Who we are
We are Carastar Health. This privacy notice applies solely to information collected by this website (https://sbmh.mamha.org). If you have any questions or need to contact us you can use one of the following methods:
- Mail: 2140 Upper Wetumpka Road Montgomery, AL 36107
- Phone: 1-334-279-7830
- Email: https://www.mamha.org/#contact
To learn more about Carastar Health please visit our primary website at https://www.carastar.org.
What personal data we collect and why we collect it
We are the sole owners of the information collected on this site. We only have access to/collect information that you voluntarily give us via email, when authorizing a new user, or other direct contact from you. When authorizing a user for this site we collect the following personal information: first and last name, email, phone number, assigned school system, assigned school. We will not sell or rent this information to anyone.
We will use your information to respond to you, regarding the reason you contacted us. This information is used to verify your identity when logging into this site to submit referrals or access other site functionality. We will not share your information with any third party outside of our organization, other than as necessary to fulfill your request or when required by law.
Referrals and Patient Forms
We do not store any referral data or other identifiable patient data on this website. All referral and patient data is securely sent to Formstack. Formstack is our third party HIPAA compliant vendor. All Referral data is protected by the following methods:
- Form encryption while in transit
- Database encryption while in transit and at rest
- Unique user permissions
- Multi-factor authentication for all logins
- Audit logging of all access
When you complete a referral, we will collect the following information along with any data entered on the referral form:
- Submission date and time
- The web browser you used to complete the form
- Your public IP address
- Your approximate location associated with your public IP address
Other Forms
When you authorize or revoke a user the information you enter is securely transmitted and stored on this website. This information is protected by the following methods:
- Data is encrypted while in transit and at rest
- Unique user permissions
- Multi-factor authentication for all elevated logins
When you complete one of these forms, we will collect the following information along with any data entered on the form:
- Submission date and time
- The web browser you used to complete the form
- Your public IP address
Cookies
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
We utilize analytics to protect the security of this website. When you visit this website your IP address will be used to verify your country of origin and if your IP address has been flagged as malicious.
Who we share your data with
We do not share your information with any other third other than when required by law or when required to provide access to the functionality of this website. This includes security analytics and referral data submitted to Formstack.
How long we retain your data
If you complete a referral this information is stored in the consumers’ medical record and is subject to our medical records retention policy. All other forms completed on this website are stored indefinitely for the life of your organizations contract with us and are subject to our organizations data retention policy.
For users registered on our website, we also store the personal information they provide in their user profile. All users can see, or edit their personal information at any time (except they cannot change their username, school system, assigned school). School system administrator and website administrators can also see that information. Only website administrators can edit that information (except they cannot change any usernames).