Privacy Policy

Streamline Corporation has created this Privacy Policy in compliance with applicable laws and to demonstrate our firm's commitment to privacy. This Privacy Policy describes how Streamline collects, uses, discloses, transfers, stores, retains or otherwise processes your information when you (whether in your individual or business capacity) access or use, in any manner, any content, products, services or related activities (collectively "Services"), including through the Internet domains owned or operated by Streamline, which include, but are not limited to:

Streamlineworkcomp.com

We refer to the above website and all related websites as "sites" and to each of them as a "site."

Business Information

We collect your business contact information, such as your full name and your business name, email address, telephone number, address and other work-related information you provide to us while providing our Services to you or your organization.

We take your privacy and the protection of your personal information seriously. We will only store, process and disclose your personal information in accordance with applicable law. We will make it clear when we collect personal information and will explain what we intend to do with it. We do our best to protect your privacy through the appropriate use of information security measures.

I. What Information We Collect

1. Information You Provide to Us Directly

Streamline may collect different information from or about you depending on the way you use our sites or Services. The following examples are provided to help you better understand the information we may collect through your use of the sites or during us providing our Services.

For Individuals: We may collect, use, store and transfer different kinds of personal information about you, which we have grouped together as follows:

• Identity Information includes first name, middle initial, last name, date of birth, gender, race, Last 4 of Social Security number
• Contact Information includes personal mailing address, telephone number, email address
• Medical / Insurance / Employment Information includes physical characteristics/description, injury information, Claim Number, Employer
• Technical Information includes internet protocol (IP) addresses and geolocation, your login data, time zone setting and location (geocodes), auth0 logs, pages visited, pages viewed, events and page loads, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website
• Location Information includes the address or location associated with a claim, such as a claimant's location or an appointment site, collected to help manage claims and schedule appointments
• Profile Information includes your username and password, your preferences
• Usage Information includes information about how you use our website, products and services

2. Collection of Technical Information and Usage Information

When you access Streamline's sites, we automatically collect certain information. This information may include without limitation: (a) technical information about your computer or Wireless Device, such as your IP address, geolocation information, device type, operating system type and version, unique device ID, browser, browser language, domain and other systems information or platform types (collectively "Technical Information"); and (b) usage statistics about your interaction with Streamline's sites, including pages accessed, referring website address(es) time spent on pages, pages visited, search queries, click data, date and time and other information regarding your use of Streamline's sites (collectively "Usage Information").

This Technical Information and Usage Information is collected through server logs maintained for site security, fraud prevention, and operational purposes. Streamline does not use cookies, web beacons, pixel tags, or other tracking technologies on its sites.

3. What Personal Information We Collect

We have collected information from the following categories of personal information from consumers within the last twelve (12) months:

II. How We Use Your Information

We may use information about you for several purposes, including:

1. Providing, Improving and Developing Our Services

• Providing Streamline's Services, including completing the transaction for which the personal information was collected, such as processing your claims
• Facilitating medical care and payment of medical claims
• Performing our contractual obligations with our customers
• Maintaining and improving our Services, including performing safety and quality controls of the Services
• Developing new products and Services
• Delivering the information and supporting your request
• Improving, personalizing and facilitating your use of our Services
• Measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Services

2. Communicating With You About Our Services

• Fulfilling any other purpose disclosed to you in connection with our Services
• Contacting you to resolve disputes and aid with our Services

3. Protecting Our Services and Maintaining a Trusted Environment

• Enforcing our Terms of Service or other applicable agreements or policies
• Complying with any applicable laws or regulations, or in response to lawful requests for information from the government or through legal process

III. When and With Whom Do We Share Your Information

1. We Do Not Sell Your Information

2. When and How We May Share/Disclose Your Information With Third Parties

We will share your information with the following third parties and under the circumstances described below or as otherwise described in this Privacy Policy:

• We may share your information with third parties at various stages of processing your claims, including with healthcare providers who provide independent medical examinations, insurance carriers, legal counsel, your employer, claims adjusters
• We may share your information with third parties, such as the Centers for Medicare and Medicaid Services, for purposes of mandatory reporting
• We may share your information with third parties for purposes of monitoring individuals throughout the claims process
• We may share your information with third-party companies that perform services on our behalf, including payment processing, data analysis, marketing and direct mail services (for example, sending you materials on Streamline's behalf), email and hosting services, customer services and support. These service providers may access your personal information and may only use it as directed by us for the purpose of our requested service.

We require all third parties to respect the security of your personal information. We do not allow our third-party service providers to use your personal information for their own purposes, and they are only permitted to process your personal information in accordance with our instructions.

