This privacy policy (this “Policy”) governs your use of our online scheduling platform, which connects recipients and providers of psychotherapy services and is made available by Ravel Mental Health LLC (“we,” “our,” “us”) at our website at RavelMentalHealth.com (the “Site”). The Site, together with any content or services available via the Site, is referred to collectively in this Policy as the “Services.”
By creating an account on the Site or otherwise visiting or using the Services, you acknowledge that you have read and agree to this Policy, which may be updated by us at any time without notice to you. If we update this Policy, we will post the updated version here. Any such changes will be effective when you first access the Services after we post the changes here. If we make any material changes in the way we collect, hold, use, process or share your personal data, we will endeavor to provide you with appropriate notice before such changes take effect.
As used in this Policy, the term “you” means yourself individually as well as any person or organization on whose behalf you use the Services.
This Policy describes our policies and procedures with respect to personal data collected, held, used or processed by us when you use the Services; the measures taken to protect the confidentiality and security of that personal data; and your rights regarding such personal data.
We urge you to carefully review this Policy each time you use the Services. If you do not agree with any provision of this Policy, you must stop using the Services. You acknowledge and agree that such termination of use will be your exclusive remedy and our sole liability if you do not wish to be bound by any modifications to this Policy.
This Policy constitutes the entire agreement and understanding between you and us, and supersedes any prior agreements and understandings, with respect to its subject matter.
Queries regarding how (1) our policies may apply to your personal data; (2) to exercise your right to question or object to our use of your personal data, in accordance with applicable laws; or (3) to access, correct, or delete your personal data, should be sent to us using the contact information set forth below.
Who May Use the Services
The Services are intended for use by individual healthcare consumers (“Consumers”) and psychologists, psychiatrists, social workers, therapists, counselors or other professionals licensed to provide mental healthcare services (“Provider(s)”), in each case, who are located in the United States of America.
The Services are not targeted toward or intended for use by children under 18 years of age, and such use is not permitted. We do not knowingly collect or solicit personal data from children under the age of 18.
What Personal Data Do We Collect
We collect personal data from individuals who visit the Site or use the Services.
To sign up to use the Services to schedule an appointment with a Provider, a Consumer will need to provide the following personal data:
- sex
- date of birth
- email address
- postal address
- phone number
- type of therapy
- reason for visit
- health insurance provider
- login credentials (password)
- appointment date/time
- selected Provider’s name, specialty, type of practice and location
To schedule an appointment for a minor child or someone else who lacks legal capacity to do so, you will need to provide the name and date of birth of such child or other person. In such case, you represent to us that you have the legal authority to provide such information for this purpose.
If you use the Services to find a Provider, and your browser settings provide us with access to information about your location, we will use that information to help you find Providers in your geographic area.
To sign up to use the Services to schedule appointments with Consumers, a Provider will need to provide the following personal data:
- sex
- email address
- postal address (business and personal)
- phone number
- professional license information (jurisdiction and number)
- personal photograph
- payment card information, including card type, number, CVV code and billing address
- login credentials (password)
- preferred pronouns
Providers will also have the opportunity to include additional information about themselves.
In addition, if you choose to use Google or Facebook to log on to your account on the Services, we will get access to your name, email address and profile picture from that social media account.
Cookies
We or our service providers may record details of visits to the Site, such as traffic data, IP addresses, location data, weblog information about the device you use to interact with the Site, the type of operating system and browser you use, access times, pages viewed, URLs clicked on, and the pages visited before navigating to the Site, using cookies or other technologies.
Cookies are small text files stored by your browser on your computer when you visit websites, which allow for the collection of certain information about your use of the websites.
If you do not want to allow cookies, or want to allow use of only certain cookies, please refer to your browser settings. You can also use your browser settings to withdraw your consent to the use of cookies at any time and delete cookies that have already been set. To find out more about cookies please visit: www.allaboutcookies.org.
