Other Covered Entities

MedsChat.com

Participation

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 7/5/2018
Next Certification Due Date: 7/5/2019
Data Collected: NON-HR

Purpose of Data Collection

We operate online drug forums. As such, we collect web analytics and some data from our users. Personal data includes: (1) IP Address - It is common for websites to log visitor IP addresses, and is typically used to identify the geographic region of our visitors and prevent abuse to our servers. (2) Email Address - our visitors may optionally provide us with their email address when participating in our online discussion threads or subscribe to our health newsletter. This allows us to send them an email alert when a new reply has been posted to a forum or send them a message which they have subscribed to. As such, this information must be shared with our outgoing Email Service Provider (MailGun) so that email messages can be delivered to our users. This is completely opt-in and we provide unsubscribe links in all of our emails. (3) Cookie identifier - When users participate in our discussion threads or carry out other (opt-in) actions on our website, we generate a unique cookie identifier for that visitor. We then tie this identifier with the other personal information which we collect above for the purpose of identifying and remediating SPAM & other abuse to our system (for example, if someone attempts to use a different Email or IP address, we could still identify previous SPAM attempts if they do not clear their cookies).

Privacy Policy

Non-HR Data

Description:

I am attaching a draft of our revised privacy policy which should now include provisions as required (please see the "EU-U.S. Privacy Shield" heading). Once our certification is complete, the revised policy will be published at our public-facing URL https://www.medschat.com/privacy.asp

Effective Date: 5/17/2018

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Limelight Innovations L.L.C. at:

Nick Jabbour
Limelight Innovations L.L.C.
501 S. Cherry Street, Suite 1100
Denver, Colorado 80246

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Limelight Innovations L.L.C. to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Limelight Innovations L.L.C. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission