The privacy statement that follows discloses the privacy practices for Consumer's Medical Resource ("CMR" or "we" or "our"). We encourage you to read our policy so that you better understand our commitment to your privacy.

Commitment to Confidentiality

We understand that your health is a very personal and private matter, and the concerns you may have in regard to privacy and security of your personal information online. Your privacy is important to CMR, and we are strongly committed to protecting your personal information online.

You can access, visit and browse the public pages on www.consumersmedical.com or www.cmr-medicaldecisionsupport.com, or www.mdsgoldenticket.com (the "Site") without providing any Personally Identifiable Information. However, you will be required to provide Personally Identifiable Information as part of the registration process to access, browse and use the private pages and Content on the Site as an authorized user. All Personally Identifiable Information provided by you to CMR is kept confidential by CMR. CMR will not use or disclose your Personally Identifiable Information without your prior authorization except as provided in this Privacy Policy.

Collection of Information Online

CMR does not collect Personally Identifiable Information, Medical Information or Health Information about you, except when it is knowingly and voluntarily provided by you either (i) during your registration process; (ii) during your online intake process after you have completed the registration process or (iii) through responses to surveys or use of tools on the Site; or (iv) through the completion and submission of requests for additional information on the Site.

CMR may collect Aggregated Information about you such as website usage, length-of-stay information, traffic patterns, site performance and related statistics based on CMR's tracking of your visits to the Site. CMR may use cookies to do this. A cookie is an element of data that we may send to the browser files on your computer when you link to the Site. It is not a computer program and has no ability to read data residing on your computer. Nor does it instruct your computer to perform any step or function. A cookie is simply a data element that allows us to track your usage patterns while visiting the Site. This helps us serve you better on your next visit to the Site. Most web browsers automatically accept cookies but allow you to modify security settings so that you can approve or reject cookies on a case-by-case basis. If you reject cookies from our Site, some parts of the Site may not work properly for you. Cookies will not persist outside the duration of a user session.

Use of Information Collected Online

As part of providing services to you in the normal course of CMR's business, CMR may use certain Health Information and Medical Information provided to CMR online by you to assemble appropriate research and gather relevant health and medical information for you. CMR may use certain Personally Identifiable Information such as your name, address or email to send such information CMR has assembled for you.

CMR may also use certain Personally Identifiable Information such as your email address during the course of providing services to you in order to send you email notifications that the information assembled by CMR has been posted to your account and otherwise communicate with you regarding the status of your requests. CMR may also use Aggregated Information to help CMR understand the preferences and experiences of groups of our users and to enhance our services and the Site. CMR will use Aggregated Information for purposes of analysis regarding use and other statistics related to the Site.

Disclosure of Information Collected Online

Please note that CMR adheres to the requirements outlined by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), as amended by the Health Information Technology for Economic and Clinical Health Act (the "HITECH Act"), which regulates privacy of an individual's Medical Information and Health Information. Any Medical Information or Health Information collected by CMR online during the course of providing services will not be disclosed except in strict accordance with HIPAA regulations.

If you are obtaining our services through an employer-sponsored benefit or program, then CMR may share Aggregate Information with your employer as part of reports submitted by CMR to your employer.

CMR may share your Personally Identifiable Information, Medical Information and/or Health Information with our partners for performing their contractual obligations under agreements with CMR. CMR requires our partners to protect your Personally Identifiable Information, Medical Information and Health Information. CMR will not rent, sell or share your Personally Identifiable Information, Medical Information and/or Health Information with third parties, except that CMR will likely transfer your Personally Identifiable Information, Medical Information and/or Health Information if CMR is acquired by or merged with another company or in the case of the sale of all or substantially all of CMR assets.

CMR may share your Personally Identifiable Information, Medical Information and/or Health Information in response to legal process such as a court order or subpoena, or as authorized by legal counsel or the Privacy Officer or as otherwise required by law.

Children's Privacy

Protecting the privacy of the very young is especially important to CMR. For that reason, CMR does not collect Personally Identifiable Information, Medical Information and/or Health Information from any person we actually know to be under the age of 13, and no part of the Site is designed to attract anyone under the age of 13. A parent or guardian, however, may use the Site on behalf of a minor.

Data Security Measures

Upon completion of the registration process, you will receive a user name and password to access the Content on the Site. You are solely responsible for keeping such user name and password strictly confidential.

All information that you enter on this Site is encrypted with secure server software (SSL). The encryption means that your information is protected while it is being transferred over the Internet to our servers. Once your data reaches our servers, the same state-of-the-art security software that guards CMR's essential business information protects your information. In addition to using the most secure technology available, we de-identify all information before it is used in any aggregate reporting that may be done.

Additionally, firewalls may be used to construct password-based access to areas of our network and may be used in conjunction with a web server and network security layer. Authentication with passwords at the firewall level determines which computer resources are visible to a connecting party.

All access to sensitive information on the CMR server is password protected. Password control is used so that only authorized users can gain access to the Site, and also guarantees that users can see only their own data. In addition, password control means that CMR employees and agents gain access only to appropriate information.

Please note that CMR adheres to the requirements outlined by HIPAA and the HITECH Act, which regulates security of an individual's Medical Information and Health Information.

Links to Third Party Web Sites

This Site may contain links to other web sites, including links to health tools on other web sites. CMR has no control over the privacy policies and practices of such third party sites, and if you have any concerns, you are urged to review the terms of those sites for more information about the policies applicable to those sites.

Changes to Privacy Policy

If we decide to change our Privacy Policy, you will see the word "updated" followed by the date next to the Privacy Policy link near the bottom of all pages on the Site. If the "updated" date has changed since you last visited, you are encouraged to review the policy to be informed of how this Site is protecting your information. We will post a notice on our homepage that we have made changes so that our members may always be aware of what information we collect, how we use it, and under certain circumstances, and how we disclose it. If at any point we decide to use Personally Identifiable Information in a manner different from that stated at the time it was collected, we will notify you. You will have a choice to decline or accept our proposed change.

Definitions for Terms used in Privacy Policy

Personally Identifiable Information - the information at CMR that is connected to you. It includes your name, date of birth, gender, address, telephone numbers, and email addresses.

Health Information - information you have provided to CMR about your personal health and interests.

Medical Information – medical information CMR has received from you, including procedures performed, medication prescribed, providers' names, lab results and diagnoses.

Aggregated Information - Pooled information about authorized users that does not contain any Personally Identifiable Information, Medical Information or Health Information. Aggregated Information cannot be tied to a given individual. For example, aggregated data may reveal that on average our users visit the Site once a month, but say nothing about the habits of a specific individual.

Complaint Process

If you have a complaint or problem, or if you believe your privacy rights have been violated, please contact us immediately.

Our agent for privacy issues relating to the Site is as follows: privacy@consumersmedical.com

Contact Information

Thank you for your cooperation. CMR hopes that you find the site helpful and convenient to use. Questions or comments regarding this Site should be directed to 1-888-644-1640.

Copyright ©2001-2012 by Consumer's Medical Resource, Inc. All rights reserved. Consumer's Medical Resource® and Medical Decision Support® are trademarks of Consumer's Medical Resource, Inc. Any use of such trademarks by you, except for your own personal use in connection with your authorized use of the Site and Content as set forth herein, is strictly prohibited.