Grapevine Women's Health

Patient Portal Terms and Conditions

These terms and conditions constitute a binding agreement between you and Grapevine Women's Health ("we," "us," or "our").

The Patient Portal is an Internet service that allows our patients to: communicate with us; access their health records; request or reschedule appointments; view and update personal information; request prescriptions; receive test results; read patient educational material; view statements; pay bills; and access related services and content.

The Patient Portal is provided on behalf us and our physicians, employees, managers, officers, directors, agents, and representatives and powered by athenahealth, Inc. (all of the foregoing, collectively, the "Practice Entities"). The Practice Entities are intended third-party beneficiaries of this agreement and entitled to enforce all terms and conditions of this agreement.

By accessing or using the Patient Portal, you confirm that you agree to these terms and conditions. If you don't agree, don't use the Patient Portal. By agreeing to these terms and conditions, you acknowledge that you are at least 18 years of age, or legally emancipated, and that you are requesting access to Patient Portal. You acknowledge that Patient Portal is offered as a courtesy to our patients and agree that we may limit or discontinue your use of Patient Portal at any time for any reason.

Minimum Requirements and Security

• This website uses encryption software. In order to use Patient Portal, you must have:
  • a personal computer equipped with an Internet browser that has 128-bit encryption enabled and configured to accept cookies (e.g., Internet Explorer 7 or 8, Safari, or Firefox; Internet Explorer 6 may not allow you to view some materials, such as test results);

  • Internet access, a valid email account, software to receive and read email messages, and spam filters set to accept email from our domain; and

  • Adobe Reader installed (to download a copy of Adobe Reader, please go to http://www.adobe.com/products/acrobat/readstep2.html).

• While we use state-of-the-art security, no system can guard against risks of intentional intrusion or inadvertent disclosure of information. When using Patient Portal, information may be transmitted over media that are beyond the control of the Practice Entities and their contractors and subcontractors and that may not be secure. For example, you may receive email, text, or telephone communications in connection with your use of Patient Portal, all of which are inherently unsecure and subject to disclosure to or access by third parties (e.g., if your phone is used by someone else, you do not keep your phone or email information up to date on Patient Portal and communications are misdirected, or the network or systems of a telecommunications provider are hacked). Furthermore, electronic services such as those provided by the Practice Entities, their contractors and subcontractors, and any telecommunications providers involved in the transmission of data are all inherently subject to failure and none of the foregoing can guarantee that their services will be provided without error or interruption at all times that you may wish to use those services. YOU HEREBY EXPRESSLY ASSUME THE RISK OF ANY UNAUTHORIZED DISCLOSURE OR INTENTIONAL INTRUSION, OR OF ANY DELAY, FAILURE, INTERRUPTION, OR CORRUPTION OF DATA OR OTHER INFORMATION TRANSMITTED IN CONNECTION WITH THE USE OF ANY SERVICE RELATED TO PATIENT PORTAL. Once information is received by us, your medical information will be treated as confidential and given the same protection that all of our other medical records are given.

Security, Confidentiality, and Usage Guidelines for Patient Portal

• YOU MUST NOT SEND ANY MESSAGES REQUIRING URGENT ATTENTION USING PATIENT PORTAL. Doing so may create a delay in your receiving necessary medical treatment and could result in loss of life, permanent injury, or significant deterioration in your health. If you believe that you have an urgent medical matter, you should call 911 immediately or proceed to the nearest emergency room. If the matter is not urgent but you need a response in less than two business days, please contact your clinician's office directly by telephone during our regular business hours, which you may find on the log-in screen for Patient Portal.

  FOR ALL MEDICAL EMERGENCIES, IMMEDIATELY CALL 911

• Patient portal is designed as a secure Internet-based environment through which you may receive confidential medical information about yourself. When you initially enroll to use the Patient Portal, you will need to confirm your identity via two unique workflows, as well as establish an email and a confidential password for login credentials. Please DO NOT SHARE YOUR PASSWORD with anyone. Anyone with access to your password will be able to view your medical and financial information and communicate with your health care team as if that person were you. Thus, when you give someone your password, you are authorizing that person to access your account, and you are responsible for all transactions that person performs while using your service. It is your responsibility to prevent disclosure of your password and to change your password if you feel that your security has been compromised. If you believe that your password has become known to an unauthorized person and want verification of any changes that may have been made to your account, please contact us for assistance. You can change your password in the Patient Portal at any time by clicking the "Security Settings" link under "My Profile."

