24/7 In-take Privacy Policy
Last Modified: September 2024
CorVel Enterprise Comp., Inc., CorVel Enterprise Comp, Inc. of Canada and CorVel Healthcare Corporation and all related subsidiaries (“CorVel”, “us,” “we” or “our”) have created this privacy policy (“Policy”) in order to comprehensively inform individuals about our privacy practices and to demonstrate our firm commitment to privacy. This Policy describes how we collect, use, disclose, transfer, store, retain or otherwise process your personal information in the course of performing our business and operational activities, which includes the voice recording features of our 24/7 in-take service (the “Services”). When we refer to “you” or “your,” we mean the person about whom we collect personal information or data.
Please read this Policy carefully. Our Policy includes:
1. GENERAL DISCLOSURES
Our data centers relating to the Services are hosted in the United States. The Services are not intended for engagement with individuals located outside of the United States. This Policy applies only to the Services are described at the beginning of this Policy and not to CorVel’s other services, websites, applications or other interfaces. We are not responsible for the privacy practices of other businesses or the content of other websites, including any websites that may indicate a special relationship or partnership with us (such as co-branded pages or “in cooperation with” relationships). To ensure protection of your privacy, always review the privacy policy of the companies with whom you engage.
2. WHAT INFORMATION WE COLLECT AND DISCLOSE AND FOR WHAT PURPOSES
In the course of performing our Services, we collect a variety of different kinds of personal information about you. Under certain state laws, CorVel is required to disclose whether we sell, share, or use your personal data for targeted advertising purposes. We do not sell, share, or use your personal information for targeted advertising (as those terms are defined by applicable laws) and have not done so in the past 12 months. We require all service providers to respect the security of your personal information. We do not allow our service providers to sell personal information or to use your personal information for their own purposes. All of our service providers are only permitted to process your personal information in accordance with our instructions and solely for the reasons for which we disclosed it to them.
CorVel provides workers’ compensation, liability and automobile claims and managed care solutions to our customers. Our customers may include the insurance company that holds the policy on your claim or your employer. In the course of providing these Services, we will directly interact with you to collect personal information, but we may also collect personal information about you from other sources.
When We Provide Our Managed Care Services or Administer a Workers’ Compensation Claim Related to You
| Categories Collected
The personal information we collect may include: | Sources of Collection
We may collect your personal information from: | Business Purpose of Collection
The purposes of collection include: | Categories of Third Parties to Which Personal Information is Disclosed
We may disclose your personal information to: | Business Purpose of Disclosure
The purposes of disclosure include: |
| Identifier Information* | • you directly
• your medical providers • your employer • your representatives • the insurance company that holds the policy relating to the relevant claim | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • sending you SMS text messages relating to our pharmacy programs or claims that relate to you • connecting with you through our telehealth programs and services • sending you information as is necessary for the provision of our Services • complying with any applicable laws or regulations | • our service providers**
• your medical providers • to our customers (i.e., your employer or the insurance company that holds the relevant insurance policy) • to your employer or insurance company that holds the policy relating to the relevant claim • individuals or entities you authorize • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
| • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• providing independent medical examinations, nurse review, return to work review or utilization review • facilitating medical care and payment of medical claims • sending you SMS text messages relating to our pharmacy programs or claims that relate to you • connecting with you through our telehealth programs and services • sending you information as is necessary for the provision of our Services • complying with any applicable laws or regulations • providing durable medical equipment • administering and responding to disputed claims • providing claim adjusting services or related support • providing telehealth services and functionality • corresponding with you • providing bill review and re-pricing services • providing utilization and peer review services • subcontracting workers’ compensation, auto and liability claims oversight services in Canada • providing pharmacy services to claimants • providing data extraction, imaging and capture services • providing claim search and comparison services to detect and prevent fraudulent claims • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims • receiving data hosting services |
| *The information we collect may include your full name, date of birth, gender (including identity and expression), marital status, signature, personal mailing address, personal e-mail address, personal telephone number, business mailing address, business e-mail address, business telephone number and employee ID.
