PRIVACY POLICY

Patient2Patient appreciates that many patients and caregivers are concerned about their privacy. This privacy policy explains how we protect your information.

This privacy policy covers both the policies of Patient2Patient, LLC and those companies that we use to facilitate and process the purchases of subscriptions to our Patient2Patient WebGuides.

Site Visitors

Personally Identifiable Information

Personally identifiable information includes your name, address, zip code and telephone number, e-mail address or any other information which might reasonably be used to identify you individually. Patient2Patient does not collect any personally identifiable information from Web site visitors.

We do not collect personal information about you when you visit our Web site unless you choose to provide that information to us.

Cookies

Patient2Patient may also collect information from you that is not personally identifiable. For example, we might track information about the date and time visitors access our site, the type of web browser they used, and the Web sites from which they connected to our site. Our Web sites collect this information by depositing certain bits of information called "cookies" in a visitor's computer. This technology does not collect an individual visitor's personally identifiable information, rather this information is collected in an aggregate form. The "cookies" can tell us how and when pages in a Web site were visited and by how many people. This aggregate information will enable us to improve our Web site to serve and inform you better. It also may allow you to shortcut accesses to point of interest on our Web site when you reenter our system. Attaching this device to your system has no effect on how it performs.

IP Address

An Internet Protocol (IP) address is a number that is automatically assigned to your computer by your Internet Service Provider (ISP) whenever you access the Internet. This number may be the same each time you access the Internet or it may change. Like other Internet sites, Patient2Patient uses IP addresses to collect aggregate information about numbers of visitors and site usage. The address is logged on our server when your computer requests information from Patient2Patient. However, to allow users to access our site anonymously, your IP address is not linked with personal information about you. Patient2Patient reserves the right, in rare instances, to use IP addresses to identify individuals who threaten our site, service or customers.

Security

All information transmitted to the Patient2Patient.net Web site is secure to the extent possible using existing technology. Unauthorized third parties should not be able to access it during transmission. We will store any information that you share with us securely and will take appropriate steps to protect it from unauthorized access or disclosure. While no security steps can offer 100 percent protection we utilize state-of-the-art technology and systems to prevent unauthorized access to the information we hold. We will limit access to this information to those Patient2Patient employees who need to know this information.

Emails

If you subscribe to our email list, we will need your email address. We do not require any other information. We do not sell, rent or disclose our email list to any other company, individual or third-party. If you send us an email, we cannot completely ensure the privacy of e-mail communications to and from our site because they are not encrypted and, therefore, not secure. These communications, like most Internet e-mail, could be intercepted without your knowledge and permission, while in transit to or from our site. If you are concerned about your privacy, we suggest that you do not use e-mail to communicate information to us that you consider sensitive.

Subscribers

See the information above for our general privacy policies.

Personally Identifiable Information

Personally identifiable information includes your name, address, zip code and telephone number, and email address. As part of the registration and credit cart payment process Patient2Patient does ask for this information from its subscribers. Patient2Patient maintains this information in a secure manner and does not allow for any third party use of such information.

We do not collect personal information about you when you visit our Web site unless you choose to provide that information to us.

Cookies

Patient2Patient may also collect information from you that is not personally identifiable. For example, we might track information about the date and time visitors access our site, the type of web browser they used, and the Web sites from which they connected to our site. Our Web sites collect this information by depositing certain bits of information called "cookies" in a visitor's computer. This technology does not collect an individual visitor's personally identifiable information, rather this information is collected in an aggregate form. The "cookies" can tell us how and when pages in a Web site were visited and by how many people. This aggregate information will enable us to improve our Web sites to serve and inform you better. It also may allow you to shortcut accesses to point of interest on our Web sites when you reenter our system. Attaching this device to your system has no effect on how it performs.

IP Address

An Internet Protocol (IP) address is a number that is automatically assigned to your computer by your Internet Service Provider (ISP) whenever you access the Internet. This number may be the same each time you access the Internet or it may change. Like other Internet sites, Patient2Patient uses IP addresses to collect aggregate information about numbers of visitors and site usage. The address is logged on our server when your computer requests information from Patient2Patient. However, to allow users to access our site anonymously, your IP address is not linked with personal information about you. Patient2Patient reserves the right, in rare instances, to use IP addresses to identify individuals who threaten our site, service or customers.

When you subscribe, the only information that Patient2Patient collects from you is a user id, which will be the same as your email address. Patient2Patient also requires that you establish a password, which will be known only to you.

We ask for this information - your email address - so that if you lose or forget your password we can send you a temporary password that will allow you to view and download updated WebGuides. If you subscribe to our email list, we will also need your email address.

WebGuide Links

Although we have high standards for the web sites to which we are linked, when you use one of our Patient WebGuides to go to another web site, our privacy policy no longer applies.

Patient2Patient carefully chooses the Web sites which we include in our WebGuides and that we believe will be useful to our subscribers and that meet our criteria for the medical credibility and utility of information. However, because Web site content and privacy policies can change quickly we cannot guarantee the standards of every Web site to which we link. We also cannot guarantee the privacy policies of these sites and always recommend that you check the privacy policies of those sites directly.

