This Privacy Policy sets out how StarSun Health, the legal entity operating StarSun Health, uses and discloses your personal information, and the choices you have with respect to the information.
StarSun Health (StarSun Health or we) respects your privacy and is committed to protecting it. Please read this Privacy Policy carefully to understand how StarSun Health collects and uses your personal information and data. This Privacy Policy covers all Personal Information that we receive from various sources, as outlined below.
StarSun Health integrates with external systems, including electronic health record (EHR) platforms, through secure application programming interfaces (APIs). In all such integrations, the following principles apply:
This Privacy Policy sets out how we use, protect and share your personal information by accessing StarSun Healths websites, including StarSun Health, StarSun Health.com and StarSun Health (the Website(s)), in any way, utilizing our services, interacting with us, contacting us or by engaging in transactions with us through any other means.
For the purposes of this Privacy Policy, Personal Information may include any information that can be used to identify or locate you, such as your name, address, IP address, mailing address, contact information, email address or phone number and other information you may produce to us. It does not include data where the identity has been removed (anonymous data). Both federal and state law in the United States define Personal Information, as do the laws of other countries and jurisdictions (e.g. the GDPR and the UK GDPR with the definition Personal Data). This Privacy Policy is intended to include the most expansive definition that applies to you. Please recognize that your rights related to Personal Information, and how Personal Information is defined, differs somewhat from state to state and country to country.
This Privacy Policy applies to processing undertaken where we (as the controller under applicable privacy law) are the organization which determines why and how your Personal Information is processed and is otherwise required under applicable law to provide notice of any processing undertaken.
Changes to Privacy Policy. We review this Privacy Policy regularly and may update it from time to time. We will post any changes on this page and may also provide notice of material changes to our Privacy Policy on our website home page and/or through our Subscription Services. If you object to any changes to this Privacy Policy, you may close your account and discontinue use of our Services.
This Privacy Policy describes the types of Personal Information StarSun Health may collect from you or that you may provide when you visit the Websites or use any of our Subscription Services and our practices for collecting, using, maintaining, protecting and disclosing that information.
This Privacy Policy applies to Personal Information StarSun Health collects:
Please read this Privacy Policy carefully to understand our practices regarding your Personal Information and how StarSun Health will treat such information. If you are registering an account or using the services on behalf of an individual or entity other than yourself, you represent that you are authorized by such individual or entity to share their Personal Information with StarSun Health and for the processing purposes outlined in this Privacy Policy.
StarSun Health collects, uses, stores and transfer several types of Personal Information from and about users of the Services, including the following Personal Information:
If you communicate with StarSun Health by, for example, e-mail or letter, any information provided in such communication may be collected as Personal Information. You also may provide information to be published or displayed (hereinafter, posted) on public areas of the Website, or transmitted to other users of the Website or third parties (collectively, User Contributions). Your User Contributions are posted on and transmitted to others at your own risk. Please be aware that no security measures are perfect or impenetrable. Additionally, StarSun Health cannot control the actions of other users of the Website. Therefore, StarSun Health cannot and does not guarantee that your User Contributions will not be viewed by unauthorized persons
We also collect, use and share Aggregated Information such as statistical or demographic data for any purpose. Aggregated Information could be derived from your Personal Information but is not considered Personal Information in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Technical and Usage Information to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your Personal Information so that it can directly or indirectly identify you, we treat the combined data as Personal Information which will be used in accordance with this Privacy Policy.
StarSun Health collects this information:
Children Under the Age of 13. Where we process the Personal Information of minors we require the subscriber or person inputting the Personal Information to be the parent or guardian of the minor or to obtain their consent. StarSun Healths Website and our online patient scheduling subscription service are not intended for use by children under 13 years of age. No one under age 13 may provide any information to, or on the Website. StarSun Health does not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the Website or on or through any of its features, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to StarSun Health or on the Website, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If StarSun Health learns that it has collected or received Personal Information from or about a child under 13 without verification of parental consent, StarSun Health will delete that information. If you believe StarSun Health might have any information from or about a child under 13, please contact us as set forth in the Contact Information section at the end of this Privacy Policy.
