Need Assistance?

Our team is here to answer questions and find solutions.

Contact Us
Workers' CompensationAdvocacy 24/7Virtual CareCase ManagementBill ReviewPreferred Provider NetworkPharmacy Benefit ManagementAncillary Care SolutionsMedicare Services
Liability ManagementAuto LiabilityGeneral Liability
Disability Management
Alternative Risk Solutions
Innovating for More Agile, More Accurate Risk Management

Learn More
CareMC Edge
Work Faster, Smarter with the Edge.
CogencyIQ
See the big picture and the path forward.
Are You Truly Getting the Value of Predictive Analytics?

Read More
Case Studies
Read customer and clinical case studies to see how we deliver significant savings.
White Papers
Explore industry thought leadership on how CorVel’s solutions enable better outcomes.
.compInsights
Learn about the latest industry topics and issues.
Videos
Check out educational videos designed to help you better understand risk management.
Blog
Get the latest insights on everything from claims management to company culture.
Business Insurance Names CorVel’s CogencyIQ an Innovation of the Year

Read More
About
Trusted risk solutions partner for over 30 years.
Executive Team
Taking care of people & businesses.
Careers
Join our growing team and make an impact.
News & Press
CorVel is an industry leader in workers' compensation solutions.
Investors
On Nasdaq Since 1991
Need Assistance?

Our team is ready to answer any questions and help you find the right solutions.

Contact Us
Find a Provider
Our proprietary PPO network is comprised of more than 1.2 million providers to offer our partners local insight with national coverage.
Find a Pharmacy
Our pharmacy program provides access to our national pharmacy network of more than 67,000 pharmacies.
Request for Service
Our team is ready to answer any questions and help you find the right solutions.
Need Assistance?

Our team is here to answer questions and find solutions.

Contact Us
Workers' CompensationAdvocacy 24/7Virtual CareCase ManagementBill ReviewPreferred Provider NetworkPharmacy Benefit ManagementAncillary Care SolutionsMedicare Services
Liability ManagementAuto LiabilityGeneral Liability
Disability Management
Alternative Risk Solutions
Innovating for More Agile, More Accurate Risk Management

Learn More
CareMC Edge
Work Faster, Smarter with the Edge.
CogencyIQ
See the big picture and the path forward.
Are You Truly Getting the Value of Predictive Analytics?

Read More
Case Studies
Read customer and clinical case studies to see how we deliver significant savings.
White Papers
Explore industry thought leadership on how CorVel’s solutions enable better outcomes.
.compInsights
Learn about the latest industry topics and issues.
Videos
Check out educational videos designed to help you better understand risk management.
Blog
Get the latest insights on everything from claims management to company culture.
Business Insurance Names CorVel’s CogencyIQ an Innovation of the Year

Read More
About
Trusted risk solutions partner for over 30 years.
Executive Team
Taking care of people & businesses.
Careers
Join our growing team and make an impact.
News & Press
CorVel is an industry leader in workers' compensation solutions.
Investors
On Nasdaq Since 1991
Need Assistance?

Our team is ready to answer any questions and help you find the right solutions.

Contact Us
Find a Provider
Our proprietary PPO network is comprised of more than 1.2 million providers to offer our partners local insight with national coverage.
Find a Pharmacy
Our pharmacy program provides access to our national pharmacy network of more than 67,000 pharmacies.
Request for Service
Our team is ready to answer any questions and help you find the right solutions.
Provider PortalCareersCareMC EdgeInvestors
Find a Provider
Provider PortalCareersCareMC EdgeInvestors
Request Service
Provider PortalCareersCareMC EdgeInvestors
Contact Us

Privacy Policy

Last Modified: March 6, 2023

CorVel Privacy Policy

CorVel Corporation and its subsidiaries CorVel Enterprise Comp., Inc., CorVel Enterprise Comp, Inc. of Canada and CorVel Healthcare Corporation (collectively, “CorVel”, “us,” “we” or “our”) has created this privacy policy (“Policy”) in order to comprehensively inform individuals about our privacy practices and to demonstrate our firm commitment to privacy. This Policy describes how we collect, use, disclose, transfer, store, retain or otherwise process your personal information in the course of performing our business and operational activities, which includes the administration of the below web domains (collectively, the “Website”) and through our mobile software applications (collectively, the “App”) (our services, Website and App together, our “Services”).

Web domains:

corvel.com
ppolookup.corvel.com
caremc.com

Mobile applications:

MyCare (iOS)

MyCare (Android)

When we refer to “you” or “your,” we mean the person about whom we collect personal information or data. If the person accessing the Website or App does so on behalf of, or for the purposes of, another person, including a business or other organization, “you” or “your” also means that other person, including a business organization, if applicable.

In the course of providing our Services, we may process personal information of individuals, as will be described in this Policy. This may include personal information related to the claims that we process for our customers, that we collect about you when you visit our Website or use our App, or your business contact information if we provide our Services to a company that you work with, or if you are a sole proprietorship and you engage with our Services.

Please read this Policy carefully. Our Privacy Policy Includes:

  1. General Disclosures
  2. What Information We Collect And Disclose And For What Purposes
    • When You Visit Our Website Or Use Our App
    • When We Provide Our Managed Care Services Or Administer A Workers’ Compensation, Liability Or Automobile Insurance Claim Related To You
    • If You Are A Medical Provider Associated With One Of Our Provider Networks
    • If You Are An Employee Of One Of Our Customers, Vendors Or Other Entity Who Is Involved In Our Relationship With Your Employer
    • When You Interact With CorVel’s Social Media
  3. Personal Information Relating To Children
  4. How Long We Retain Your Information
  5. Marketing And Promotional Communications
  6. Links To Other Sites
  7. Security
  8. U.S. Data Subject Rights
  9. Changes To This Privacy Policy
  10. Contact Us

 

This Policy is supplemented by our:

International Privacy Policy

SMS Texting Policy

Cookies Policy

1. General Disclosures

Our data centers, Website and App are hosted in the United States. If you are visiting this Website or using the App from outside of the United States, please note that by providing us your information it is being stored or processed in the United States. If you are outside the United States and do not wish to allow the collection and storage of your personal information within the United States, you should not use this Website or the App and you should opt-out of the collection of cookies by following the guidelines in our section titled How To Restrict Cookies. For more information about how we utilize cookies, view our Cookies Policy.

