At Excellus BlueCross BlueShield, we know how important your privacy is to you. Whether you are a current customer or just visiting our Web site, we are committed to protecting the personal information you provide just as we are committed to protecting your personal information when you provide it to us over the phone, in person or through the mail.

Because we value your relationship with us, it is important that you understand our privacy policy for this Web site. We recognize and respect your desire for privacy when it comes to your personal information and health care affairs. We are committed to protecting online information according to applicable laws, regulations and accreditation standards and practices, and we continue to evaluate new administrative, technical and physical safeguards for protecting your information.

The purpose of this policy is to inform you of our information gathering and dissemination practices for this Web site, as well as handling of various situations related to privacy and confidentiality, including those involving requests for health information about persons covered under our benefit plans.

Privacy Practice

1. Collection of Personally Identifiable Information - Excellus may collect the e-mail addresses of visitors that communicate with Excellus BlueCross BlueShield via e-mail; information provided by the visitor in online forums, registration forms, surveys, e-mail messages, and other online avenues (including demographic and personal profile data); and visitor-specific information about the pages on this site that our visitors access.
   
   
2. Collection of Non-Personally Identifiable Information - Excellus may collect the home server domain names, search engine used, Web browser, date and time of the visit, and aggregate information about the pages on this site that our visitors access.
   
   
3. How We Use the Information - Personally Identifiable Information collected when you visit this Web site will not be shared with or otherwise disclosed to anyone outside the Excellus BlueCross BlueShield family of companies without the consent of the person(s) authorized to permit us to do so, unless we are required to disclose the information by law, regulation or court order. Personally Identifiable Information you provide to Excellus BlueCross BlueShield via this web site will only be used for the express purpose of your disclosure to us, unless as otherwise described herein.
   
   Non-Personally Identifiable Information collected when you use this Web site may be used for internal review purposes in the aggregate, including measuring and monitoring the use of our Web Site, diagnosing problems with our server, and administering our Web site.
   
   
4. General Non-Confidentiality of Information Transmitted Via the Internet - Excellus BlueCross BlueShield has implemented security features to help prevent the unauthorized release of or access to personal information that has been received via this Web site. Please be advised, however, that the confidentiality of any communication, information or other material transmitted to or from Excellus BlueCross BlueShield via this site or e-mail cannot be guaranteed. Accordingly, Excellus BlueCross BlueShield is not responsible for the security or confidentiality of information being transmitted via the Internet, the World Wide Web or other global computer networks.
   
   
5. Excellus's Right to Contact User - Excellus BlueCross BlueShield may contact site visitors who provide Excellus BlueCross BlueShield personally identifiable information regarding account status and changes to the subscriber agreement, privacy statement, or any other policies or agreements relevant to site visitors.
   
   
6. Excellus's Right to Change Privacy Policy - If we alter our privacy policy, we will post those changes here in a timely manner so you can be aware of changes that may affect you. Any change to this Privacy Policy shall be effective as to any visitor that has accepted the Excellus BlueCross BlueShield Web Site Terms and Conditions before the change was made.
   
   
7. Protecting Children Online - We are committed to protecting the privacy and security of all of our customers, including minors who are enrolled in our insurance plans. Children under the age of 13 can access our Web sites as guests. If they wish to use features on our Web sites, we require that they do so with the permission of their legal guardian. We will not knowingly collect or use any personal information regarding a user under the age of 13 without the consent of a parent or guardian.

Frequently Asked Questions about Our Privacy Policy
Here are some questions and answers to help you understand our privacy policy:

1. What is 'Personally Identifiable Information'?
   It is any information that could be used to identify you. For example, your name, address or identification number.
   
   We collect two types of Personally Identifiable Information about our customers:
   
   

   A. Nonpublic Personal Information - This is information you give us on your enrollment form, claim forms, premium payments and other ways. It includes for example: names, account numbers, e-mail address, type of health care benefits and payment amounts.
   
   B. Protected Health Information - This is information that you or your health care provider sends to us to process your claim. This includes diagnoses and type of services you receive from your health care provider.
   

2. How Does Excellus Inc. use your Personally Identifiable Information?
   We use this information to administer health care benefits and for our health care operations. For example:
   • decide claim payment by asking you and/or your health care provider(s) for necessary information about services, or treatment;
   • work with other insurers to decide coverage;
   • bill for premiums which may include looking at your claim history;
   • answer customer and provider questions about benefits, enrollment and claims;
   • monitor quality of care and service to our customers which may include case management, and
   • perform utilization and cost containment review activities.
     
     
3. Who Has Access To My Personally Identifiable Information?
   Authorized employees at Excellus BlueCross BlueShield may access your information to administer benefits. Each year, all of our employees must sign an agreement to follow our Code of Business Conduct that includes our confidentiality policy.
   
   We may work with other companies to help us conduct our business. We are required by law to sign an agreement with these other companies that prohibits them from using or giving out information for any reason other than the purpose of the contract. For example we may contract with:
   • benefits management companies for paying claims;
   • health care provider groups to assess quality and cost containment;
   • print or mail services for customer communications and surveys;
   • audit or consulting firms for validating the integrity of our processes;
   • state and federal agencies as required by law; and
   • other Blue Cross and Blue Shield plans.
     
     
4. How is my Personally Identifiable Information protected?
   It is our policy to keep all information about you confidential. It is so important to us that we take the following steps:
   • our employees sign an agreement to follow our Code of Business Conduct;
   • we have a privacy oversight committee that reviews our privacy practices;
   • we have a security coordinator to detect and prevent security breaches;
   • all computer systems that contain personal information have security protections; and
   • we check provider offices to ensure that medical records are kept in secure locations.

Questions regarding Excellus's privacy policy may be directed to the Excellus Privacy Officer via postal mail:

Excellus BlueCross BlueShield Privacy Officer
Re: Web Site Privacy Policy
344 South Warren Street
Syracuse, NY 13221

Or follow this link to e-mail our privacy officer.