SCAN Health Plan Texas, Inc.’s Privacy Policy

Effective Date: September 30, 2022

1.  General

This Privacy Policy describes how SCAN Health Plan Texas, Inc. (“SHPTX”) treats information that it collects and acquires through the websites, mobile applications, and other web-connected services that it owns and operates (“Websites”). All references to “SHPTX,” “we” or “our” in this Privacy Policy includes SCAN Health Plan Texas, Inc. and/or any other entities that may be affiliated with it, as appropriate based on context, unless otherwise stated. This policy applies to our interactions with you and all of our products and services.

Each time you access, use and/or browse the Websites, you signify your acceptance of the then-current Privacy Policy. If you do not accept this Privacy Policy, you are not authorized to access, use and/or browse the Websites and you must immediately discontinue use of the Websites.

This Privacy Policy does not apply to the practices of companies that SHPTX does not own or control, or to people whom SHPTX does not employ or manage, even if the Websites link to the websites of such third-party companies. We recommend you review the privacy practices of those third parties before connecting accessing third-party websites and sharing any personal information.

NOTE:  SHPTX’s Notice of Privacy Practices governs how protected health information about you may be used and disclosed by SHPTX.

2. Changes to This Privacy Policy

The Privacy Policy may be revised from time to time as we add new features and services, as laws change, and as industry privacy and security practices evolve. You can determine when this Privacy Policy was last revised by referring to the Effective Date at the top of this page. You should check the Privacy Policy on a regular basis for the most current privacy practices. Each time you access, use or browse the Websites, you signify your acceptance of the then-current changes to the Privacy Policy applicable to information collected by us on and from the effective date of such changes. Any changes in the Privacy Policy will take effect upon posting, but material changes will not apply to information collected from you before the Effective Date, unless we have other communications with you. If we make any material changes to this Privacy Policy, we will take reasonable measures to notify you via email and/or a prominent notice on our Websites prior to the change becoming effective and will update the effective date at the top of this Privacy Policy.

3. Types of Information We Collect

SHPTX collects personally identifiable and non-personally identifiable information through your interactions with SHPTX and the Websites.

The personally identifiable information that SHPTX may collect about you may include, without limitation, your first and last name, address, email address, telephone number, date of birth, password, gender, credit or debit card number, or other payment method, billing and shipping information, order history and preferences, and geolocation. If you participate in any surveys provided through the Websites, we also may collect your demographic information such as your preferences and interests, income, education level, occupation, marital status, homeowner status, and other such relevant information. If you create an online account with SHPTX and designate an adult caregiver as an authorized user of your online account or if you have a legal guardian (each, a "Caregiver"), we also may collect information provided to us regarding the Caregiver, such as the Caregiver's first and last name, and email address.

The non-personally identifiable information that SHPTX collects about you is aggregated or otherwise does not link to personal contact information, and may include, without limitation, your Internet Protocol (“IP”) address, the domain name of your internet service provider, Collection Technology information (as described below), the type of device you use, the operating system you use (e.g., Microsoft Windows, Mac OS or Google Chrome OS), the type and version of browser you use (e.g., Firefox, Chrome, Internet Explorer or Safari), your browsing history and your activities while visiting the Websites and the content you access or view when using same, the time of your visit, the pages you visit and the time spent, your general geographic location such as the city from which your device is connecting to the Internet, information regarding the Websites you visit prior to and after visiting the Website, and aggregated information regarding your precise or approximate geolocation, your age, gender and interests with respect to products and services.

4. How We Collect Information

SHPTX and/or its Service Providers (defined below) may collect personally identifiable information that you voluntarily provide to SHPTX through your interactions with the Websites, such as:

• Signing up for an email newsletter through the Websites;
• Registering/signing up for classes, seminars, meetings or other events;
• Filling out an online form on the Websites to request information;
• Contacting SHPTX customer service or support, or providing feedback to SHPTX;
• Creating an online account on any of the Websites;
• Participation in voluntary web surveys; and
• Placing an order or transacting business with SHPTX or its Service Providers.

SHPTX and/or its Service Providers may collect non-personally identifiable information through your accessing, using and browsing of the Websites, and other online or mobile interactions with SHPTX and the Websites, in a variety of ways, such as:

• server log files, which automatically record certain non-personally identifiable information on server logs;
• cookies, web beacons, pixels, gifs, tags and other technologies that collect information in similar ways ("Collection Technology"), which may store a piece of data on your browser or device, or may identify, compile, aggregate and/or collect information through other means;
• ·other information that you voluntarily provide, if the portion of such information that personally identifies you or any other user is removed and/or if the information is aggregated ("De-Identified Data"); and
• Google Analytics, a web analytics service provided by Google, Inc., as described below.