California Consumer Privacy Act Notice: Pursuant to the § 1798.110 of the California Consumer Privacy Act (CCPA), the categories of personal information that we have collected about individual consumers in the preceding twelve months are:
Data protection laws require us to have a legal basis for everything that we do with your personal information falling under one of the following categories:
We use your personal information in a number of different ways and for different reasons the tables below set out what we do and why:
Identity and Contact Information
Purpose 1
What do we do: Identify you when you visit our Website or you contact us for any reason.
Why do we do it: So we can identify you.
Our Legal Basis: Legitimate interests: necessary for us to be able to communicate with you.
Purpose 2
What do we do: Process any order of our Services that you or your dental and/or medical providers procure on your behalf, and (a) Manage payments, fees and charges (b) Collect and recover money owed to us.
Why do we do it: So we can provide you with the Services that are purchased.
Our Legal Basis: (a) Performance of a contract with you and/or relevant dental and/or medical providers; and (b) Legitimate interests: necessary to ensure the financial health of our business and to manage our financial transactions efficiently.
Purpose 3
What do we do: Send you service updates, and updates to this Privacy Policy and/or our MSA, DPA or other contractual documents as required.
Why do we do it: So we can keep you informed of any changes to our terms and conditions and data processing.
Our Legal Basis: (a) Legitimate interests: necessary for the effective provision of our services; and (b) Legal obligation.
Purpose 4
What do we do: Send you information about StarSun Health.
Why do we do it: So we can let you know about new products and services that we offer that you might be interested in.
Our Legal Basis: (a) Consent; and (b) Legitimate interests: necessary to promote our business.
Purpose 5
What do we do: To send you surveys and to ask for feedback.
Why do we do it: To offer you the opportunity to let us know how we are doing, or to let us know your views on another subject.
Our Legal Basis: Legitimate interests: necessary to ensure we are providing the best service and to identify any areas of potential improvement.
Financial and Transaction Information
Purpose 1
What do we do: Take payments from you and/or relevant dental and/or medical providers.
Why do we do it: To facilitate payment for the Services you or dental/medical providers purchase from us and to issue any refunds where necessary.
Our Legal Basis: (a) Performance of a contract with you and/or relevant dental and/or medical providers; and (b) Legitimate interests: necessary to ensure that the company is compensated for our Services.
Purpose 2
What do we do: Keep a record of our transactions.
Why do we do it: For accounting purposes.
Our Legal Basis: Legal obligation.
Technical and Usage Information
Purpose 1
What do we do: Identify you when you visit our Websites.
Why do we do it: To provide you with the best possible user experience.
Our Legal Basis: Legitimate interests: necessary to provide the best user experience.
Purpose 2
What do we do: Monitor visitors to our website and analyze their use of the Websites and perform tests on our IT systems.
Why do we do it: To protect our Websites and our IT systems from fraud or cyberattacks and to improve our Websites and our Services and our IT security.
Our Legal Basis: (a) Legitimate interests: necessary to ensure our systems are secure and to protect against IT security incidents; and (b) Necessary to comply with a legal obligation.
Purpose 3
What do we do: Administer and protect our business and this website (including troubleshooting, verification, data analysis, testing, system maintenance, support, reporting and hosting of data).
Why do we do it: For running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise).
Our Legal Basis: (a) Legitimate interests: necessary to run our business and to provide effective and secure administration and IT services, network security and to prevent fraud; and (b) Necessary to comply with a legal obligation.
Purpose 4
What do we do: Deliver relevant Website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
Why do we do it: To study how customers use our services, to develop them, to grow our business and to inform our marketing strategy.
Our Legal Basis: Legitimate interests: necessary to optimize our marketing efforts and deliver targeted advertisements.