**We may disclose your personal information to our utilization review, peer review and independent medical review providers; medical equipment providers; legal counsel; claim adjusters; telehealth platform vendors; SMS texting vendors; provider network organizations; e-mail services vendors; bill review vendors; subcontractor workers’ compensation, auto and liability claims oversight providers; pharmacy benefit management providers; data imaging and capture vendors; claim fraud prevention vendors; database hosting vendors and auditors. | ||||
| Medical Insurance Information† | • you directly
• your medical providers • your employer • the insurance company that holds the policy relating to the claim | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • complying with any applicable laws or regulations | • our service providers††
• your medical providers • individuals or entities you authorize • to your employer or insurance company that holds the policy relating to the relevant claim • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
| • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• providing independent medical examinations, nurse review, return to work review or utilization review • providing durable medical equipment • administering and responding to disputed claims • receiving claim adjusting services • receiving medical guideline and length of life review and guidelines • receiving bill review and re-pricing services • receiving utilization and peer review services • providing pharmacy services to claimants • receiving data extraction, imaging and capture services • receiving claim search and comparison services to detect and prevent fraudulent claims • receiving data hosting services • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| †The information we collect may include your insurance coverage information, health insurance number, policy/plan information, workers’ compensation claim number, health insurance claim numbers and Medicare beneficiary identifier.
††We may disclose your personal information to our utilization review, peer review and independent medical review providers; medical equipment providers; legal counsel; claims adjusters; settlements and annuities organizations; provider network organizations; bill review vendors; pharmacy benefit management providers; data imaging and capture vendors; claim fraud prevention vendors; database hosting vendors and our auditors. | ||||
| Audio and Visual Information‡ | • you directly
• our investigative service providers | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• detecting and prevent fraudulent claims • facilitating medical care and payment of medical claims • complying with any applicable laws or regulations | • our service providers‡‡
• your medical providers • individuals or entities you authorize • to your employer or insurance company that holds the policy relating to the relevant claim • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• administering and responding to disputed claims • receiving claim adjusting services or related support • to detect and prevent fraudulent claims • receiving data hosting services • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| ‡The information we collect may include images of you, videos of you, your gait patterns and your voice recordings from calls from our 24/7 intake service, which may be transcribed and/or summarized.
‡‡We may disclose your personal information to our legal counsel, claims adjusters, database hosting vendors and our auditors. | ||||
| Activity Information⁂ | • you directly
• our investigative service providers | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • detecting and prevent fraudulent claims • complying with any applicable laws or regulations | • our service providers⁂⁂
• your medical providers • individuals or entities you authorize • to your employer or insurance company that holds the policy relating to the relevant claim • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• administering and responding to disputed claims • receiving claim adjusting services • receiving utilization and peer review services • receiving data hosting services • detecting and prevent fraudulent claims • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| ⁂The information we collect may include your history and past actions, experiences, actions and behavior.
⁂⁂We may disclose your personal information to our legal counsel, claims adjusters, utilization review, peer review and independent medical review providers, database hosting vendors and auditors. | ||||
| Professional or Employment-Related Information⁒ | • you directly
• your employer | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • complying with any applicable laws or regulations | • our service providers⁒⁒
• your medical providers • to your employer or insurance company that holds the policy relating to the relevant claim • individuals or entities you authorize • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• administering and responding to disputed claims • receiving claim adjusting services • receiving utilization and peer review services • receiving data hosting services • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| ⁒⁒The information we collect may include your employer, job title or role, salary, work history or military and veteran status.
⁒We may disclose your personal information to our legal counsel, claims adjusters, utilization review, peer review and independent medical review providers, database hosting vendors and auditors. | ||||
| Financial Information§ | • you directly | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • complying with any applicable laws or regulations | • our service providers§§
• individuals or entities you authorize • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• receiving claim adjusting services • providing payment and treasury services • receiving data hosting services • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| §The information we collect may include your bank account information and payment card details.
§§We may disclose your personal information to our legal counsel, payment processing vendors, database hosting vendors our auditors. | ||||
| Inferences⁜ | • you directly | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • complying with any applicable laws or regulations | • our service providers⁜⁜
• your medical providers • individuals or entities you authorize • to your employer or insurance company that holds the policy relating to the relevant claim • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
| • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• administering and responding to disputed claims or advising us on legal, regulatory or compliance matters • receiving claim adjusting services • receiving utilization and peer review services • receiving data hosting services • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| ⁜The information we collect may include your medical trends, psychological trends, physical trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.
⁜⁜We may disclose your personal information to our legal counsel, claims adjusters, utilization review, peer review and independent medical review providers, database hosting vendors and auditors. | ||||
| Sensitive Personal Information (health information)# | • you directly
• your medical providers • your employer • the insurance company that holds the policy relating to the claim • rehabilitation tracking and management providers | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • complying with any applicable laws or regulations • providing rehabilitation tracking and management services to injured claimants | • our service providers##
• your medical providers • individuals or entities you authorize • to your employer or insurance company that holds the policy relating to the relevant claim • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes | • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• receiving independent medical examinations, nurse review, return to work review or utilization review • receiving claim adjusting services • providing durable medical equipment • administering and responding to disputed claims • receiving medical guideline and length of life review and guidelines • receiving bill review and re-pricing services • receiving utilization and peer review services • providing pharmacy services to claimants • receiving data extraction, imaging and capture services • receiving claim search and comparison services to detect and prevent fraudulent claims • receiving data hosting services • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| #The information we collect may include your medical conditions, medical treatments, medical diagnoses, medications, physical and mental disabilities, medical, provider and hospital reports, physical characteristics/descriptions, sleep and exercise information and family medical history.