When you visit the Websites, your browser or device may be exposed to Collection Technology which may be stored on your browser or device. You may delete and/or refuse the use of certain Collection Technology by selecting the appropriate settings on your browser or device. You may use the Websites even if you choose to refuse or delete such Collection Technology; however, please note that this may affect your ability to use the full functionality of the Websites.

The Websites may use Google Analytics, which uses Collection Technology to collect and store anonymous information about you, which may include the non-personally identifiable information described above. You can read Google’s privacy policy at https://policies.google.com/technologies/partner-sites and Google Analytics' Terms of Service https://www.google.com/analytics/terms/us.html. You can read more about how Google uses this information at https://policies.google.com/technologies/partner-sites. The Websites may use the “Demographics and Interest Reporting” feature of Google Analytics to analyze information regarding the interests and demographics of users of the Websites, which information may be obtained from inferences based upon the websites you visit, third party data, information you share on other websites, social media platforms and applications, or demographics derived from profiles or accounts that you create, to the extent permitted in their privacy policies. You can opt-out from being tracked by Google Analytics in the future by downloading and installing Google Analytics Opt-out Browser Add-on for your current web browser at http://tools.google.com/dlpage/gaoptout?hl=en.

SHPTX may combine or verify information collected or acquired through the Websites with information you provide in your offline interactions with SHPTX, or share with other sites or social media pages; or with information about you in third party data. If the combined or verified information permits us to contact you online or offline, we will treat the combined information as personal information.

5. Do Not Track Setting

SHPTX does not alter the practices detailed herein based upon your selection of the “Do Not Track” setting or other “opt out” settings or features that may be offered by your browser; however, SHPTX reserves the right to do so in the future.

6. How We Use Information We Collect

SHPTX may use your personally identifiable information to provide you with access to your online account; improve your web experience; complete your registration to participate in classes, seminars, meetings and other events; provide you with support, care coordination, and referrals to services offered by others; administer surveys and analyze responses; send you newsletters or information or contact you via e-mail, postal mail or telephone about your requests for information, our services, offers and news that may be of interest to you, and participation in classes, seminars, meetings and other events; respond to your communications; communicate with you about our services and other services that may be of interest to you; contact your Caregiver; provide you with customer service and support; and attend to tasks relating to your transactions with SHPTX and to promote, monitor and improve SHPTX's services; to protect ourselves, you, and others, prevent fraud and other unlawful or unauthorized activity, and create and maintain a trusted, secure, and reliable online environment; to comply with our legal obligations, respond to subpoenas, court orders, or legal process; and to establish or exercise our legal rights or defense against legal claims.

SHPTX may use information collected through Collection Technology, without limitation, to administer and improve the Websites and how we communicate with members; analyze website trends and how the Websites are used; improve navigation of the Websites; analyze the performance of the Websites and diagnose problems; analyze and improve the products and services we offer; analyze and develop advertisements and advertising campaigns; and provide you with special offers and promotions and determine their effectiveness.

SHPTX may use third-party partners that participate in the Digital Advertising Alliance’s Self-Regulatory Program for Online Behavioral Advertising or the Network Advertising Initiative Consumer Opt-Out, which allow consumers to opt-out of targeted advertising based on web activity tracking. For more information regarding the foregoing, please visit www.aboutads.info/choices/ and www.networkadvertising.org/choices/#completed . Please note that even if SHPTX’s third party partners participate in these programs, if you opt out of targeted advertising based on web activity tracking, you still may receive standard advertisements from us and targeted advertisements from third parties. You may need to re-click the links and follow the instructions provided again if you delete cookies or other Collection Technology or use a different computer, device or browser.

7. Disclosures to Third Parties

SHPTX does not share, sell or rent any of your personally identifiable information that we collect, except with your consent or as described in this Privacy Policy. We do not share, sell or rent personally identifiable information to third parties for their direct marketing purposes independent of SHPTX. We may share personally identifiable information with our affiliates and third parties who work on behalf of or with us, under confidentiality or similar agreements including, without limitation, benefit administrators, shippers, vendors, agents, consultants and affiliates (“Service Providers”). These Service Providers may use your personally identifiable information to provide certain services directly to you or to help SHPTX administer its business or the Websites, including, without limitation, to assist in administering and processing payments, printing and shipping ID cards to SHPTX members, fulfilling orders, shipping and confirming orders, hosting the Websites, communicating with you about offers or other information relevant to SHPTX, and/or to perform the other tasks that SHPTX may use personally identifiable information for under this Privacy Policy.