Purpose 5
What do we do: Use data analytics to improve our Websites, Services, marketing, customer relationships and experiences.
Why do we do it: To define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy.
Our Legal Basis: Legitimate interests: necessary to enhance our business strategies and improve customer satisfaction.
Services Information
Purpose 1
What do we do: We use your data to provide the Services and to continually improve and develop the Services. Using the Services will involve you interacting with our AI systems which are used to assist individuals in providing our Services to their end-users.
Why do we do it: So we can make sure our Services continue to be fit for purpose and to develop the commercial offering of the Services.
Our Legal Basis: (a) Legitimate interests: necessary to improve our Services; and (b) for the performance of our contract with the relevant Data Controller who provides our Services to their end-users.
Marketing and Communications Information
Purpose 1
What do we do: We keep a record of your communication preferences (your opt ins and opt outs).
Why do we do it: So we can make sure that you only receive the communications from us that you would like to receive and so we can update our records if you change your mind.
Our Legal Basis: (a) Legitimate interests: necessary to promote our business; and (b) legal obligation.
All of your Personal Information
Purpose 1
What do we do: We may transfer your personal data in part or whole in connection with any merger, sale, transfer of our assets, investment, acquisition, bankruptcy, or similar event or corporate transaction.
Why do we do it: So we can ensure the continued service and function and to ensure we can protect and grow our business.
Our Legal Basis: Legitimate interests to ensure we can protect and grow our business.
Purpose 2
What do we do: We perform financial accounting functions including tax reporting.
Why do we do it: So we can comply with applicable laws and accounting standards that we adhere to.
Our Legal Basis: Legal obligation.
Purpose 3
What do we do: We process the entirety of your Personal Information.
Why do we do it: So we can protect our rights and those of data subjects.
Our Legal Basis: (a) Legal obligation; and (b) Legitimate interests to act in, and protect, the interests of our business.
In limited circumstances we may process any of your Personal Information we hold to the extent necessary to defend, establish and exercise legal claims or to comply with legal or regulatory obligations.
Where we need to collect Personal Information due to a legal or regulatory obligation, or for performance of a contract, and you do not provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our products/services). We will notify you of this at the time.
StarSun Health stores all Traffic Data and review postings indefinitely, even after deletion, and may archive such information elsewhere. We retain Personal Information only as long as necessary, per applicable law. We keep data while youre a customer or have opted into communications, and for a reasonable time afterward based on legal, regulatory, and audit requirements. Retention periods consider the datas nature, sensitivity, associated risks, and purposes of processing, along with any relevant legal, tax, or compliance standards.
StarSun Health does not sell or rent any Personal Information to third parties. StarSun Health may disclose Personal Information that it collects or you provide as described in this Privacy Policy.
We may share your personal information with third parties who provide services to us, for example, our IT, communications, CRM, email and marketing automation and hosting providers. We require all third parties to respect the security of your Personal Information and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Information for their own purposes and only permit them to process your Personal Information for specified purposes and in accordance with our instructions.
The categories of data recipients we may disclose your Personal Information to are as follows:
We may provide anonymous information to analytics and search engine providers to help us improve and optimise our Services. We will only share this information in a form that does not directly identify you.
You may choose not to provide StarSun Health with any Personal Information. In such an event, you can still access and use some of the services on the Website; however you may not be able to access and use certain key features of the Subscription Services and/or the Website that require your Personal Information.
StarSun Health may also disclose your Personal Information:
Aggregate Data. Our definition of Personal Information does not include aggregate data. Aggregate data is information we collect about a group or category of services or users from which individual user identities have been removed. In other words, no personal information is included in aggregate data. Aggregate data helps us understand trends in our users needs so that we can better consider new features or otherwise tailor our services. This Privacy Policy in no way restricts or limits our collection and use of aggregate data, and we may share aggregate data about our users with third parties for various purposes, including to help us better understand our customer needs and improve our services and for advertising and marketing purposes.