• You may request a Patient Portal account for yourself. You may not request or access a Patient Portal account for anyone else, except that a parent or guardian may request and access an account on behalf of a minor child. By accepting these terms and conditions, you certify that you are authorized to open or access the account you are requesting and that all information you have provided to us is true and correct to the best of your knowledge.

• Once you have activated your Patient Portal account, the Patient Portal Inbox will become the primary vehicle to receive important messages from your participating provider(s) and other personal medical information. You MUST provide us with your email address when activating your Patient Portal account and keep your email address current via the My Profile link, to ensure that you receive notification of newly released information in a timely manner. You may continue to receive communications via the United States Postal Service or other means from us.

• We keep track of the pages our patients visit within Patient Portal, in order to determine what services are the most popular. This data is used to deliver customized content within Patient Portal to patients whose behavior indicates that they are interested in a particular subject area.
• We secure your personal information from unauthorized access, use or disclosure. The personally identifiable information you provide is maintained by us on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. When personal information is transmitted from your PC and/or mobile devices to Patient Portal, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol. As a user of Patient Portal you hereby agree that you (and not the Practice Entities) are solely liable for viruses, worms, Trojan horses, cancel bots, and other electronic mechanisms designed to destroy or impair the functioning of computer systems already residing on your PC and/or mobile device.
• When you use the Patient Portal, we collect personally identifiable information, such as your email address, name, home address, telephone number, ZIP code, age, gender, contact preferences, access times, and account activity. This information is used by us for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of Patient Portal. We may share data with business associates working on our behalf to help us perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. We encourage you to review the Privacy Statement for further information regarding how your personal information may be used.
• Cookies are used for system performance functionality. You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Patient Portal services.

How We Protect Your Personal Health Information

• We consider the privacy of your health information to be one of the most important elements in our relationship with you and one we take very seriously. By accessing or using Patient Portal, you acknowledge that you have received and read a copy of our Notice of Privacy Practices, which can be found in paper copy at our office locations or through your Patient Portal account under the "Forms" link.

• We are committed to protecting the privacy of the information you send and receive through Patient Portal, and will only collect and use such information as permitted under the Patient Portal Privacy Statement, which can be found online within Patient Portal. By using Patient Portal, you also consent to all of the terms and conditions described in the Privacy Statement.

• All communications between you and our health care team using Patient Portal are carried over a secure, encrypted connection directly into our electronic medical record. While you may receive email messages notifying you of new messages in your Patient Portal Inbox, these emails will not contain any personal health information. It is your responsibility to login to your Patient Portal account and read the messages promptly.

Your Responsibilities

• Patient Portal is a communication service offered as a convenience to our patients. We reserve the right to change the terms, conditions, and notices under which Patient Portal is offered. By accessing or using Patient Portal, you further agree that any and all such modifications are effective and binding upon you immediately upon posting of the modified version. We reserve the right in the future to charge a fee for the use of Patient Portal. You will be notified in advance of any such change and asked to re-apply if you agree to the fee and wish to continue with the Patient Portal service.

• You understand that by accepting the terms and conditions of this Agreement you are agreeing to receive your patient balance statements delivered electronically to your Patient Portal account. You have the option at any time to revert back to receiving your patient balance statements as paper statements sent to you via U.S. Mail. You may exercise that option by checking the appropriate checkbox located at the bottom of the Billing Tab in Patient Portal under "Patient Preferences."

• You acknowledge that by entering your home and/or mobile telephone number into Patient Portal you are providing written consent for the Practice Entities to send automated, prerecorded, or artificial voice telephone calls to all provided numbers. You may opt-out of receiving these calls on the "Contact Preferences" page, located under the My Profile tab.
• You understand that Patient Portal provides you with online access to some clinical information about you. You are solely responsible for any sharing of Patient Portal content that you intentionally or unintentionally communicate to others.