3. Corporate Transactions

We may share all or part of your personal information with other business entities in connection with the sale, assignment, merger or other transfer of all or a portion of Streamline's business or assets to such business entity (including due to a sale in connection with bankruptcy). We require any such purchaser, assignee or other successor business entity to honor the terms of this Privacy Policy.

4. Disclosure of Information for Legal Purposes

Streamline may disclose all or part of your personal information when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be violating any agreement with Streamline, or may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other users of our sites, or anyone else that could be harmed by such activities. We may disclose information in response to a subpoena, search warrant, in connection with judicial proceedings, or pursuant to court orders, legal process or other law enforcement measures. Streamline may disclose or access personal information when we believe in good faith that the law requires it, to establish our legal rights or to defend against legal claims, and for administrative and other purposes that we deem necessary to maintain, service and improve our Services.

5. Aggregated, Anonymized or De-Identified Information

We may disclose or use aggregated, anonymized or de-identified information for any purpose. Aggregated, anonymized or de-identified information is information that can no longer reasonably identify a specific individual. Although such information may be derived from your personal information, it can no longer directly or indirectly reveal your identity.

IV. Opt-Out Preference Signals and Global Privacy Control

Streamline does not sell or share personal information and does not use online tracking, third-party advertising, or analytics technologies on its sites. (This does not include direct mail and marketing communications Streamline may send on its own behalf, as described under When and With Whom Do We Share Your Information above.) Because we do not engage in online tracking or advertising, no opt-out is generally necessary for those practices. However, if your browser or device sends an opt-out preference signal, such as Global Privacy Control (GPC), we will honor it as a request not to sell or share your personal information, to the extent required by applicable state law.

V. Social Media

We may collect information from other sources, such as social media platforms that may share information about how you interact with our social media content. We do not control how your personal information is collected, stored or used by such third-party websites or to whom it is disclosed. You should review the privacy policies and settings on any social media website that you subscribe to so that you understand the information they collect and may be sharing. If you do not want your social media websites to share information about you, you must contact that website and determine whether it gives you the opportunity to opt-out of sharing such information. Streamline is not responsible for how these third-party websites may use information collected from or about you.

VI. How Long We Retain Your Information

We generally retain your information as long as reasonably necessary to provide you the Services or to comply with applicable law and in accordance with our document retention policy. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means and the applicable legal requirements. We may retain copies of information about you and any transactions or Services you have used for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce other applicable agreements or policies or to take any other actions consistent with applicable law.

In some circumstances we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. This allows the specific information collected (name, email, address, phone number, etc.) to become anonymous but allows Streamline to keep the transaction or engagement data. For example, Streamline will not be able to tell if John Smith registered for an event, but we will be able to tell that a person registered for an event and maintain headcount and transactional history. This will allow Streamline to maintain a level of information that helps us develop and improve our sites and Services.

VII. Children's Online Privacy Protection Act (COPPA) Compliance and Related Information

The Children's Online Privacy and Protection Act (COPPA) regulates online collection of information from persons under the age of 13. It is our policy to refrain from knowingly collecting or maintaining personal information relating to any person under the age of 18. If you are under the age of 18, please do not supply any personal information through the sites. If you are under the age of 18 and have already provided personal information through the sites, please have your parent or guardian contact us immediately using the information provided under the Contact Us section so that we can remove such information from our files.

VIII. Security

We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We hold information about you both at our own premises and with the assistance of third-party service providers. Further public disclosure here of our security measures could aid those who might attempt to circumvent those security measures. If you have additional questions regarding security, please feel free to contact us directly using the information provided under the Contact Us section.

To ensure that our employees comply with our privacy policies, we have developed a training program that provides all employees with the tools and knowledge to protect your personal information in all aspects of their work. Any employee who violates our privacy policies is subject to disciplinary action, including possible termination and civil and/or criminal prosecution.

IX. HIPAA-Regulated Information

In the course of providing workers' compensation-related Services, Streamline may create, receive, maintain, or transmit protected health information ("PHI") including injury details, claim numbers, and medical or insurance information on behalf of insurance carriers, employers, or other entities regulated by the Health Insurance Portability and Accountability Act ("HIPAA"). In that context, Streamline acts as a business associate, not a covered entity, and handles PHI under the terms of applicable Business Associate Agreements and HIPAA's Privacy, Security, and Breach Notification Rules.

Because Streamline is a business associate rather than a covered entity, the covered entity you work with (your insurance carrier, employer, or health plan) is responsible for issuing you a HIPAA Notice of Privacy Practices. If you have questions about how your PHI is used or disclosed, please contact that covered entity directly, or contact us using the information under the Contact Us section and we will direct your inquiry appropriately.

