Last updated
Privacy policy
This Privacy Policy describes how Rhema Health, LLC ("Rhema Health," "we," "us," or "our") collects, uses, processes, and shares personally identifiable information when you visit our websites (the "Sites") or use our products and services (the "Services").
Rhema Health is committed to supporting a more connected, compassionate, and efficient healthcare experience. This Privacy Policy explains how we handle your information in support of that mission.
1. Information and Personal Data We Collect and Receive
In order to deliver and improve our Services, we collect certain information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual or household ("Personal Data").
We collect Personal Data when you voluntarily provide it to us, such as when you request information, register for or use our Services, communicate with us, or interact with our technology, including any automated or AI enabled features. This may include:
Identifiers
Name, email address, mailing address, telephone number, unique personal identifiers, online identifiers, IP address, or account credentials. This information allows us to communicate with you and deliver our Services effectively.
Commercial Information
Records of products or services you have requested, evaluated, or used. This helps us understand how our Services are used and how we can better support your needs.
Internet or Other Network Activity
Information about your interactions with our Sites and Services, including browsing history, search history, and usage data, which may be collected through cookies or similar technologies. This information helps us improve functionality, performance, and user experience.
Professional or Employment Information
Where relevant, information related to your professional role or organization, particularly when engaging with enterprise or clinical offerings.
Inferences
Insights derived from other Personal Data that help us understand preferences, usage patterns, and areas for improvement.
In addition, we may collect non-identifiable or aggregated data through technologies such as cookies and web beacons. These tools help us understand overall usage trends and improve how our Services operate.
We may permit third party service providers to use cookies or similar technologies to collect information about your online activities over time and across different websites after you interact with our Services. For example, we may use Google Analytics to better understand how users engage with our Sites. Google Analytics uses cookies to collect usage data and generate reports on website activity. More information about how Google uses data can be found at www.google.com/policies/privacy/partners/.
This includes SMS delivery providers, telecommunications carriers, and messaging platform providers that assist us in delivering text messages on behalf of healthcare Providers. SMS opt-in data and consent status are shared only with such service providers as necessary to deliver messages and are never shared for marketing or promotional purposes.
Personal Data Processed on Behalf of Customers
We provide services to healthcare organizations and other business customers ("Customers"). In this capacity, we may receive, process, and store Personal Data (including information relating to patients or other individuals) on behalf of and at the direction of our Customers. When we process such data, we do so as a service provider acting under our Customers' instructions and in accordance with our agreements with them. Our Customers are responsible for maintaining their own privacy policies, obtaining necessary consents, and ensuring that any Personal Data provided to us has been collected and shared in compliance with applicable law. If you have questions about how a Customer handles your Personal Data, please contact that Customer directly.
2. How We Use Personal Data
We use Personal Data for legitimate business and operational purposes, including:
Service Delivery and Support
To provide access to our Services, operate our platforms, and support our customers and users.
Improvement and Personalization
To enhance, maintain, and improve our Sites and Services, and to tailor functionality and content to better meet user needs.
Communications
To respond to inquiries, provide customer support, send service related communications, and share information about updates, offerings, or events that may be of interest.
Security and Fraud Prevention
To protect our systems, detect and prevent fraud or misuse, and maintain the integrity of our Services.
Legal and Compliance Obligations
To comply with applicable laws, regulations, and contractual obligations, and to enforce our terms and protect our rights and the rights of others.
Analytics and Business Planning
To analyze usage trends, administer our Sites, and support strategic planning and operational decision making.
4. U.S. State Privacy Rights
Depending on your state of residence and subject to applicable law, you may have certain rights regarding your Personal Data, including:
Right to Know
The right to request information about the categories and specific pieces of Personal Data collected, sources of collection, purposes of use, and categories of third parties with whom data is shared.
Right to Deletion
The right to request deletion of Personal Data, subject to certain legal and operational exceptions.
Right to Correction
The right to request correction of inaccurate Personal Data.
Right to Access
The right to obtain a copy of your Personal Data in a portable format, where applicable.
Right to Opt Out of Sale or Sharing
The right to opt out of certain data sharing activities that may be considered a sale or sharing under applicable privacy laws.
Right to Limit Use of Sensitive Personal Information
Where applicable, the right to limit the use and disclosure of sensitive personal information. Rhema Health only collects such information when necessary to provide Services or when voluntarily provided, and uses it only for permitted purposes.
Right to Non Discrimination
You will not be discriminated against for exercising your privacy rights.
How to Exercise Your Rights
You may submit a verifiable request by contacting us at:
Email: privacy@rhema.health
We may need to verify your identity before processing your request. You may also designate an authorized agent to act on your behalf where permitted by law. We will respond within the timeframes required by applicable regulations.
We do not currently respond to Do Not Track signals due to the absence of a consistent industry standard.
5. Data Retention
We retain Personal Data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including legal, regulatory, accounting, and operational requirements. Retention decisions are based on the nature of the data, sensitivity, potential risk, and applicable legal obligations.
6. Children's Privacy
Our Sites and Services are intended for a professional and adult audience and are not directed to children under the age of 13. We do not knowingly collect Personal Data from children under 13. If we become aware that such data has been collected without appropriate consent, we will promptly delete it.
7. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Data from unauthorized access, use, or disclosure. While no system can be guaranteed to be completely secure, we continually evaluate and improve our security practices.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, operations, or legal requirements. Updates will be posted on this page, and the "Last updated" date will be revised accordingly. Continued use of our Sites or Services after updates constitutes acceptance of the revised policy.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at privacy@rhema.health.
10. SMS/Text Messaging Communications
Rhema Health provides SMS text messaging services on behalf of healthcare providers ("Providers") who use our platform. If you have opted in to receive SMS text messages from your healthcare Provider through the Rhema Health platform, the following applies:
Types of Messages
Your Provider may send you text messages including appointment reminders and confirmations, pre-appointment instructions, health screening survey notifications, notifications of incoming calls from your Provider's office, and other transactional communications related to your care. Messages are informational and transactional in nature and are not used for marketing purposes.
Message Frequency and Rates
Message frequency varies based on your appointment schedule and care needs. Standard message and data rates may apply. Contact your wireless carrier for details about your messaging plan.
Opt-In and Consent
You opt in to receive SMS messages by providing written consent directly to your healthcare Provider, typically by signing a consent form at their office. Consent to receive text messages is not a condition of receiving medical care.
Opt-Out
You may opt out of receiving SMS messages at any time by replying STOP to any message. You will receive a one-time confirmation message, and no further SMS messages will be sent.
Help
For assistance with SMS messages, reply HELP to any message or contact your healthcare Provider's office directly.
SMS Opt-In Data and Consent Sharing
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
To report a compliance or ethics concern confidentially, you may use our anonymous reporting form.