Last updated July 24, 2021
Docket® (“Docket”) is a mobile-optimized application and cloud-synced database that connects American healthcare consumers to personal and family health data. This policy outlines how we use and protect your data. Please contact us at firstname.lastname@example.org if you have any questions. Thank you for using Docket.
When you access the Services, we may ask you to voluntarily provide us certain information that personally identifies (or could be used to personally identify) you (“Personal Information”). Personal Information includes, but is not limited to, the following: (a) contact data such as your e-mail address and phone number; (b) demographic data such as your gender, your date of birth, and your zip code; (c) insurance data such as your insurance carrier, insurance plan, member ID, group ID, and payor ID; (d) medical data such as the doctors or other healthcare providers (“Healthcare Providers”) you have visited, your reasons for visit, your dates of visit, your medical history, and other medical and health information you choose to share with us; and (e) other information that you voluntarily choose to provide to us including without limitation your Social Security Number, unique identifiers such as passwords, and Personal Information in e- mails or letters that you send to us. You may still access and use some of the Services if you choose not to provide us with some Personal Information, but certain features may not be accessible to you as a result.
We also may automatically collect certain data elements when you use the Services, such as (a) IP address; (b) domain server; (c) type of device(s) used to access the Services; (d) web browser(s) used to access the Services; (e) referring webpage or other source through which you access the Services; (f) geolocation information; and (g) other statistics and information associated with the interaction between your browser or device and the Services (collectively “Traffic Data”). Depending on applicable law, some Traffic Data may be Personal Information. We may also collect addition information, which may be Personal Information, as otherwise described to you at the point of collection or pursuant to your consent.
Under a federal law called the Health Insurance Portability and Accountability Act (“HIPAA”), some of the demographic, health and/or health-related information that Docket collects as part of providing the Services may be considered “protected health information” or “PHI.” Specifically, when Docket receives identifiable information about you from or on behalf of your Healthcare Providers, this information is PHI. HIPAA provides specific protections for the privacy and security of PHI and restricts how PHI is used and disclosed. Docket may only use and disclose your PHI in the ways permitted by your Healthcare Provider(s). If you choose to use the Services, you agree that Docket may use and disclose your PHI in the same way it uses and discloses your Personal Information that is not PHI.
DOCKET ENABLES PATIENTS TO VOLUNTARILY AND SELECTIVELY TRANSMIT PHI TO TRUSTED HEALTHCARE PROVIDERS. THIS FEATURE IS INTENDED TO STREAMLINE PATIENT INTAKE WORKFLOWS, IMPROVE COMMUNICATION, AND FACILITATE CARE DELIVERY.
We collection information (including Personal Information and Traffic Data) when you use and interact with the Services, and in some cases from third-party sources. Such information includes (but is not limited to): when you use the Services’ interactive tools and services, when you voluntarily provide information via health assessment questionnaires, when you use the “Contact Us” function on the Site, send us an e-mail, or otherwise contact us.
We use the information we collect, including Personal Information, to provide and continuously improve the Services. In particular, we use this information to: (a) help Patient Users consolidate important medical information; (b) enable Patient Users to transmit important medical information to trusted care providers; (c) communicate patient-reported information to patient- selected care providers; and (d) send Patient Users alerts to help better manage health concerns. When Docket users use the Services to query state immunization registries to access personal and/or family immunization records, Docket will collect user-reported information (e.g. First Name, Last Name, Date of Birth, Sex, cellphone number, and/or e-mail). Docket retrieves and stores information from state immunization registries such as but not limited to immunization records (including line-level detail about shots such as when and where immunizations were administered, immunization manufacturer, and other relevant clinical information), immunization forecasting schedules, allergies, contradictions, immunities, home address, and renderings of official state-issued immunization reports and certificates. Docket primarily stores immunization data for the user’s enjoyment. Docket reports deidentified immunization-related data (e.g. number of immunization records obtained using Docket) to state immunization registries and other public health partners. We may use information that is neither Personal Information nor PHI (including non-PHI Personal Information that has been de-identified and/or aggregated) to better understand who uses Docket and how we could enhance our products and services.
We may disclose certain information that we collect from Patient Users. In particular, we may disclose certain information, including Personal Information and/or PHI, when: (a) Patient Users transmit medical data to patient-selected care providers (by using Docket to scan a care provider’s Docket QR code); (b) we believe that Patient Users experience emergency medical situations; and (c) when Patient Users use Docket to remotely update care providers. Docket will not disclose Personal Information without your consent. We do not sell e-mail addresses to third parties. We may, however, share your e-mail addresses with our business partners to enable them to help Docket customize our advertising.