HIPAA and PHI
Certain personal data that we collect about Consumers when they are using the Services may be deemed “protected health information” (“PHI”) under the United States Health Insurance Portability and Accountability Act (“HIPAA”). PHI is any individually identifiable health information that a healthcare provider or a “Business associate” of your healthcare provider receives about you. Medical information you provide through the Services may be considered PHI. Furthermore, we may receive PHI from or on behalf of your Provider. In this role, we are defined as a “Business associate” under HIPAA. HIPAA provides specific protections for the privacy and security of PHI and restricts how PHI is used and disclosed. We will only use and disclose PHI in the ways permitted by HIPAA or as otherwise authorized by you
Why We Collect and Process Personal Data
We process the personal data described in this Policy for the following purposes:
- to set up your account on the Services;
- to allow you to log on to the Services;
- to assist Consumers and Providers in scheduling appointments with each other;
- to communicate with you regarding your use of the Services;
- to provide support regarding your use of the Services;
- to verify a Provider’s identity, eligibility and qualifications to use the Services;
- to enable payments by Providers of subscription fees;
- to monitor, improve and safeguard the use of the Services, including detecting and preventing violations of law, injuries to persons or damage to property;
- to address or investigate complaints, claims, proceedings or disputes relating to the Services;
- by means of cookies and similar technologies in accordance with the information below and the information provided to you as to when those technologies are used;
- for the purposes we explain at the time you provide such information or in other manners to which you consent;
- in connection with legal claims, and to comply with applicable laws, regulations, subpoenas, legal process, governmental investigations, regulatory requests or inquiries; or
- as otherwise described in this Policy
Marketing
We will not use your personal data for direct marketing purposes. If we ever decided to do so in the future, we would first obtain your consent, which you would be free to withhold, and which you would also be able to withdraw at any time by contacting us as set forth below.
How and With Whom Do We Share Personal Data
We may share your personal data as follows:
- to any Provider whom you designate for the purpose of scheduling and facilitating appointments;
- with our service providers, suppliers and subcontractors for purposes of our provision of the Services, including, if you are making payments, our payment processing provider;
- with analytics providers to help improve and optimize the Services;
- if we sell or buy any businesses or assets or merge any business into or with that of another person or entity, in which case we may disclose your personal data to the prospective counterparty in such transaction and such data may be one of the assets transferred in such transaction;
- to comply with applicable laws, regulations, subpoenas, legal process, governmental investigations, regulatory requests or inquiries, to cooperate with law enforcement, to assert or defend legal claims, to protect our and others’ rights, property, or safety, and for the purposes of crime and fraud prevention and remediation;
- as reasonably necessary to prevent fraud, unauthorized transactions or liability; and
- to any other party with your consent.
Your Rights
You have various rights with respect to our use, processing and sharing of your personal data, as described below. There may be exceptions to these rights under applicable law. If you wish to contact us to exercise any of these rights, please email us at Support@RavelMentalHealth.com or by postal mail or courier at Ravel Mental Health LLC, 815 Third Avenue, Suite 317, Chula Vista, CA 91911.
We will not deny you services, charge you a different price, provide a different level or quality of services or otherwise discriminate against you just because you exercised any of these rights; however, if you decline to provide your personal data or ask us to delete it or stop disclosing it, we may be unable to provide you with certain services.
Only you, or a person whom you authorize or who otherwise has legal authority to act on your behalf, may make a request related to your personal data. The request must:
- provide sufficient information for us to reasonably verify you are the person about whom we collected personal data or an authorized representative of such person; and
- describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal data if you do not take the foregoing actions. Making a request does not require you to create an account with us. We will use personal data provided in a request only to verify your identity or authority to make the request.
Access: You may request a copy of the personal data about you that we have collected, used or shared, and why we collected, used or shared that personal data, including the categories of personal data collected, the specific items of personal data collected, the categories of sources from which we collected personal data, the purposes for which we use the personal data, the categories of third parties with whom we share the personal data, and the categories of information that we disclose to third parties.
Accuracy: We aim to keep your personal data accurate, current, and complete. We encourage you to contact us to let us know if any of your personal data is not accurate or changes.
Objecting/Deletion: You have the right to object to processing of your personal data and to ask us to block, delete or restrict your personal data subject to certain exceptions. Once we receive your request and verify your identity, we will delete your personal data from our records and direct our service providers to delete your personal data from their records, unless an exception applies under applicable law.
