Consumer Health Data Privacy Policy

The consumer health data we collect, and how we use it

XipFax collects consumer health data that appears in:

• documents uploaded to XipFax, and the cover pages and faxes sent with them;
• faxes received at a XipFax client’s fax number;
• fax records, such as numbers, dates and pages, when they reveal health information, for example a fax sent to a health care provider.

We collect and use it to provide the fax service: to store documents, send faxes to the numbers clients choose, receive faxes and deliver them to the client’s account and email, and keep each client’s fax log. We also use it to confirm delivery, answer questions and requests, keep the service secure, act on complaints and meet legal duties.

Where we collect it from

• XipFax clients, when they upload documents and send faxes.
• People and organizations that send faxes to a XipFax client’s number.

The consumer health data we share

• Health data in the faxes clients send.
• Health data in faxes received at a client’s number.

Who we share it with

• The people and organizations at the fax numbers clients send to.
• XipFax clients, when a fax sent to their number holds the health data.

We share it with no affiliates.

How to use your rights

You can ask us:

• to confirm whether we collect, share or sell your consumer health data, and to see it, with a list of the third parties and affiliates we have shared or sold it with and a way to contact them;
• to withdraw your consent to our collecting and sharing it;
• to delete it.

Email support@xipfax.com. You don’t need a XipFax account. If you have one, write from its email address; otherwise we may ask for information to confirm who you are.

If we decline your request, you can appeal: reply to our answer, or email support@xipfax.com with “Appeal” in the subject. If we deny your appeal, we tell you how to submit a complaint to the Washington Attorney General.