Website Privacy

May 2, 2023

Methodist Family Health (“MFH”) experienced a data breach on March 4, 2023, that was first detected on March 6, 2023. After a thorough investigation, we have determined that a variety of documents a business associate uses to provide pharmacy services containing protected health information (“PHI”) were accessed and copied without authorization. The types of information involved in the breach included, in some instances, full name, date of birth, date of admission or treatment, home address, account number, diagnosis, service charges, or medication information. Through our internal investigation and our consultations with and examinations by outside cybersecurity and privacy specialists, we have determined that soon after the breach was detected, unauthorized access was terminated, and additional measures were taken to strengthen privacy and data security. We continuously review and update our internal processes and procedures and will implement suggested guidance. Our additional cybersecurity measures are specifically designed to ensure the safety and security of patients’ PHI. We take safeguarding our patients’ PHI very seriously and will continue to strive to fully protect all privacy interests of our clientele.

How to Further Protect Yourself and Your Information

We understand that protecting yourself from any potential harm due to this breach is of vital importance to you, as it is to us. As a precautionary measure, we recommend that you remain vigilant by reviewing your account statements and credit reports closely. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained. You also should promptly report any fraudulent activity or any suspected incidence of identity theft to proper law enforcement authorities, your state attorney general, and/or the Federal Trade Commission.

To file a complaint with the FTC, go to www.ftc.gov/idtheft or call 1-877-ID-THEFT (877-438-4338). Complaints filed with the FTC will be added to the FTC’s Identity Theft Data Clearinghouse, which is a database made available to law enforcement agencies.

You may also obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting https://www.annualcreditreport.com, calling toll-free (877) 322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. You can print a copy of the request form at:
https://www.annualcreditreport.com/cra/requestformfinal.pdf.

You can also elect to purchase a copy of your credit report by contacting one of the three national credit reporting agencies. Contact information for the three national credit reporting agencies for the purpose of requesting a copy of your credit report or for general inquiries is provided below:

Equifax
(800) 685-1111
www.equifax.com
P.O. Box 740241
Atlanta, GA 30374

Experian
(888) 397-3742
www.experian.com
535 Anton Blvd., Suite 100
Costa Mesa, CA 92626

TransUnion
(800) 916-8800
www.transunion.com
P.O. Box 6790
Fullerton, CA 92834

Other Important Information

You may want to put a security freeze on your credit file. A security freeze (also known as a credit freeze) makes it harder for someone to open a new account in your name. It is designed to prevent potential creditors from accessing your credit report without your consent. As a result, using a security freeze may interfere with or delay your ability to apply for a new credit card, wireless phone, or any service that requires a credit check. You must separately place a security freeze on your credit file with each credit reporting agency. To place a security freeze, you may be required to provide the consumer reporting agency with information, which identifies you including your full name, social security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement. There is no charge to request a security freeze or to remove a security freeze.
File Police Report: You have the right to file or obtain a police report if you experience identity fraud. Please note that to file a crime report or incident report with law enforcement for identity theft, you will likely need to provide proof you have been a victim. A police report is often required to dispute fraudulent items. You can report suspected incidents of identity theft to local law enforcement or to the Attorney General. For Arkansas residents, the Attorney General can be contacted at 323 Center Street, Suite 200, Little Rock, Arkansas, 72201 (501) 682-2007 or (800) 482-8982 or oag@ArkansasAG.gov or https://arkansasag.gov/.
Federal Trade Commission and Attorney General: You can further educate yourself regarding identity theft, fraud alerts, security freezes and the steps you can take to protect yourself, by contacting the consumer reporting agencies, the Federal Trade Commission, or the Arkansas Attorney General. The Federal Trade Commission can be reached at 600 Pennsylvania Avenue NW, Washington, DC 20580, www.identitytheft.gov, 1-877-ID-THEFT (1-877-438-4338), TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover their information has been misused to file a complaint with them. You can obtain further information on how to file such a complaint by way of the contact information listed above.

How to Contact MFH:

Our representatives are available to answer any questions or concerns that may arise. For further information and assistance, we have a toll-free number available: 1-866-813-3388—ask for the Chief Privacy Officer.

Last Modified: July 1, 2022

Who we are

Methodist Family Health (“Company” or “We”) is a complete continuum of care for Arkansas children and their families who are abandoned, abused, neglected and struggling with psychiatric, behavioral, emotional and spiritual issues.

This policy describes the types of information we may collect from you or that you may provide when you visit the website https://methodistfamily.org (“Website”) and our practices for collecting, maintaining, protecting, and disclosing information.

