GREY FOX CONSULTING PRIVACY POLICY

Please read this Privacy Policy (this “Privacy Policy”) carefully. To use the Services that Grey Fox Consulting, LLC and its affiliates (collectively, “Grey Fox Consulting”, “we,” “us,” or “our”) provide, you as a user of the Services must accept this Privacy Policy (“User”, “you”, “your”). If you do not consent to the terms of the Privacy Policy, please do not access or use the Services.

This Privacy Policy is designed to inform users of the Grey Fox Consulting, LLC (“Grey Fox Consulting” “we,” and “us”) websites, mobile applications and services (collectively, the “Service”). This Privacy Policy covers how Grey Fox Consulting treats your Personally Identifiable Information (“PII”), Protected Health Information (“PHI”), and other data that you may share when you use the Service (“Data”) (PII, PHI and Data collectively hereafter “Personal Information”). We established this Privacy Policy to let you know the kinds of information we may gather, why we gather your information, what we use your information for, how you can manage your information, and under what circumstances, if any, it is disclosed. By using the Service, you are accepting the practices described in this Privacy Policy.

You may have been invited to register for, install or use the Service from a third party as part of a research or clinical care initiative. We are not responsible for the actions, privacy policies or other legal notices of these third-parties, their websites or applications. This Privacy Policy does not apply to information that you may share with us offline or with third-parties, including websites or applications that may be linked to our Service.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time by posting a new version online. You should check this page occasionally to review any changes. If we make material changes affecting you as determined by Grey Fox Consulting we will notify you by posting the revised Privacy Policy on our websites and, if you are a registered user of our platform, by providing notice by email. This helps you always be aware of what information we collect, how we use it and under what circumstances, if any, it is disclosed. Your continued use of the Service and/or continued provision of Personal Information to us will be subject to the terms of the then-current Privacy Policy.

Types of Information Collected

Grey Fox Consulting collects Personal Information when you register for the Service, when a third party registers you for the Service on your behalf, or when you use the Service. Depending on how you use the Service, we collect different kinds of information about you. This information may include:

​Personal Health Information (PHI)

If you are using the Service as part of your treatment from a health care provider or membership with a health insurance plan, then any information that identifies you as a patient of the health care provider or regarding your health may be PHI. If you are not a patient but are using the Service on behalf of a health care provider or health insurance company, then information about others that is accessible through the Service may be PHI. We will only use or disclose PHI as permitted or required under the Health Insurance Portability and Accountability Act, as amended, and implementing regulations (collectively, “HIPAA”). If your use of the Service is for purposes of a research protocol or is not through a health care provider, then HIPAA may not be applicable.

Personally Identifiable Information (PII)

PII is any information that can individually identify you and includes your name, and contact information, such as e-mail address, telephone number, or postal address.

Non-Personally Identifiable Information

Non-personally identifiable information includes information that does not personally identify you, but it may be linkable to you. If non-personally identifiable information is directly linked to personally identifiable information, it will be considered PII while it is linked. Aggregate and de-identified information is not considered PII.

Personal Data

Among the types of Personal Data that the Service may collect from the you, by itself or through third parties, there are: geographic position, general activity data, movement activity, Cookies, Usage Data, first name, last name, email address, body measurements & indexes, sleeping activity, phone number and picture. Some information regarding phone and SMS usage may be obtained from your device in the case that you choose to contact an emergency hotline.

Personal Data may be freely provided by the user of the Service, or, in case of Usage Data, collected automatically. Failure to provide the requested Personal Data may make it impossible for Grey Fox Consulting to provide its Service to you. In cases where the Service specifically states that some Data is not mandatory, you are free to withhold this Data without any consequences on the availability or the functioning of the Service.

Whenever you visit our websites or applications, Grey Fox Consulting receives and records information on our server logs from your browser, including your IP address,

Grey Fox Consulting’s cookie information and the pages you request, and relates it to the Personal Information you provide. Any use of Cookies – or of other tracking tools – serves the purpose of providing, customizing or improving the Service.

Users are responsible for any third-party Personal Data obtained, published or shared through the Service and confirm that they have the third party’s consent to provide the Data to Grey Fox Consulting.

Collection and Combination of Information from Other Sources

We also may collect information about you that we may receive from other sources or from our offline interactions with you to, among other things, enable us to verify or update information contained in our records and to better customize the Service for you. We may combine information gathered from multiple parts of the Service into a single record.

Information Use and Collection

Grey Fox Consulting collects and uses Personal Information from you for the following purposes:

Registration – When you register for the Service, or when a third party registers you for the Service on your behalf, we collect your Personal Information as part of the registration process, including but not limited to your name, address, phone number, email address, sponsoring provider and program settings. SMS messages and email may be used during the registration process to send a one-time code and link to access the Service.

Personalization – We collect information such as your picture in order to personalize the Service.

Notifications – Registered users of the Grey Fox Consulting platform may receive push notifications or desktop notifications according to their user settings.