SHPTX may share personally identifiable information about you in response to or to cooperate with law enforcement, government requests, subpoenas, court orders or legal process; for fraud prevention; to respond to your requests for customer service or other information; to enforce the Websites' Terms of Use or any other applicable terms; to establish or exercise our legal rights or defend against legal claims; or to protect the safety or property of SHPTX or others. SHPTX also may share information about you if SHPTX believes it is necessary to share information to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required or permitted by law. SHPTX also reserves the right to transfer personally identifiable information to any SHPTX affiliate or a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of our business, assets or operations (including, without limitation, in connection with bankruptcy or any similar proceedings).

In addition to the uses discussed above, SHPTX may use non-personally identifiable information in any manner so long as SHPTX uses such information in its de-identified form. For example, SHPTX may share non-personally identifiable information with third parties and Service Providers that SHPTX reasonably believes need such information or to perform the other tasks that SHPTX may use non-personally identifiable information for under this Privacy Policy, as well as under the circumstances described in the preceding paragraph. If De-Identified Data is shared, we will ask our contracting parties to agree to keep such data in its de-identified and/or aggregated form.

The Site also may contain plugins for social media websites, such as Facebook, Twitter and YouTube. We recommend that you review the privacy policies that apply to these plugins, prior to clicking on such plugins.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

8. Protection of Personally Identifiable Information

SHPTX cannot guarantee the security of the information on and sent from the Websites or by email. SHPTX uses reasonable physical, technical and administrative safeguards against foreseeable risks, such as unauthorized access. No transmission of data over the internet is guaranteed to be completely secure. It may be possible for third parties not under the control of SHPTX to intercept or access transmissions or servers unlawfully. While we strive to protect personally identifiable information, neither SHPTX nor our service providers can ensure or warrant the security of any information you transmit to us over the internet. Any such transmission is at your own risk. SHPTX is not responsible for the acts and omissions of any third parties.

9. Your Rights and Choices

You may have rights and choices regarding our use and disclosure of your personally identifiable information.

1. Correcting or removing your personally identifiable information. To correct or remove your information gathered by SHPTX through the Websites, please contact:

   SCAN Health Plan Texas, Inc.
   Attn: Member Services
   3800 Kilroy Airport Way, Suite 100
   Long Beach, CA 90806

    

   You may also log into your account and go to the My Profile page.

2. Opting out of receiving electronic communications from us. You will not receive promotional electronic communications from us unless you have opted in to receive such communications. If you no longer wish to receive promotional email communications from us, you may opt out via the unsubscribe link included in such emails or by contacting us using the information in the Contact Us section or by contacting us at https://www.scanhealthplan.com/contact-us/prospect-unsubscribe. We will comply with your request as soon as reasonably practicable. Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required in order to provide you with our Services or for other reasons disclosed in this Policy.

10. Permitted Users

The Websites are directed to persons 18 years of age or older and are not directed to persons under 18 years old. The Websites and SHPTX do not knowingly collect information from persons under age 18.

If you are a parent or guardian and you are aware that a child under age 13 has provided us with their information without parental consent, please contact us using the information in the Contact Us section. If we become aware that we have collected personal information from children under age 13 without verification of parental consent, we will take steps to remove that information from our servers.

11. Links

On the Websites, you may have the opportunity to follow a link to other websites that may be of interest to you. SHPTX endeavors to link only to reputable organizations. Because these other websites may not be hosted or controlled by SHPTX, we are not responsible for the privacy practices of those websites or the content provided thereon, which may be different from the Websites. Collection Technology also may be used by some of those other websites. We encourage you to review the privacy policies of each of those other websites. This Privacy Policy only applies to information collected and maintained by or on behalf of SHPTX.

12. International Data Transfers

The Websites are directed to individuals residing in the United States and are operated exclusively from the United States. Those who choose to access the Websites from locations outside of the United States do so on their own initiative, and are responsible for compliance with local laws if and to the extent local laws are applicable, including without limitation, all applicable laws, rules and regulations regarding the transmission of data exported from the United States or the country in which you reside. SHPTX may limit the Websites' availability, in whole or in part, to any person, geographic area or jurisdiction, at any time in its sole discretion.

Personally identifiable information collected through the Websites and other aspects of SHPTX’s business may be stored and processed in the United States or any other country in which SHPTX or its affiliates, subsidiaries or Service Providers maintain facilities. By using the Websites, you expressly consent to any such transfer of information outside of your country.

13. Contact Us

If you have any questions about this Privacy Policy or the Websites, please contact us at webmaster@scanhealthplan.com . Please note that email communications may not be secure. Accordingly, you should consider this if you include personal or other sensitive information in your email correspondence to the Websites or SHPTX.