##We may disclose your personal information to our utilization review, peer review and independent medical review providers, medical equipment providers, legal counsel, claims adjusters, settlements and annuities organizations, provider network organizations, bill review vendors, pharmacy benefit management providers, data imaging and capture vendors, claim fraud prevention vendors, database hosting vendors and auditors. | ||||
| Sensitive Personal Information (identity information)⸸ | • you directly
• your medical providers • your employer
| • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• facilitating medical care and payment of medical claims • complying with any applicable laws or regulations | • our service providers⸸⸸
• your medical providers • individuals or entities you authorize • governmental authorities • our affiliates • other entities during a corporate transaction • courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes
| • providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers
• administering and responding to disputed claims • receiving claim adjusting services f • providing payment and treasury services • receiving utilization and peer review services • providing pharmacy services to claimants • receiving claim search and comparison services to detect and prevent fraudulent claims • receiving data hosting services • conducting audits of our systems, policies and procedures • as required by law or to resolve, investigate or manage actual or suspected legal claims |
| ⸸The information we collect may include your Social Security number, driver’s license number, tax identification number and race.
⸸⸸We may disclose your personal information to our legal counsel, claims adjusters, payment processing vendors, utilization review, peer review and independent medical review providers, pharmacy benefit management providers, claim fraud prevention vendors, database hosting vendors and auditors. |
Deidentified and Aggregated Information
We may process your personal information into aggregated, anonymized or de-identified form for any purpose. Aggregated, anonymized or de-identified information is information that can no longer reasonably identify a specific individual and is no longer “personal information.” We will only maintain and use this type of information in deidentified form and we will not attempt to reidentify this information, except for the purposes of validating our deidentification process.
3. PERSONAL INFORMATION RELATING TO CHILDREN
The Children’s Online Privacy and Protection Act (COPPA) regulates online collection of information from persons under the age of 13. It is our policy to refrain from knowingly collecting or maintaining personal information relating to any person under the age of 13. If you are under the age of 13, please do not supply any personal information through the Service. If you are under the age of 13 and have already provided personal information through the Service, please have your parent or guardian contact us immediately using the information provided under Contact Us so that we can remove such information from our files. Please delete all CorVel related cookies and restrict further collection of cookies using the methods outlined in the section How to Restrict Cookies in our Cookies Policy.
4. HOW LONG WE RETAIN YOUR INFORMATION
We generally retain your information as long as reasonably necessary to provide you the Services or to comply with applicable law and in accordance with our document retention policy. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means and the applicable legal requirements. We may retain copies of information about you and any transactions or Services you have used for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce other applicable agreements or policies or to take any other actions consistent with applicable law.
5. SECURITY
We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We hold information about you at our own premises and with the assistance of service providers. Further public disclosure here of our security measures could aid those who might attempt to circumvent those security measures. If you have additional questions regarding security, please contact us directly using the information provided under Contact Us.
6. U.S. DATA SUBJECT RIGHTS
Depending on your state of residence, including if you are a consumer living in Colorado, Connecticut, Florida, Oregon, Montana, Nevada, Texas, Utah or Virginia, you may have the below rights with regards to your personal information. If you are a resident of California, you have access to special data rights and disclosures, which are described in this Policy under a separate section titled Data Rights For California Consumers.
- Right to Confirmation and Access: You may have the right to confirm whether or not CorVel is processing your personal information and to access such personal information. The general categories of personal information that we collect, process and disclose are listed in the general Policy under the section: What Information We Collect And Disclose And For What Purposes. If you wish to access the specific pieces of personal information that we process about you, please submit a request as directed in the section titled Contact Us.
- Right to Correct: You may have the right to request that CorVel correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right to Delete: You may have the right to request that CorVel delete the personal information that CorVel maintains about you.
