Terms of Service for AlignForm
Welcome to AlignForm's terms of service! By using our services, you agree to the following terms and conditions:
Usage of our services is subject to your compliance with all applicable laws and regulations.
Your account and any associated data are your responsibility. You must ensure the security and confidentiality of your account details.
You may not use our services to access, distribute, or transmit any illegal, harmful, or offensive material.
We reserve the right to terminate or suspend your access to our services at any time for violation of these terms of service.
All intellectual property rights related to our services and content belong to AlignForm and its licensors.
We may make changes or updates to our services at any time without prior notice.
Patient Data
Patient Data. Subscribers use our clinic management platform to collect personal information from their patients and create patient records. These records may include a patient’s name, address, health insurance and billing information, medical charts, appointment history and other patient data (“Patient Data”). This information is sometimes referred to as “personal health information”, “protected health information”, “data concerning health” or “sensitive data” depending on the location of the Subscribers and the privacy laws applicable to them. If you are a patient, Patient Data is collected from you when you visit your Subscriber clinic or practitioner and when you set up an account with the Subscriber clinic through our online booking website.
Subscriber’s Role. Subscribers retain sole control over Patient Data and may be referred to as a “health information custodian”, a “covered entity” or a “controller” depending on their location and the privacy laws applicable to them.
Subscribers determine:
What Patient Data to collect;
How the Subscriber will use the Patient Data;
Who has access to Patient Data;
How long the Subscriber will store Patient Data; and
On what basis the Subscriber may delete Patient Data.
Subscribers are responsible for complying with laws and regulations governing the use of Patient Data, and for determining the legal basis for such use.
Jane’s Role. Jane is a service provider to Subscribers and may be referred to as an “agent”, “business associate” or “processor” of the Subscriber. Jane stores Patient Data in its secure data centers and makes it available to Subscribers and their users through our clinic management platform. Jane otherwise has no control over Patient Data. Jane will only access Patient Data on the instructions of the Subscriber or its practitioners or staff or, in rare cases, where needed in order to prevent or address technical problems or if required by law or court order.
Storage Location. Patient Data is stored in the regional data centre for the location chosen by the Subscriber during the sign-up process. We currently have regional data centres in Canada, the United States, UK, and Australia, though this may change from time to time. If we do not have a data centre in the Subscriber’s region, Patient Data will be stored in our Canadian data centre, unless otherwise requested by the Subscriber. Please note that we use US-based service providers for appointment reminders sent by email or SMS and, therefore, Patient Data contained in appointment reminders will go through and may be stored temporarily in the United States. All our data centres and service providers maintain a high level of security and are compliant with applicable privacy laws.
Patient Rights. Patients have certain rights with respect to their Patient Data, which may include knowing what information your Subscriber clinic has about you, correcting any inaccurate Patient Data, obtaining a record of your Patient Data and, in certain circumstances, deleting or removing your Patient Data. Please note that Subscribers have strict legal and regulatory obligations around Patient Data and may not always be permitted to delete or remove Patient Data.
Questions about Patient Data. If you have any questions about your Patient Data or wish to exercise any or your patient rights, please contact your Subscriber clinic or practitioner. If your Subscriber clinic or practitioner has any questions about the management of Patient Data in the Services, they may contact us and we will support them as needed to respond to your request. Please note that, in order to maintain strict security of your Patient Data, we can only access Patient Data upon instruction from the Subscriber.
Sharing Your Information
We do not sell or distribute personal information to third parties for their own commercial or marketing purposes. We will only share personal information we collect in the following circumstances:
Suppliers and Service Providers. In order to operate our business and provide the Services to our Subscribers and their users, we may need to share a limited amount of personal information, including Patient Data, with our third-party suppliers and service providers. Before sharing personal information, we ensure that the third parties receiving the personal information have provided appropriate safeguards, and that privacy rights are protected and preserved. Some of the areas where we use third-party suppliers and service providers include:
Our data centers where all platform data is stored
Customer support services to help us collect feedback and manage our support services
Communication services to send out email and SMS notices or reminders
Payment processors
Corporate Transactions. We may share personal information in connection with negotiating or carrying out a financing or acquisition of our business, a merger or amalgamation with another business, or a sale of all or part of our company assets. Before sharing personal information, we will ensure that appropriate confidentiality and non-disclosure undertakings are in place. We will not share Patient Data in these circumstances.
Compliance with Laws. We may disclose personal information to a third party if we are required to do so by applicable law, government request, court order or regulatory body. We may also be required to disclose personal information to enforce our legal rights, to enforce security requirements, or to respond to an emergency which we believe, in good faith, requires us to disclose personal information. In such instances, if permissible, we will make every reasonable effort to give you as much notice as possible regarding the disclosure of your personal information, what information was disclosed and why. We will not disclose Patient Data unless legally required to do so.
Anonymized/Aggregated Data. Jane may use computer-generated algorithms to gather anonymous and aggregated information from our Subscribers and their Patient Data in order to assist in our continued development and improvement of the Services, and for research, data analysis, benchmarking, statistics or trend analysis. We will ensure that none of the information we gather identifies, or could be used to identify, any user or patient. Jane may share such anonymized information with Subscribers and others, for example, by providing insights into most common conditions, most popular treatments or benchmarking fees against industry or regional norms.
By using our services, you agree to these terms and conditions. If you have any questions or concerns, please do not hesitate to contact us.