Patient Portal Messaging

• By using Patient Portal, you acknowledge and agree that this messaging service is intended to facilitate dialogue regarding personal health matters. You agree not to use Patient Portal to post or send or post any illicit or offensive material.

• You understand that messages will be routed to the appropriate department as necessary for handling, and therefore our employees other than your physician, nurse practitioner, or physician's assistant may be involved in addressing your request. If your physician is out of the office or unavailable to respond, messages sent via Patient Portal may be routed to other authorized healthcare providers within our practice to facilitate a timely response to your request. Therefore, use of Patient Portal may not be appropriate if there is sensitive information that you want to discuss directly with your healthcare provider.

• You understand that your health care team may send you messages, test results, and other communications via Patient Portal as authorized in the sole discretion of your physician. These messages may contain information important to your health and medical care. It is your responsibility to monitor these messages. By entering your valid and functional email address at registration, you have enabled us to notify you of messages sent to your Patient Portal Inbox.

Discontinuing Use of Patient Portal

• You may discontinue your use of Patient Portal at any time by sending a secure message to your primary care provider's office requesting this change.

• We reserve the right, in our sole discretion, to limit or discontinue your use of Patient Portal at any time and for any reason, including, but not limited to, your use of Patient Portal on behalf of another person.

• Your Patient Portal service will be discontinued if you no longer have a primary care provider who participates in Patient Portal at your practice.

• You will be notified if your Patient Portal service is discontinued.

Your Clinical Information

• As we provide your health care, we are required to maintain documentation of your medical history, current conditions, treatment plan, and all treatments given, including the results of all tests, procedures, and therapies. Patient Portal is an Internet application that enables a patient to have secure web-based access to personal clinical information, as released by the treating physician, and allows secure electronic messaging with our participating physicians. By using Patient Portal, you understand that not all of your medical record with us will be accessible through your Patient Portal account. Posting of information to your Patient Portal account is at the sole discretion of your individual physician(s).

• Messages you send or receive via Patient Portal may become part of your permanent medical record at the sole discretion of your physician. If such messages are made part of your permanent medical record, they will be accessible to our current and future staff members who are involved with your care.

• All of our electronic medical records are subject to state and federal regulations governing the security and confidentiality of medical records.

Copyright and Trademarks

All content included in Patient Portal and on all of our, including, but not limited to, text, photographs, graphics, button icons, images, artwork, names, logos, trademarks, service marks, and data ("Content"), in any form, are protected by U.S. and international copyright and trademark law and conventions. The Content includes both Content owned or controlled by one or more of the Practice Entities, as well as Content owned or controlled by third parties and licensed to one or more of the Practice Entities, and no right, title, or interest is granted to you in or to any Content other than the right to use such content in connection with your use of Patient Portal. Reproduction of any Content, in whole or in part, by any means, is prohibited without our express written consent.

Site Access and Licenses

• We grant to you a non-assignable, non-sublicensable, terminable, limited license to make personal use of our website, Patient Portal, and the associated services in accordance with these terms and conditions. This license expressly excludes, without limitation, any reproduction, duplication, sale, resale, or other commercial use of the website, Patient Portal, or any of the associated services; making any derivative of the website, Patient Portal, or any of the associated services; and the collection and use of user email addresses or other user information (including, without limitation, health information or any data extraction or data mining whatsoever).

• Failure to comply with any of the terms and conditions contained herein may result in revocation of your license and cancellation of your Patient Portal account, including the right to access information through Patient Portal. We reserve the right to report violations of law to appropriate law enforcement agencies and to pursue all other rights and remedies available to it under civil or criminal law.

Links to Third-Party Websites

This website and Patient Portal contain links to websites operated by other parties. The Practice Entities do not sponsor, operate, control, or endorse any of these sites, nor the information, products, or services provided by third parties through the Internet, nor do the Practice Entities make any guarantee, warranty, or representation regarding the accuracy of the information contained on the websites. The Practice Entities have no control over the security or privacy practices of these external websites. Use of other sites is strictly at your own risk including, but not limited to, any risks associated with destructive viruses. You are responsible for viewing and abiding by the terms and conditions of use and the privacy statements of the other websites.

