Summary of H2U Privacy and Security Policies
H2U is committed to protecting your privacy. We have prepared this Privacy Statement to describe to you our practices regarding the personal data we collect from users of our services. H2U will not disclose your identifiable health information to your employer without your consent unless we are required by law to do so. We may use and share with our affiliates non-personal, summary or aggregate data for business analysis, communications, research, or planning purposes. Such information may also be used to help improve the Personal Health Assessment.

Although H2U is not required by law to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security regulations, we have adopted policies and procedures that generally comply with the HIPAA regulations due to our relationships with HCA facilities that are required to comply with HIPAA. Additionally, H2U is considered a “business associate” of these HCA facilities, and as such, we have contractually agreed to comply with the appropriate HIPAA privacy and security requirements concerning the use and disclosure of your personal health information (PHI).

The personal data that users submit when utilizing H2U online sites is maintained and backed-up in a secure off-site storage location. Personal data may be kept for an infinite amount of time on H2U’s secure servers so that non-identifiable metrics can be generated showing changes over time.

www.h2u.com
Articles and topics presented on http://www.h2u.com/ are for your information and are not for professional medical advice, evaluation, diagnosis or treatment. References to specific products, processes or services do not constitute or imply endorsement, approval, or recommendation.

Links to other web sites
The www.h2u.com web site and its related online services, the Personal Health Assessment (PHA) and online electronic newsletters, may contain links to web sites authored and maintained by third parties. These links are provided strictly as a convenience. H2U does not endorse or approve information obtained from third party sites. We cannot attest to the completeness, accuracy, timeliness or intellectual property rights of material on sites linked to www.h2u.com.

Use of Cookies
Cookies are passive tracking mechanisms which allow H2U to use features managed by the browser on a user’s computer. Cookies are stored locally on the user’s hard drive. Each user has the choice to accept or reject cookies through your browser options and delete cookies once accepted. H2U severely limits its use cookies. An example of on instance where H2U would use a cookie happens when the user checks the box “remember my password.” The password is then stored in the cookie saved to your hard drive. If at any time you choose to delete the cookie, the H2U login site will cease to remember your password.

E-mail
Anyone who uses the “contact us” feature on the web site or other web site tools such as the online newsletters or Personal Health Assessment (PHA) shall be replied to using e-mail as the contact method of preference. By contacting H2U and asking for a response, you agree for H2U to use your e-mail address to reply. If you supply your phone number or other contact information to H2U, we acknowledge your approval to contact you using that contact information.

Your e-mail address is required to use H2U’s online tools such as the PHA and newsletters. Your use of these products constitutes permission to use your e-mail address to convey information to you.

Maintenance and Security of Data
Please be aware of the general risks of transmitting information over the Internet. While H2U uses reasonable measures to protect all personal health information that you provide through the H2U Personal Health Assessment from loss, misuse, unauthorized access, disclosure, alteration, and destruction, we cannot guarantee that these efforts will always be successful.

We safeguard your data in a number of ways. First, we issue confidential subscriber identifications and unique passwords to limited number of users on a “need-to-know” basis only. These users may only access the system for the purposes of maintaining your account or membership. Secondly, all information is encrypted using secure communication channels. Thirdly, we use state of the art firewall technology to prevent persons from accessing data on our servers.

If you have questions about privacy or security, contact us at h2u@h2u.com.