- Right to Opt-Out of Sales/Targeted Advertising: We do not “sell,” “share,” or disclose for “targeted advertising (as those terms are defined by applicable law) any of your personal data that you provide to us when using our Advocacy 24/7 nurse hotline. However, if you visit one of our websites, then under certain state laws, disclosure of your personal information to certain third parties (such as social media providers, ad networks, analytics vendors, and providers of online marketing and advertising services), including via automated technologies such as cookies, pixels, and tags, for advertising or analytics purposes may be considered a “sale” of personal information. These kinds of disclosures may constitute “targeted advertising,” or a “sale” when the personal information is exchanged for non-monetary consideration, or “sharing” when the personal information is disclosed for cross-context behavioral advertising purposes. If you visit our websites you can choose to opt-out of targeted advertising, selling, and sharing of your personal information by clicking “Reject All” on the cookie banner when you first visit the website. You may also choose which specific non-strictly necessary cookies to reject by clicking “Cookie Settings” from the cookie banner and selecting the cookie category boxes for the cookies you’d like to reject, and making your selection by toggling the switches for each cookie category so that they turn grey. Please click on “Confirm My Choices” after choosing which cookies to reject. If you are not presented with a cookie banner, please delete your cookies and re-visit the website. You may alternatively opt-out by clicking the “Do Not Sell or Share My Personal Information” link at the footer of our website, and following the instructions in that link.Additionally, in California and Colorado and other states as applicable law requires, residents may use an opt-out preference signal to opt-out of targeted advertising or the sale or personal information. CorVel recognizes the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the sale of their personal information or sharing of their personal information for the purposes of targeted advertising. You can opt-out of this sale or share by activating the opt-out preference signal or Global Privacy Control (GPC) on your browser. More information regarding GPC is available here.
- Right to Appeal: If you submit a data rights request and we do not take the action you requested, you may have the right to appeal our decision within a reasonable period of time after your receipt of our decision. Please see Section 8(e) below for additional information.
Not all individuals about whom we possess information will have access to these rights and we may not be able to provide these rights to everyone due to legal and jurisdictional limitations. We may not be able to comply with your request for a number of reasons, including:
- you do not live in a state that grants you the specific right that you have requested;
- the information that you’ve requested is not subject to the regulation that grants you the right to make a request in relation to your personal information;
- we are prevented or exempted by law, regulation or rule from complying with your request;
- we do not maintain your personal information in a manner that is connected to your identity;
- we are not able to comply with your request without incurring disproportionate burden or expense; or
- if complying with your request conflicts with the integrity of our Services, the ability to administer our websites or mobile applications, to administer our business and related relationships or to establish, defend or administer legal claims.
- our role in regards to the personal data is that of a “service provider” or “processor,” and we are not the “business” or “controller” that owns or controls the personal data that your request relates to.
If any of the above reasons apply, we will let you know in our response to your request. You may initiate a complaint by sending us a message by following the instructions provided under Contact Us.
Note that we may be required to gather additional information from you in order to process your request. We will only use this information in the context of evaluating and responding to your request. If you fail or refuse to provide the necessary information, we may not be able to process your request.
A. CALIFORNIA
The California Consumer Privacy Act (“CCPA”) provides the residents of California with the right to request the data rights as described in this section.
Once we receive your request to exercise a right, we will confirm receipt and begin to evaluate, and if appropriate, process the request. We may require that you provide additional information to confirm your identity, including providing us with at least two or more pieces of personal information to match against personal information that we currently maintain about you. We reserve the right to reject your request if we are unable to verify your identity to a sufficiently high level of certainty. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by CorVel for our files.
If we reject a request for any reason, we will inform you of the basis of the rejection.
Please note that certain kinds of personal information that is subject to federal law (like health information subject to the Health Insurance Portability and Accountability Act) is not covered by the CCPA even if you are a California resident. We may not be able to provide these CCPA rights to you with regards to this information due to legal and operational restrictions.
For more information, or if you have questions, you can contact us using the information provided under Contact Us.
- Right to Know: California residents have the right to know what personal information CorVel has collected about them, including the categories of personal information, the categories of sources from which the personal information is collected in the past 12 months, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom CorVel discloses personal information, and the specific pieces of personal information CorVel has collected about them.The categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for which we collect personal information and the categories of third parties to whom we disclose personal information are found in the general Policy under the section: What Information We Collect And Disclose And For What Purposes. California residents have a right to know if we are “selling” or “sharing” their personal information, what categories of personal information are “sold” or “shared,” and to whom. The disclosure of your online, web-browsing information when you visit our website to our online marketing and analytics providers may constitute a “sale” and “sharing” under California law. However, please note that CorVel does not sell your personal information in the usual sense of the word. That is, we do not give your information to third parties in exchange for money. We do not knowingly “sell” or “share” the information of individuals under the age of sixteen years old.