No Warranties

This Patient Portal and all other sites hosted by any of the Practice Entities and the content contained herein and therein are provided by the Practice Entities on an "As Is" basis. THE PRACTICE ENTITIES MAKE NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, AS TO THE OPERATION OF ITS SITES, OR THE CONTENT, PRODUCTS, OR SERVICES INCLUDED THEREIN. TO THE FULLEST EXTENT PERMISSIBLE BY APPLICABLE LAW, THE PRACTICE ENTITIES DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND INFRINGEMENT.

Limitation of Liability

• Some of the material on our website and in Patient Portal is provided by third parties, and the Practice Entities shall not be held responsible for any such third-party material. The Practice Entities disclaim any responsibility for, or liability related to, such third-party material. Any questions, complaints, or claims related to any product should be directed to the appropriate third party.

• None of the Practice Entities or any of their contractors or subcontractors shall be liable for any loss, injury, illness, damages, or claims of any kind resulting from your failure to timely read messages you may receive through Patient Portal.

• If you have any basis for recovering damages from the Practice Entities or its affiliates or vendors, you can only recover direct damages up to $10. You cannot recover any other damages, including consequential, lost profits, special, indirect, incidental, or punitive damages.

• Some or all of these limitations or exclusions may not apply to you if your state, province, or country does not allow the exclusion or limitation of incidental, consequential, or other damages.

General

By using our website (including, but not limited to, Patient Portal), you agree that the laws of the Commonwealth of Massachusetts, without regard to principles of conflict of laws, will govern these terms and conditions and any dispute that might arise between you and any of the Practice Entities. You expressly agree that exclusive jurisdiction for any dispute with any of the Practice Entities resides in the courts of Middlesex County, Massachusetts, and you further agree and expressly consent to the exercise of personal jurisdiction in the courts of Middlesex County, Massachusetts, in connection with any claim involving any of the Practice Entities. Use of our website is unauthorized in any jurisdiction that does not give effect to the terms and conditions set forth herein.

Your Rights

You have the right to:

• Get a copy of your paper or electronic medical record
• Correct your paper or electronic medical record
• Request confidential communication
• Ask us to limit the information we share
• Get a list of those with whom we've shared your information
• Get a copy of this privacy notice
• Choose someone to act for you
• File a complaint if you believe your privacy rights have been violated

Your Choices

You have some choices in the way that we use and share information as we:

• Tell family and friends about your condition
• Provide disaster relief
• Include you in a hospital directory
• Provide mental health care
• Market our services and sell your information
• Raise funds

Our Uses and Disclosures

We may use and share your information as we:

• Treat you
• Run our organization
• Bill for your services
• Help with public health and safety issues
• Do research
• Comply with the law
• Respond to organ and tissue donation requests
• Work with a medical examiner or funeral director
• Address workers' compensation, law enforcement, and other government requests
• Respond to lawsuits and legal actions

Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.

Get an electronic or paper copy of your medical record

• You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. Ask us how to do this.
• We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Ask us to correct your medical record

• You can ask us to correct health information about you that you think is incorrect or incomplete. Ask us how to do this.
• We may say "no" to your request, but we'll tell you why in writing within 60 days.

Request confidential communications

• You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.
• We will say "yes" to all reasonable requests.

Ask us to limit what we use or share

• You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say "no" if it would affect your care.
• If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say "yes" unless a law requires us to share that information.

Get a list of those with whom we've shared information

• You can ask for a list (accounting) of the times we've shared your health information for six years prior to the date you ask, who we shared it with, and why.
• We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We'll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.

Get a copy of this privacy notice
You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

Choose someone to act for you

• If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
• We will make sure the person has this authority and can act for you before we take any action.

File a complaint if you feel your rights are violated

• You can complain if you feel we have violated your rights by contacting us using the information on page 1.
• You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
• We will not retaliate against you for filing a complaint.

Your Choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.
In these cases, you have both the right and choice to tell us to:

• Share information with your family, close friends, or others involved in your care
• Share information in a disaster relief situation
• Include your information in a hospital directory

In these cases we never share your information unless you give us written permission:

• Marketing purposes
• Sale of your information
• Most sharing of psychotherapy notes

In the case of fundraising:

• We may contact you for fundraising efforts, but you can tell us not to contact you again.