Cookies

We may use cookies on this Website. A cookie is a piece of data stored on a site visitor’s hard drive to help us improve your access to our Website and identify repeat visitors to our site. Cookies can also enable us to track and target the interests of our users to enhance the experience on our Website. Usage of a cookie is in no way linked to any personally identifiable information on our Website.

Some of our business partners may use cookies on our Website. However, we have no access to or control over these cookies.

You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain features of our Website. Unless you have adjusted your browser settings to refuse cookies, our system may issue cookies when you direct your browser to our Website.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Third-party use of cookies and other tracking technologies

We use Google Analytics to study the browsing behavior of visitors to this site. Google Analytics is a website analytics service provided by Google Inc. Google Analytics collects information on an anonymous basis, such as the number of visitors to this site, their country, region and city of origin, the type of browser and operating system they are using, the date, time and duration of visits, the pages consulted, and what other websites they visited prior to coming to this site. Our use of Google Analytics includes the Demographics and Interest Reporting component.

You may opt‐out of Google Analytics by installing the Google Analytics opt‐out browser add‐on or by configuring your browser settings to block the use of cookies.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about targeted content or how your information is used, you should contact the responsible provider directly.

Embedded content from other websites

Pages and blog posts on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How we use your information

We use information that we collect about you or that you provide to us, including any personal information:

To present our Website and its contents to you.
To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about changes to our Website or any products or services we offer or provide though it.
To allow you to participate in interactive features on our Website.
In any other way we may describe when you provide the information.
For any other purpose with your consent.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

If you sign up for our email newsletter through this Website, your email address will be shared with our email marketing software.

If you complete an online form, we will collect the information that you voluntarily provided to us.

If you donate funds through our Donate page, Blackbaud processes your donation on our behalf. To protect your credit card information, when used according to manufacturer’s instructions, Blackbaud: Encrypts personal and credit card information during all transactions and sends an automated confirmation email for all transactions.

We may disclose personal information that we collect or that you provide through the use of our Website:

To our subsidiaries and affiliates.
To our contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about our Website users is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.

How long we retain your data

For users that register on our Website, we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

How we keep your information safe

We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

What rights you have over your data

If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Miscellaneous Provisions

All matters relating to the Website and any dispute or claim arising therefrom or related thereto (in each case, including non-contractual disputes or claims), shall be governed by and construed in accordance with the internal laws of the State of Arkansas without giving effect to any choice or conflict of law provision or rule (whether of the State of Arkansas or any other jurisdiction).

Changes to our privacy policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Contact information

To ask questions or comment about this privacy policy and our privacy practices, you may contact our chief privacy officer or chief security officer:

Jennifer Horner, RHIA
Chief Privacy Officer
Methodist Behavioral Hospital
1601 Murphy Drive
Maumelle, AR 72113
501-803-3388 Ext. 8129
Toll free 866-813-3388
jhorner@methodistfamily.org

Keven Burress
Chief Security Officer
Methodist Family Health
1600 Aldersgate Road, Suite 200
Little Rock, AR 72205
501-661-0720, Ext. 7312
Toll free 800-756-3709
kburress@methodistfamily.org

SMS/Texting Privacy Policy

Last Modified: Dec. 14, 2022
Opt Out of All Communications from Methodist Family Health and Methodist Family Health Foundation

Respecting your privacy is an issue of integrity, and, at Methodist Family Health Foundation (sometimes referred to as “MFH Foundation,” “we,” or “us”), integrity is part of who we are. This policy describes the type of information we may collect from you and our practices for collecting, using, maintaining, and disclosing that information.

Information we collect about you

When you register for an event, fill out an online form on www.methodistfamily.org, donate, join a committee, or otherwise communicate with Methodist Family Health, we will frequently ask you to provide contact information. We may also ask you to provide demographic information and information about your needs and preferences as they relate to services offered by MFH and MFH Foundation.
When you donate money or attend a paid event organized by Methodist Family Health Foundation we will ask you to provide billing and payment information.
Methodist Family Health Foundation uses common Internet technologies, such as cookies and Web beacons, to monitor website performance, to keep track of anonymous interactions with the Organization’s Web sites and personalized interaction with some of our emails.

