Notice of Donor, Medical Record and Internet Privacy Practices
Statement of Donor Privacy
Protecting your private information is our priority. This Statement of Donor Privacy (Statement of Privacy) applies to Canopy Children’s Solutions (Canopy) and its website, www.mycanopy.org. The Canopy website includes donor news and information and this Statement of Privacy governs the associated data collection and usage. By using the Canopy website, you consent to the data practices described in this statement.
Collection of your Personal Information
In order to better provide you with products and services offered, Canopy may collect personally identifiable information, such as your:
- First and Last Name
- Mailing Address
- E-mail Address
- Phone Number
If you purchase Canopy’s products and services or make a donation, Canopy utilizes billing and credit card information. This information is used to complete the donation or purchase transaction and is not stored within the Canopy database.
We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sponsored event by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services. We will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We also may gather additional personal or non-personal information in the future.
Use of your Personal Information
Canopy collects and uses your personal information to operate and deliver the services you have requested. Canopy may also use your personally identifiable information to inform you of other products or services available from Canopy and its affiliates.
Sharing Information with Third Parties
Canopy does not sell, rent or lease its customer lists to soliciting third parties.
Canopy may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Canopy or the site; (b) protect and defend the rights or property of Canopy; and/or (c) act under exigent circumstances to protect the personal safety of users of Canopy, or the public.
Tracking User Behavior
Canopy may keep track of the websites and pages our users visit within Canopy, in order to determine what Canopy services are the most popular. This data is used to deliver customized content and advertising within Canopy to customers whose behavior indicates that they are interested in a particular subject area.
Automatically Collected Information
Information about your computer hardware and software may be automatically collected by Canopy. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the Canopy website.
Mycanopy.org contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.
Security of your Personal Information
Canopy secures your personal information from unauthorized access, use, or disclosure. Canopy uses the following methods for this purpose:
Canopy uses Secure Sockets Layer (SSL) technology to protect against any loss, misuse and unauthorized alteration of the information we collect and maintain. All information is stored in a secure database. When payment information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol. Moreover, credit card numbers are not retained by Canopy once processed.
We strive to take appropriate security measures to protect against unauthorized access to, or alteration of, your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet, which are beyond our control; and (b) security, integrity, and privacy of any and all information and data exchanged between you and us through this Site cannot be guaranteed.
Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
- Delete your personal information from our records; and
- Direct any service providers to delete your personal information from their records.
Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:
- Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
- Comply with an existing legal obligation; or
- Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
From time to time, Canopy may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. If you would like to stop receiving marketing or promotional communications via email from Canopy, you may opt out of such communications by contacting firstname.lastname@example.org.
External Data Storage Sites
We may store your data on servers provided by third party hosting vendors with whom we have contracted.
Changes to this Statement
Notice of Medical Record Privacy Practices
THIS SECTION DESCRIBES HOW YOUR MEDICAL INFORMATION IS UTILIZED AND DISCLOSED. IT ALSO DETAILS HOW YOU CAN OBTAIN ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
EFFECTIVE DATE: SEPTEMBER 10, 2013
We comply with all HIPPA laws and requirements and must have your written consent and authorization in order to receive and/or share protected private information and records.
This Notice of Privacy Practices describes how Canopy and its employees may use and disclose child protected health information (PHI). A child is an individual and/or their parent/guardian, who is receiving or has received services. This notice applies to all records generated by any Canopy affiliate that contain PHI. PHI is defined as protected health information or individually identifiable health information.
We do not disclose health information about you to any other person or party without your prior written consent and authorization.
If you have any questions about this notice, please contact our Health information Manager; P. O. Box 1078; Jackson, MS 39215; 601-352-7784 or at HIM@mycanopy.org.
We do not request or store sensitive information from on-site visitors, such as credit card or social security numbers. We will not share, sell or exchange your mailing or email address.
HOW WE MAY USE AND DISCLOSE HEALTH INFORMATION ABOUT YOU
Canopy may use your health and medical information in order to provide treatment or other services. There may be situations in which it may be necessary to disclose your health and medical information to health care professionals involved in your care. For example, if a doctor is prescribing a particular medication for you, it would be important for him or her to become aware of any medication allergies you may be experiencing in order to avert potential complications. In addition, various departments may share your medical information in order to coordinate prescriptions, lab work, meals and x-rays. Documentation and records of your care may be shared among Canopy staff for treatment purposes.
