OTR ONLINE PRIVACY POLICY AGREEMENT
November 03, 2023
Over The Rainbow Surrogacy LLC (OTR) values its users' privacy. This Privacy Policy ("Policy") will help you understand how we collect and use personal information from those who visit our website or make use of our online facilities and services, and what we will and will not do with the information we collect. Our Policy has been designed and created to ensure those affiliated with Over The Rainbow Surrogacy LLC of our commitment and realization of our obligation not only to meet, but to exceed, most existing privacy standards.
We reserve the right to make changes to this Policy at any given time. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page. If at any point in time Over The Rainbow Surrogacy LLC decides to make use of any personally identifiable information on file, in a manner vastly different from that which was stated when this information was initially collected, the user or users shall be promptly notified by email. Users at that time shall have the option as to whether to permit the use of their information in this separate manner.
This Policy applies to Over The Rainbow Surrogacy LLC, and it governs any and all data collection and usage by us. Through the use of overtherainbow.net, you are therefore consenting to the data collection procedures expressed in this Policy.
Please note that this Policy does not govern the collection and use of information by companies that Over The Rainbow Surrogacy LLC does not control, nor by individuals not employed or managed by us. If you visit a website that we mention or link to, be sure to review its privacy policy before providing the site with information. It is highly recommended and suggested that you review the privacy policies and statements of any website you choose to use or frequent to better understand the way in which websites garner, make use of and share the information collected.
Specifically, this Policy will inform you of the following.
1. What personally identifiable information is collected from you through our website;
2. Why we collect personally identifiable information and the legal basis for such collection;
3. How we use the collected information and with whom it may be shared;
4. What choices are available to you regarding the use of your data; and
5. The security procedures in place to protect against the misuse of your information.
Information We Collect
It is always up to you whether to disclose personally identifiable information to us, although if you elect not to do so, we reserve the right not to register you as a user or provide you with any products or services. This website collects various types of information, such as:
· Voluntarily provided information which may include your name, address, email address, billing and/or credit card information etc. which may be used when you purchase services and to deliver the services you have requested.
· Information automatically collected when visiting our website, which may include cookies, third party tracking technologies and server logs.
In addition, Over The Rainbow Surrogacy LLC may have the occasion to collect non-personal anonymous demographic information, such as age, gender, household income, political affiliation, race and religion, as well as the type of browser you are using, IP address, or type of operating system, which will assist us in providing and maintaining superior quality service.
Over The Rainbow Surrogacy LLC may also deem it necessary, from time to time, to follow websites that our users may frequent to gleam what types of services and products may be the most popular to customers or the general public.
Please rest assured that this site will only collect personal information that you knowingly and willingly provide to us by way of surveys, completed membership forms, and emails. It is the intent of this site to use personal information only for the purpose for which it was requested, and any additional uses specifically provided for on this Policy.
Why We Collect Information and For How Long
We are collecting your data for several reasons:
· To better understand your needs and provide you with the services you have requested;
· To fulfill our legitimate interest in improving our services and products;
· To send you promotional emails containing information we think you may like when we have your consent to do so;
· To contact you to fill out surveys or participate in other types of market research, when we have your consent to do so;
· To customize our website according to your online behavior and personal preferences.
The data we collect from you will be stored for no longer than necessary. The length of time we retain said information will be determined based upon the following criteria: the length of time your personal information remains relevant; the length of time it is reasonable to keep records to demonstrate that we have fulfilled our duties and obligations; any limitation periods within which claims might be made; any retention periods prescribed by law or recommended by regulators, professional bodies or associations; the type of contract we have with you, the existence of your consent, and our legitimate interest in keeping such information as stated in this Policy.
Use of Information Collected
Over The Rainbow Surrogacy LLC does not now, nor will it in the future, sell, rent or lease any of its customer lists and/or names to any third parties.
Over The Rainbow Surrogacy LLC may collect and may make use of personal information to assist in the operation of our website and to ensure delivery of the services you need and request. At times, we may find it necessary to use personally identifiable information as a means to keep you informed of other possible products and/or services that may be available to you from overtherainbow.net.
Over The Rainbow Surrogacy LLC may also be in contact with you with regards to completing surveys and/or research questionnaires related to your opinion of current or potential future services that may be offered.