Notice to Payers and Providers. Payers, Providers, their employees, and their vendors, their agents should be particularly aware of their obligations of patient confidentiality, including without limitation, their obligations under the Health Insurance Portability and Accountability Act (HIPAA), both in communicating with StarSun Health and in responding to a review of their services posted on the Website. StarSun Health does not have, and will not accept, any obligations of confidentiality with respect to any communications other than those expressly stated in this Privacy Policy or in the terms of use for the Website.
Public Information. Any information that you may reveal in a review posting or other online discussion or forum is intentionally open to the public and is not in any way private. You should not disclose any Personal Information or personally identifiable information in any public forum.
StarSun Health processes Personal Information for a reasonable period of time to fulfill the purposes mentioned above. Personal Information is then archived for time periods as required or necessitated by law or legal considerations. StarSun Health reserves the right to delete a customers data, including Personal Information provided by that customer, from its system after 30 days from the date of termination of its agreement with the applicable customer. StarSun Health may also delete Personal Information in response to an individuals request, as set forth in the Your Rights and Choices section below.
StarSun Health reserves the right to retain usage data relating to our products and services, as well as data that has been anonymized and/or aggregated, to the extent permitted by applicable laws. With respect to any Personal Information collected by us for marketing or for our own internal purposes, we will retain that data for a reasonable time in order to fulfill those purposes.
StarSun Health strives to provide you with choices regarding the Personal Information you provide to us. StarSun Health has created mechanisms to provide you with the following control over your information:
StarSun Health does not control third parties collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (NAI) on the NAIs website.
You can exercise your rights under the CCPA by contacting us using the information found in the Contact Information section below.
StarSun Health may transfer your personal information to countries other than your country of residence. In particular, we may transfer your personal information to the United States and other countries where our affiliates, business partners and services providers are located. These countries may have different data protection laws to the country where you reside.
Your Personal Information may be transferred outside of Canada for processing and storage. Company and its service providers may store Personal Information on servers located in other jurisdictions, including the United States. Please note that privacy laws in such jurisdictions differ from Canadian privacy laws (e.g., PIPEDA) and that in some jurisdictions your Personal Information may be accessed by law enforcement authorities or the courts in such jurisdictions. If you wish to:
you may contact our privacy officer at the Contact Information set forth below. We will respond to your request relating to your Personal Information within 30 days. We may be unable to remove information to the extent that it is permitted or required to be retained by applicable law or document retention and data backup policies, or if removal is not practicable due to technological reasons. Please note that removal of your Personal Information may prevent or hinder us from providing further services and information to you.
Company may require you to provide sufficient information to permit us to provide an account of the existence, use, and disclosure of Personal Information. The information provided shall only be used for this purpose.
EEA, UK, and Switzerland If you are located in the European Economic Area, the United Kingdom or Switzerland ("Europe"), we may transfer your Personal Information to recipients in countries outside of Europe, including to the United States. We apply appropriate protections when we transfer your Personal Information to such countries, including:
StarSun Health also offers our customers the ability to enter into a Data Processing Agreement (DPA) that contains Standard Contractual Clauses, for transfers between us and our customers. We also make use of supplementary measures to ensure your information is adequately protected.
StarSun Health commits to resolve complaints about our collection or use of Personal Information. EU, UK, and Swiss individuals with inquiries or complaints regarding our Privacy Policy should first contact StarSun Health at info@StarSun Health.
You have a number of rights under data protection laws in relation to your personal information.
You have the right to:
You also have the absolute right to object any time to the processing of your Personal Information for direct marketing purposes.
If you wish to exercise any of the rights set out above, please contact us at info@StarSun Health.
In addition to the measures described herein, for any integrations involving APIs to access electronic health records or similar systems, StarSun Health applies:
StarSun Health has implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any medical or health care information will be encrypted in transit and at rest. Payment card information, such as account numbers, is processed via a third-party vendor that specializes in payment processing and has committed to PCI DSS compliance. All StarSun Health employees are contractually obligated to maintain the confidentiality of Personal Information accessible through their employment.