Our Uses and Disclosures

How do we typically use or share your health information?

We typically use or share your health information in the following ways.

Treat you

Run our organization

Bill for your services

How else can we use or share your health information?

Help with public health and safety issues

Do research

Comply with the law

Respond to organ and tissue donation requests

Work with a medical examiner or funeral director

Address workers' compensation, law enforcement, and other government requests

Respond to lawsuits and legal actions

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

Changes to the Terms of this Notice
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request.

Patient Portal - Privacy Policy

Table of Contents

1. Scope and purpose of this policy
2. What information do we collect?
3. How do we use your information?
4. Sharing your information
5. California Residents
6. Updates to this privacy policy
7. Our data protection and security policy
8. Our Contact Information

PLEASE NOTE: The terms set forth below apply to your use the Patient Portal (“Portal”) identified in this Privacy Policy. Your use of “Login with athenahealth” is governed by the LOGIN WITH ATHENAHEALTH ACCOUNT TERMS OF USE AND PRIVACY POLICY for “LOGIN WITH ATHENAHEALTH” user accounts available here:https://myidentity.platform.athenahealth.com/static/help/terms.html and https://myidentity.platform.athenahealth.com/static/help/privacy.html

Scope and purpose of this policy

The Patient Portal (the “Portal”) is an Internet service, powered by athenahealth, Inc. (“athenahealth”, “our”,“us”, or “we”), which allows patients and other authorized users to coordinate and manage their medical care with their health care providers. This privacy policy (the “Policy”) describes the practices of the Portal with regard to information about you that we obtain through your use of the Portal. We offer the Portal on behalf of our Covered Entity clients (“Clients”), as a Business Associate under the Health Insurance Portability and Accountability Act (“HIPAA”).

In order to use the Portal, you must have an account with a healthcare provider who uses athenahealth's software (“Services”). Because of this, your use of our Portal is also subject to your healthcare provider's, our Client's, privacy policy. You understand that while connected or attempting to connect to a healthcare institution's system, the healthcare institution may collect, store, process, maintain, upload, sync, transmit, share, disclose, and use certain data and related information, including information or data regarding the characteristics or usage of your device, system and application software, and peripherals as well as your personal information, location data, and other content. For questions on those practices, please consult your healthcare provider/institution.

If you use the Portal to access or share data with websites, applications, platforms, services, solutions or portals of any third parties (including, but not limited to, any other patient portals offered by any healthcare provider(s)) (each, a “Third Party Platform”), the privacy policies and terms of such other Services and Third Party Platforms will apply to your use of such Third Party Platform(s). We do not control and are not responsible for Third Party Platforms or any information you may share with, or access from, any Third Party Platforms, whether using the Portal or otherwise.

The Portal is not intended for use by anyone outside of the United States.

Any unauthorized registration for, access or use of the Portal, our Services, client accounts or Third Party Platforms is strictly prohibited.

Return to top

What information do we collect?

• Information you provide us:
  • When you register for the Portal, we may ask you to provide demographic information including, but not limited to, the following:
    • First name, Last name, date of birth, gender, email address, and phone number(s).
    • If you are a caregiver registering for the Portal, we may also ask for your first and last name, identification of the nature of your relationship with the patient and information related to your access to the Portal.
    • Any other information you provide to us while you use the Portal or communicate with us in connection with your use of the Portal.
• Information we automatically collect from your use of the Portal:
  • When you communicate with us or access the Portal and servers through a browser, application, or other client, our servers automatically collect and record information. In most cases, this information is generated by various tracking technologies, such as “cookies,” “flash LSOs,” “web beacons” or “clear GIFs.”
  • We access cookie technologies on your computer to improve Portal users' experience, including but not limited to: storing user session IDs and enabling "remember me" functionalities for simplified log-in procedures on trusted devices as well as language preference details to facilitate viewing of the Portal.
  • We may automatically collect information (and may store it in our server logs) regarding your use of our services and the content you viewed. This information may include: your IP address; device specific information about the device you used to access the Portal; the patterns of searching and browsing that preceded access to the Portal; and the patterns of searching and browsing on the Portal in order to improve our services and for security purposes.
  • The Portal does not respond to web browsers' Do Not Track signals.