Over The Rainbow Surrogacy LLC uses various third-party social media features including but not limited to Facebook, Instagram, LinkedIn, TikTok and other interactive programs. These may collect your IP address and require cookies to work properly. These services are governed by the privacy policies of the providers and are not within Over The Rainbow Surrogacy LLC's control.
Disclosure of Information
Over The Rainbow Surrogacy LLC may not use or disclose the information provided by you except under the following circumstances:
· as necessary to provide services or products you have ordered;
· in other ways described in this Policy or to which you have otherwise consented;
· in the aggregate with other information in such a way so that your identity cannot reasonably be determined;
· as required by law, or in response to a subpoena or search warrant;
· to outside auditors who have agreed to keep the information confidential;
· as necessary to enforce the Terms of Service;
· as necessary to maintain, safeguard and preserve all the rights and property of Over The Rainbow Surrogacy LLC.
Non-Marketing Purposes
Over The Rainbow Surrogacy LLC greatly respects your privacy. We do maintain and reserve the right to contact you if needed for non-marketing purposes (such as bug alerts, security breaches, account issues, and/or changes in Over The Rainbow Surrogacy LLC products and services). In certain circumstances, we may use our website, newspapers, or other public means to post a notice.
Children under the age of 13
Over The Rainbow Surrogacy LLC's website is not directed to, and does not knowingly collect personal identifiable information from, children under the age of thirteen (13). If it is determined that such information has been inadvertently collected on anyone under the age of thirteen (13), we shall immediately take the necessary steps to ensure that such information is deleted from our system's database, or in the alternative, that verifiable parental consent is obtained for the use and storage of such information. Anyone under the age of thirteen (13) must seek and obtain parent or guardian permission to use this website.
Unsubscribe or Opt-Out
All users and visitors to our website have the option to discontinue receiving communications from us by way of email or newsletters. To discontinue or unsubscribe from our website please send an email that you wish to unsubscribe to info@OverTheRainbow.net. If you wish to unsubscribe or opt-out from any third-party websites, you must go to that specific website to unsubscribe or opt-out. Over The Rainbow Surrogacy LLC will continue to adhere to this Policy with respect to any personal information previously collected.
Links to Other Websites
Our website does contain links to affiliate and other websites. Over The Rainbow Surrogacy LLC does not claim nor accept responsibility for any privacy policies, practices and/or procedures of other such websites. Therefore, we encourage all users and visitors to be aware when they leave our website and to read the privacy statements of every website that collects personally identifiable information. This Privacy Policy Agreement applies only and solely to the information collected by our website.
Notice to European Union Users
Over The Rainbow Surrogacy LLC's operations are located almost exclusively in the United States. If you provide information to us, the information will be transferred out of the European Union (EU) and sent to the United States. (The adequacy decision on the EU-US Privacy became operational on August 1, 2016. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. It allows the free transfer of data to companies that are certified in the US under the Privacy Shield.) By providing personal information to us, you are consenting to its storage and use as described in this Policy.
Security
Over The Rainbow Surrogacy LLC takes precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline. Wherever we collect sensitive information (e.g. credit card information), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for "https" at the beginning of the address of the webpage.
While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers and servers in which we store personally identifiable information are kept in a secure environment. This is all done to prevent any loss, misuse, unauthorized access, disclosure or modification of the user's personal information under our control.
Acceptance of Terms
By using this website, you are hereby accepting the terms and conditions stipulated within the Privacy Policy Agreement. If you are not in agreement with our terms and conditions, then you should refrain from further use of our sites. In addition, your continued use of our website following the posting of any updates or changes to our terms and conditions shall mean that you agree to and accept such changes.
How to Contact Us
If you have any questions or concerns regarding the Privacy Policy Agreement related to our website, please feel free to contact us at the following email, telephone number or mailing address.
Email: info@OverTheRainbow.net
Telephone Number: 323.577.9644
Mailing Address:
Over The Rainbow Surrogacy LLC
703 Pier Ave Ste B #416
Hermosa Beach, California
90254
HIPAA PRIVACY STATEMENT
Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Over the Rainbow LLC and its affiliated entities use health information about you for treatment, to obtain payment for treatment, to evaluate the quality of care you receive, and for other administrative and operational purposes. Your health information is contained in a medical record that is the physical property and responsibility of Over the Rainbow LLC. Over the Rainbow LLC is required by law to maintain the privacy of health information about you and provide you with this notice of our legal duties and privacy practices with respect to your health information (“Notice of Privacy Practices” or “Notice”). We must abide by the terms of this Notice currently in effect. Over the Rainbow LLC reserves the right to change the terms of this Notice, our privacy practices, and to make the new provisions effective for all protected health information we maintain. You may contact us at the address or phone listed below to obtain a revised notice of privacy practices.