This Policy sets forth our data policies and practices for the United States. If you are outside of the United States, please also review the provisions of our International Privacy Policy. Depending on your country of residence, applicable privacy laws may provide you with a right to additional disclosures as well as special data subject rights with regards to your personal information.

This Policy applies only to CorVel’s Website, App and Services, and not to other companies’ or organizations’ websites, mobile applications and services. We are not responsible for the privacy practices of other businesses or the content of other websites, including any websites that may indicate a special relationship or partnership with us (such as co-branded pages or “in cooperation with” relationships). To ensure protection of your privacy, always review the privacy policy of the companies with whom you engage.

2. What information we collect and disclose and for what purposes

In the course of performing our Services, we collect a variety of different kinds of personal information from a variety of different individuals. What information we collect and the purposes for which it is collected will depend on the context of our activities or the Service that is being performed. Therefore, just because this Policy lists a particular data collection practice does not mean that we have necessarily collected that data from you. Instead, please review the applicable disclosures below to learn about how we may have collected personal information from you depending on how you have interacted with us.

We do not sell your personal information and have not sold your personal information in the past 12 months. We require all service providers to respect the security of your personal information. We do not allow our service providers to sell personal information or to use your personal information for their own purposes. All of our service providers are only permitted to process your personal information in accordance with our instructions and solely for the reasons for which we disclosed it to them.

CorVel provides workers’ compensation, liability and automobile claims and managed care solutions to our customers. Our customers may include the insurance company that holds the policy on your claim or your employer. In the course of providing these Services, we will directly interact with you to collect personal information but we may also collect personal information about you from other sources.

When You Visit Our Website or Use Our App

Categories Collected

The personal information we collect may include:

Sources of Collection

We may collect your personal information from:

Business Purpose of Collection

The purposes of collection include:

Categories of Third Parties to Which Personal Information is Disclosed

We may disclose your personal information to:

Business Purpose of Disclosure

The purposes of disclosure include:

Identifier Information*

 

•  you directly•  facilitating your use of our Website and App

•  enforcing any applicable terms of service or other applicable agreements or policies

•  securing our networks, systems and databases against external threats

 

•  our service providers**

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

 

•  facilitating your use and our provision of the Website

•  Website and App

•  enforcing any applicable terms of service or other applicable agreements or policies

•  preventing attacks and intrusions on our systems

•  securing our networks, systems and databases against external threats

•  conducting audits of our systems, policies and procedures

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

* The personal information we collect may include your internet protocol (IP) address.

**We may disclose your personal information to our security monitoring providers, data analytics providers, database hosting vendors and our auditors.

Geolocation Information†

 

•  you directly•  personalizing and facilitating your use of our Website

•  measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Website

•  our service providers††:

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

 

•  facilitating your use and our provision of the Website

•  measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Website

•  securing our networks, systems and databases against external threats

•  conducting audits of our systems, policies and procedures

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

 

†The information we collect may include your geolocation.

††We may disclose your personal information to our security monitoring providers, data analytics providers, database hosting vendors and our auditors.

Internet or Other Electronic Network Activity Information ‡

 

•  you directly•  maintaining and improving our Website

•  personalizing and facilitating your use of our Website

•  measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Website

•  providing marketing and advertising services

•  our service providers ‡‡

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  facilitating your use and our provision of the Website

•  measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Website

•  engaging in marketing and advertising

•  securing our networks, systems and databases against external threats

•  conducting audits of our systems, policies and procedures

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

‡The information we collect may include your time zone setting, auth0 logs, pages visited, pages viewed, events and page loads, browser plug-in types and versions.

‡‡We may disclose your personal information to our marketing services vendors, security monitoring providers, data analytics providers, database hosting vendors and our auditors.

Device Information⁂

 

•  you directly•  maintaining and improving our Website

•  personalizing and facilitating your use of our Website

•  measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Website

•  our service providers ⁂⁂

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  facilitating your use and our provision of the Website

•  maintaining and improving our Website

•  measuring, tracking and analyzing trends and usage in connection with your use or the performance of our Website

•  securing our networks, systems and databases against external threats

•  conducting audits of our systems, policies and procedures

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

⁂The information we collect may include your operating system and platform and other technology on the devices you use to access the Website.

⁂⁂We may disclose your personal information to our security monitoring providers, data analytics providers, database hosting vendors and our auditors.

Sensitive Personal Information (log-in information)⁒

 

•  you directly•  delivering the information and support you request

•  enable and administer your access to our App

•  our service providers ⁒⁒

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  delivering the information and support you request

•  enable and administer your access to our App

•  securing our networks, systems and databases against external threats

•  conducting audits of our systems, policies and procedures

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

⁒The information we collect may include your App account login username and password.

⁒⁒We may disclose your personal information to our security monitoring providers, database hosting vendors and our auditors.

Further, we may collect personal information from you in the form of cookies. For information regarding how we collect, process and disclose personal information in the context of cookies, view our Cookies Policy.

When We Provide Our Managed Care Services or Administer a Workers’ Compensation, Liability or Automobile Insurance Claim Related to You

Categories Collected

The personal information we collect may include:

Sources of Collection

We may collect your personal information from:

Business Purpose of Collection

The purposes of collection include:

Categories of Third Parties to Which Personal Information is Disclosed

We may disclose your personal information to:

Business Purpose of Disclosure

The purposes of disclosure include:

Identifier Information*•  you directly

•  your medical providers

•  your employer

•  your representatives

•  the insurance company that holds the policy relating to the relevant claim

•  our investigative service providers

•  our claims data, information and underwriting contractors

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  sending you SMS text messages relating to our pharmacy programs or claims that relate to you

•  connecting with you through our telehealth programs and services

•  sending you information as is necessary for the provision of our Services

•  complying with any applicable laws or regulations

•  our service providers**

•  your medical providers

•  to our customers (i.e., your employer or the insurance company that holds the relevant insurance policy)

•  to your employer or insurance company that holds the policy relating to the relevant claim

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

 

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  providing independent medical examinations, nurse review, return to work review or utilization review

•  facilitating medical care and payment of medical claims

•  sending you SMS text messages relating to our pharmacy programs or claims that relate to you

•  connecting with you through our telehealth programs and services

•  sending you information as is necessary for the provision of our Services

•  complying with any applicable laws or regulations

•  providing durable medical equipment

•  administering and responding to disputed claims

•  providing claim adjusting services or related support

•  providing telehealth services and functionality

•  corresponding with you

•  providing bill review and re-pricing services

•  providing utilization and peer review services

•  subcontracting workers’ compensation, auto and liability claims oversight services in Canada

•  providing pharmacy services to claimants

•  providing claim search and comparison services to detect and prevent fraudulent claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

*The information we collect may include your full name, date of birth, gender (including identity and expression), marital status, signature, personal mailing address, personal e-mail address, personal telephone number, business mailing address, business e-mail address, business telephone number and employee ID. For more information about our practices regarding texting your personal telephone number, please review our SMS Texting Policy.