- Right to Delete: California residents have the right to request the deletion of their personal information maintained by CorVel.
- Right to Correct: California residents have the right to request that CorVel correct inaccurate personal information that CorVel maintains about them. However, we reserve the right to delete your inaccurate personal information instead of correcting it, if permitted by the CCPA.
- Right to Non-Discrimination: California residents have the right to not be discriminated against due to the exercise of their CCPA privacy rights. However, note that the exercise of certain privacy rights may make it so that we are no longer able to provide you with certain services or communications. For example, if we delete all of your personal information, we cannot send you e-mails or other communications.
- Right to Opt-Out of Selling and Sharing: California residents have the right to opt-out of the “sale” or “sharing” of their personal information. As stated above, the only context in which CorVel may “sell” or “share” your personal information relates to when you visit our site. You can choose to opt-out of the selling and sharing of your personal information by clicking “Reject All” on the cookie banner when you first visit the Website. You may also choose which specific non-strictly necessary cookies to reject by clicking “Cookie Settings” on the cookie banner and selecting the cookie category boxes for the cookies you’d like to reject, and making your selection by toggling the switches for each cookie category so that they turn grey. Please click on “Confirm My Choices” after choosing which cookies to reject. If you are not presented with a cookie banner, please delete your cookies and re-visit the website. You may alternatively opt-out by clicking the “Do Not Sell or Share My Personal Information” link at the footer of our Site, and following the instructions in that link. Additionally, California residents may use an opt-out preference signal to opt-out of the sale or sharing of your personal information. CorVel recognizes the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the sale of their personal information or sharing of their personal information for the purposes of targeted advertising. You can opt-out of this sale or share by activating the opt-out preference signal or Global Privacy Control (GPC) on your browser.
- Right to Limit Use and Disclosure of Sensitive Personal Information: California residents have the right to direct a business to limit its use and disclosure of their “sensitive” personal information. California residents can request that a business limit its use or disclosure of their “sensitive” personal information to that use or disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer, or to those uses or disclosures otherwise authorized by California law.However, we do not use or disclose your “sensitive” personal information for any purpose other than for the specific purposes described under the CCPA regulation § 7027(m) and always in a manner reasonably necessary and proportionate for these permitted purposes. For information on how we use or disclose your “sensitive” personal information, please see the applicable disclosures in the section titled: What Information We Collect From You And For What Purposes.
- Right to Make Requests Through an Authorized Agent: California residents can designate an authorized agent to make a request under the CCPA on their behalf. California residents can designate an authorized agent to make requests under the CCPA on their behalf relating to the residents’ personal information. Only you as a California resident, or a person you have designated in writing as your authorized agent, may make a consumer request related to your personal information. If you wish to have an authorized agent make a verifiable consumer request on your behalf, they will need to provide us with sufficient written proof that you have designated them as your authorized agent, such as a power of attorney pursuant to California Probate Code sections 4000 to 4465. We will still require you to provide sufficient information to allow us to reasonably verify that you are the person about whom we have collected personal information. We can deny any request made by a purported authorized agent who does not submit proof that they has been authorized by the California resident to act on the California resident’s behalf.
Notice of Financial Incentives: California residents are entitled to certain information about a business’s financial incentive programs. However, CorVel does not offer any financial incentive programs to California consumers.
Do Not Track (“DNT”): DNT is an optional browser setting that allows you to express your preferences regarding tracking across websites. Most modern web browsers give you the option to send a Do Not Track signal to the websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a website should respond to this signal, so we do not take any action in response to this signal. We do not have a mechanism in place to respond to DNT signals. Instead, in addition to publicly available third-party tools, we offer you the choices described in this Privacy Policy to manage the collection and use of information about you.
7. CHANGES TO THIS PRIVACY POLICY
We may amend this Policy at any time by posting revisions online. If we make any material changes in the way we collect or process your personal information, we will notify you by prominently posting notice of the changes on our website.
8. CONTACT US
To submit questions or to inquire about or submit a request relating to data rights, you can contact us by:
- Submitting a request through our online Privacy Webform
- Calling us toll-free number at 855-872-6674
If you have any questions or concerns regarding our Policy, or if you believe our Policy or applicable laws relating to the protection of your personal information have not been respected, you may file a complaint with CorVel using the contact information listed above, and we will respond to let you know who will be handling your matter and when you can expect a further response. We may request additional details from you regarding your concerns and may need to engage or consult with other parties in order to investigate and address your issue. We may keep records of your request and any resolution.
Privacy Inquiries
Our Privacy team is ready to answer any questions regarding our privacy policy.
Please fill out the form to get started.