We may use information that is neither Personal Information nor PHI (including non-PHI Personal Information that has been de-identified and/or aggregated) to better understand who uses Docket and how we could enhance our products and services.
We may also need to disclose your Personal Information or any other information we collect if we determine in good faith that such disclosure is needed to: (a) comply with applicable law, regulation, court order, or other legal process; (b) protect the rights, property, or safety of Docket or another party; (c) enforce the Agreement or other agreements with you; or (d) respond to claims that any posting or other content violates third-party rights.
The Services are not intended for use by children under the age of 13. Docket does not knowingly collect information from children, not are the Services directed to children. By accessing, using and/or submitting information to or through the Services, you represent that you are not younger than age 13. If we learn that we have received any information directly from a child under age 13 without his/her parent’s consent, we will use that information only to respond directly to that child (or his/her parent or legal guardian) to inform the child that he/she cannot use the Services and subsequently we will delete that information. If you are between age 13 and the age of majority in your place of residence, you may use the Services only with the consent of or under the supervision of your parent or legal guardian. If you are a parent or legal guardian of a minor child, you may, in compliance with the Agreement, use the Services on behalf of such minor child. Any information that you provide us while using the Services on behalf of your minor child will be treated as Personal Information as otherwise provided herein.
Registered Patient Users may view and modify certain data elements, including Personal Information, submitted to Docket. Docket reserves the right to retain information from closed accounts, including to comply with law, prevent fraud, resolve disputes, enforce the Agreement, and take other actions permitted by applicable law.
If you choose to utilize the Services to search state and local immunization registries, you authorize Docket to query state immunization registries identified in the application and certify that you are authorized to access any relevant immunization records you obtain through Docket. Docket utilizes user-provided data (i.e. First Name, Last Name, Date of Birth, Sex, and your verified cellphone or e-mail addresses) to search state and local immunization registries. Docket verifies your cellphone and/or e-mail addresses via multi-factor authentication. If you believe that anybody has unauthorized access to any of your cellphone numbers or e-mail addresses, you must rectify the situation immediately by either a.) changing all relevant passwords or b.) contacting your state or local immunization registry. If you believe that an estranged spouse, partner, or anybody not authorized to access your child’s records has access to your child’s records through Docket, you must contact your state or local immunization registry immediately to resolve any custody-related issues.
This section applies to California residents when and if the California Consumer Protection Act is applicable to our Site and Services about whom we have collected Personal Information, including through the use of our Site or Services, by purchasing or utilizing our Service, or by communicating with us electronically, in paper correspondence, or in person. For purposes of this section, the term "Personal Information" includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household.
We may disclose the following types of Personal Information to third parties for a business or commercial purpose, as further described: identifiers, medical and health insurance information, protected classifications under applicable law, commercial information, biometric information, internet or similar network activity, geolocation data, sensory data, professional or employment-related information, alerts for upcoming or overdue immunizations, and inferences from other Personal Information. Functionality within the Docket platform enables consumers to consolidate and share Personal Information with care providers.
You may be entitled by applicable law to exercise the following rights with respect to your Personal Information:
You may also authorize someone to exercise the above rights on your behalf. If we have collected information on your minor child (e.g. immunization records), you may exercise the above rights on behalf of your minor child. In addition, residents of California also have the right to request once per calendar year certain information with respect to types of Personal Information (as defined by California law) we share with third parties for those third parties’ direct marketing purposes, as the identities of the third parties with whom we have shared such information during the immediately preceding calendar year.
The above rights are subject to our ability to reasonably verify your identity and authority to make these requests by providing verifiable information such as the following:
To exercise your rights, submit your request by e-mail at email@example.com. We will respond to authorized and verified requests as soon as practicable and as required by law. In addition, the above rights are subject to various exclusions and exceptions under the law, and, under certain circumstances, we may be unable to implement your request. We will advise you of any reason for denying or restricting a request.
Through partnership with public health agencies, Docket offers consumer access to COVID-19 immunization records. As such, Docket only accesses personal and sensitive data required directly to support COVID-19-related efforts. Specifically, Docket uses this data to facilitate consumer access to personal and family immunization records.
Docket supports the capability for users to select a profile picture. This functionality is entirely optional. Docket users that choose to select a profile picture will need to engage their phone’s camera and/or saved photos.
Docket supports the capability for users to share and/or save a PDF copy of their personal and family immunization records. As such, Docket may require access to read and/or write to your phone’s file storage.