Your Health Information Rights
You have the following rights with respect to health information about you.
Right to Copy of Notice of Privacy Practices. You have the right to a paper copy of our Notice at any time. Please contact us at the address or phone listed below to obtain a copy.
Right to Inspect and Copy. You have the right to inspect and/or obtain a copy of the health information about you that we maintain. Your request must be in writing. We will charge you a fee to cover the costs of copying and mailing that are necessary to fulfill your request. In very limited circumstances, we may deny your request. If we deny your request, we will explain our reasons in writing. Under certain circumstances, you have the right to request that another person at Over the Rainbow LLC review the decision. We will comply with the review outcome.
Right to Amend. If you feel that health information about you that we maintain is inaccurate or incomplete, you have the right to request that we amend the information. You may request an amendment as long as we maintain the information. We may ask that you submit it in writing and include a reason supporting the request. In certain circumstances, we may deny your request. If your request is denied, we will explain our reasons in writing. You may submit a statement explaining why you disagree with our decision to deny your amendment request. We will share your statement when we disclose health information about you that we maintain in certain groups of records.
Right to an Accounting of Disclosures. You have the right to request an accounting or detailed listing of certain disclosures of health information about you. The time period covered by the accounting is limited to six years prior to the date of your request. Your request must be in writing. If you request an accounting more often than once every twelve (12) months, we may charge you a fee to cover the costs of preparing the accounting.
Right to Request Restrictions. You have the right to request a restriction or limitation on the health information about you that we use or disclose. Your request must be in writing. We are not required to agree to your request. However, we must agree not to disclose health information about you to your health plan if the disclosure is for payment or health care operations and relates to a health care item or service which you paid for in full out of pocket. If we agree to your request, we will comply with it unless the information is needed for emergency treatment. We will notify you if we are unable to agree to a requested restriction.
Right to Revoke Authorization. You have the right to revoke your authorization to use or disclose health information, except to the extent that action has been taken in reliance upon your authorization. Your request must be in writing.
Right to Request Alternative Method of Communication. You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. Your request must be in writing. We will accommodate all reasonable requests. Please note we do not accept in-person requests and will not meet with you in-person.
Right to Notification of Breach. You have a right to be notified if you are affected by a breach of unsecured health information about you.
Right to Opt Out of Fundraising Communications. We may contact you for fundraising purposes. You have the right to opt out of receiving these communications.
Complaints. If you believe your privacy rights have been violated, you may complain to Over the Rainbow LLC and to the Secretary of the Department of Health and Human Services. You may make a complaint to us by contacting Over the Rainbow LLC’s general inbox located at info@overtherainbow.net You will not be retaliated against for filing a complaint.
Uses or Disclosures of Your Health Information That May Be Made Without Your Authorization
It is not our intent to share disclose your information unless it is necessary for your safety, for payment, for the services, and to help create a better outcome of your use of our services.
Treatment. We may use and disclose health information about you to provide you with pharmacy care or other medical treatment or services. For example, information related to your treatment may be communicated with and obtained by a health care provider, such as a pharmacist, nurse, or other person providing health services to you, and will be recorded in your medical record. This information is necessary for health care providers to determine what treatment you should receive.
Payment. We may disclose health information about you for payment-related purposes. For example, we may contact your insurer, payor, or other entity, for purposes of receiving payment for treatment and services that you receive or to determine whether the entity will pay for the particular product or service. The billing information may identify you, your diagnosis, and treatment or supplies used in the course of your treatment.
Health Care Operations. We may use and disclose health information about you for administrative and operational purposes. For example, members of the risk management or quality improvement teams may use health information about you to assess the care and outcomes in your case and others like it. The results will be used internally to continually improve the quality of care for all patients.
Organized Health Care Arrangement. An organized health care arrangement is a clinically integrated care setting in which individuals typically receive health care from more than one health care provider. We may participate in organized health care arrangements with long-term care facilities, hospice, or other health care facilities in connection with the services we furnish to patients in such settings. Health information may be shared between the participants in the organized health care arrangement for the health care operations of the arrangement.
