Privacy Policy

Revised 12.2024

BY DISCLOSING YOUR INFORMATION TO NATIONAL MEDICAL REVIEWS, INC. , YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY.

TABLE OF CONTENTS:

  1. DEFINITIONS
  2. WHO WE ARE AND WHAT WE COLLECT
  3. HOW AND ON WHAT GROUNDS WE USE YOUR PERSONAL INFORMATION
  4. STATEMENT REGARDING THIRD PARTIES
  5. HOW LONG WE STORE YOUR PERSONAL INFORMATION
  6. WHAT ARE YOUR PRIVACY RIGHTS
  7. INTERNATIONAL DATA TRANSFERS
  8. NOTICE FOR RESIDENTS IN THE UNITED STATES
  9. CHANGES TO OUR PRIVACY POLICY
  10. HOW TO CONTACT US

1. DEFINITIONS

“Personal Information” means information that (either in isolation or in combination with other information) enables a particular consumer or household to be directly or indirectly identified.

“You” or “Your” means the individual accessing or browsing our Website and/or using any of the Services, or the company, or other legal entity on behalf of which such individual is accessing or browsing our Website and/or using any of the Services, as the case may be.

2. WHO WE ARE AND WHAT WE COLLECT

National Medical Reviews, Inc. (NMR), an Independent Review Organization and Certified Independent Dispute Resolution Entity, offers independent medical reviews for all types of benefit disputes and quality of care issues in both the medical management and workers’ compensation settings. Your privacy is important to us. This privacy policy notice (“Notice”) mainly covers the Personal Information that NMR collects through our website nmrusa.com (“Website”). This Notice further describes how NMR collects, uses, and discloses information when You interact with NMR by accessing our Website.

We mainly receive and collect Personal Information through the following ways:

2.1 Personal Information You provide to NMR via our Website.

We collect Personal Information that You choose to provide to NMR, for example, on our “Contact Us” (or similar) online form. If You contact NMR through our Website, we will keep a record of our correspondence. We receive and store the Personal Information You provide directly to NMR. We may collect and store media, documents, or other information You provide to NMR.

2.2 Personal Information We automatically collect when You use our Website and Services in our Systems.

When you visit our Website, we may collect internet or other electronic network activity information through the use of cookies. Depending on your browser's cookie settings and preferences, the information we collect may include the referring website, what pages on our website your device visited, and the time that your device visited our Website.

We also rely on analytics and tools used to prevent spam and other security risks related to the use of abusive automated software. Internet or other electronic network activity information is also collected when you use our website:

  • Usage information: We keep track of user activity in relation to the types of Services our customers use, the configuration of their computers (such as screen size resolution and operating system), and performance metrics related to their use of the Services.
  • Information collected by cookies and other tracking technologies: We use various technologies to collect information, including saving cookies to users’ computers.

3. HOW AND ON WHAT GROUNDS DO WE USE YOUR PERSONAL INFORMATION

We use the Personal Information we collect through our Website:

  • For purposes made clear to You at the time You submit Your Personal Information, or which we notify users.

Please read the Cookie Notice if You’d like to know about the Personal Information we process in order to ensure network and information security.

4. STATEMENT REGARDING THIRD PARTIES

NMR does not share and/or provide any users’ personal information to third parties.

5. HOW LONG WE STORE YOUR PERSONAL INFORMATION

We store Your Information sent to us through our website for a period of 6 months. We use appropriate technical, organizational, and administrative security measures to protect Personal Information we store from loss, misuse, unauthorized access, disclosure, alteration, and destruction. However, no company or service can guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of a user’s Personal Information at any time.

6. WHAT ARE YOUR PRIVACY RIGHTS

You may have certain rights relating to Your Personal Information, depending on Your location and subject to local applicable laws. These rights may include, subject to any exceptions or limitations:

  • The right to know what Personal Information is being collected and for what purpose.
  • The right to know what Personal Information is being “sold” or “shared”, for what purpose, and the categories of recipients of Your Personal Information. NMR does not share and/or provide any users personal information to third parties.
  • The right to access Your Personal Information.
  • The right to have Your Personal Information rectified, corrected, or updated.
  • The right to have Your Personal Information deleted, including from any third parties where Your Personal Information has been sold, shared, or disclosed. NMR does not share and/or provide any users personal information to third parties.
  • The right to opt out of the “sale” or “sharing” of Your Personal Information. NMR does not share and/or provide any users personal information to third parties.
  • The right to object to the processing of Your Personal Information.
  • The right not to be subject to any automated decision making and profiling.

If You would like to exercise the privacy rights available to You, please contact our Compliance Department at [email protected]. Our Compliance Department will review Your verifiable privacy rights request and respond to You as quickly as possible. NMR does not discriminate against You for exercising Your privacy rights.

7. INTERNATIONAL DATA TRANSFERS

NMR is not an international company nor does it recruit or hire outside of the United States. Therefore, NMR requests that any users outside of the United States not submit any personal identifying information through our website.

8. INFORMATION FOR RESIDENTS IN THE UNITED STATES

8.1 California – Privacy Notice for California Residents.

Under the California Privacy Rights Act (“CPRA”) residents of California have certain rights regarding the Personal Information that businesses collect and process about them. This includes the right to request access or deletion of Your Personal Information, as well as the right to direct a business to stop selling or sharing Your Personal Information. We adopt this notice to also comply with the California Consumer Privacy Act of 2018 (“CCPA”), and other California privacy laws. Terms defined in the CPRA and CCPA have the same meaning when used in this Notice. We are required to detail the categories of Personal Information that we collect and/or share for the purposes of this Notice.

