CCPA Privacy Policy

The California Consumer Privacy Act of 2018 (the “CCPA”) provides California residents certain rights regarding their Personal Information (as defined below) that we, Vituity® (Vituity is the trade name for CEP America, LLC and each of its member partnerships and subsidiaries, MedAmerica, Inc., and MedAmerica Billing Services, Inc.), collect about you the Consumer (as defined below).

For the purposes of this CCPA Privacy Policy, a Consumer is defined as an individual residing in the State of California including visitors to our website, visitors to a Vituity site and those who are acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of Vituity (the “Consumer”).

The CCPA defines Personal Information as information that identifies, describes, or could reasonably be linked with the Consumer (“Personal Information”). Vituity is committed to safeguarding the privacy of our Consumers and this CCPA Privacy Policy serves to inform you of the categories of Personal Information that we collect and the purposes for which those categories of Personal Information are used.

The CCPA does not apply to the following categories of information:

Medical information governed by:
- Confidentiality of Medical Information Act (CMIA)
- Health Insurance Portability and Accountability Act (HIPAA)
- Health Information Technology for Economic and Clinical Health Act (HITECH)
- Genetic Information Nondiscrimination Act (GINA)
Privacy data covered by other regulations including:
- US Gramm-Leach-Bliley Act
- US Driver’s Privacy Protection Act
- California Financial Information Privacy Act
Information collected by government entities

Categories of Personal Information Collected by Vituity

The categories of Personal Information collected by Vituity within the past 12 months may include:

Category	Examples	Collected? Yes / No
A. Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	Yes
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. “Personal information” does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.	Yes
C. Characteristics of protected Classification under California or federal law	Race, color, religion (includes religious dress and grooming practices), sex/gender (includes pregnancy, childbirth, breastfeeding and/or related medical conditions), gender identity, gender expression, sexual orientation, marital status, medical condition, military or veteran status, national origin, ancestry, disability, genetic information, request for family care leave, request for leave for an employee’s own serious health condition, request for Pregnancy Disability Leave, Retaliation for reporting patient abuse in tax-supporting institutions, Age (40 or older).	Yes
D. Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	No
E. Biometric information	An individual’s physiological, biological, or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.	Yes
F. Internet or other electronic network activity	Activity including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.	Yes
G. Geolocation data	Physical location or movements	Yes
H. Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information	No
I. Professional or employment-related information that is not publicly available.	Current or past job history or performance evaluations.	Yes
J. Education Information	Information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).	Yes
K. Inferences	Information drawn from any of the personal information categories referenced above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes

How Vituity Obtains Personal Information

Vituity collects your Personal Information for recruitment, employment, personnel related and other business purposes.

How Vituity Obtains Personal Information

Vituity may obtain Personal Information either directly from you (forms you complete through our website or through other online communications with us) or indirectly from you (by tracking actions that you take on our website). We may also obtain Personal Information from third-party vendors who perform business services on our behalf.

Sharing Personal Information

Vituity may use or disclose Personal Information we collect for one or more of the following business purposes: to fulfill the reasons for which you provided the information; to provide, support and develop our website and services; to maintain the safety and security of our website and services; to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations; and as described to you when collecting your Personal Information or as otherwise set forth in the CCPA.

Vituity may disclose your Personal Information to third-party service providers for business purposes including personnel-related functions such as payroll, benefits, recruiting and maintaining personnel records. We may also share your Personal Information with vendors to improve functionality across our websites.

In the preceding twelve (12) months, Vituity may have disclosed the following categories of Personal Information for a business purpose with your consent:

A. Identifiers

B. Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

C. Characteristics of protected Classification under California or federal law

F. Internet or other electronic network activity

I. Professional or employment-related information that is not publicly available

J. Education Information

Sale of Personal Information

In the preceding twelve (12) months, Vituity has not “sold” Personal Information for any business or commercial purpose. However, the CCPA broadly defines “sale” in a way that may include using targeted advertising services to deliver targeted advertising about our services and programs. We use these advertising services which enable us to provide relevant content to you. Our use of these services may constitute a “sale” as defined by the CCPA of the following categories of information to advertising partners for such advertising purposes: Category A. Identifiers (i.e. Internet Protocol address, device IDs, cookie IDs, and advertising IDs.)

You have the right to direct us not to “sell” your Personal Information. (See Personal Information Sales Opt-Out below.)

Your Rights and Choices

The CCPA provides Consumers with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request access to your Personal Information that Vituity has collected over the past 12 months. Once we verify your Consumer request, we will disclose to you:

The categories of Personal Information we collect and/or have collected about you.
Our business or commercial purpose for collecting or selling that Personal Information.
The categories of third parties with whom we share that Personal Information.
The specific pieces of Personal Information we collect about you (also called a data portability request).
If we “sold” or disclosed your Personal Information for a business purpose

Delete my Personal Information

You have the right to request that Vituity delete any of the Personal Information that we have collected from you subject to certain exceptions.

If we cannot comply with your request, we will explain the reasons why in our response.

Exercising Access, Data Portability, and Deletion Rights

Only you, or someone legally authorized to act on your behalf, may make a verifiable Consumer request related to your Personal Information.

If using a legally authorized agent, we reserve the right to require verification of your authorized agent’s identity and authority.

You may only make a verifiable Consumer request for access or data portability twice within a 12-month period. The verifiable Consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or their authorized representative. This may include proof of valid government-issued identification, attestation under penalty of perjury that you are a California resident, or other proof of identity acceptable to us at our sole discretion.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

We will only use Personal Information provided in a verifiable Consumer request to verify the requestor’s identity or authority to make the request.