**We may disclose your personal information to our utilization review, peer review and independent medical review providers; medical equipment providers; legal counsel; claim adjusters; telehealth platform vendors; SMS texting vendors; provider network organizations; e-mail services vendors; bill review vendors; subcontractor workers’ compensation, auto and liability claims oversight providers; pharmacy benefit management providers; data imaging and capture vendors; claim fraud prevention vendors; database hosting vendors and auditors.

Medical Insurance Information†•  you directly

•  your medical providers

•  your employer

•  your representatives

•  the insurance company that holds the policy relating to the claim

•  our claims data, information and underwriting contractors

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  complying with any applicable laws or regulations

•  our service providers††

•  your medical providers

•  individuals or entities you authorize

•  to your employer or insurance company that holds the policy relating to the relevant claim

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

 

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  providing independent medical examinations, nurse review, return to work review or utilization review

•  providing durable medical equipment

•  administering and responding to disputed claims

•  receiving claim adjusting services

•  receiving medical guideline and length of life review and guidelines

•  receiving bill review and re-pricing services

•  receiving utilization and peer review services

•  providing pharmacy services to claimants

•  receiving data extraction, imaging and capture services

•  receiving claim search and comparison services to detect and prevent fraudulent claims

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

†The information we collect may include your insurance coverage information, health insurance number, policy/plan information, workers’ compensation claim number, health insurance claim numbers and Medicare beneficiary identifier.

††We may disclose your personal information to our utilization review, peer review and independent medical review providers; medical equipment providers; legal counsel; claims adjusters; settlements and annuities organizations; provider network organizations; bill review vendors; pharmacy benefit management providers; data imaging and capture vendors; claim fraud prevention vendors; database hosting vendors and our auditors.

Audio and Visual Information‡•  you directly

•  your representatives

•  our investigative service providers

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  detecting and prevent fraudulent claims

•  facilitating medical care and payment of medical claims

•  complying with any applicable laws or regulations

•  our service providers‡‡

•  your medical providers

•  individuals or entities you authorize

•  to your employer or insurance company that holds the policy relating to the relevant claim

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  administering and responding to disputed claims

•  receiving claim adjusting services or related support

•  to detect and prevent fraudulent claims

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

‡The information we collect may include images of you, videos of you and recordings of your voice.

‡‡We may disclose your personal information to our legal counsel, claims adjusters, database hosting vendors and our auditors.

Activity Information⁂•  you directly

•  your representatives

•  our investigative service providers

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  detecting and prevent fraudulent claims

•  complying with any applicable laws or regulations

•  our service providers⁂⁂

•  your medical providers

•  individuals or entities you authorize

•  to your employer or insurance company that holds the policy relating to the relevant claim

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  administering and responding to disputed claims

•  receiving claim adjusting services

•  receiving utilization and peer review services

•  detecting and prevent fraudulent claims

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

⁂The information we collect may include your history and past actions, experiences, actions and behavior.

⁂⁂We may disclose your personal information to our legal counsel, claims adjusters, utilization review, peer review and independent medical review providers, database hosting vendors and auditors.

Professional or Employment-Related Information⁒•  you directly

•  your representatives

•  your employer

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  complying with any applicable laws or regulations

•  our service providers⁒⁒

•  your medical providers

•  to your employer or insurance company that holds the policy relating to the relevant claim

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  administering and responding to disputed claims

•  receiving claim adjusting services

•  receiving utilization and peer review services

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

⁒⁒The information we collect may include your employer, job title or role, salary, work history or military and veteran status.

⁒We may disclose your personal information to our legal counsel, claims adjusters, utilization review, peer review and independent medical review providers, database hosting vendors and auditors.

Financial Information§•  you directly

•  your representatives

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  complying with any applicable laws or regulations

•  our service providers••

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  receiving claim adjusting services

•  providing payment and treasury services

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

§The information we collect may include your bank account information and payment card details.

§§We may disclose your personal information to our legal counsel, payment processing vendors, database hosting vendors our auditors.

Inferences⁜•  you directly•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  complying with any applicable laws or regulations

•  our service providers⁜⁜

•  your medical providers

•  individuals or entities you authorize

•  to your employer or insurance company that holds the policy relating to the relevant claim

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

 

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  administering and responding to disputed claims or advising us on legal, regulatory or compliance matters

•  receiving claim adjusting services

•  receiving utilization and peer review services

•  conducting audits of our systems, policies and procedures

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

⁜The information we collect may include your medical trends, psychological trends, physical trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.

⁜⁜We may disclose your personal information to our legal counsel, claims adjusters, utilization review, peer review and independent medical review providers, database hosting vendors and auditors.

Sensitive Personal Information (health information)#•  you directly

•  your medical providers

•  your employer

•  your representatives

•  the insurance company that holds the policy relating to the claim

•  our claims data, information and underwriting service providers

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  complying with any applicable laws or regulations

•  providing rehabilitation tracking and management services to injured claimants

•  our service providers##

•  your medical providers

•  individuals or entities you authorize

•  to your employer or insurance company that holds the policy relating to the relevant claim

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  receiving independent medical examinations, nurse review, return to work review or utilization review

•  receiving claim adjusting services

•  providing durable medical equipment

•  administering and responding to disputed claims

•  receiving medical guideline and length of life review and guidelines

•  receiving bill review and re-pricing services

•  receiving utilization and peer review services

•  providing pharmacy services to claimants

•  receiving data extraction, imaging and capture services

•  receiving claim search and comparison services to detect and prevent fraudulent claims

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

#The information we collect may include your medical conditions, medical treatments, medical diagnoses, medications, physical and mental disabilities, medical, provider and hospital reports, physical characteristics/descriptions, sleep and exercise information and family medical history.