Information We Collect. We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (Personal Information). In particular, we have collected the following categories of Personal Information from users within the last 12 months:

Category Examples Collected
A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address or other similar identifiers YES
B. “Sensitive” Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, address, telephone number, driver’s license or state identification card number, insurance policy number, education, employment history. Some personal information included in this category may overlap with other categories. YES
C. Professional or employment-related information. Current or past job history YES

Personal Information does not include:

  • Publicly available information from government records.
  • De-identified or aggregated consumer information.
  • Information excluded from the CCPA’s scope, like:
    • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the California Confidentiality of Medical Information Act (“CMIA”) or clinical trial data.
    • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (“FRCA”), the Gramm-Leach-Bliley Act (“GLBA”) or California Financial Information Privacy Act (“FIPA”), and the Driver’s Privacy Protection Act of 1994.

We obtain the categories of Personal Information listed above from the following categories of sources:

  • Directly from potential employees or peer reviewers if they are providing via our “Contact Us” page. For example, from information that these groups provide to NMR related to joining our Team.
  • Directly and indirectly from activity on our Website. For example, from submissions through our Website portal or our Website usage details collected automatically.

Use of Personal Information. We may use or disclose Personal Information for one or more of the following business purposes:

  • To provide You with information that You request from NMR.
  • As described to You when collecting Your Personal Information or as otherwise set forth in the CCPA and CPRA.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without giving You notice.

Sharing Personal Information. We will not disclose Your Personal Information to a third party for any reason.   Should any disclosure be identified as needed we will notify You of the purpose and will not use it for any purpose except for the business purposed identified in the notification.

Your Rights and Choices under CCPA. The CCPA provides consumers (California residents) with specific rights regarding their Personal Information. This section describes Your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to You about our collection and use of Your Personal Information over the past 12 months. Once we receive and confirm Your verifiable consumer request, we will disclose to You:

  • The categories of Personal Information we collected about You.
  • The categories of sources for the Personal Information we collected about You.
  • Our business or commercial purpose for collecting that Personal Information.
  • The specific pieces of Personal Information we collected about You (also called a “Data Portability Request”).
  • The right to correct inaccuracies in Your Personal Information.
  • If we sold or disclosed Your Personal Information for a business purpose, two separate lists disclosing:
    • sales, identifying the Personal Information categories that each category of recipient purchased; and
    • disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.

Deletion Request Rights

You have the right to request that we delete any of Your Personal Information that we collected from You and retained, subject to certain exceptions. Once we receive and confirm Your verifiable consumer request, we will delete (and direct our service providers to delete) Your Personal Information from our records, unless an exception applies. We may deny Your deletion request if retaining the information is necessary for NMR to:

  1. Complete the transaction for which we collected the Personal Information.
  2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  3. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  4. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546).
  5. Comply with a legal obligation.
  6. Make other internal and lawful uses of that information that are compatible with the context in which You provided it.

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to NMR by emailing at [email protected]. Only You or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable consumer request related to Your Personal Information. You may also make a verifiable consumer request on behalf of Your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

  • Provide sufficient information that allows NMR to reasonably verify You are the person about whom we collected Personal Information or an authorized representative.
  • Describe Your request with sufficient detail that allows NMR to properly understand, evaluate, and respond to it.

We cannot respond to Your request or provide You with Personal Information if we cannot verify Your identity or authority to make the request and confirm the Personal Information relates to You. We will only use the Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform You of the reason and extension period in writing. We will deliver our written response by mail or electronically, at Your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For Data Portability Requests, we will select a format to provide Your Personal Information that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to Your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell You why we made that decision and provide You with a cost estimate before completing Your request.

Non-Discrimination. We will not discriminate against You for exercising any of Your CCPA rights. Unless permitted by the CCPA, we will not:

  • Deny You services.
  • Charge You different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.
  • Provide You a different level or quality of services.
  • Suggest that You may receive a different price or rate for services or a different level or quality of services.

8.2 Additional Disclosures to Residents of Colorado, Connecticut, Virginia, and Utah.

Right to Opt-Out. Under the Commonwealth Data Protection Act (“CDPA”), residents of Virginia have certain rights regarding the Personal Information that businesses collect and process about them. This includes the right to request access or deletion of Your Personal Information, as well as the right to direct a business to stop selling or sharing Your Personal Information. Additionally, the privacy laws in Colorado, Connecticut, and Utah give residents certain rights with respect to their personal data.

To the extent applicable under the laws of Virginia, Colorado, Connecticut, and Utah, or any other privacy law, You have the right to direct a business that processes Your personal data for the purposes of targeted advertising, sale, and/or profiling, in furtherance of decisions that produce legal or similarly significant effects concerning You, not to process for these purposes. This right is referred to as “the right to opt-out.” NMR does not use your personal data for the purposes of targeted advertising, sale and/or profiling. To exercise any of Your rights available under applicable law relating to opt-out or appeal as set forth in this Section, please submit a verifiable consumer request to NMR by emailing at [email protected].

9. CHANGES TO OUR PRIVACY POLICY

NMR reserves the right to amend this Notice at its sole discretion and at any time. When we make changes to this Notice, we will notify You through a notice on our Website.

10. HOW TO CONTACT US

If You have any questions or comments about this Notice, the ways in which we collect and use Your Personal Information, Your choices, and rights regarding such use, or wish to exercise Your rights under California law, please do not hesitate to contact NMR at:

Phone: (800) 283-8196
Email: [email protected]
Attn: Compliance Department
National Medical Reviews, Inc.
Address: 607 Louis Drive, Suite C Warminster, PA 18974