h System is committed to protecting your privacy and developing technology that provides you with the most powerful and secure online experience. This Privacy Statement applies to the Northeastern Tribal Health System website at nthsclinic.com and to the NTHSClinic mobile application (the "App"), and governs data collection and usage across both. By using the website or the App, you consent to the data practices described in this statement.

This Privacy Statement applies only to information collected through the nthsclinic.com website and the NTHSClinic App. It does not apply to your protected health information, which is covered by our separate Notice of Privacy Practices. Please do not use this website or the App to send health information, medical details, or other protected health information. This website and the App are not a secure or HIPAA-compliant way to communicate with us. To discuss your care or your medical records, contact the clinic directly or speak with staff in person.

Northeastern Tribal Health System:

● collects personally identifiable information, such as your e-mail address, name, home or work address or telephone number, and anonymous demographic information, which is not unique to you, such as your ZIP code, age, gender, preferences, interests and favorites.

● collects information about your computer hardware and software that is automatically collected. This information can include your IP address, browser type, domain names, access times and referring website addresses. This information is used to operate the service, maintain its quality, and provide general statistics on website usage.

● encourages you to review the privacy statements of websites you choose to link to so that you can understand how those websites collect, use, and share your information.

● is not responsible for the privacy statements or other content on websites outside of Northeastern Tribal Health System.

Northeastern Tribal Health System:

● collects and uses your personal information to operate the website and deliver the services you have requested.

● uses your personally identifiable information to inform you of other services available from Northeastern Tribal Health System.

● may contact you via surveys to conduct research about your opinion of current services or of potential new services.

● does not sell, rent, or lease its customer lists to third parties.

● may share data with trusted service providers who help operate the website (such as statistical analysis, email or postal mail, and customer support). These providers are prohibited from using your information except to provide services to Northeastern Tribal Health System and must keep it confidential.

● will disclose your personal information if required to do so by law or in the good faith belief that such action is necessary to comply with legal process, protect the rights or property of Northeastern Tribal Health System, or protect the personal safety of users or the public.

The Northeastern Tribal Health System website uses cookies to help you personalize your online experience. A cookie is a text file placed on your device by a web page server. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie. You can accept or decline cookies by adjusting your browser settings, though some website features may not work if you decline them.

We may use analytics tools and social media features (for example, links to Facebook, Instagram, LinkedIn, and Yelp) that can collect information about your visit through cookies or similar technologies. These third parties handle information under their own privacy policies. Some browsers offer a Do Not Track signal; because there is no common industry standard for responding to it, our website does not currently respond to such signals.

Our website is not directed toward children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information through the website, please contact us, and we will delete it.

Northeastern Tribal Health System secures your personal information from unauthorized access, use, or disclosure. We store the personally identifiable information you provide on computer servers in a controlled, secure environment. When sensitive information is transmitted, it is protected using encryption such as the Secure Sockets Layer (SSL) protocol.

No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security. For that reason, please do not send health information or other sensitive personal information through this website.

The NTHSClinic App does not collect personal information, and we do not receive any identifier for your device or for your installation of the App. The App shows clinic notifications. To do that, it subscribes to a single notification channel shared by every installation of the App, using Google's Firebase Cloud Messaging service. Notifications are sent to that shared channel rather than to individual devices, so we never learn which devices received them. Google assigns your installation an identifier so that it can deliver those messages, and that identifier stays with Google as the provider of the messaging service. It is not sent to us and we cannot see it. Removing the App from your device, or clearing the App's storage, ends the subscription and clears that identifier. The App does not access your device's advertising identifier, and it contains no analytics or crash reporting software. The App does not require you to create an account, and it does not collect your name, e-mail address, telephone number, or health information. Information the App sends to us is encrypted in transit. We do not sell, rent, or lease App data, and we do not share it with other companies or organizations for their own purposes.

The App is not a secure or HIPAA-compliant way to send us health information. Please do not use the App to send health information, medical details, or other protected health information.

The Home tab of the App displays the nthsclinic.com website inside the App. While you are using that tab, the website practices described in this Statement apply, including the Use of Cookies and the Analytics, Social Media, and Do Not Track sections. The App also downloads a public news feed so that it can show clinic announcements, and that request carries nothing that identifies you.

We keep the information described in this Statement only as long as we need it for the purposes described above, or as long as we are required to keep it by law, by the records retention schedules that apply to us as a tribal health program, or because of an ongoing legal matter. When we no longer need information, we delete it or aggregate it so that it no longer identifies you or your device.

● Messages you send us through the website or by e-mail are kept while we respond to you and for as long as our records retention schedule requires, and are then deleted.

● Website server logs and analytics data, including IP addresses, are kept for the period needed to operate and secure the website and to produce aggregate usage statistics, and are then deleted or aggregated.

● We hold no data from the NTHSClinic App, so there is nothing for us to retain. The notification identifier described above is held by Google and is cleared when you remove the App or clear the App's storage.

● Cookies are kept for the period set in your browser. You can clear them at any time through your browser settings.

Protected health information in your medical record is not covered by this Statement. It is retained under our Notice of Privacy Practices and the federal and tribal record retention requirements that apply to it.

How to Request Deletion of Your Data

You may ask us to delete the personal information we hold about you under this Statement, including information collected through the NTHSClinic App. To make a request, use any of the following:

● E-mail info@nthsclinic.com with the subject line "Data Deletion Request".

● E-mail our HIPAA Coordinator, Danielle Daniels, at danielle.daniels@nthsclinic.com.

● Call (918) 542-1655.

● Write to Northeastern Tribal Health System, Attn: Data Deletion Request, 7600 S Highway 69A, Miami, OK 74354.

Please tell us your name, how to reach you, and whether your request concerns the website, the App, or both. We will acknowledge your request and complete the deletion within 30 days. If we are required by law to keep some of the information, we will tell you which information and why.

You can also remove the data the App stores on your own device at any time by uninstalling the App or by clearing the App storage in your device settings.

Requests to access or amend protected health information in your medical record are handled separately under our Notice of Privacy Practices. Please contact Medical Records for those requests.

Northeastern Tribal Health System will occasionally update this Privacy Statement to reflect feedback and changes to our practices. We encourage you to review this Statement periodically.

When we make a material change, we will update the effective date shown at the top of this Statement.

Northeastern Tribal Health System welcomes your comments regarding this Privacy Statement. If you believe that we have not adhered to this Statement, please contact our HIPAA Coordinator, Danielle Daniels, at danielle.daniels@nthsclinic.com, or the clinic at info@nthsclinic.com or (918) 542-1655, 7600 S Highway 69A, Miami, OK 74354. We will use reasonable efforts to promptly determine and remedy the problem.