Privacy Policy

Tabula Rasa HealthCare Inc. (“Tabula Rasa”) is committed to maintaining the privacy and security of your personal information, and we appreciate that medical information is particularly sensitive. This Privacy Policy applies to the Tabula Rasa website at www.tabularasahealthcare.com (the “Website”). Tabula Rasa respects the privacy of its Website visitors (“Visitors”).  This Privacy Policy discloses Tabula Rasa’s information collection and dissemination practices in connection with the Website and applies solely to the information that we collect through the Website. This Privacy Policy does not address personal information that you provide to us in other contexts (e.g., through a business relationship not handled through the Website).

Acceptance of Privacy Policy

By using this Website, you signify your acceptance of this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Website.  Your continued use of the Website following the posting of changes to these terms will mean that you accept those changes.

Personal Information Provided by You

Tabula Rasa collects your personally identifiable information (“PII”) through the Website when you choose to provide such information and as described below in this Privacy Policy, such as when you submit information through the “Contact” page of the Website. PII can include your name and email address.

When Tabula Rasa provides its medication risk management, risk adjustment and other services (the “Tabula Rasa Services”) to healthcare providers, Tabula Rasa may be subject to federal healthcare privacy and security standards under the Health Insurance Portability and Accountability Act (“HIPAA”).  To the extent that the PII provided to Tabula Rasa is “protected health information” subject to HIPAA, Tabula Rasa will safeguard the privacy and security of that information in accordance with all applicable HIPAA requirements.  Tabula Rasa’s privacy obligations to customers receiving the Tabula Rasa Services are addressed more specifically in our agreements with those customers, and not in this Privacy Policy.

Use and Disclosure of Personal Information

Tabula Rasa will use your PII only to provide the Website or address your requests for information, products or services.  Tabula Rasa will not sell, rent, license, or trade your PII with third parties for their own direct marketing use unless we receive your express consent to do so.  Unless you give us permission to do so, Tabula Rasa will not share your PII other than as specified in this Privacy Policy.

Disclosures to Third Parties Assisting In Our Operations.  Tabula Rasa may share your PII under confidentiality agreements with other companies that work with, or on behalf of, Tabula Rasa to provide products and services, such as a cloud hosting service or a document storage company.  These companies may use your PII to assist Tabula Rasa in its operations.  However, these companies do not have any independent right to share this information.

Disclosures Under Special Circumstances.  We may provide information about you to respond to subpoenas, court orders, legal process or governmental regulations, or to establish or exercise our legal rights or defend against legal claims.  We believe it is necessary to share information in order to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.

Business Transfers.  We may share your PII with other business entities in connection with the sale, assignment, merger or other transfer of all or a portion of Tabula Rasa’s business to such business entity.  We will require any such successor business entity to honor the terms of this Privacy Policy.

Automatically Collected Information and Anonymous Information

Each time a visitor comes to a Website, Tabula Rasa collects some information to improve the overall quality of the visitor’s online experience.

Aggregated Data.  Tabula Rasa collects aggregate queries for internal reporting and also counts, tracks, and aggregates the visitor’s activity into Tabula Rasa’s analysis of general traffic-flow at the Website.  To these ends, Tabula Rasa may merge information about you into aggregated group data.  In some cases, Tabula Rasa may remove personal identifiers from PII and maintain it in aggregate form that may later be combined with other information to generate anonymous, aggregated statistical information. Such anonymous, group data may be shared on an aggregated basis with Tabula Rasa’s affiliates, business partners, service providers and/or vendors; if it does so, Tabula Rasa will not disclose your individual identity.

Web Server Logs and IP Addresses.  An Internet Protocol (“IP”) address is a number that automatically identifies the computer/machine you have used to access the Internet. The IP address enables our server to send you the web pages that you want to visit, and it may disclose the server owned by your Internet Service Provider. Tabula Rasa may use IP addresses to conduct Website analyses and performance reviews and to administer the Websites.

Cookies and Web Beacons.  Cookies are pieces of information that a website transfers to a user’s computer for purposes of storing information about a user’s preferences.  Cookies in and of themselves do not personally identify users, although they do identify a user’s computer.  Many websites use cookies as a standard practice to provide useful features when a user visits the website and most web browsers are set up to accept cookies.  Tabula Rasa uses cookies to improve your online experience when visiting the Website.  You can set your browser to refuse cookies, but some portions of a Website may not work properly if you refuse cookies.  Some of the Website’s web pages may use web beacons in conjunction with cookies to compile aggregate statistics about Website usage.  A web beacon is an electronic image (also referred to as an “action tag,” “single-pixel,” or “clear GIF”) that is commonly used to track the traffic patterns of users from one web page to another in order to maximize web traffic flow and to otherwise analyze the effectiveness of Website.  Some web beacons may be unusable if you elect to reject their associated cookies.

Referrals/Links

The Website may contain links to third-party websites that may offer information of interest. This Privacy Policy does not apply to those websites, and Tabula Rasa recommends reviewing those websites’ privacy policies individually.

Security

Tabula Rasa understands that storing our data in a secure manner is essential.  Tabula Rasa stores PII and other data using industry standard physical, technical and administrative safeguards to secure data against foreseeable risks, such as unauthorized use, access, disclosure, destruction or modification.  Tabula Rasa maintains PHI in accordance with applicable requirements of the HIPAA security regulations.  Please note, however, that while Tabula Rasa has endeavored to create a secure and reliable website for users, the confidentiality of any communication or material transmitted to/from the Website or via e-mail cannot be guaranteed.

Response to “Do Not Track” Signals

Some Internet browsers include the ability to transmit “Do Not Track” signals.  Since uniform standards for “Do Not Track” signals have not yet been adopted, Tabula Rasa does not process or respond to “Do Not Track” signals.

Children’s Privacy Protection

Under Age 13

Tabula Rasa understands the importance of protecting children’s privacy in the interactive online world. This Website is not designed for, or intentionally targeted at, children under 13 years of age. It is not our policy to intentionally collect or maintain information about anyone under the age of 13.  No one under the age of 13 should submit any PII to Tabula Rasa or this Website.

Under Age 18

Minors under 18 years of age may have the PII that they have provided to Tabula Rasa through the Website deleted by sending an email to info@tabularasahealthcare.com requesting deletion.  Please note that, while we make reasonable efforts to comply with such requests, deletion of your personal information does not ensure complete and comprehensive removal of that data from all systems.

Changes

You may review and request changes to your PII that Tabula Rasa has collected, including the removal of your PII from Tabula Rasa’s databases in order to prevent receipt of future communications using any of the following options:

You can send your request via e-mail to info@tabularasahealthcare.com

You can mail your request to the following postal address:

Chief Compliance Officer

JRS-IC

c/o Tabula Rasa HealthCare, Inc.

228 Strawbridge Drive

Moorestown, NJ  08057

Changes to PHI maintained by Tabula Rasa will be governed by the Notice of Privacy Practices of the applicable HIPAA covered entity.

Policy Updates

This Privacy Policy may be revised from time to time as we add new features and services, as laws change, and as industry privacy and security best practices evolve.  We display an effective date on the policy in the upper right corner of this Privacy Policy so that it will be easier for you to know when there has been a change.  If we make any change to this Privacy Policy regarding use or disclosure of PII, we will provide advance notice on this Website.  Small changes or changes that do not significantly affect individual privacy interests may be made at any time and without prior notice.

Questions?

If you have any questions about this Privacy Policy or about Tabula Rasa’s handling of your information, please contact info@tabularasahealthcare.com