##We may disclose your personal information to our utilization review, peer review and independent medical review providers, medical equipment providers, legal counsel, claims adjusters, settlements and annuities organizations, provider network organizations, bill review vendors, pharmacy benefit management providers, data imaging and capture vendors, claim fraud prevention vendors, database hosting vendors and auditors.

Sensitive Personal Information (identity information)⸸•  you directly

•  your medical providers

•  your employer

•  your representatives

 

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  facilitating medical care and payment of medical claims

•  complying with any applicable laws or regulations

•  our service providers⸸⸸

•  your medical providers

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

 

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  administering and responding to disputed claims

•  receiving claim adjusting services

•  providing payment and treasury services

•  receiving utilization and peer review services

•  providing pharmacy services to claimants

•  receiving claim search and comparison services to detect and prevent fraudulent claims

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

⸸The information we collect may include your Social Security number, driver’s license number, tax identification number and race.

⸸⸸We may disclose your personal information to our legal counsel, claims adjusters, payment processing vendors, utilization review, peer review and independent medical review providers, pharmacy benefit management providers, claim fraud prevention vendors, database hosting vendors and auditors.

If You Are A Medical Provider Associated With One of Our Provider Networks

Categories Collected

The personal information we collect may include:

Sources of Collection

We may collect your personal information from:

Business Purpose of Collection

The purposes of collection include:

Categories of Third Parties to Which Personal Information is Disclosed

We may disclose your personal information to:

Business Purpose of Disclosure

The purposes of disclosure include:

Identifier Information*•  you directly•  vetting and credentialing medical providers

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  complying with any applicable laws or regulations

•  our service providers**

•  individuals or entities you authorize

•  to claimants to whom you provide medical care

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  conducting required checks and credentialing of medical providers in our PPO networks

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

*The information we collect may include your full name, professional license number and signature.

**We may disclose your personal information to our professional credentialing providers, database hosting vendors and auditors.

Professional or Employment-Related Information†•  you directly

•  our credentialing service providers

•  vetting and credentialing medical providers

•  providing CorVel’s workers’ compensation, liability and automobile claims and managed care solutions to our customers

•  complying with any applicable laws or regulations

•  our service providers††

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

 

•  conducting required checks and credentialing of medical providers in our PPO networks

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

†The information we collect may include your resume, work history, accreditations, certifications and information about your current medical practice.

††We may disclose your personal information to our professional credentialing providers, database hosting vendors and auditors.

Education Information⁑•  you directly

•  our credentialing service providers

•  vetting and credentialing medical providers

•  complying with any applicable laws or regulations

•  our service providers⁑⁑

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  conducting required checks and credentialing of medical providers in our PPO networks

•  providing independent medical examinations

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

⁑The information we collect may include your educational background.

⁑⁑We may disclose your personal information to our professional credentialing providers, database hosting vendors and auditors.

Sensitive Personal Information (identity information)⸸

 

•  you directly

 

•  vetting and credentialing medical providers

•  complying with any applicable laws or regulations

•  our service providers⸸⸸

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  conducting required checks and credentialing of medical providers in our PPO networks

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

⸸The information we collect may include your Social Security number and tax identification number.

⸸⸸We may disclose your personal information to our professional credentialing providers, database hosting vendors and our auditors.

If You are an Employee of One of Our Customers, Vendors or Other Entity Who is Involved in Our Relationship With Your Employer

Categories Collected

The personal information we collect may include:

Sources of Collection

We may collect your personal information from:

Business Purpose of Collection

The purposes of collection include:

Categories of Third Parties to Which Personal Information is Disclosed

We may disclose your personal information to:

Business Purpose of Disclosure

The purposes of disclosure include:

Identifier Information*•  you directly

•  your employer

•  administrating and facilitating our relationship with your employer•  our service providers**

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  corresponding with you

•  providing business event planning, provision and operation services

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

•  as part of sale, assignment, merger or other transfer of all or a portion of our organization or assets to other entities

*The information we collect may include your full name, business mailing address, business e-mail address and business telephone number.

We may disclose your personal information to our client event management providers, e-mail services vendor, database hosting vendors and auditors.

When You Interact With CorVel’s Social Media

Categories Collected

The personal information we collect may include:

Sources of Collection

We may collect your personal information from:

Business Purpose of Collection

The purposes of collection include:

Categories of Third Parties to Which Personal Information is Disclosed

We may disclose your personal information to:

Business Purpose of Disclosure

The purposes of disclosure include:

Internet or Other Electronic Network Activity Information*•  social media websites with whom you have engaged•  developing new products and Services

•  measuring, tracking and analyzing trends in connection with our marketing

•  marketing of our Services

•  communicating with you about opportunities, products and services offered by us and select partners

•  our service providers**

•  individuals or entities you authorize

•  governmental authorities

•  our affiliates

•  other entities during a corporate transaction

•  courts, litigants, regulators, arbitrators, administrative bodies or law enforcement for legal purposes

•  developing new products and Services

•  measuring, tracking and analyzing trends in connection with our marketing

•  marketing of our Services

•  communicating with you

•  conducting audits of our systems, policies and procedures

•  as required by law or to resolve, investigate or manage actual or suspected legal claims

*The information we collect may include information about how you interact with our social media content.

**We may disclose your personal information to our data analytics providers, marketing service providers, database hosting vendors and auditors.

Deidentified and Aggregated Information

We may process your personal information into aggregated, anonymized or de-identified form for any purpose. Aggregated, anonymized or de-identified information is information that can no longer reasonably identify a specific individual and is no longer “personal information.” We will only maintain and use this type of information in deidentified form and we will not attempt to reidentify this information, except for the purposes of validating our deidentification process.