In the event that the treatment you receive at Canopy involves genetic testing, any results from such testing will neither affect the quality nor the types of services you receive. Genetic information is PHI and becomes part of your EHR.
For Appointment Reminders
We may use and disclose information to contact you as a reminder of an appointment or to reschedule an appointment.
Canopy may use and disclose health and medical information about you for billing and collection purposes. For example, we typically inform your payer sources regarding the nature of the treatment you will be receiving in order to determine the extent of coverage. It is also common for us to submit supporting documentation to your payer source in order for us to receive payment for services rendered.
If children and/or their parents/guardians prefer to pay out-of-pocket for treatment, Canopy will not inform your payer source regarding services received. In the event that you choose to pay out-of-pocket for treatment, please inform your Canopy primary staff member immediately.
For Health Care Operations
Canopy may use and disclose your medical information for the purpose of facilitating health care service operations. For example, members of the Canopy staff may use information in your health record in order to evaluate the quality of services you receive as well as outcomes you experience. This information may be subsequently used in order to improve the overall quality of care we provide to the general public. We may also utilize it in evaluating whether new services should be provided. We may disclose such information to doctors, nurses, students and other associated professionals for educational purposes. We may also compare your information with information from other service providers in order to identify areas in which we can improve our services. To protect your privacy, we may remove any identifying information before facilitating health care service operations.
We may use or disclose health information about you without your permission for the following purposes, subject to all applicable legal requirements and limitations
To Avert a Serious Threat to Health or Safety
We may use and disclose health information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
Required By Law
We will disclose health information about you when required to do so by federal, state or local law.
Public Health Risks
We may disclose health information about you for public health reasons in order to prevent or control disease, injury or disability; or report births, deaths, suspected abuse or neglect, non accidental physical injuries, reactions to medications or problems with products.
Health Oversight Activities
We may disclose health information to a health oversight agency for audits, investigations, inspections, or licensing or credentialing purposes. These disclosures may be necessary for certain state and federal agencies to monitor the health care system, government programs, and compliance with civil rights laws.
We may release health information if asked to do so by a law enforcement official in response to a court order, subpoena, warrant, summons or similar process, subject to all applicable legal requirements.
Information Not Personally Identifiable
We may use or disclose health information about you in a way that does not personally identify you or reveal who you are.
OTHER USES AND DISCLOSURES OF HEALTH INFORMATION
We will not use or disclose your health information for any purpose other than those identified above without your specific, written authorization. If you give us authorization to use or disclose health information about you, you may revoke that authorization, in writing, at any time. If you revoke your authorization, we will no longer use or disclose information about you for the reasons covered by your written authorization, but we cannot take back any uses or disclosures already made with your permission.
YOUR RIGHTS REGARDING HEALTH INFORMATION ABOUT YOU:
You have the following rights regarding health information we maintain about you.
Right to Inspect and Copy
You have the right to inspect and copy your health information, such as medical and billing records, that we use to make decisions about your care. You must submit a written request to our Privacy Officer in order to inspect and/or copy your health information. If you request a copy of the information, we may charge a fee for the costs of copying, mailing or other associated supplies.
Right to Amend
If you believe health information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment as long as the information is kept by this office. To request an amendment, complete and submit a Medical Record Amendment/Correction Form to our Privacy Officer.
Right to Request Restrictions
You have the right to request a restriction or limitation on the health information we use or disclose about you for treatment, payment or health care operations. You also have the right to request a limit on the health information we disclose about you to someone who is involved in your care or the payment for it, like a family member or friend. For example, you could ask that we not use or disclose information about a surgery you had. If we do agree, we will comply with your request unless the information is needed to provide you emergency treatment. To request restrictions, you may complete and submit a Request For Restricting Uses and Disclosures and Confidential Communications Form to our Privacy Officer.
Right to a Paper Copy of this Notice
You have the right to a paper copy of this notice. You may ask us to give you a copy of this notice at any time. To obtain such a copy, contact our Privacy Officer.
CHANGES TO THIS NOTICE
Canopy reserves the right to change the terms of this notice and its privacy practices at any time. Any changes will become effective on the date that the new notice and privacy practices go into effect. Canopy will post new notices in waiting areas or registration areas in all Canopy facilities and on its website at mycanopy.org. You may also obtain a new notice by contacting Canopy Health Information Management at 601-352-7784 or HIM@mycanopy.org.
