Our Privacy and Security Policy

CertSite respects your privacy! Whether you are a patient, provider, or a casual visitor to our site, our policies protect your privacy and safeguard your personal information.

CertSite does not and will not sell, rent, loan, trade, or lease any information collected or housed at our site to any third party. Please see the sections below for details.

Unregistered (casual) visitors

Information collected on the website:

CertSite analyzes our website logs to improve the value of our service and to track access. Information obtained from our logs are not and will not be disclosed to third parties.

Information that you give us on the contact CertSite page is used only to enable us better to respond to your questions and needs. No information is made available to marketers or other third parties.

Patients

Encryption of patient data:

The nature of CertSite's UM transaction service involves sending confidential patient data over the Internet. Any and all patient- or transaction-related information is encrypted during transmission.

Availability of patient-specific information:

Patient-specific information in each transaction is accessible only to parties that are relevant to that transaction. These parties include:

  1. The provider group that generates a transaction (eg, your doctor's office).
  2. The payer organization receiving the transaction (eg, your HMO or insurance company).
  3. In the case of a referral to a specialist or a care center, the provider group at that center (eg, the office or hospital) to which you are being referred.

Nondisclosure to third parties:

No information, either patient-identifiable or demographic, will be made available to marketers or other outside parties in the absence of a court order. CertSite will maintain audits of the numbers and types of transactions that are processed by our system and may use some of this information (stripped of any patient-identifiable data) for our own marketing efforts.

Providers

Use of cookies:

CertSite uses cookies on the secure portion of our site to ensure access authorization and to manage dynamic aspects of the site. The cookies are temporary and are automatically deleted as users end their browser session.

Availability of contact information:

A provider's CertSite registration (name, contact information, specialty information) will be visible to the following parties:

  1. Payers on CertSite's service.
  2. Fellow providers within a payer's network of providers.
  3. Other (ie, out-of-network) providers by user's permission only.
  4. Unregistered CertSite visitors (eg, consumers and patients) by user's permission only.

Availability of transaction information:

Transactions submitted through CertSite can be accessed only by parties relevant to that transaction. These parties include:

  1. The provider group that generates a transaction (eg, your office).
  2. The payer organization receiving the transaction.
  3. In the case of a referral to a specialist or a care center, the provider group receiving the referral.

Nondisclosure to third parties:

No information, other than that already described in this section, will be made available to outside parties in the absence of a court order. No patient- or provider-identifiable data will be made available to marketers. CertSite will maintain audits of the numbers and types of transactions that are processed by our system and may use some of this information (stripped of any patient- or provider-identifiable data) for our own marketing efforts.

Compliance with privacy legislation:

CertSite pledges as part of its service to maintain awareness of statutes and regulations relevant to privacy and security of electronic patient-identifiable information. We will comply with these regulations and process transactions accordingly to the best of our ability.

Payers

Confidentiality of transaction data:

Transaction and patient-identifiable information is made available only to relevant parties as described under providers' availability of transaction information (above).

Confidentiality of business information:

Proprietary business information (eg, enrollment lists, provider networks, determination criteria) is visible only as demanded within the context of Utlilization Management transactions. These data are NOT available to unregistered visitors or to registered providers that do not have CertSite privileges within your particular network. Determination criteria are visible only to registered and authorized users and only within the context of a particular transaction request; users cannot directly search or review determination criteria or other clinical decision-making tools.

For more information or if you have any questions, please don't hesitate to contact us.