3. Personal information relating to children

The Children’s Online Privacy and Protection Act (COPPA) regulates online collection of information from persons under the age of 13. It is our policy to refrain from knowingly collecting or maintaining personal information relating to any person under the age of 13. If you are under the age of 13, please do not supply any personal information through the Website or App. If you are under the age of 13 and have already provided personal information through the Website or App, please have your parent or guardian contact us immediately using the information provided under Contact Us so that we can remove such information from our files. Please delete all CorVel related cookies and restrict further collection of cookies using the methods outlined in the section How to Restrict Cookies in our Cookies Policy.

4. How long we retain your information

We generally retain your information as long as reasonably necessary to provide you the Services or to comply with applicable law and in accordance with our document retention policy. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means and the applicable legal requirements. We may retain copies of information about you and any transactions or Services you have used for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce other applicable agreements or policies or to take any other actions consistent with applicable law.

5. Marketing and promotional communications

You may opt-out of receiving marketing and promotional messages from us, if those messages are powered by us, by following the instructions in those messages. If you decide to opt-out, you will still receive non-promotional communications that are necessary in the performance of our Services.

6. Links to other sites

The Website has links to other websites. Once you link to another site, you are subject to the privacy policy of the new site and its operator. We encourage you to carefully review the privacy policy of each entity to which you provide information.

7. Security

We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We hold information about you at our own premises and with the assistance of service providers. Further public disclosure here of our security measures could aid those who might attempt to circumvent those security measures. If you have additional questions regarding security, please contact us directly using the information provided under Contact Us.

8. U.S. Data subject rights

There are a number of U.S. states that provide specific consumer rights to residents of those jurisdictions regarding personal information. This section of this Policy describes the rights available to those individuals who are entitled to them. For more information, or to request to exercise your data rights, please use the information provided under Contact Us.

Not all individuals about whom we possess information will have access to these rights and we may not be able to provide these rights to everyone due to legal and jurisdictional limitations. We may not be able to comply with your request for a number of reasons, including:

  • you do not live in a state that grants you the specific right that you have requested;
  • the information that you’ve requested is not subject to the regulation that grants you the right to make a request in relation to your personal information;
  • we are prevented or exempted by law, regulation or rule from complying with your request;
  • we do not maintain your personal information in a manner that is connected to your identity;
  • we are not able to comply with your request without incurring disproportionate burden or expense; or
  • if complying with your request conflicts with the integrity of our Services, the ability to administer our Website and App, to administer our business and related relationships or to establish, defend or administer legal claims.

 

If any of the above reasons apply, we will let you know in our response to your request. You may initiate a complaint by sending us a message by following the instructions provided under Contact Us.

Note that we may be required to gather additional information from you in order to process your request. We will only use this information in the context of evaluating and responding to your request. If you fail or refuse to provide the necessary information, we may not be able to process your request.

This section contains the following U.S. state specific disclosures:

  1. California
  2. Nevada
  3. Virginia

A.  CALIFORNIA

The California Consumer Privacy Act (“CCPA”) provides the residents of California with the right to request the data rights as described in this section. For more information, or if you have questions, you can contact us using the information provided under Contact Us.

Once we receive your request to exercise a right, we will confirm receipt and begin to evaluate, and if appropriate, process the request. We may require that you provide additional information to confirm your identity, including providing us with at least two or more pieces of personal information to match against personal information that we currently maintain about you. We reserve the right to reject your request if we are unable to verify your identity to a sufficiently high level of certainty. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by CorVel for our files.

If we reject a request for any reason, we will inform you of the basis of the rejection.

Please note that certain kinds of personal information that is subject to federal law (like health information subject to the Health Insurance Portability and Accountability Act) is not covered by the CCPA even if you are a California resident. We may not be able to provide these CCPA rights to you with regards to this information due to legal and operational restrictions.

Right to Know:  California residents have the right to know what personal information CorVel has collected about them, including the categories of personal information, the categories of sources from which the personal information is collected in the past 12 months, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom CorVel discloses personal information, and the specific pieces of personal information CorVel has collected about them.

The categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for which we collect personal information and the categories of third parties to whom we disclose personal information are found in the general Policy in the section What Information We Collect And Disclose And For What Purposes.

California residents have a right to know if we are “selling” or “sharing” their personal information, what categories of personal information are “sold” or “shared,” and to whom. We do not “sell” or “share” the personal information of California residents, including of those under the age of sixteen, as those terms are defined by California law. Subject to some exceptions, these terms “sell” or “share have the below meanings:

  • “Sell,” “selling,” “sale,” or “sold,” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business a third party for monetary or other valuable consideration.
  • “Share,” “shared,” or “sharing,” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.

 

If you are a California resident and would like to request to know the specific pieces of personal information that CorVel collected, used and disclosed about you in the past 12 months, please contact us using the information provided under Contact Us. You may further request to know the specific pieces of personal information collected by CorVel beyond 12 months into the past, but note that this additional time frame only applies to personal information collected by CorVel after January 1, 2022, and CorVel may have deleted your personal information in accordance with our data retention policy.

To verify any request to know specific pieces of personal information, you may be required to provide identity verification information. Failure to do so could result in CorVel’s inability to comply with your request.

Right to Delete:  California residents have the right to request the deletion of their personal information maintained by CorVel.

California residents have the right to request that CorVel delete the personal information that we maintain about them. We will make every effort to comply with California residents’ requests to delete their personal information, however, certain laws or other legal requirements might prevent some personal information from being deleted. If you are a California resident and would like to request the deletion of your personal information, please contact us using the information provided under Contact Us. To verify any request to delete personal information, you may be required to provide identity verification information. Failure to do so could result in CorVel’s inability to comply with your request.

Right to Correct:  California residents have the right to request that a business correct inaccurate personal information about them.

California residents have the right to request that a business correct inaccurate personal information maintained by the business about them. If you are a California resident and would like to request the correction of your inaccurate personal information, please contact us using the information provided under Contact Us. To verify any request to correct, you may be required to provide identity verification information. Failure to do so could result in CorVel’s inability to comply with your request.

You may be required to provide documentation to support your assertion that your personal information as maintained by CorVel is incorrect. If you fail to provide this documentation, your request may be rejected. We reserve the right to delete your inaccurate personal information instead of correcting it, if permitted by the CCPA.

Right to Non-Discrimination:  California residents have the right to not be discriminated against due to the exercise of their privacy rights under the CCPA.