Purchasing a WebGuide

In order to facilitate the purchasing of our Patient WebGuides, Patient2Patient utilizes the shopping cart services of ShopSite.

ShopSite's privacy policy states:

"ShopSite and Cookies

ShopSite uses browser "cookies" for both merchant and customer sessions.

When a customer first clicks an [Add to Cart] button to make a purchase, ShopSite sets a cookie to associate the customer with a particular shopping cart.
When a customer enters their shipping and billing information and clicks Submit This Order to complete the order, ShopSite sets another cookie. This cookie contains the billing address (and the shipping address if a separate one is used) that the customer used. It does not contain any credit card information. This cookie is set to expire December 30th of the calendar year following the year the order is placed. If the customer returns to the store from the same computer within this time, ShopSite will detect and read the cookie and the customer will not have to re-enter the address information. If cookies are disabled in a customer's browser, this "memory" feature will not be available to that customer.
ShopSite sets cookies for the merchant during some parts of store creation, such as when uploading images and in parts of the wizard."

Patient2Patient uses Authorize.net for the processing of credit card transactions.

Authorize.net's security and privacy policies concerning credit card transactions are as follows:

"Privacy Statement for Authorize.Net

Authorize.Net takes privacy and data protection issues seriously. We have designed this Privacy Policy to explain how we handle personally identifiable information collected from merchants who register for services and submit information to Authorize.Net through the Internet.As the Authorize.Net services evolve, we may revise this policy, so please check back frequently. If you have questions about Authorize.Net privacy practices please contact us at support@authorize.net.

This Privacy Policy covers Authorize.Net's treatment of personally identifiable information collected from merchants (hereafter "merchant" or "you") who use the Authorize.Net payment gateway services, as well as consumer information that we acquire in the course of our business. This Policy also covers the treatment of personally identifiable information that Authorize.Net's business partners may share with it.

This Policy does not apply to the practices of companies that Authorize.Net does not own or control, or to people that Authorize.Net does not employ or manage. Authorize.Net is a wholly owned subsidiary of InfoSpace, Inc. This Policy is specific to Authorize.Net and does not apply to www.infospace.com or other Web sites or Internet services that are part of the InfoSpace Network.

Information Collection and Use

Authorize.Net collects personally identifiable information when you register for an Authorize.Net account, and when you use certain Authorize.Net products and services.

In the course of processing a payment transaction, we typically receive from the merchant or a financial institution information related to the transaction. This normally includes information about the payment that a consumer has furnished the merchant or financial institution in placing the order. We do not acquire any information directly from consumers through the www.authorizenet.com Web site.

The personally identifiable information we acquire in processing payment transactions varies according to the nature of the transaction and the way in which merchants or financial institutions are using our payment services. It may include, for example, the amount of the transaction, the consumer's name, credit card number and expiration date, checking account number, billing address, and shipping address.

Authorize.Net uses the information collected to fulfill your requests for certain products and services, to process payment transactions, to facilitate billing, and otherwise deliver the payment gateway services.

Personally identifiable consumer information is used to process payment transactions and for no other purpose.

Authorize.Net does not offer services or sell products to children. Authorize.Net does not request or knowingly collect personally identifiable contact information from anyone under the age of 13.

Information Sharing and Disclosure

Protecting personally identifiable information about merchants and consumers is an important part of our business. We share and disclose such information only as described below.

Personally identifiable consumer information is shared with third parties (such as banks and credit card processors) to the extent necessary for Authorize.Net to deliver payment processing services.

We also may release personally identifiable information when we believe release is appropriate to comply with law; enforce or apply our Merchant Agreement and other agreements; or protect the rights, property, or safety of Authorize.Net, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and risk reduction.

Information Security

Information security is critical to our business. We work to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input. We store information gathered on secure computers located in a locked data center. The number of employees involved in the management of the data center that have physical access to these computers is limited. We use firewalls and other security technology to prevent our computers from being accessed by unauthorized persons.

We also require that any personally identifiable consumer information sent to us by you be encrypted using SSL encryption. To learn more about SSL, go to: http://webopedia.internet.com/TERM/S/SSL.html.

Notice for European Users

Authorize.Net is located in the United States. Any information that you provide to Authorize.Net will be transferred out of the EU to the United States. By providing personal information to us, you are consenting to its storage and use as described herein.

Changes to this Privacy Policy

Authorize.Net reserves the right to modify or amend this Privacy Policy at any time and for any reason. If there are material changes to this statement or in how Authorize.Net will use personally identifiable information, Authorize.Net will post notice on the Authorize.Net homepage at www.authorizenet.com prior to implementing the change. If you have additional questions about this Policy, please contact us at support@authorize.net."

Changes

Any changes to this privacy policy will be communicated promptly at this location. Please check our privacy page periodically to review any changes that may have been made.

Effect of Privacy Policy

This privacy policy is not intended to and does not create any contractual or legal rights in or on behalf of any party.