Privacy Policy

Formidable offers solutions for healthcare providers enabling users to manage workflows, capture, display, and transfer healthcare data ("Services"). Formidable may act either as (i) a controller of Personal Information relating to website, contact, sales, support, and user account information, or (ii) a processor of patient healthcare data on behalf of healthcare customers, where customer remains responsible for the lawful basis for the processing. Formidable’s privacy and data handling practices are designed to support applicable privacy and data protection requirements, including applicable Israeli privacy laws, HIPAA business associate obligations where applicable, and GDPR requirements where applicable.

Users can access the Services through various Devices and systems. A "Device" is any digital device used to access the Services, including without limitation a desktop, laptop, mobile phone, tablet, or other consumer electronic device. This Privacy Policy governs your access and use of the Services, regardless of how you access them, and by using our Services you consent to the collection and processing of Personal Information as described in this Privacy Policy.

When you use the Services, some information may be automatically collected, and some is collected when you interact with our Services. Information from which you can be personally identified may be collected, including but not limited to your full name, phone number, and email address (hereinafter: "Personal Information").

The type of information that may be automatically collected is non-personal information, which includes your session durations, information about your Device and your internet connection and the frequency and scope of your use of the Services.

Formidable shall only collect your Personal Information for the provision of the Services, via the methods detailed below:

3.1 Contact Us

If you wish to contact us, we will collect your Personal Information such as full name, email address and the information regarding your inquiry to respond to your request and otherwise follow up as necessary.

3.2 Sign Up to use the Services

If you wish to sign up to the Services or add additional members from your organization to the Services ("Additional User"), we will collect Personal Information such as full name, phone number, medical ID, and email address. By granting access to such Additional User, you represent that such Additional User is authorized to use the Services and access the Personal Information and healthcare data uploaded to it.

3.3 Logging-in to use the Services

If you wish to log-in to use the Services, we will collect your Personal Information such as email address and selected password.

3.4 Collecting Information of Individuals

While using the Services, we may collect, process, store, or transfer Personal Information of Individuals you are servicing, which may include sensitive information such as healthcare data. As a processor Formidable acts on behalf of the relevant healthcare customer, processing such data as necessary to provide the Services, maintain required audit trails, secure the Services, comply with applicable law, and otherwise perform its contractual obligations. Healthcare customers are solely responsible for obtaining any permissions, consents, or other lawful basis required under applicable law, except to the extent Formidable has an independent legal obligation. Formidable may require customers to confirm that they have met their legal obligations as part of periodic compliance reviews or in response to a regulatory inquiry.

3.5 Sources of Personal Information

We may collect Personal Information directly from you, automatically from your use of the Services, from your organization, from healthcare providers, clinical systems, and other authorized participants in the Services workflow.

We use the Personal Information we collect from you for a range of different business purposes according to different legal bases of processing. We may use or process your Personal Information for one or more of the following purposes. One or more purposes may apply simultaneously.

4.1 Providing the Requested Services

We collect your Personal Information according to the manners mentioned in section 3 to this Privacy Policy to provide you with the requested Services.

Such collection of information will enable us to provide you with technical and professional assistance, with regard to the Services you are provided with or wish to be provided with.

We process the Personal Information where it is necessary for the adequate performance and provision of the requested Services.

4.2 Improvement and Development of the Services

We collect Personal Information relating to website visitors and Services users to improve and develop our Services.

We collect Personal Information to improve the management and administration of our business and maintain our compliance with our internal policies and procedures.

We may conduct surveys and research, test features in development, and analyze the information we have to evaluate and improve our Services, develop new features, and conduct audits and troubleshooting activities.

We process this information based on our legitimate interests, contractual necessity, and other lawful bases as applicable.

4.3 Maintain a Safe and Secure Environment

We may use your information to detect and prevent fraud, abuse, and security incidents in the following ways;

We process this information to maintain a secure environment, comply with legal and regulatory obligations, protect the Services, and support customer compliance obligations

Personal Information may be shared with your associates and other third parties upon your request or as necessary to provide the Services. It is your responsibility to maintain relevant agreements and ensure data is guarded appropriately by the receiving party.

We reasonably attempt to ensure that we never intentionally disclose any of your Personal Information, to any third party without having received your permission, except as provided for herein or otherwise as permitted or required under law.

We may share your Personal Information with our affiliates, subsidiaries, service providers, and other processors or subcontractors that support the Services, such as hosting, infrastructure, support, security, communications, analytics, and maintenance providers, subject to appropriate contractual and security safeguards.

