Onduo LLC (“Onduo”) aims to help people with diabetes live full, healthy lives by developing comprehensive solutions that combine devices, software, medicine and professional care to enable simple and intelligent disease management, helping patients and members of their care team better understand, coordinate and manage the care process. Onduo respects the privacy of every individual and has taken extensive precautions to create a process that maintains individual privacy.
- We are committed to providing a secure environment for our services.
- We use the information provided to us to enable your use of our services, provide you with customer service, and authenticate your website visits and usage.
- All information you provide to us is kept on a secure server.
- We do not sell, lease, or rent personal information without your explicit consent.
What Information Do We Collect?
Limited Personal Information: We collect the following personal information about you in connection with the Service: (a) when you register to use the Service, we will collect your username and password; (b) if you pay your fees by credit card, we (or a third party payment processor acting on our behalf) will collect the name, expiration date and credit card number for the relevant card; and (c) if you communicate with us by email but do not otherwise register to use the Service, we will collect your email address. We also collect health-related clinical or patient information in connection with your use of the Service, including Protected Health Information, that may be necessary for you to receive healthcare services, including, without limitation, applicable clinical history and condition, vital sign measures, prescription history, any other information exchanged in emails, chats, or calls between you and Onduo or the medical providers and their professional entities, and any other information to process and respond to your inquiries related to requests for treatment, payment, customer service, and when you provide feedback on the Service. We may receive this information directly or indirectly from third parties that we work with to provide our Services, including, without limitation, Surescripts. All of this information is referred to in this Policy as "Personal Information".
Use of Anonymous Information. We may use Anonymous Information (as defined below), or disclose it to third party service providers, to provide and improve the Service. "Anonymous Information" means information which does not enable identification of an individual user, such as aggregated information about use of the Service.
Web Tracking Information: We, and our third party service providers, may use web tracking technologies such as tagging, cookies, pixel tags and clear GIFs in order to operate the Service efficiently and to collect data related to usage of the Service. Such collected data ("Web Tracking Information”) may include the address of the websites you visited before and after you visited the Service, the type of browser you are using, your Internet Protocol (IP) address, what pages in the Service you visit and what links you clicked on, and whether you opened email communications we send to you. In order to collect Web Tracking Information and to make your use of the Service more efficient, we may store cookies on your computer. We may also use web tracking technologies that are placed in web pages on the Service or in email communications to collect information about actions that users take when they interact with the Service or such email communications, and Onduo’s Contractors (as hereinafter defined) may also do so. Some Web Tracking Information may include data, such as IP address data, that is unique to you. You may be able to modify your browser settings to alter which web tracking technologies are permitted when you use the Service, but this may affect the performance of the Service.
Log Files. When users visit our website, Onduo gathers certain information automatically and stores it in log files. This information includes Internet Protocol (IP) addresses, browser type, Internet Service Provider, referring/exit pages, operating system, and date/time stamp. We use this information to monitor the usage of our site. Also, when we send e-mails to you, we may be able to identify information about your email address, such as whether you can read graphic-rich HTML emails. We use this information not to identify individual users, but to analyze trends, administer the site, track users' movements around the site, and gather demographic information about our user base as a whole which provides us with the ability to determine aggregate information about our user base and usage patterns. We may, in some circumstances, need to review this automatically collected data in combination with specific Registration Information to identify and resolve issues for individual users.
You can choose to have your browser warn you every time a cookie is being sent to you or you can turn off cookie placement. Also, by not using cookies, your overall internet browsing experience will be affected.
User Data: “User Data” is that data -- other than Personal Information -- that caregivers provide us regarding or related to themselves and the person who is receiving care. As described in the Terms of Service, we store User Data in order to provide the Service. We may also correlate User Data with third party data in order to provide the Service. If User Data includes any personally identifiable information or Protected Health Information, we will collect, store, use and disclose that information in the same way that we collect, store and use any of User Data.
How Do We Use the Information We Collect?
Personal Information: We will use and store your Personal Information for the purpose of delivering the Service, and to analyze and enhance the operation of the Service. We may also use your Personal Information for the internal operational and administrative purposes of the Service
Web Tracking Information: We use Web Tracking Information to administer the Service and to understand how well our Service is working, to store your user preferences, monitor your use of the Service, and to develop statistical information on usage of the Service. This allows us to determine which features visitors like best to help us improve our Service, to personalize your user experience, and to measure overall effectiveness.