Self-Reported Health Information – We collect the information that you enter while using the Service, such as information regarding your health and/or medical condition and related behaviors.

Provider-and-Payer-Reported Health-Related Information – We collect information about you that is submitted with your permission by your authorized healthcare provider or other third party while using the Service, such as information about your health and/or medical condition, including information that is protected under HIPAA.

Automatically Tracked Health-Related Information – We collect data such as as cookies, geographic location, movement, heartbeat, change in altitude, data about surroundings and geographic position data in order to provide specific features. Most browsers and operating systems will allow you to opt out of the Services collection of geolocation information. Some operating systems will also allow you to opt out of the Services collection of activity information. If explicit authorization has been provided we may share this data with your authorized healthcare provider or other third party to allow them to provide personalized services.

For some registered users of our platform, the Service may use Apple HealthKit data to provide these features. HealthKit is an activity data handling service provided by Apple Inc. that enables Grey Fox Consulting to access or store activity data, including body measurements & indexes, general activity data, movement activity and sleeping activity. (Apple Inc. Privacy Policy)

Customer support – We may use your contact information to send you information about our Service or information relating to your health, to respond to technical support inquiries, or to help prevent spam, fraud or abuse. When you enter Personal Information into an inquiries or contact form in any portion of the Service, Grey Fox Consulting uses the information provided to reply to requests for information or other requests as indicated by the form.

Managing contacts and sending messages – We may collect your email address, phone number and other contact information to communicate with you for purposes of registration or customer support, and to track usage of certain features in the Service, such as clicking on links included in a message.

System logs and maintenance – For operation and maintenance purposes, we may collect files that record your interactions with the Service (system logs) or other Personal Data (such as IP address).

Surveys and user research – From time to time, we may send you survey questions or contact you with questions related to your experience to help us improve our Service. We collect any responses you provide. Participation in such surveys or user research does not impact your access to the Service.

Analytics – Grey Fox Consulting may collect and use your device’s unique identifier for analytics purposes or to store your user preferences. Grey Fox Consulting may use Google Analytics or other third party services to monitor and analyze user behavior.

Google Analytics is a web analysis service provided by Google, Inc. (“Google”). Google utilizes the Data collected to track and examine the use of the Service, to prepare reports on its activities and to share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Research – Information collected by Grey Fox Consulting in conjunction with your use of the Service may also be used by Grey Fox Consulting for research purposes. In such event, use of your information will be subject to the terms of any applicable informed consent and/or other authorizations from you.

Information Sharing and Disclosure

Grey Fox Consulting does not rent, sell or share your Personal Information with other people or non-affiliated companies, except to provide products or services you have requested, when we have authorization to share such information, or when we provide information to companies or consultants working on behalf of or with us under confidentiality agreements as described below. These companies and consultants do not have any independent right to share your Personal Information.

Third-Party Agents

We have third-party agents and service providers that perform functions on our behalf, including, but not limited to hosting services, content syndication, content management, technical integration, marketing, analytics, customer service, and fraud protection.

These entities may have access to Personal Information if needed to perform their functions. If such access is required, the third parties will be contractually obligated to maintain the confidentiality and security of that PII.
They are restricted from using, selling, or distributing this data in any way other than to provide the requested services to the Service or as required by law.

Assignment

We may change our ownership or corporate organization while providing the Service. We may also sell certain assets associated with the Service. In such event, we may transfer some or all of your information to an entity acquiring all or part of our assets or to another entity with which we have merged. Under such circumstances, we would request the acquiring party to follow the practices described in this Privacy Policy. Nevertheless, we cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Privacy Policy.

Law Enforcement, Legal Process, and Emergency Situations

We may use or disclose your Personal Information to third parties if required to do so by law or on the good-faith belief that such action is necessary to (a) conform to applicable law or comply with legal process served on us or the Service; (b) protect and defend our rights or property, the Service or our users, or (c) act to protect the personal safety of us, users of the Service or the public.

Business Purposes

We may disclose de-identified versions of your Personal Information and other data (“De-Identified Information”) in aggregated or non-aggregated forms with institutional clients, partners, investors and contractors for any purposes related to our business practices. Permitted uses of your De-Identified Information may include but are not limited to, product development, marketing or research made available to the public.

Confidentiality and Security

We have taken reasonable and necessary steps to ensure that all Personal Information collected will remain secure. These steps include physical, electronic, and administrative procedures to safeguard and help prevent unauthorized access or disclosure, maintain data security and correctly use the Personal Information that we collect.

The processing of the Personal Information we collect is carried out using computers and/or IT enabled tools, following organizational procedures and modes appropriate and necessary to providing the Service. Personal Information is processed at Grey Fox Consulting’s operating offices and in any other places where the parties involved with the processing are located.

It is important that you help protect the privacy of your own information. We strongly recommended that you take precautions to protect the security of any Personal Information that you transmit by using device security features, encryption and other techniques to prevent unauthorized interception of your Personal Information. You are responsible for the security of your information when using unencrypted, public or otherwise unsecured networks.