X. Claim and Medical Information

Streamline will not disclose personally identifiable claim, injury, or medical information to third parties beyond what is described in this Privacy Policy, except: (i) to healthcare providers, insurance carriers, employers, legal counsel, or claims adjusters involved in administering the applicable claim; (ii) to the covered entity or client on whose behalf the claim is being processed; or (iii) when we believe in good faith that the law requires it.

XI. U.S. State Privacy Rights

The California Consumer Privacy Act ("CCPA") permits residents of California to have the following additional rights. For more information, or if you have questions, you can contact us using the information provided under the Contact Us section. For your protection, Streamline is required to collect certain information from you to verify your identity before we respond to any request submitted by you. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by Streamline for its files.

1. California Residents Have the Right to Request Streamline Disclose What Information It Collects, Uses and Discloses

California residents have the right to request that Streamline disclose what personal information Streamline collects, uses and discloses about them. The general categories of personal information Streamline collects about California residents are listed above under What Information We Collect. If you are a California resident and would like to request the specific personal information that Streamline collects, uses and discloses about you, please use the information provided under the Contact Us section.

2. California Residents Have the Right to Request the Deletion of Their Personal Information Maintained by Streamline

California residents have the right to request that Streamline delete the personal information Streamline maintains about them. Streamline will make every effort to comply with California residents' requests to delete their personal information, however, certain laws or other legal requirements might prevent some personal information from being deleted. If you are a California resident and would like to request the deletion of your personal information, please use the information provided under the Contact Us section.

3. California Residents Have the Right to Non-Discrimination for the Exercise of Their Privacy Rights Under the CCPA

Under the CCPA, California residents have the right not to receive discriminatory treatment by Streamline for the exercise of their privacy rights. However, the exercise of certain privacy rights by California residents will make it so that Streamline is no longer able to provide those residents with certain services. For example, if, at the request of a California resident, Streamline deletes all of the California resident's personal information that it maintains, Streamline will no longer be able to send marketing communications to that California resident.

4. California Residents Can Designate an Authorized Agent to Make a Request Under the CCPA on Their Behalf

California residents can designate an authorized agent to make requests under the CCPA related to the residents' personal information. Streamline can deny any request made by an agent who does not submit proof that he or she has been authorized by the California resident to act on the California resident's behalf. For more information on submitting a request on behalf of a California resident as an authorized agent, you can fill out the data request form below in the Contact Us section.

5. Do Not Track

Because Streamline does not use cookies, web beacons, or similar tracking technologies on its sites, there is generally no cross-site tracking for a Do Not Track ("DNT") browser signal to disable, and Streamline does not need to respond differently to DNT signals for that reason. For opt-out preference signals related to the sale or sharing of personal information, including Global Privacy Control (GPC), see Opt-Out Preference Signals and Global Privacy Control above.

6. Residents of Other States

Residents of other states with comprehensive consumer privacy laws may have similar rights to know, access, correct, delete, or obtain a portable copy of their personal information, to opt out of certain processing, and to appeal a denied request, to the extent Streamline is subject to the applicable law. To exercise these rights, please use the contact information provided under the Contact Us section.

XII. Changes to This Privacy Policy

This Privacy Policy may be revised from time to time as we add new features and Services, as laws change and as industry privacy and security best practices evolve. We display an effective date on this Privacy Policy at the top of this Privacy Policy so that it will be easier for you to know when there has been a change. If we make any material change to this Privacy Policy regarding use or disclosure of personal information, we will provide notice on our sites. Changes will apply to information collected after the change is effective.

Please check this Privacy Policy periodically for changes. Small changes or changes that do not significantly affect individual privacy interests may be made at any time and without prior notice. Your use of the sites constitutes acceptance of the provisions of this Privacy Policy and your continued usage after such changes are posted constitutes acceptance of each revised Privacy Policy. If you do not agree to the terms of this Privacy Policy or any revised Privacy Policy, please exit the sites immediately. If you have any questions about this Privacy Policy, the practices of the sites or your dealings with the sites, you can contact us by using the information provided under the Contact Us section below.

XIII. Contact Us

Please contact Streamline with any questions or concerns regarding this Privacy Policy:

• Toll-Free: 855-877-9292
• Email: DataProtection@StreamlineWorkComp.com
• Request Form: Fill out our Data Access Request Form online, or download the PDF version (PDF, opens in new tab) and e-mail it to DataProtection@StreamlineWorkComp.com

If you have any questions or concerns regarding our Privacy Policy, or if you believe our Privacy Policy or applicable laws relating to the protection of your personal information have not been respected, you may file a complaint with Streamline using the contact information listed above, and we will respond to let you know who will be handling your matter and when you can expect a further response. We may request additional details from you regarding your concerns and may need to engage or consult with other parties to investigate and address your issue. We may keep records of your request and any resolution.