Website Privacy Policy
Your privacy is important to us. HealthSmart Management Services Organization, Inc. maintains high standards for the protection of your privacy while you use our web sites. Here is what you can expect when you visit us on the web:
-
- Other than to fulfill a request from you, we won’t sell, rent or share any personal information you provide without your consent unless required by law enforcement or statule per Title 45 § 164.512.
- We won’t send you any unsolicited e-mail (“spam”).
- All personally-identifiable information collected at this site will be used in accordance with HIPAA regulations.
The Information We Collect
Our web servers automatically capture your domain name, the IP address of the web page from which you enter our site, the pages you visit on our site and the amount of time you spend here. We do not collect any information that can reveal your personal identity unless you voluntarily provide it when you register to use interactive features of the site, including our portals, or to receive information from us.
Use of the Information this Site Gathers/Tracks
Any personally-identifiable information you give us will be used only to provide the service or information you have requested. Unless you specifically consent to let us do so, your personally-identifiable information, including your e-mail address, will not be sold, rented, licensed, or otherwise shared with third parties. The non-personally identifiable information we gather in aggregate form may be used to improve our site, and we may share that information with our health and wellness partners.
Making Changes to the Information You Provide to Us
At any time, you can change, update, or remove from our servers data that you voluntarily provided.
Cookies
When you visit our site, we may place a cookie on your computer that will allow us to customize and enhance your experience at our website, make improvements to our site, or to report site activity. Our cookies will never be used to track your activity on any third party web sites or to send spam, nor will our cookies provide us with any personally identifiable information about you.
Sites We Link To
If you choose to use any of the links we provide to our member companies, sponsors, and other third party resources, you will be leaving our web site and going to a new web site. Protection of your privacy at those other sites will be governed by the privacy policy at that site. We’ve taken special care selecting the companies that appear in our Partners section, but please take the time to read the privacy policies at their sites.
Data Security
Confidential data is encrypted both at rest and in transit in accordance with our Cryptography Policy.
Data at Rest
All data stores containing customer information are encrypted at rest. Sensitive data is further protected through full‑disk encryption at the storage layer, ensuring the entire underlying volume remains encrypted.
Data in Transit
All data transmitted over potentially insecure or public networks is secured using TLS 1.2 or higher, ensuring strong encryption during transport.
System Security
We implement comprehensive vulnerability management practices and continuous security scanning. As part of our ongoing commitment to security best practices, systems are regularly updated, scanned, tested, and remediate. This continuous lifecycle helps minimize our attack surface and reduce potential threat vectors.
Enterprise Security
All corporate endpoints are centrally managed and equipped with enterprise‑grade anti‑malware and endpoint protection. Security alerts from these devices are monitored 24/7/365. Configuration of disk encryption, screen lock policies, and software updates is enforced through our secure management platforms.
We also conduct regular security awareness education, which includes interactive training modules, periodic assessments, and ongoing phishing and attack simulations to reinforce security best practices across the organization.
Changes to this Policy
If we make any changes to this policy, we’ll let you know the effective date of the changes and provide a tool for you to understand what has changed. If you have any questions or comments or receive any unwanted e-mail from this site, please contact us via e-mail at compliance@healthsmartmso.com