Return to top

How do we use your information:

• We may use your information for the following purposes on behalf of your health care provider including, but not limited to, those listed below:
  • For purposes of making the Portal available for your use;
  • To allow you and any other users you authorize to coordinate and manage your medical care with your health care providers.
  • To respond to your inquiries and fulfill your requests;
  • To inform you about relevant and important information about the Portal, provide to you communications from your provider(s)/our Clients, updates to terms & conditions, and policies, and other relevant administrative changes and information relating to the Portal;
  • To pull requisite data to adhere to government incentive programs, including but not limited to, your health care provider's achievement of government quality programs through their engagement with the Portal;
  • To provide Services to our Clients.
  • To improve the Portal offering to our Clients. For example, we may use the data collected through your use of the Portal so that athenahealth can: enhance the functionality of the Portal, perform data analysis, conduct and respond to audits, and comply with all laws, regulations, and law enforcement requirements;
  • To conduct internal reporting;
  • To inform you of the opportunity to participate in surveys or provide feedback related to your use of the Portal;
  • To plan and execute security and risk control measures, like fraud and abuse detection and prevention for athenahealth or our Clients;
  • We may de-identify and aggregate your data, for business purposes in accordance with our agreements with our Clients (healthcare providers) and applicable law;
  • We may also use the data collected through your use of the Portal for our own proper management and administration.

Return to top

Sharing your information:

• We may share your information with our HIPAA Covered Entity Clients,your healthcare providers. Those Clients include medical groups, practices, hospitals, health systems, and physicians, specialists and staff;
• We may share your information with third parties that you consent to or direct us to send/receive information to/from;
• We may share your information with our third party vendors, consultants, agents, and other service providers with whom we contract as a Business Associates under HIPAA to help us provide or improve the Portal.
• We may also share your information when:
  • You have given us your consent to share or use information about you;
  • We believe that we need to share information about you to provide a service that you have requested from us or from your health care provider/ our Clients;
  • We are complying with laws or responding to lawful requests and legal process or responding in an emergency situation;
  • We believe it is necessary to protect our rights and the security of our Portal, or the rights of our customers or partners, or to avoid liability or violations of the law; or
  • We may also disclose your information in connection with or during negotiation of any merger, financing, acquisition or bankruptcy or any transaction or proceeding involving sale or transfer of all or a portion of our business or assets.

Return to top

California Residents

As described above, the information we collect through the Portal is HIPAA protected health information or otherwise covered by the California Confidentiality of Medical Information Act. Therefore, our practices with respect to the Portal are exempt from the California Consumer Privacy Act (the CCPA).

Updates to this privacy policy:

athenahealth reserves the right to make periodic updates and revisions to this Policy. Your use of the Portal after we make changes is deemed to be acceptance of those changes. Please check periodically for updates. To the extent required by applicable law, we will also attempt to notify you by email or other method when we make material changes to this Policy. If you have any specific questions about this policy, please contact us at consumerprivacyrequests@athenahealth.com.

All other Portal support requests (e.g. trouble logging in, password assistance, access to family members information etc.) or general questions about the Portal should be directed to your medical provider or their office staff by signing into the Patient Portal and sending a secure message or calling your medical provider's office. athenahealth is unable to respond to general support inquiries sent to this email address.

Return to top

Data protection and security:

• We have implemented technical, administrative, and physical safeguards, which are designed to protect your information from unauthorized use and access.
• You may not assign or transfer your Portal account or share your Portal login, password or any other credentials with any other person without our consent. Please notify us immediately if you believe the security of your Portal account may have been compromised.

Return to top

Our contact information:

If you have any questions about this Policy or any other aspects of your privacy with respect to athenahealth (including our processing of your personal information), please contact us at: athenahealth, Inc., Attn: Chief Compliance Officer, 311 Arsenal Street, Watertown, MA 02472.

Below you will find answers to commonly asked questions concerning the website. For technical issues with this website during normal business hours, please contact our office.