Portability: You have the right to request that your personal data be provided to you, or to another data controller, in a commonly used, machine-readable format.
Complaints: If you believe that your data protection rights may have been breached, you have the right to lodge a complaint with the applicable supervisory authority.
How Long We Keep Your Personal Data
We will retain personal data for as long as required to provide services to you by means of the Services.
Do Not Track
We do not track visitors to the Services over time or across third party websites to provide targeted advertising and therefore do not respond to Do Not Track (“DNT”) browser settings.
California’s Shine the Light Law
California Civil Code Section 1798.83, known as the “Shine the Light” law, permits users who are California residents to request and obtain from businesses a list of what personal data (if any) they disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests are free of charge. We do not use your personal data for direct marketing purposes, and we do not share your personal data with third parties for their direct marketing purposes
Governing Law and Forum
GOVERNING LAW; DISPUTES
ANY DISPUTE ARISING OUT OF YOUR USE OF THE SERVICES WILL BE RESOLVED THROUGH BINDING, INDIVIDUAL ARBITRATION IN THE STATE OF DELAWARE, IN ACCORDANCE WITH THE AMERICAN ARBITRATION ASSOCIATION’S (AAA) RULES AND PROCEDURES FOR CONSUMER-RELATED DISPUTES. BY AGREEING TO THIS POLICY, YOU ALSO WAIVE YOUR RIGHT TO A TRIAL BY JURY. WE BOTH AGREE THAT ANY DISPUTE RESOLUTION WILL BE RESOLVED THROUGH INDIVIDUAL PROCEEDING AND NOT THROUGH ANY CLASS-WIDE PROCEEDINGS. YOU WAIVE YOUR RIGHT TO PARTAKE IN ANY CLASS PROCEEDINGS AS A CLASS MEMBER OR CLASS REPRESENTATIVE. THE FEDERAL ARBITRATION ACT AND FEDERAL ARBITRATION LAW WILL GOVERN THESE DISPUTE RESOLUTIONS. NO STATE LAW CONCERNING ARBITRATION WILL BE APPLICABLE. AN ARBITRATOR CAN AWARD DAMAGES THAT DO NOT CONFLICT WITH THIS POLICY. ANY COURT WITH COMPETENT JURISDICTION MAY REVIEW OR ENFORCE AN ARBITRATION AWARD.
THIS POLICY, AND ANY OTHER CLAIM, DISPUTE OR CAUSE OF ACTION THAT MIGHT ARISE BETWEEN YOU AND US UNDER THIS POLICY THAT ARE NOT DEEMED COVERED UNDER THE BINDING ARBITRATION PROVISION, ABOVE (EACH A “CLAIM”), ARE GOVERNED BY THE LAWS OF THE STATE OF DELAWARE, WITHOUT REGARD TO CONFLICT OF LAW PROVISIONS. YOU HEREBY AGREE TO SUBMIT AND CONSENT TO THE PERSONAL AND EXCLUSIVE JURISDICTION AND VENUE OF THE COURTS LOCATED IN THE STATE OF DELAWARE, WITH RESPECT TO ANY SUCH CLAIMS BROUGHT BY EITHER PARTY. ANY CAUSE OF ACTION IN CONNECTION WITH OUR TERMS OF USE OR THIS POLICY, OR THE SERVICES, MUST COMMENCE WITHIN ONE (1) YEAR AFTER THE CAUSE OF ACTION ACCRUES; ANY ACTIONS BROUGHT THEREAFTER WILL BE PERMANENTLY BARRED.
Interpretation
If any provision of this Policy is deemed unlawful, void or for any reason unenforceable, then that provision will be deemed severable from this Policy and will not affect the validity and enforceability of the remaining provisions. All references herein to “include” or “including” shall be deemed to mean “include without limitation” or “including without limitation,” as the case may be.
Contact Information
If you have any questions or comments about this Policy, you may contact us by email at Support@RavelMentalHealth.com or by postal mail or courier at Ravel Mental Health, 815 Third Avenue, Suite 317, Chula Vista, CA 91911 .