California residents have the right to be free from discriminatory treatment by CorVel for the exercise of their privacy rights. However, the exercise of certain privacy rights by California residents may make it so that we are no longer able to provide those residents with certain services or communications. For example, if, at the request of a California resident, CorVel deletes all of the California resident’s personal information that it maintains, CorVel will no longer be able to send communications to that resident.

Right to Opt-Out: California residents have the right to opt-out of the “sale” or “sharing” of their personal information.

California residents can request that a business stop “selling” or “sharing” their personal information. As stated above, we do not “sell” or “share” your personal information. Therefore, we do not offer a way to opt-out of “sale” or “share” of personal information and neither do we look for or process any online browser preference or opt-out signals that purport to opt-out of the “selling” or “sharing” of personal information.

Right to Limit Use and Disclosure of Sensitive Personal Information:  California residents have the right to direct a business to limit its use and disclosure of their “sensitive” personal information.

California residents can request that a business limit its use or disclosure of their “sensitive” personal information to that use or disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer, or to those uses or disclosures otherwise authorized by California law in CCPA regulation § 7027(m).

However, we do not use or disclose your “sensitive” personal information for any purpose other than for the specific purposes described under the CCPA regulation § 7027(m) and always in a manner reasonably necessary and proportionate for these permitted purposes. For information on how we use or disclose your “sensitive” personal information, please see the applicable disclosures in the section titled: What Information We Collect From You And For What Purposes.

Right to Make Requests Through an Authorized Agent: California residents can designate an authorized agent to make a request under the CCPA on their behalf.

California residents can designate an authorized agent to make requests under the CCPA on their behalf relating to the residents’ personal information. Only you as a California resident, or a person you have designated in writing as your authorized agent, may make a consumer request related to your personal information.

If you wish to have an authorized agent make a verifiable consumer request on your behalf, they will need to provide us with sufficient written proof that you have designated them as your authorized agent, such as a power of attorney pursuant to California Probate Code sections 4000 to 4465. We will still require you to provide sufficient information to allow us to reasonably verify that you are the person about whom we have collected personal information.

We can deny any request made by a purported authorized agent who does not submit proof that they has been authorized by the California resident to act on the California resident’s behalf. For more information on submitting a request on behalf of a California resident as an authorized agent, you can contact us using the information provided under Contact Us.

Notice of Financial Incentives:  California residents are entitled to certain information about CorVel’s financial incentive programs.

However, CorVel does not offer any programs with a financial incentive, as defined by the CCPA, to consumers.

Do Not Track (“DNT”): DNT is an optional browser setting that allows you to express your preferences regarding tracking across websites. Most modern web browsers give you the option to send a Do Not Track signal to the websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a website should respond to this signal, so we do not take any action in response to this signal. We do not have a mechanism in place to respond to DNT signals. Instead, in addition to publicly available third-party tools, we offer you the choices described in this Privacy Policy to manage the collection and use of information about you.

B.  NEVADA

Nevada law provides Nevada residents the ability to opt-out of the sale of their personal information. However, we do not sell the personal information of Nevada residents as described by Nevada law. CorVel does not disclose your personal information unless the disclosure is (i) to an entity that processes personal information on our behalf as a service provider or (ii) for purposes which are consistent with the reasonable expectations of a consumer considering the context in which we collected it.

C.  VIRGINIA

The Virginia Consumer Data Protection Act (“VCDPA”) provides the residents of Virginia with the right to request the data rights as described in this section. For more information, or if you have questions, you can contact us using the information provided under Contact Us.

Once we receive your request to exercise a data right, we will confirm receipt and begin to evaluate, and if appropriate, process the request. We may require that you provide additional information to confirm your identity, including providing us with at least two or more pieces of personal information to match against personal information about you that we may maintain about you. We reserve the right to reject your request if we are unable to verify your identity to a sufficiently high level of certainty. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by CorVel for our files.

If we reject a request for any reason, we will inform you of the basis for the rejection. If you disagree with our decision to reject your request, you have the right to appeal our refusal within a reasonable period of time. If you wish to appeal, please clearly and plainly describe your basis of disagreement with our decision by responding through the same means by which we communicated our refusal or by submitting your appeal through the information provided under Contact Us. We will review your appeal and either change our decision or reject your appeal, and in either case, we will provide a written explanation of the reason for the decision. This decision will be final. However, you have the right to submit a complaint to the Virginia Attorney General through the means described here.

Please note that certain kinds of personal information that is subject to federal law (like health information subject to the Health Insurance Portability and Accountability Act) is not covered by the VCDPA even if you are a Virginia resident. We may not be able to provide these VCDPA rights to you with regards to this information due to legal and operational restrictions.

Right to Confirmation and Access: Virginia residents have the right to confirm whether or not a business is processing their personal information and to access such personal information.

The general categories of personal information that we collect and disclose about Virginia residents are listed in the general Policy in the section titled: What Information We Collect From You And For What Purposes.

If you are a Virginia resident and would like to request to access the personal information that CorVel collects, uses and discloses about you, please contact us using the information provided under Contact Us.

To authenticate any request to access personal information, you may be required to provide authentication information. Failure to do so could result in CorVel’s inability to comply with your request.

Right to Correct: Virginia residents have the right to request that a business correct inaccurate personal information that the business maintains, taking into account the nature of the personal information and the purposes of the processing of the personal information.

If you are a Virginia resident and would like to request correction of the personal information that we hold about you, please contact us using the information provided under Contact Us. To authenticate any request to correct personal information, you may be required to provide authentication information. Failure to do so could result in CorVel’s inability to comply with your request.

Right to Delete: Virginia residents have the right to request that a business delete the personal information that the business maintains about them.

We will make every effort to comply with Virginia residents’ requests to delete their personal information, however, certain laws or other legal requirements might prevent some personal information from being deleted.

If you are a Virginia resident and would like to request the deletion of your personal information, please contact us using the information provided under Contact Us. To authenticate any request to delete personal information, you will be required to provide the information requested. Failure to do so could result in CorVel’s inability to comply with your request.

Right to Portability: Virginia residents have the right to request to receive their personal information that they have provided to a business in a portable and readily usable format.

Virginia residents have the right to request that they receive the personal information that they have provided to CorVel in a portable and, to the extent technically feasible, readily usable format that allows the resident to transmit the personal information to another entity without hindrance, in cases where CorVel’s processing of personal information is carried out by automated means.

