WorldHealthRecord Privacy Policy - April 18, 2009

Privacy for our customers is a top priority for VRSurgeon, Inc. ("VRSurgeon") and the WorldHealthRecord product line ("WordHealthRecord"). At VRSurgeon, we take extra care in protecting your personal information and confidentiality. We follow HIPAA guidelines for security and privacy and keep up to date with changes made to HIPAA policies. It is important for you to be made completely aware of our Privacy Policy, therefore we are disclosing it to you. Our business decisions and product development focus heavily around personal privacy and security.

Policy Changes:
Our Privacy Policy may change periodically as services and functions are added to our web service. New changes to the Privacy Policy will always be posted on the Privacy Policy web page. Any policy changes which are significantly different to previous Privacy Policies and the manner in which we handle personal information will be noted on this page. These significant changes will not be implemented without individual consent. The date of the latest version of the Privacy Policy will always be posted at the top of the page.

Access To Personal Healthcare Information:
VRSurgeon has implemented technology and security policies, rules, and privacy and confidentiality agreements to protect the personal data that we have under our control from unauthorized access, improper use, alteration, unlawful or accidental destruction, and accidental loss.

When your personal health record is accessed by yourself or your healthcare provider, we require that the Internet browser used to access the application supports a high level of encryption, thus reducing security risks. Our servers use 256 bit secure socket level (SSL) encryption. VRSurgeon uses security protocols and methodology to authenticate users and ensure that they are authorized users and approved for access to your medical record. Each personal healthcare user and healthcare provider is required to have a username and password to access the system. Individual users are required to maintain their own passwords.

Site Ownership & Scope Of Use:
The Privacy Policy of VRSurgeon. and WorldHealthRecord is only applicable when you are within the VRSurgeon or WorldHealthRecord web environment. VRSurgeon will not release any of your personal information to a third party without written consent from you. When written consent is requested from one of our customers, we will outline the scope and limitations of that release.

Healthcare Information & Personal Information:
On our online personal heath record web site, WorldHealthRecord.com, we allow you to post and submit personal health information about yourself. Once you register with WorldHealthRecord, you can begin creating your personal health record. This information will be comprised of information and data you submit and possibly information your physician and/or other medical professionals add to your personal health record.

Physical Security:
VRSurgeon is responsible for the storage and security of your personal information and your personal healthcare information that we obtain directly from you or from your healthcare providers. VRSurgeon will store the this data and routinely back it up in a physically secure storage facility. This information/data will be stored on our database servers at VRSurgeon or by third party hosts who have entered into agreements and observe our security, privacy and legal policies. VRSurgeon's data servers are protected physically in a secure location and through authentication procedures and access control policies

VRSurgeon Employees & Contractors:
All VRSurgeon employees and contractors are required to enter into a nondisclosure agreement, which protects the personal information of our customers. Each employee and contractor is required to observe the security and privacy policies of VRSurgeon at all times. Those employees or contractors who violate these policies are subject to disciplinary action or termination, and/or legal action. Only select VRSurgeon employees and contractors have access to your personal healthcare information. These individuals need full access to all aspects of our WorldHealthRecord application in order to keep the application running at all times.

Obtaining A Copy Of Your Personal Health Record:
You may obtain a copy of your WorldHealthRecord personal health record at any time by printing a copy of it from your account online through a web application at www.WorldHealthRecord.com. The security of the printed copy is up to you. You are responsible for its privacy and security.

Sharing Of Information:
Your personal healthcare information will not be shared with any unauthorized individuals. VRSurgeon may share healthcare information stored about our customers with third party clients or information entities only when that information is stripped of all personal identifiable characteristics and information. This information may be used to study trends, statistics, and/or demographics. Information used in this manner will remain anonymous and will not have any personal information included and cannot be associated with any account, user or individual directly.

Use Of Cookies:
VRSurgeon may use cookies to store information about you on your hard drive. Your browser allows us to store cookies in select folders on your computer's hard drive. Cookies help us keep your experience with VRSurgeon, and the WorldHealthRecord application more user friendly. Cookies also aid us in personalizing your experience by allowing us to remember your preferences and settings. The WorldHealthRecord.com web site may not work efficiently or certain features may not be available if cookies are not allowed by your browser. Please set your browser to accept cookies for the WorldHealthRecord.com domain. We will not store personal account information in the cookies stored by VRSurgeon on your hard drive.

Minimum Age Of Use:
Users must be 18 years old or older in order to register. Personal health records may be created and kept for minors, under 18 years of age, by their legal guardians.

Aggregate Data:
VRSurgeon may collect aggregate data about users of WorldHealthRecord.com for analysis to be used for product development, market analysis and incremental improvements to our services. Aggregate data, stripped of any personal identifying information, may be shared with third parties and internal analysts. Information shared to third parties might include, but are not limited to, some of the following examples: 1.) a healthcare partner may want to know how many individuals are living in a region who suffer from certain conditions; 2.) how many patients are using a certain pharmaceutical product; 3.) what insurance companies have a higher percentage of coverage amongst a certain age group. For example, we may tell a health care partner what percentage of our registered users reside in a particular geographical area. When aggregated health information is provided, this information is gathered from a large selection of users. All the information is made anonymous and is stripped of any personal information. VRSurgeon owns this aggregate information and has the right to sell or transfer it to third parties.

Business Transfers:
VRSurgeon may, in the future, transfer assets or business entities to another company. Transfers will only occur once the other company agrees to and honors the existing Privacy Policy in place with current users and customers. This company will be required to protect privacy of all customers and users as outlined in VRSurgeon's latest Privacy Policy.

Legal Requirements:
We may release account and other personal information when we believe release is required to comply with law. We may release personal health information, including information from a personal heath record, if, in our judgment after review by an attorney, the release is compelled by law or regulation, or if the release is necessary to prevent the death or serious injury of an individual. We may release personal information, including healthcare information, if ordered to do so by a court of law in the United States of America.

Promotions:
VRSurgeon may email promotions or offers to selected customers on behalf of other businesses or third parties. Contact via email is done directly between VRSurgeon and the customer. We will not give third parties your name, address or email address for solicitation purposes. You may contact us directly at info@vrsurgeon.com to opt out of such promotional material.

Marketing & Advertising:
From time to time, you may notice advertisements on the WorldHealthRecord.com web site promoting third party or VRSurgeon products and services. The WorldHealthRecord.com personal health record service is a free service to our customers. In order to keep this a free service, advertisements and promotions need to be a part of the web site.

VRSurgeon may target certain groups of customers for marketing and promotions. For example, if we know certain individuals or groups have diabetes, we may focus advertisements to this group that promotes the use of pharmaceutical products that help patients with diabetes. Another example might be, patients who mention that they have high blood pressure in their personal health record may receive promotional or advertisements about high blood pressure medications.

We use information we collect from our cookies and aggregate data, as well as information provided about you from third parties, to shape our marketing and promotions.

Latest Version:
Please refer back to this page for the latest version of the VRSurgeon, WorldHealthRecord Privacy Policy.