How we use that information

Methodist Family Health Foundation uses information collected to provide you with the services you request.
Methodist Family Health Foundation may use information collected to provide you with additional information about Methodist Family Health Foundation’s services, events and to request your financial support for our work.
Methodist Family Health Foundation may use information collected to improve our Web sites and Services.
Methodist Family Health Foundation may use information provided for communication efforts up to three print mailings per year.
Methodist Family Health Foundation may use information collected and information provided for communications related to service on MFH Foundation committees, service with MFH Foundation governance, or to extend other service, volunteer or donation opportunities to you.
MFH Foundation serves and is accountable to the affiliated Methodist Family Health Organization. MFH Foundation will, upon request from the organization, senior staff, or their designee of these constituent organizations, share information (such as name and contact information) about individuals from those constituent organizations who participate in Methodist Family Health Foundation events, activities, or committees. Methodist Family Health Foundation shares this information to facilitate and support our Continuum of Care. Continuum organizations must agree to use this information concerning participation with Methodist Family Health Foundation only to support the work of that branch of the Continuum of Care. Individuals may opt out of this information sharing (see the section “Right to Opt Out”).
For certain special events organized by Methodist Family Health Foundation, you may be given the opportunity (as part of your event registration) to register with Methodist Family Health Foundation’s communications campaigns that you are attending that event. This will be an opt in opportunity. The purpose is to allow us to contact you about similar upcoming events, communicate impact statements as a result of your support of Methodist Family Health Foundation and to celebrate you as a donor/donor party.
Methodist Family Health Foundation uses third-party services that are critical to our ability to complete our work and to serve the education and fundraising mission. As a result, Methodist Family Health Foundation may share information we have collected about you with companies and vendors that provide services that facilitate Methodist Family Health Foundation in accomplishing its work. These companies do not sell, rent, or trade personally identifiable information with third parties. They do not use information provided by Methodist Family Health Foundation for their promotional purposes or for any purpose other than to aid Methodist Family Health Foundation in accomplishing its work. While this is not an exhaustive list, the detailed privacy policies of our most frequently and widely used vendors/services are available here:
Methodist Family Health Foundation shares information on individuals who participate in specific Foundation events and campaigns with other participants of that same event/campaign in the form of a contact list. That information is provided to participants on the condition that it is not shared, not used for bulk communication and that it is not used for organizational or institutional purposes.
Methodist Family Health Foundation may, with your permission, share your personal information publicly on the internet through our website and social media services for recognition and exposure purposes only.
Other than as described above, Methodist Family Health Foundation will not review, share, distribute, or reference for third parties any such personal information except as may be required by law or as is necessary to protect the rights or property of Methodist Family Health and/or our constituents.
Methodist Family Health Foundation does not share, sell, rent, or trade personally identifiable information with third parties for their promotional purposes.
Methodist Family Health and Methodist Family Health Foundation staff and volunteers may access personal information only for the purposes of providing services, conducting statistical analysis to better understand our constituents, requesting financial support, preventing or addressing service or technical problems, in connection with providing technical support or service, or as may be required by law.
(Please see our donor bill of rights).

Communications preferences

If you provide Methodist Family Health Foundation with contact information, you may be asked if you would like to subscribe or unsubscribe from specific types of communications from Methodist Family Health and Methodist Family Health Foundation.
You can also subscribe or update those subscriptions on this website. Methodist Family Health Foundation will make our best effort to honor those preferences.
Periodically Methodist Family Health may give you the opportunity to subscribe to additional Methodist Family Health and Methodist Family Health Foundation communications by sending you a sample of content to which you have not subscribed. These communications will happen no more than three times per year.
Methodist Family Health Foundation may periodically send requests for financial support to all individuals who have shared their contact information with us and who have not otherwise opted out of these communications. If you would prefer not to receive these requests from Methodist Family Health Foundation, you can opt out by emailing foundation@methodistfamily.org.

Right to opt out

You may opt out of all communications from Methodist Family Health and Methodist Family Health Foundation by following the instructions here. You can also mail us a letter or send us an e-mail containing your full name, address, and e-mail address to the address below, specifying that you have elected to opt out of all communication.
You may opt out from having your information shared as part of an event participant list for an individual Methodist Family Health Foundation sponsored event or campaign by selecting the opt out option as part of the registration process for that individual event. Note that this does not opt you out of receiving communications from Methodist Family Health Foundation directly related to your participation in this event or campaign; it is only requesting your personal information not appear in the participant list.
We will update your records as promptly as is practical; however, you may receive communications while we process your request.

Changes to this policy

From time to time, we may use customer information for new, unanticipated uses not previously disclosed in this privacy policy.
If our information practices change, we will post the policy changes here and provide you with the ability to opt out of these new uses.
If you are concerned about how your information is used, you should check this page periodically for updates.
By using the Methodistfamily.org website, Methodist Family Health services, participating in Methodist Family Health Foundation campaigns and events, and/or serving on a Methodist Family Health Foundation committee, you agree to this privacy policy.

Miscellaneous provisions

How to contact us

Questions regarding Methodist Family Health Foundation’s Privacy Statement or information practices should be directed to foundation@methodistfamily.org or by mail:

Methodist Family Health Foundation
1600 Aldersgate Road Ste. 100
Little Rock, AR 72205