If you are a Virginia resident and would like to request to receive the personal information that you have provided to us in a portable and, to the extent technically feasible, readily usable format, please contact us using the information provided under Contact Us.

Right to Opt-Out of Targeted Advertising: Virginia residents have the right to request to opt out of the processing of personal information by a business for purposes of targeted advertising.

Under Virginia law, “targeted advertising” generally means displaying advertisements where the advertisement is selected based on personal information obtained from your activities over time and across non-CorVel websites or online applications to predict your preferences or interests. However, we do not engage in targeted advertising of Virginia residents, as that term is defined by Virginia law.

Right to Opt-Out of Sale: Virginia residents have the right to request to opt out of the sale of their personal information.

Under Virginia law, “selling” personal information generally means the exchange of personal information for monetary consideration to a third party. However, we do not “sell” the personal information of Virginia residents, as that term is defined by Virginia law.

Right to Opt-Out of Profiling: Virginia residents have the right to request to opt out of any profiling that produce legal or similarly significant effects concerning them.

Under Virginia law, “profiling” generally means any automated processing performed on your personal information to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

However, we do not “profile” Virginia residents, as that term is defined by Virginia law.

9. Changes to this privacy policy

We may amend this Policy at any time by posting revisions on our Website. If we make any material changes in the way we collect or process your personal information, we will notify you by prominently posting notice of the changes on our Website.

 

10. Contact us

To submit questions or to inquire about or submit a request relating to data rights, you can contact us by:

  • Filling-out the Request Form (available on CorVel website) and send it in an e-mail to PrivacyInquiry@CorVel.com
  • Calling us toll-free number at 855-872-6674
  • E-mailing us directly at PrivacyInquiry@CorVel.com

Attention: Privacy Officer

CorVel Corporation

111 SW Fifth Ave., Suite 200[1]

Portland, OR 97204

[1] Address will change to 1800 1st Ave., Suite 600, Portland, OR, 97201 in May 2023

If you have any questions or concerns regarding our Privacy Policy, or if you believe our Privacy Policy or applicable laws relating to the protection of your personal information have not been respected, you may file a complaint with CorVel using the contact information listed above, and we will respond to let you know who will be handling your matter and when you can expect a further response. We may request additional details from you regarding your concerns and may need to engage or consult with other parties in order to investigate and address your issue. We may keep records of your request and any resolution.

International Privacy Policy

The above general Policy still applies to those individuals who reside outside of the United States or who have had personal information collected by CorVel or its agents in a country other than the United States. However, due to various international regulations, those individuals may be entitled to additional disclosures and rights. This International Privacy Policy (the “International Policy”) supplements the above general Policy, but where the provisions of the general Policy and this International Policy cannot be construed consistently, this International Policy will govern.

Please note that by visiting the Website or using the App, your personal information is being stored or processed in the United States where our data center and servers are located and operated. The United States may not have privacy laws that are as strong or comprehensive as the privacy laws in your own country. Your personal information may also be stored in a multi-tenant cloud environment hosted by our service providers.

Depending on your country of residence, you may have data rights as provided by various laws, regulations and codes, which can include the Personal Information Protection and Electronic Documents Act (PIPEDA) (R.S.C., ch. 5 §§ 1-50 (2000)), Alberta’s Personal Information Protection Act (366/2003), British Columbia’s Personal Information Protection Act (S.B.C. 2003, c. 63) and Quebec’s Act Respecting The Protection Of Personal Information In The Private Sector (CQLR P-39.1). An interactive map showing the various privacy and protection laws around the world can be found here.

THIS INTERNATIONAL POLICY APPLIES TO ALL PERSONAL INFORMATION ABOUT YOU THAT WE COLLECT, HOLD, USE AND DISCLOSE, REGARDLESS OF THE WAY IN WHICH WE COLLECT IT (I.E. WHETHER THROUGH THE WEBSITE, THE APP, THE SERVICES OR OTHERWISE).

Our International Policy includes:

  1. Collection Of Personal Information
  2. How We Use Personal Information
  3. The Basis On Which We Process Your Personal Information
  4. Obtaining Consent
  5. Third-Parties
  6. Limitations
  7. Retention Of Personal Information
  8. Access And Rights To Your Personal information
  9. Response Time
  10. Costs
  11. Identifying You In Connection With Requests
  12. Opt-Out And Unsubscribe
  13. Accuracy
  14. Safeguards
  15. Contact Us

1. Collection of personal information

You can find specific details about the personal information that we collect about you in the section titled: What Information We Collect From You And For What Purposes of the general Policy.

Where we are the data controller with regards to the personal information that we process, you may exercise your rights as a data subject, including the right to object to the processing of your personal information when it is processed based on legitimate interests, as described in this International Policy. However, we primarily collect and process your personal information as a processor or service provider on behalf of our customers. This means that we collect, process and disclose your personal information at the direction of our customers. Where we are collecting your personal information on behalf of another entity (i.e., we are not the data controller), we will provide you with the identity of the data controller to the extent we are required to do so by law.

2. How we use personal information

As a general matter, we collect your personal information to perform our Services and administer our Website and App. You can find specific details about the purposes for which we collect personal information about you in the section titled: What Information We Collect From You And For What Purposes of the general Policy.

4. Obtaining consent

Except when otherwise permitted by law or binding regulation, we will obtain the requisite consent from you prior to collecting and, in any case, prior to using or disclosing your personal information for any purpose other than as disclosed in this International Policy. You may provide your consent to us orally, in writing, by electronic communication, through your actions or any other means reasonably capable of conveying your consent. However, your refusal to provide consent for collection (or your withdrawal of previously given consent) or to give your personal information when requested, can have negative consequences. For example, if you do not give consent for CorVel’s collection of cookies, then the Website will not remember your prior log-in information or your preferences. In another example, if you do not provide your personal information when requested we may not be able to provide you with requested materials, disclosures or Services.

5. Third parties

We remain responsible for all personal information communicated to other entities for processing on our behalf. As such, we ensure that other entities that are engaged to provide products or services on our behalf and are provided with personal information are required to observe the intent of this International Policy by having comparable levels of security protection or, when required, by assuring us (through a confidentiality agreement) that they will not use or disclose the personal information for any purpose other than the purpose for which the personal information was communicated. You can find specific details about to whom CorVel discloses your personal information in the section titled When And With Whom Do We Disclose Your Information.