Individuals Involved in Your Care or Payment for Your Care. We may disclose to a family member, other relative, close personal friend or any other person you identify, health information about you directly relevant to that person’s involvement in your care or payment related to your care. In addition, we may disclose health information about you to a public or private entity assisting in a disaster relief effort (such as the Red Cross) so that your family can be notified about your condition, status, and location.
Business Associates. We provide some services through contracts with business associates, such as accountants, consultants, and attorneys so that they can perform the tasks that we have assigned to them. To protect your health information, we require the business associate to appropriately safeguard health information about you.
Appointment Reminders. We may use health information about you to provide you with appointment or prescription reminders.
Alternative Treatments. We may use health information about you to provide you with information about alternative treatments or other health-related benefits and services that may be of interest to you.
Future Communications. We may communicate with you via newsletters, mailings, or other means regarding treatment options, health-related information, disease-management programs, wellness programs, or other community-based initiatives or activities in which we are participating.
Required by Law. We may use and disclose health information about you as required by federal, state, or local law. For example, we may disclose health information for the following purposes: (1) for judicial or administrative proceedings pursuant to legal authority; (2) to report information related to victims of abuse, neglect, or domestic violence; and (3) to assist law enforcement officials in their law enforcement duties.
Public Health. We may use or disclose health information about you for public health activities such as assisting public health authorities or other legal authorities to prevent or control disease, injury, or disability, or for other health oversight activities.
Health Care Oversight. We may use or disclose health information about you to a health oversight agency for oversight activities authorized by law, such as audits, investigations, and inspections.
Research. We may use or disclose health information about you to researchers if an institutional review board or privacy board has reviewed and approved the research proposal and established protocols to ensure the privacy of your health information.
Health and Safety. We may use or disclose health information about you to avert a serious threat to your health or safety or any other person pursuant to applicable law.
Medical Examiners and Others. We may use or disclose health information about you to medical examiners, coroners, or funeral directors to allow them to perform their lawful duties. If you are an organ or tissue donor, we may disclose health information about you to organizations that help with organ, eye, and tissue donation and transplantation.
Food and Drug Administration (FDA). We may use or disclose health information for purposes of notifying the FDA of adverse events with respect to food, supplements, product, and product defects, or post marketing surveillance information to enable product recalls, repairs, or replacements.
Information Not Personally Identifiable. We may use or disclose health information about you in ways that do not personally identify you or reveal who you are.
Government Functions. We may use or disclose health information about you for specialized government functions, such as protection of public officials, national security and intelligence activities, or reporting to various branches of the armed services.
Workers Compensation. We may use or disclose health information about you to comply with laws and regulations related to workers compensation.
Correctional Institutions. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may use or disclosure health information about you. Such health information will be disclosed to the correctional institution or law enforcement official when necessary for the institution to provide you with health care and to protect the health and safety of others.
Affiliated Covered Entity. We may become a part of an affiliated covered entity with other entities that are under common ownership or control. The entity treats itself as a single entity for purposes of using and disclosing health information about you.
Uses or Disclosures of Your Health Information Based Upon Your Written Authorization
Psychotherapy Notes. We must obtain your written authorization for most uses and disclosures of psychotherapy notes.
Marketing. We must obtain your written authorization to use and disclose health information about you for most marketing purposes.
Sale of Your Health Information. We must obtain your written authorization for any disclosure of health information about you which constitutes a sale of such health information.
Other Uses. Other uses and disclosures of health information about you, not described above, will be made only with your written authorization. You may revoke your authorization, at any time, in writing, except to the extent that we have taken action in reliance on the authorization.
Other Applicable Laws
This Notice is provided to you as a requirement of the Health Insurance Portability and Accountability Act (“HIPAA”). There are other laws that may apply and limit our ability to use and disclose health information about you beyond what we are allowed to do under HIPAA.
State Laws. We will comply with your state’s laws if they provide you with greater rights over your health information or provide for more restrictions on the use or disclosure of your health information.
Contact Information. If you have any questions, requests, or concerns about your Over the Rainbow LLC-related health information rights or our use and disclosure of health information, please contact us at info@overtherainbow.net.
Updated Effective November 3, 2023