StarSun Health follows accepted industry standards to protect the Personal Information submitted, both during transmission and once StarSun Health receives the Personal Information. However, you should understand that there is no such thing as complete security, and StarSun Health does not guarantee that there will be no unintended disclosures of your Personal Information. If StarSun Health becomes aware that your Personal Information has been disclosed in a manner not in accordance with this Privacy Policy, StarSun Health will use reasonable efforts to notify you of the nature and extent of the disclosure (to the extent StarSun Health knows that information) as soon as reasonably possible.
The safety and security of your information also depends on you. Where StarSun Health has given you (or where you have chosen) a password for access to certain parts of the Website, you are responsible for keeping this password confidential. StarSun Health asks you not to share your password with anyone. You must promptly notify StarSun Health if your contact data is lost, stolen, or used without your permission. In such an event, we will remove that contact data from your account and update our records accordingly.
StarSun Health further urges you to be careful about giving out information in public areas of the Website like message boards. The information you share in public areas may be viewed by any user of the Website.
Unfortunately, the transmission of information via the internet is not completely secure. Although StarSun Health uses commercially reasonable efforts to protect your Personal Information, StarSun Health cannot guarantee the security of your Personal Information transmitted to the Website. Any transmission of Personal Information is at your own risk. StarSun Health is not responsible for circumvention of any privacy settings or security measures contained on the Website.
We store Personal Information that we have collected (through the means described above) on our premises and in our information system at our facilities, in third party data centers that provide our hosting services, in the systems of third party service providers, and in cloud storage solutions. StarSun Health is located in the United States. If StarSun Health transfers Personal Information from one country to another, we will ensure that the information is transferred in accordance with this Agreement and the Privacy Policy, and as permitted by applicable data protection laws.
StarSun Health stores all information in state of the art physical storage facilities and cloud storage. In doing so, StarSun Health uses appropriate physical, organizational and technological measures to protect the Personal Information you provide to us against loss or theft, and unauthorized access, disclosure, copying, use, or modification. This includes limiting access on a need-to-know basis. Where third parties (such as AWS) are used to host our products, we use third parties who meet required privacy and security standards.
However, no electronic data transmission can be guaranteed to be secure from access by unintended recipients and StarSun Health will not be responsible for any breach of security unless this breach is due to its negligence. Although we are committed to employing reasonable technology in order to protect the security of our website, even with the best technology, no website is 100% secure. In transacting business with us through our website, you assume the risk inherent in transacting business online.
To offer our website, products and services to you, StarSun Health relies on plugins and services from third parties such as internet service providers, email service providers and plugins, calendar plugins, Customer Relationship Management (CRM) systems, credit card processors, and third party data storage. To the extent these providers have access to your Personal Information, we will require that they are legally or contractually committed to comply with applicable privacy laws, In the case of credit card processors, we require that they be PCI DSS-compliant. However, we cannot guarantee with certainty that the computer systems and storage systems whereon these services are offered will not be accessed by unauthorized parties. This is a risk inherent in providing any information or, or conducting any business, online. In transacting business with us through our website, you assume the risk inherent in transacting business online.
The Website may contain links to third party websites to which StarSun Health has no affiliation. StarSun Health does not share your Personal Information with those websites and is not responsible for their privacy policies or practices. Please be aware that you may be on a different site and that this Privacy Policy only contains the policies for the Website. A link to a third party website does not constitute or imply endorsement by StarSun Health. Additionally, StarSun Health cannot guarantee the quality or accuracy of any information contained on any third party website. If you decide to visit any third party website, you should read that websites privacy policy.
If you have any comments or inquiries about this Privacy Policy, if you would like to update information we have about you or to exercise your rights, you may contact us by sending an email.
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority in the country in which you live via their website.