Please understand, that while we try our best to safeguard your Personal Information once we receive it, no transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.

Accessing, Changing and Deleting Your Information

You can request access, changes or deletions to your Personal Information by contacting us at info@Grey foxconsulting.com. Be advised that we may not be able to delete your Personal Information without also deleting your user account.

You will not be permitted to examine the Personal Information of any other person or entity without appropriate authorization. Our security procedures mean that we may request proof of identity before we disclose Personal Information to you. We may not accommodate a request to change or delete Personal Information if we believe doing so would violate any law or legal requirement, or cause the information to be incorrect.

The time period for which we keep Personal Information varies according to what the Personal Information is used for. In some cases, there are legal requirements to keep Personal Information for a minimum period. Unless there is a specific legal requirement for us to keep the information, we will retain Personal Information for no longer than is necessary for the purposes for which it was collected or for which it is to be further processed.

Your Obligations to Keep Access Rights

You agree to: (a) provide true, accurate, current and complete information about yourself as prompted by the Service; and (b) maintain and promptly update your information to keep it true, accurate, current and complete. If Grey Fox Consulting suspects, in its sole discretion, that such information is untrue, inaccurate, not current or incomplete, we have the right to suspend or terminate your account and refuse any use of the Services (or any portion thereof). If you are a registered user of the Service, you are solely responsible for the security and confidentiality of your username and password and you are solely responsible for any and all activities that occur under your account.

General Information

Links

The Service may contain links or deep links to other websites, open search results or other online content. Grey Fox Consulting generally reviews the content of online content linked through third party websites, but it is not responsible for such content, the privacy practices, or any advertisements on third party websites. Users should be aware of this when they use our Service and are encouraged to review the privacy statements of each third party website.

Children’s Information

The Service is neither directed to nor structured to attract children under the age of 13 years. Accordingly, we do not intend to collect Personal Information from anyone we know to be under 13 years of age. We will direct potential users under 13 years of age not to use the Service. If we learn that Personal Information of persons less than 13 years of age has been collected without verifiable parental consent, then we will take the appropriate steps to delete this information. To make such a request, or if there are any questions or concerns about the Privacy Policy for the Service or its implementation, please contact us at info@grey foxconsulting.com.

Governing Law

The Service is located, published and directed to individuals located in the United States, and our policies are directed at compliance with those laws.
If you are located outside the United States, you should be aware that your Personal Information will be transferred to the United States, the laws of which may be deemed by your country to have inadequate data protection. If you are uncertain whether this Privacy Policy conflicts with the applicable local privacy laws where you are located, you should not use the Service.

Legal Action

Your Personal Information may be used for legal purposes by Grey Fox Consulting, in Court or in the stages leading to possible legal action arising from improper use of the Service. By using the Service, you declare to be aware that we may be required to reveal Personal Information upon request of public authorities.

Business Transitions

In the event Grey Fox Consulting goes through a business transition, such as a merger, acquisition by another organization, or sale of all or a portion of its assets, User’s Personal Information might be among the assets transferred. User will be notified via this Website of any such change in ownership or control of User’s Personal Information.

Merger, Sale or Bankruptcy.

If we are acquired by or merged with a third party entity, or if we are subject to a bankruptcy or any comparable event, we reserve the right to transfer or assign Personal Information in connection therewith.

Notice to California Residents
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information.

California Online Privacy Protection Act Notice
On September 27, 2013, California enacted A.B. 370, amending the California Online Privacy Protection Act to require website operators like us to disclose how we respond to “Do Not Track Signals”; and whether third parties collect personally identifiable information about users when they visit us.

(1) We do not track users, who do not interact with its sharing functionality across the web, and therefore do not use “do not track” signals.
(2) We do not authorize the collection of personally identifiable information from our users for third party use through advertising technologies without separate member consent.

California Civil Code Section 1798.83 also permits our customers who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to info@grey foxconsulting.com. Please note that we are only required to respond to one request per customer each year.


Personal Information Access and Corrections

Upon receipt of User’s written request and upon Grey Fox Consulting’s receipt of enough information to permit Grey Fox Consulting to identify User’s Personal Information, Grey Fox Consulting will disclose to User the Personal Information Grey Fox Consulting holds about User. Grey Fox Consulting will also correct, amend or delete any Personal Information that is inaccurate and notify any third party recipients of the necessary changes. User may update any information User has given to Grey Fox Consulting by sending an email to info@grey foxconsulting.com. Requests to delete Personal Information are subject to any applicable legal and ethical reporting or document retention obligations imposed on Grey Fox Consulting.

​Questions and Suggestions

If you have any questions or suggestions about this Privacy Policy, or if you wish to correct your Personal Information, please contact us by email at info@grey foxconsulting.com or write to us at Grey Fox Consulting 1000 Cordova Place, Suite 997, Santa Fe NM 87505.

​

Updated: June 18, 2022