We may also transfer your information, including Personal Information, in connection with a corporate merger, consolidation, the sale of related assets or corporate division or other fundamental corporate changes. Furthermore, information about you may also be released in order to comply with any valid legal inquiry or process such as a search warrant, subpoena, statute or court order. We will also release specific information in special cases, such as if you use the Services to perform an unlawful act or omission or take any act or omission that may damage Formidable, its property and goodwill, or if there is an attempted breach of the security of the Services or a physical or property threat to you or others.

Personal Information may be processed in jurisdictions other than the jurisdiction in which it was originally collected. Where Formidable transfers Personal Information across borders, it will do so subject to applicable legal requirements and appropriate safeguards, including contractual protections where required. You may contact us for additional information regarding the safeguards applicable to a specific transfer scenario.

Depending on your relationship with Formidable, the type of information involved, and applicable law, you may have rights in relation to your Personal Information, which may include the right to request access to personal information, request correction of inaccurate information, request deletion where applicable, object to or restrict certain processing, and request data portability where applicable.

Where Formidable acts as the controller of your personal information, you may submit requests directly to privacy@formidable.care. Note that, in some cases, exercising your rights may limit your access to the Services or parts of them.

Where Formidable processes data behalf of a healthcare customer, the relevant customer is the primary party responsible for responding to requests from patients and other data subjects. In those cases, requests should generally be directed to the relevant healthcare customer. Formidable will assist that customer as required by applicable law and contractual obligations in responding to such requests.

We may use "cookies" and/or other technologies or files (collectively, "cookies") to identify how users make use of our Services. This aggregated tracking information may be used to help us improve and enhance the experience using the Services for all of our users. In addition, cookies are used for adjusting the Services to your personal preferences. Cookies contain information such as the pages you visited, the length of time you stayed on the Services, the location from which you accessed the Services and more. If you would prefer not to have cookies stored on your Device, you may modify your browser settings to reject most cookies, or manually remove cookies that have been placed on your Device. However, by rejecting the cookies, you may be unable to fully access the offerings on our Services.

You may opt out of receiving marketing communications from us by following the instructions in those communications or by contacting us at privacy@formidable.care. Please note that we may still send you transactional, service-related, security, or legally required communications. Where Formidable processes data on behalf of customers, deletion, restriction, or other requests relating to such data may be subject to applicable law, customer instructions, audit requirements, patient safety considerations, and legal retention obligations.

We deploy industry standard, or better measures to ensure alignment with relevant Privacy Protection Regulations and the security, confidentiality, integrity and availability of Personal Information we process. We maintain physical, technical and administrative safeguards, and test and update these periodically. These safeguards include measures designed to restrict access to Personal Information and customer health data on a need-to-know basis and maintain auditability. In the event of a security incident or breach affecting Personal Information, Formidable will take reasonable steps to contain, investigate, and mitigate the incident including notifications to affected customers, individuals, and regulators as required by applicable law within legally mandated timeframes. Although we work to protect Personal Information, no security system is perfect, and we cannot guarantee absolute security in all circumstances.

We retain information only as long as necessary to fulfill the purposes for which it was collected, including to provide our Services, comply with legal obligations, enforce agreements, and maintain business records. Retention periods may vary depending on the type of information and the context in which it is processed. When retention is no longer required, we will delete, anonymize, or securely dispose of the relevant information in accordance with applicable law and our retention practices.

Our Services are not intended for children under the age of 18. We do not, knowingly or intentionally, collect information from children who are under 18 years of age. However, Personal information about individuals that are children may be processed by Formidable, subject to the conditions set forth in section 3(d) to this Privacy Policy.

If you have any questions regarding this Privacy Policy or the practices described above, you are always welcome to contact us at privacy@formidable.care

We reserve the right to revise, amend, or modify this Privacy Policy at any time. When changing the policy, we will update this posting accordingly. Please review this Privacy Policy often so that you will remain updated regarding our current policies.

This Privacy Policy and any claim or dispute arising out of or relating to it will be governed by the laws of the State of New York, USA, without regard to its conflict of laws rules. Any such claim or dispute shall be brought exclusively in the competent courts of the State of New York, USA. Formidable may choose that the laws and/or courts of the country where the relevant Services are provided or operated will apply instead, if Formidable considers this more appropriate for the relevant services or legal requirements. Formidable may also seek injunctive or other equitable relief in any jurisdiction where its rights may be threatened, and judgment will be enforceable in any jurisdiction as permitted by law.