PRIVACY POLICY
Effective Date: July 31, 2020

This Policy describes the privacy practices of Deerfield Solutions, LLC.

This Policy applies to the Level of Care Utilization System for Psychiatric and Addition Services (LOCUS) and Child & Adolescent Level of Care Utilization System (CALOCUS) (collectively, the "Products"). Before you access or use our Products, you should carefully review this Privacy Policy in order to understand how your online information may be collected, used and shared.

Agreement to this Policy:
By using the Products, you agree to the terms of this Policy, including how we collect, use, and disclose information about you and your patients during the use of the product. We may periodically amend this Policy. If we make changes, we will clearly identify the revision date at the top of this Policy. The changes will become effective when we post the revised Policy on our website. Deerfield Solutions, LLC, will notify you of material revisions to this Policy via e-mail to the address listed on your account upon changes to this policy. By using our Products, you agree to the changes in the revised Policy.

Information we collect about the user:
We collect information about the organization or provider who subscribes to our Products. To access certain services or functions via our website, you may be asked to disclose personally identifiable information, such as your name, address, e-mail address, telephone number, billing number, IP address, and any data you voluntarily submit to us. In submitting this information, you acknowledge and agree that we may use and store any such information about you in accordance with our Policy.

We may process and store your personally identifiable information on a server located outside of your jurisdiction. When you provide your personally identifiable information to us, you agree that we may transfer of your information across state and national boundaries. If you do not consent to such transfer as well as the processing and storage of your personally identifiable information outside your jurisdiction, you should not provide such information to us.

Information we collect about the patient:
We DO NOT collect protected health information (PHI) as defined by HIPAA or personally identifiable information as defined by 42 C.F.R. Part 2. Our Products only collect de-identified data, as defined by HIPAA. We cannot access the PHI of your clients unless you provide that information to us, such as via an audit, via addressing a technical or customer support matter.

Other Information we collect:
The term "Other Information" is any information that does not reveal your specific identity or the identity of your patient. In other words, the term "Other Information" does not include any Personally Identifiable Information or Protected Health Information.

This information may take the form of metadata, analytics data, log file information, location data, and device identifiers. We use this information to ensure our website functions properly, analyze user patterns, detect and prevent fraud, and for general security purposes. We may also collect statistical information about the usage of our Products in order to improve our Products and provide a better user experience.

We employ cookies and similar tracking technologies only on the LOCUS Online product. We use this information to ensure our website functions properly, to enhance the user experience, to analyze user patterns, to detect and prevent fraud, and for general security purposes. If you access the Products through the LOCUS Online website, you can set your web browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Products may not function properly if the ability to accept cookies is disabled.

How we share your information:
We will disclose your information where required to do so by law or subpoena or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our End User License Agreement; or (c) to protect the security or integrity of our Products.

We may also share information with others, including the co-owner of the LOCUS and CALOCUS copyright, the American Association of Community Psychologists (AACP). Any shared information will be in an aggregated and anonymous form that does not reasonably identify you directly as an individual or company nor identify any patient.

If your services are being paid for by a third party, your data may be shared with that third party. Any shared information will be in an aggregated and anonymous form that does not identify your patients; however, direct customer information is not restricted.

Links to other sites (for LOCUS Online website users):
If you access the Products via the LOCUS Online website, you may be able to follow links from our website to other websites. You should review the privacy and security policies and other terms and conditions of these third-party websites. We are not responsible for and cannot control the privacy or security practices of third-party sites. We cannot vouch for the accuracy, completeness, or reliability of their information of third-party sites.

Security:
We employ data security measures that comply with applicable federal and state laws and follow commonly accepted industry standards, including HIPAA. We cannot ensure or warrant the security of any information you transmit to us or guarantee that information transmitted via our Products may not be accessed, disclosed, altered, or destroyed. We encourage you to employ reasonable industry standards to protect the data stored on your system and transmitted to our system.

If you access our Product via an integrated electronic health record or stand-alone software, your data is stored solely on your servers or the servers of a third-party with whom you contract to provide data storage. We are unable to access any of this data. As a result, we are unable to recover any data you may lose. You are responsible for securing, storing, and creating back-up copies of your data.

Compromise of information:
If any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation. Where appropriate or required by applicable law, we will notify those individuals whose information may have been compromised.

Change of control:
We may buy, sell, license, assign, or transfer the company or any of its Products to another business entity. In that event, your information such as customer-identifying information, customer content stored on our system, and other user-related information will likely be among the items transferred during a change of control.

Protecting Children's Privacy Online:
The LOCUS Online website is not intended to be used by individuals under the age of thirteen (13). We do not knowingly collect information from children under 13 without parental consent. If you believe we received information from an individual under the age of thirteen (13), please contact us at our email or physical mailing address listed in the Contact Us section below. We will take all reasonable efforts to remove the information. For information about the Children's Online Privacy Protection Act (COPPA) visit the Federal Trade Commission website. If you use the CALOCUS product to assess children, anonymized child-related data will be stored on our servers.

Regarding the data transmitted to and stored by our Products, we only store de-identified data and therefore we are unable to determine whether any information pertains to a child under the age of thirteen.

Applicable Law:
This policy will be governed by the laws of the Commonwealth of Pennsylvania without regard to choice-of-law principles. The exclusive jurisdiction and venue for actions related to the subject matter of this policy will be state and the federal courts having within their jurisdiction in McKean County, Pennsylvania. You agree to the jurisdiction of these courts and we both agree that legal process may be served in the manner provided in this policy for giving notice or in a manner otherwise allowed by state or federal law.

Notice:
Any notice provided by one party to the other party under this policy will be in writing and sent either via a postal service or commercial carrier or certified mail so long as it uses a delivery confirmation method.

We will send notices to you at your address on record at our company. If you have not provided a physical mailing address and have only provided a telephone number or e-mail address, we will use those addresses to provide notice.

You will send all legal notices to us at the mailing address listed at in the Contact Us section of this policy.

Other Agreements:
The access and use of our Products is governed by this Privacy Policy, in conjunction with the End User License Agreement and any other agreements made between you and us. To the extent this Policy conflicts with the End User License Agreement, the End User License Agreement will take precedence.

Contact Us:
If you have any questions about our privacy policy or would like to opt-out of the collection of personal data, contact us at:

Email: sales@locusonline.com
Phone: (814) 878-2020
Address:
Deerfield Solutions, LLC.
Attn: LOCUS and CALOCUS Administrator
800 East Main Street
Bradford, PA 16701