, sell your personal information under any circumstances. We are committed to protecting your privacy and using your data only to provide and improve our services, in accordance with applicable privacy laws and contractual agreements.

While certain jurisdictions, such as the State of Nevada, provide consumers the right to opt out of the sale of personal information, Aro Medical does not engage in such practices. If you have any questions or concerns, please contact us using the information provided at the end of this Privacy Policy.

Notification of changes

Any changes to this Privacy Policy will be posted to this page so users are always aware of the information we collect and how we use it. Accordingly, please refer back to this Privacy Policy frequently as it may change.

Compliance, questions and concerns

We monitor our compliance with this Privacy Policy. You may reach our Data Protection Officer or contact us with questions or concerns by contacting us at privacy@aromedical.net.