Personal Information Sales Opt-Out

You have the right to direct us not to sell your Personal Information at any time (the “Right to Opt-Out”). Once you exercise your “Right to Opt-Out”, Vituity will wait at least twelve (12) months before asking you to reauthorize the sale of your Personal Information.

Timing and Format for Vituity’s Response

Vituity will respond to a verified Consumer requests within forty-five (45) days of its receipt. If we require more time to respond (up to 90 days), we will inform you in writing of the reason we need the extension period. All disclosures we provide will only cover the 12-month period preceding the receipt of the verified Consumer request. We do not charge a fee for verified Consumer requests, except for as provided by the CCPA.

You may submit a Consumer request by clicking here. You may also submit a Consumer request by calling us at (855) 550-0007.

Children

Vituity does not knowingly collect Personal Information from children under the age of 13. If Vituity is made aware of collecting information from a child under 13, we will delete this information.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Vituity will not charge you different prices for services, deny you services, provide you with different level of quality of services, or suggest that you receive a different price or rate for services or a different level of quality of services.

Right to Amend CCPA Privacy Policy

This CCPA Privacy Policy supplements the information contained in the Website Privacy Policy. Vituity reserves the right to amend this CCPA Privacy Policy at our own discretion and at any time. When we do, we will post the updated CCPA Privacy Policy and revise the date at the bottom of this page. We encourage you to frequently check this page to stay informed about how we are helping to protect the Personal Information we collect. You acknowledge and agree that it is your responsibility to review this CCPA Privacy Policy periodically and become aware of any modifications.

Vituity

(855) 550-0007
compliance@vituity.com

Effective Date: This CCPA Privacy Policy is effective January 1, 2020. Certain rights granted under the CCPA will not be effective until January 1, 2021.

Last updated: March 3, 2021

Categories of Personal Information Collected by Vituity

The categories of Personal Information collected by Vituity within the past 12 months may include:

Category	Examples	Collected? Yes / No
A. Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	Yes
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. “Personal information” does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.	Yes
C. Characteristics of protected Classification under California or federal law	Race, color, religion (includes religious dress and grooming practices), sex/gender (includes pregnancy, childbirth, breastfeeding and/or related medical conditions), gender identity, gender expression, sexual orientation, marital status, medical condition, military or veteran status, national origin, ancestry, disability, genetic information, request for family care leave, request for leave for an employee’s own serious health condition, request for Pregnancy Disability Leave, Retaliation for reporting patient abuse in tax-supporting institutions, Age (40 or older).	Yes
D. Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	No
E. Biometric information	An individual’s physiological, biological, or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.	Yes
F. Internet or other electronic network activity	Activity including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.	Yes
G. Geolocation data	Physical location or movements	Yes
H. Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information	No
I. Professional or employment-related information that is not publicly available.	Current or past job history or performance evaluations.	Yes
J. Education Information	Information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).	Yes
K. Inferences	Information drawn from any of the personal information categories referenced above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes

How Vituity Obtains Personal Information

Vituity collects your Personal Information for recruitment, employment, personnel related and other business purposes.

How Vituity Obtains Personal Information

Sharing Personal Information

In the preceding twelve (12) months, Vituity may have disclosed the following categories of Personal Information for a business purpose with your consent:

A. Identifiers

B. Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

C. Characteristics of protected Classification under California or federal law

F. Internet or other electronic network activity

I. Professional or employment-related information that is not publicly available

J. Education Information

Sale of Personal Information

You have the right to direct us not to “sell” your Personal Information. (See Personal Information Sales Opt-Out below.)

Your Rights and Choices

The CCPA provides Consumers with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request access to your Personal Information that Vituity has collected over the past 12 months. Once we verify your Consumer request, we will disclose to you:

The categories of Personal Information we collect and/or have collected about you.
Our business or commercial purpose for collecting or selling that Personal Information.
The categories of third parties with whom we share that Personal Information.
The specific pieces of Personal Information we collect about you (also called a data portability request).
If we “sold” or disclosed your Personal Information for a business purpose

Delete my Personal Information

You have the right to request that Vituity delete any of the Personal Information that we have collected from you subject to certain exceptions.

If we cannot comply with your request, we will explain the reasons why in our response.

Exercising Access, Data Portability, and Deletion Rights

Only you, or someone legally authorized to act on your behalf, may make a verifiable Consumer request related to your Personal Information.

If using a legally authorized agent, we reserve the right to require verification of your authorized agent’s identity and authority.

You may only make a verifiable Consumer request for access or data portability twice within a 12-month period. The verifiable Consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or their authorized representative. This may include proof of valid government-issued identification, attestation under penalty of perjury that you are a California resident, or other proof of identity acceptable to us at our sole discretion.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

We will only use Personal Information provided in a verifiable Consumer request to verify the requestor’s identity or authority to make the request.

Personal Information Sales Opt-Out

Timing and Format for Vituity’s Response

You may submit a Consumer request by clicking here. You may also submit a Consumer request by calling us at (855) 550-0007.

Children

Vituity does not knowingly collect Personal Information from children under the age of 13. If Vituity is made aware of collecting information from a child under 13, we will delete this information.

Non-Discrimination

Right to Amend CCPA Privacy Policy

Vituity

(855) 550-0007
compliance@vituity.com

Effective Date: This CCPA Privacy Policy is effective January 1, 2020. Certain rights granted under the CCPA will not be effective until January 1, 2021.

Last updated: March 3, 2021