If you believe your privacy rights have been violated, you may file a complaint with our office or with the Secretary of the Department of Health and Human Services. To file a complaint with our office, contact Jimmi Knight, Health Information Manager; at 601-352-7784. You will not be penalized for filing a complaint.
(see also Notice of Medical Record Privacy Practices above)
Canopy Children’s Solutions (Canopy) may collect different information about you in different situations, which are described in more detail below. This information may include your name, address, email address, phone number, fax number, IP address, resume, credit card number and credit card provider, or other information that might identify you (“personal information”).
As a general matter, we may disclose personal information:
• When authorized by you or when necessary to provide a service you have requested
• To communicate with you about issues related to your job application or request for service
• When necessary to comply with an order of a government agency or court, when requested by a government regulator, or as otherwise required by law
• To investigate and address system problems and to protect the security of the website
Additionally, we may disclose your personal information to individual contractors and third-party service providers who assist us in providing you with services, or with other permitted uses of your personal information (subject to appropriate confidentiality agreements).
The following sections describe in more detail the data we collect and how we use that data.
Information We Collect Automatically
We may collect all information about all interactions between your web browser and the Canopy’s website and other websites unrelated to Canopy that you visit, including your IP address, the web pages you visit, how long you visit them and what you do while visiting them. For example, we may collect information that tells us how long you spent on a certain page, what information you supplied, or what boxes you did or did not check. Web browsers may provide a large amount of information that we may also collect, including your time zone, browser type and version, language preference, and any cookies that we have set (see below for an explanation of cookies).
We may use this information for a number of purposes including revising our web pages to make them more user-friendly, diagnosing problems, investigating security issues, supporting our training efforts, or documenting your interaction with the website or other websites, and for public relations purposes. This information is also used in the aggregate in order to evaluate our website’s effectiveness and to improve performance, and for public relations purposes.
Information We Collect from All Users
In connection with your use of the web services, we may collect your name, addresses, telephone number and email address. For members of the general public, we may collect this information in the course of completing surveys, inquiries and documenting stories of those we have served. Other users of the website may provide this information in connection with web services described in more detail below.
We do not share any of your personal or identifying information with anyone except in the ways specifically listed herein.
We may use this information to provide the requested service, notify you about updates or changes to our website, alert you to new services or events and to offer you the opportunity to donate to Canopy and support our efforts to serve Mississippi children, youth and families
Information We Collect From Job Applicants
As a job applicant, we will collect the information that we need to evaluate your application, such as your resume and job application information.
We do not disclose information contained in resumes or job applications (which may include personal Information) to third parties, unless we have your consent and written authorization. We endeavor to limit internal access to resumes and job applications to those individuals who need to know this information.
We will use the information you provide as necessary to evaluate your job application. You may choose to provide information on your gender, race, or ethnicity on a voluntary basis. We will not consider either this information, or your choice to decline to provide it, in evaluating your qualifications for employment with us. If you provide such information, we may use it to the extent necessary or appropriate for compliance with relevant legal or contractual obligations, and for other internal purposes.
Email Addresses, Postal Mail Addresses and Phone Numbers
Individuals who supply their addresses (email or postal mail) or phone numbers (landline or cell) may receive periodic messages from Canopy with information on services, upcoming events or news that may be of interest, information about your job application, information on your job-related activities (if employed by Canopy), or opportunities to donate to Canopy. If you do not want to receive such communications from Canopy in the future (except with respect to communications in connection with your job application, or your job-related activities, if employed by Canopy), please let us know by emailing email@example.com and telling us that you do not want to receive these types of communications.
We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
Links to Other Websites
Our websites may contain links to other sites for your convenience and information. These sites may be operated by companies not affiliated with us. Linked sites may have their own privacy policies or notices, which we strongly suggest you review if you visit them. We are not responsible for the content of any sites that are not affiliated with us, any use of those sites, or the privacy practices of those sites.
Canopy welcomes your questions or comments regarding this Statement of Privacy. If you have any questions or concerns, please contact Canopy at:
Canopy Children’s Solutions
1465 Lakeland Drive
Jackson, Mississippi 39216
Email Address: firstname.lastname@example.org
Telephone number: 6013527784
Effective as of May 17, 2021