MyHealthFolders℠. My Health in My Hands

Privacy Statement

Effective Date: April 11, 2005

Last Revision Date: None

BJC HealthCare has created this statement to demonstrate our commitment to protecting your privacy. This statement explains our information gathering and dissemination practices.

BJC designed this web site to enable users to create an independent health and contact record available at anytime through the internet (“Personal Health Record”). In order to use this web site, you may enter personal health information and other information about you. We will manage this information appropriately, including the health information entered on your Personal Health Record, which we will maintain in compliance with state and federal privacy laws.

Before registering with myhealthfolders.com (the ”Site“), you should be aware of our policies on the types of information we collect, how this information is used, who is allowed access to this information and the steps we take to protect your information. If you have any questions or concerns with our Privacy Statement, please contact our Customer Support Center at (800) 735-8702.

---

INFORMATION WE COLLECT.
We collect certain personal information from you at various points for various reasons. The following is a description of what information is collected:

1. Registration Information – When you register with this Site, we will collect certain identifiable information in order to identify and register you as a member of myhealthfolders.com. When you register at the Site, we ask you for a few items of personal information.
   
   
2. Personal Health Record Information – BJC, as the site sponsor, collects your personal health information or contact information as part of the service. The information you include in your Personal Health Record while you are on myhealthfolders.com will be disclosed by BJC only to those health care professionals you choose to grant access to your account.
   
   BJC will not normally release your information to any third party except those engaged by BJC who are directly involved with maintenance or upgrading the web site. Additionally, BJC will release your information in compliance with appropriate legal or law enforcement requests.

---

HOW IS THIS INFORMATION USED.

1. On Site Activities – BJC may track users requests, inquiries and traffic patterns as part of our own internal monitoring of patterns of usage, audience size, repeat usage and internal audits.
   
   While you are logged into our Site, BJC will log your IP address (a number assigned to your computer when you use the internet), your browser type and platform and access times.
   
   BJC monitors your activity while you are reviewing and using this Site. This information does not generally contain personal information. We perform these activities to maintain the functionality of the web site and notify you whenever your account is accessed.
   
   Cookies – The first visit you make to this Site places a ‘cookie’ on your computer. A cookie is a file used to personalize the web site for you based on your initial and subsequent visits. The cookie will allow you to see or not to see items upon subsequent visits. This technology is not intended to identify you to us in any way.

---

TO WHOM IS THIS INFORMATION DISCLOSED.
When you become a member of myhealthfolders.com, you will enter your personal information or the personal information of family members in your Personal Health Record. BJC stores this information on secured web servers. Only BJC employees, agents or third parties working on BJC’s behalf have access to this information in connection with web site maintenance or upgrades or if you specifically authorize access by such parties. These parties may in turn disclose this information to health care providers at your request or if a healthcare provider gives your emergency card number to the help desk in an emergency.

1. Although we will not normally release your information to third parties, except as described above, we may be required to release your information in response to a valid legal or law enforcement request.
   
   How we use your information. – We will use your information to set up, manage and run your account. We will, for the most part, only contact you with services related communications, such as account access details and subscription reminders. Your personal health information and the personal health information of you family members is stored and organized for your benefit and for the benefit of those health care providers you choose to allow access to your information. Therefore, you ultimately control who is allowed to access this information.
   
   All information sent to and from your account through the internet is encrypted. Further, much of your particularly sensitive information (i.e., name, address, social security number, health information, etc.) is encrypted while it is stored in the database on BJC’s web server.

---

THE INFORMATION CONTAINED IN YOUR PERSONAL HEALTH RECORD MAY BE UPDATED, DELETED OR CORRECTED BY YOU.
You are the only one who controls the data contained in your account. As such, you may update, delete or change the information in those records at any time for an unlimited number of times.

1. BJC will delete records of accounts from our database that have remained dormant for two (2) years. Since we back up our system, we cannot guarantee that each version of your data will be deleted. We will, however, continue to treat all information on our servers as confidential, whether the data pertains to current or non-current members.

---

CHILDREN UNDER THE AGE OF 13 YEARS.
This Site is not intended to attract children under the age of 13. In accordance with the Children’s Online Privacy Protection Act (COPPA), BJC will not knowingly collect or accept personally identifiable information from a child under the age of 13 without a parent?s or guardian’s prior consent.

LINKS TO OTHER SITES.
While you are using this Site, you may be linked or directed to other third party web sites outside the Site that are beyond BJC?s control. Each of these third parties may have privacy policies different from that of BJC. These links and banners may take you to the web sites of advertisers, sponsors and co-branding partners. BJC is not responsible for any actions or policies of such third parties. These other web sites may send their own cookies to users, collect data or solicit personal information. You should review the applicable privacy policies of these third party web sites before providing personally identifiable information.

SECURITY PROCEDURES WE USE.
BJC stores your information on secured servers, which are maintained in secure areas. BJC utilizes secured socket layer (128 SSL) encryption when transmitting your personal health and other information. All such data transmitted to and from the BJC web server is sent and stored in encrypted format. The only people authorized to have access to our servers are employees, agents and third parties working on BJC’s behalf who will maintain and upgrade the web site and server. Any person working on the web site and server will sign confidentiality statements.

1. The internet can be an unpredictable medium. Therefore, BJC will take reasonable security precautions to keep your data safe during storage and transmission. However, there are steps you can take to assist protecting your information. You should not share your passwords with others. Also, when accessing your information, use a computer with firewalls. Finally, always log off and close browsers when finished visiting the Site.

---

CHANGES IN THESE TERMS.
We may change this Privacy Statement from time to time and will post notices on this Site at the time of any material changes to this Privacy Statement. Your continued use of this Site following the posting of changes to these terms will mean you accept those changes.