Aggregate and De-Identified Information: We will also create statistical, aggregated and/or de-identified data relating to our users and the Service for analytical purposes. Aggregated and/or de-identified data is derived from Personal Information and User Data but in its aggregated and/or de-identified form, it does not duplicate or reveal any User Data or relate to or identify any individual. This data is used to understand our customer base and to develop, improve and market our services.
Customer Testimonials: We may post customer testimonials on our web site, and may use testimonials in other formats consistent with consent received. Customer testimonials may contain personally identifiable information. We may use your Personal Information to contact you to obtain a testimonial and obtain your consent via email or agreement sent via fax, pdf or mail prior to using such testimonial and/or using your name along with your testimonial.
Email Communications: If you register and provide your email address, we will send you administrative and promotional emails. If you wish to opt out of promotional emails, you may do so by following the “unsubscribe” instructions in the email, or by editing your account settings as described below. All users receive administrative emails, and so you cannot opt out of them while you remain registered.
What Information Do We Disclose to Third Parties?
Personal Information and User Data: We will not disclose your Personal Information or User Data to any third parties except as follows:
(i) to third party contractors engaged to provide services on our behalf (“Contractors”), such as performing marketing, analyzing data and usage of the Service, hosting and operating the Service or providing support and maintenance services for the Service, or providing customer service. We enter into agreements with all Contractors that require Contractors to use the Personal Information they receive only to perform services for us.
(ii) when we have your consent to share the information.
Web Tracking Information: We disclose Web Tracking Information to Contractors, in order to analyze the performance of the Service and the behavior of users, and to operate and improve the Service.
Aggregate Information: We may disclose aggregated data that does not contain Personal Information or User Data to any third parties, such as potential customers, business partners, and funding sources, in order to describe our business and operations.
Additional Disclosures: We reserve the right to disclose any information we collect in connection with the Service, including Personal Information, to: (a) any successor to our business as a result of any merger, acquisition, asset sale or similar transaction; and (b) any law enforcement, judicial authority, or governmental or regulatory authority, to the extent required by law or if in our reasonable discretion disclosure is necessary to enforce or protect our legal rights or to protect third parties.
Third-Party Service Providers; Additional Terms
Privacy Settings/Opt Out
If you would like your name and email address permanently removed from our database, please contact us at privacy@Onduo.com. We will promptly delete your name and email address and you will no longer receive email from Onduo. Your removal from the mailing list or database will not remove data you have submitted to us or records of past use of the Service, nor delete information stored in our data backups and archives. Such data will be maintained and/or deleted in the ordinary course of Onduo’s business.
California Online Privacy Protection Act Notice
On September 27, 2013, California enacted A.B. 370, amending the California Online Privacy Protection Act to require website operators like us to disclose how we respond to "Do Not Track Signals"; and whether third parties collect personally identifiable information about users when they visit us.
(1) We do not track users who do not interact with our sharing functionality across the web, and therefore do not use "do not track" signals.
(2) We do not authorize the collection of personally identifiable information from our users for third party use through advertising technologies without separate member consent.
California Civil Code Section 1798.83 also permits our customers who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@Onduo.com. Please note that we are only required to respond to one request per customer each year.
Security: We use reasonable security precautions to protect the security and integrity of your Personal Information in accordance with this policy and applicable law. However, no Internet transmission is completely secure, and we cannot guarantee that security breaches will not occur.
Without limitation of the foregoing, we are not responsible for the actions of hackers and other unauthorized third parties that breach our reasonable security procedures.
Children: Onduo does not knowingly collect or maintain personally identifiable information from persons under 13 years of age, and no part of the Service is directed at persons under 18. If you are under 18 years of age, then please do not use the Service. If Onduo learns that personally identifiable information of persons less than 13 years of age has been collected without verifiable parental consent, then Onduo will take the appropriate steps to delete this information. To make such a request, please contact us at privacy@Onduo.com.
Effective Date of this policy: September 17, 2020
"Protected Health Information" or "PHI" is defined by the HIPAA Privacy Rule as individually identifiable health information held or transmitted by a HIPAA covered entity or its business associate, in any form or media, whether electronic, paper, or oral.