1. Purpose
This Privacy Policy explains how Novaryn Health Network (“Novaryn,” “we,” “our,” or “us”) collects, uses, stores, processes, discloses, protects, and retains information in connection with our websites, patient portals, membership enrollment systems, appointment tools, staff dashboards, administrative systems, and related healthcare membership services.
2. Scope
This Privacy Policy applies to individuals who access, register for, enroll in, inquire about, or use Novaryn services, including patients, members, prospective members, authorized representatives, website visitors, and users of Novaryn digital systems.
3. Information We May Collect
Novaryn may collect the following categories of information when reasonably necessary for healthcare membership operations, patient support, account management, service delivery, compliance, or security:
- Identity information, including name, date of birth, gender, nationality, and contact details.
- Membership information, including selected plan, membership status, card number, registration date, and account history.
- Appointment information, including requested date, time, location, territory, reason for visit, appointment status, and related communications.
- Health-related information voluntarily submitted through intake forms, appointment requests, patient records, care coordination, or provider interactions.
- Payment and billing information required to process membership-related transactions, confirmations, receipts, and account records.
- Technical information, including IP address, browser type, device data, session information, login activity, cookies, and website usage analytics.
- Security information, including failed login activity, role-based access logs, administrative changes, password reset events, and audit records.
- Communication records, including emails, forms, portal messages, support requests, and service-related notices.
4. Sensitive Personal Information and Healthcare Information
Because Novaryn operates in a healthcare environment, some information may be considered sensitive personal information or healthcare-related information. Novaryn treats such information with heightened care and limits access to authorized personnel with a legitimate operational, administrative, compliance, or healthcare-related need.
5. How We Use Information
Novaryn may use information to:
- Register and manage patient or member accounts.
- Process membership enrollment and membership status updates.
- Schedule, confirm, manage, modify, or cancel appointments.
- Coordinate healthcare access, provider availability, and territory-based services.
- Operate patient portals, staff portals, and administrative dashboards.
- Send service notices, appointment reminders, account alerts, and membership communications.
- Respond to inquiries, support requests, complaints, or privacy requests.
- Maintain security, detect abuse, prevent fraud, and protect system integrity.
- Conduct quality assurance, auditing, compliance reviews, and internal reporting.
- Comply with applicable laws, regulations, legal obligations, and lawful requests.
6. Legal and Operational Basis for Processing
Novaryn processes information when reasonably necessary for legitimate healthcare membership operations, service delivery, patient support, administrative functions, consent-based activities, contractual relationships, legal obligations, security needs, or compliance responsibilities.
7. Information Sharing and Disclosure
Novaryn does not sell personal information. Novaryn may share information only when reasonably necessary with:
- Authorized Novaryn personnel and approved healthcare representatives.
- Service providers supporting hosting, communications, payment processing, appointment systems, security, analytics, or operations.
- Healthcare providers, clinics, or territory partners involved in service coordination.
- Regulatory authorities, courts, government agencies, or law enforcement when legally required.
- Emergency contacts, authorized representatives, or appropriate parties in urgent healthcare or safety situations.
- Successor entities in the event of merger, restructuring, acquisition, or transfer of operations, subject to appropriate safeguards.
8. Data Security
Novaryn uses administrative, technical, and organizational safeguards designed to protect information from unauthorized access, alteration, disclosure, loss, misuse, or destruction. These safeguards may include access controls, authentication systems, encrypted transmission, logging, role-based permissions, session controls, administrative review, and secure hosting practices.
9. Data Retention
Novaryn retains information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including healthcare operations, membership administration, legal compliance, audit obligations, dispute resolution, security monitoring, and recordkeeping.
10. Patient and Data Subject Rights
Subject to applicable law and verification requirements, individuals may request access, correction, updating, blocking, deletion, portability, or information about the processing of their personal data. Certain requests may be limited where retention or processing is required for legal, healthcare, security, contractual, or operational reasons.
11. Children and Dependents
Where Novaryn services involve minors or dependents, information may be collected from or processed through a parent, guardian, authorized representative, or legally responsible party. Novaryn may require verification of authority before acting on requests involving minors or dependents.
12. Updates to this Policy
Novaryn may update this Privacy Policy from time to time. Updated versions will be posted on this page with an updated effective date. Continued use of Novaryn services after updates indicates acknowledgment of the revised policy.