Legal
Privacy Policy
M1 Diagnostics (“M1,” “we,” “us,” or “our”) respects the privacy and confidentiality of personal information. This Privacy Policy describes how information may be collected, used, disclosed, and protected when you visit m1dx.com (the “Website”) or communicate with M1 through the Website.
This Privacy Policy applies to information collected through the public Website. It does not replace any Notice of Privacy Practices that may apply to protected health information (“PHI”) maintained by M1 under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”).
1. Information You Provide
We may collect information that you voluntarily provide through the Website, including your:
- name;
- organization or employer;
- business contact information;
- email address;
- telephone number; and
- information contained in a message or inquiry you submit.
We use this information to respond to your inquiry, communicate with you, evaluate potential business relationships, and conduct legitimate business operations.
The public Website and its general inquiry forms are not intended for the submission of patient information or PHI.
Do not submit PHI, laboratory results, medical records, diagnoses, treatment information, Social Security numbers, insurance information, financial account information, or other sensitive medical or personal information through a general Website form.
Where M1 provides a separate secure system specifically intended to receive PHI or other sensitive information, use that system rather than a general Website form.
2. Information Collected Automatically
Like most websites, our systems may automatically receive limited technical information necessary to operate, secure, and maintain the Website, such as:
- IP address;
- browser type;
- device type;
- operating system;
- date and time of access;
- referring website or page;
- pages requested; and
- basic technical information concerning Website performance and security.
M1 seeks to limit the collection of information to what is reasonably necessary for legitimate Website, security, operational, and compliance purposes.
3. Cookies and Tracking Technologies
M1 takes a conservative approach to online tracking technologies, particularly because M1 operates in the healthcare industry.
The Website may use cookies or similar technologies that are reasonably necessary for Website functionality, security, performance, or privacy-protective analytics.
M1 does not authorize third-party tracking technologies to collect or receive PHI through the public Website.
M1 does not knowingly use Website tracking technologies to disclose PHI for advertising, behavioral profiling, or cross-site advertising purposes.
Tracking technologies that may receive PHI or other regulated health information must not be implemented unless their use has been specifically reviewed and approved for compliance with applicable law and appropriate contractual, privacy, and security safeguards have been established.
4. How We Use Information
We may use information collected through the Website to:
- operate, maintain, secure, and improve the Website;
- respond to inquiries and requests;
- communicate with prospective customers, business partners, applicants, vendors, and other visitors;
- evaluate potential business relationships;
- detect, investigate, and prevent security incidents, fraud, misuse, or unlawful activity;
- maintain appropriate business records;
- establish, exercise, or defend legal rights; and
- comply with applicable legal, regulatory, and governmental requirements.
We do not use information collected through general Website forms to make clinical decisions about patients.
5. Sale of Personal Information
M1 does not sell personal information submitted through its general Website forms.
M1 does not knowingly sell PHI.
6. Disclosure of Information
We may disclose information when reasonably necessary:
- to service providers performing services on our behalf;
- to respond to your request;
- to protect the security, rights, property, or safety of M1 or others;
- to investigate suspected fraud, misuse, or unlawful activity;
- to comply with applicable law, regulation, subpoena, court order, governmental request, or other legal process;
- to establish, exercise, or defend legal rights; or
- in connection with an actual or proposed merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction, subject to applicable legal requirements.
Service providers are permitted access to information only as appropriate for the services they provide and subject to applicable contractual and legal requirements.
7. Healthcare Information and HIPAA
M1 operates in the healthcare and laboratory diagnostics industry and takes the privacy and security of health information seriously.
This Website Privacy Policy is not M1’s HIPAA Notice of Privacy Practices and should not be interpreted as one.
To the extent M1 is acting as a HIPAA covered entity or business associate with respect to particular PHI, M1 handles that PHI in accordance with applicable HIPAA requirements and other applicable law.
Nothing in this Privacy Policy expands or limits rights or obligations that independently arise under HIPAA or other applicable healthcare privacy laws.
8. Information Security
M1 uses administrative, technical, and physical safeguards designed to protect information under its control against unauthorized access, use, alteration, disclosure, or destruction, as appropriate to the nature of the information and applicable legal requirements.
No Internet transmission, information system, or method of electronic storage can be guaranteed to be completely secure. Accordingly, M1 cannot guarantee absolute security.
9. Data Minimization and Retention
M1 seeks to collect and retain information only as reasonably necessary for legitimate business, operational, security, contractual, and legal purposes.
Information may be retained for the period reasonably necessary to fulfill the purpose for which it was collected, comply with legal or regulatory obligations, resolve disputes, enforce agreements, and maintain appropriate business records.
10. Third-Party Websites
The Website may contain links to websites or services operated by third parties.
M1 does not control and is not responsible for the privacy, security, availability, accuracy, or content of third-party websites. A link does not necessarily constitute M1’s endorsement of a third party or its practices.
Visitors should review the privacy practices of third-party websites before providing information to them.
11. Children’s Privacy
The Website is intended for a general business and professional audience and is not directed to children under 13.
M1 does not knowingly collect personal information from children under 13 through its general Website.
If M1 learns that information from a child under 13 has been collected through the Website in circumstances where collection was not appropriate, M1 will take reasonable steps to address the information consistent with applicable law.
12. Privacy Rights
Depending on where you reside and subject to applicable law and exemptions, you may have rights regarding your personal information.
Such rights may include the ability to request access to, correction of, or deletion of certain personal information, or to exercise other rights provided by applicable privacy law.
M1 will evaluate verified privacy requests in accordance with applicable law.
To submit a privacy inquiry or request, contact:
M1 may take reasonable steps to verify your identity before fulfilling a request.
M1 will not unlawfully discriminate against an individual for exercising applicable privacy rights.
13. Changes to This Privacy Policy
M1 may update this Privacy Policy from time to time to reflect changes in its practices, technology, legal requirements, or other circumstances.
The current version will be posted on this page with its effective date.
14. Contact Us
Questions or concerns regarding this Privacy Policy or Website privacy practices may be directed to:
M1 Diagnostics
privacy@m1dx.com