6. Limitations

We only collect the personal information necessary to fulfill the purposes identified to you prior to or at the time of collection, or any other reasonable and legitimate purposes or as required by law.

We do not use or disclose your personal information, except for the purposes for which it was collected, or new purposes to which you have consented, or as required or otherwise permitted by applicable law.

We do not, as a condition of providing the Website, App or performing our Services, or as an administrative or management requirement, require consent to the collection, use or disclosure of personal information beyond what is reasonably required for such purposes, or to comply with our obligations under applicable law or regulation.

7. Retention of personal information

We generally retain your information as long as reasonably necessary to provide you the Services or to comply with applicable law and in accordance with our document retention policy. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means and the applicable legal requirements. We may retain copies of information about you and any transactions or Services you have used for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce other applicable agreements or policies or to take any other actions consistent with applicable law.

8. Access and rights to your personal information

There are a number of data privacy laws that provide specific data subject rights to residents of certain jurisdictions. This section of this International Policy describes the rights available to those individuals who are entitled to them. Not all individuals about whom we possess information will have access to these rights and we may not be able to provide these rights to everyone due to legal and jurisdictional limitations. We may not be able to comply with your request for a number of reasons, including:

  • you do not live in a jurisdictions that grants you the specific right that you have requested;
  • the information that you’ve requested is not subject to the regulation that grants you the right to make a request in relation to your personal information;
  • we are prevented by law, regulation or rule from complying with your request;
  • we are not able to comply with your request without incurring disproportionate burden or expense; or
  • if complying with your request conflicts with the integrity of our services or the ability to administer our business, to administer our business and related relationships or to establish, defend or administer legal claims.

 

If any of the above reasons apply, we will let you know in our response to your request. Note that we may be required to gather additional information from you in order to process your request. We will only use this information in the context of evaluating and responding to your request. If you fail or refuse to provide the necessary information, we may not be able to process your request.

Subject to the exceptions provided by applicable law or regulation, and depending on your country of residence, you may have the following rights regarding your personal information:

  • The right to access the personal information that CorVel maintains or processes about you.
  • The right to withdraw your consent for CorVel’s processing of your personal information, if our processing is based upon your consent.
  • The right to request the correction of inaccurate personal information that CorVel maintains about you.
  • The right to object to CorVel’s processing of your personal information for the purposes of direct marketing.

 

You can request to exercise these rights by using the information provided under Contact Us. Please be as specific as possible in your request so that we can meet the applicable handling timelines.

Finally, you have the right to raise a complaint with CorVel or the appropriate data protection authority of your country of residence if you feel that CorVel’s processing of your personal information violates your individual rights, is not in line with this International Policy or violates the privacy principals, laws or regulations of your country of residence.

  • You can contact CorVel’s privacy officer by using the information provided under Contact Us. We will promptly investigate any complaint and will respond within the timeframes describe in this International Policy.
  • If you are a resident of Canada, you can contact your data protection authority through the information provided in this link.

 

An interactive map showing the various Data Protection Authorities around the world and how to contact them can be found here.

9. Response time

We will make every reasonable effort to respond to your written request not later than 30 days after receipt of such request. We will advise you in writing if we cannot meet your request within this time limit. When applicable, you have the right to make a complaint to the appropriate supervisory authority, as detailed in this International Policy, with respect to this time limit.

10. Costs

We expect to be able to respond to your request without charge as a general matter.  However, where allowed by law, we reserve the right to collect a reasonable charge when you request the transcription, reproduction or transmission of such information. We will notify you, following your request of the appropriate amount that will be charged. You will then have the opportunity to withdraw your request.

11. Identifying you in connection with requests

We may require that you provide to us additional information to identify yourself before we provide information about the existence, use or disclosure of your personal information in our possession. Any such information that you provide to us shall be used only for this purpose.

12. Opt-out and unsubscribe

You may opt-out of receiving marketing and promotional messages from us, if those messages are powered by us, by following the instructions in those messages. If you decide to opt-out, you will still receive non-promotional communications that are necessary to maintain the existing business relationship between you and CorVel, to the extent there is one.

13. Accuracy

We will use reasonable efforts to ensure that your personal information is kept as accurate, complete and up to date as possible. We do not routinely update your personal information in our possession, unless such a process is necessary. In order to help us maintain and ensure that your personal information is accurate and up to date, you must inform us, without delay, of any change in the data that you have provided to us.

You can at any time, challenge the accuracy or completeness of the personal information we have about you, subject to the exceptions provided by applicable law. If you demonstrate that the personal information we have on you is inaccurate or incomplete, we will amend the personal information as required. Where appropriate, we will transmit the amended data to third parties to whom we have communicated your personal information.

14. Safeguards

We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We hold information about you at our own premises and with the assistance of service providers. Further public disclosure here of our security measures could aid those who might attempt to circumvent those security measures.

15. Contact Us

To submit questions or to inquire about or submit a request relating to data rights, you can contact us by:

  • Filling-out the Request Form (available on CorVel website) and send it in an e-mail to PrivacyInquiry@CorVel.com
  • Calling us toll-free number at 855-872-6674
  • E-mailing us directly at PrivacyInquiry@CorVel.com

 

Attention: Privacy Officer

CorVel Corporation

111 SW Fifth Ave., Suite 200

Portland, OR 97204

Cookies Policy

LAST MODIFIED: March 6, 2023

Effective as of the date listed above, CorVel Enterprise Comp., Inc., CorVel Enterprise Comp, Inc. of Canada and CorVel Healthcare Corporation and all related subsidiaries (“CorVel”, “us,” “we” or “our”) have adopted this Cookies Policy. This Cookies Policy is designed to be read in conjunction our general Privacy Policy. For the purposes of this Cookies Policy, when we say the “Website,” we mean corvel.com, ppolookup.corvel.com and caremc.com.

Like many website operators, CorVel and its analytics vendors use server logs and automated data collection tools, such as browser cookies, pixel tags, scripts and web beacons. These tools are used for analytics purposes to enable us to understand how users interact with the Website.

What is a cookie?

A cookie is a small text file that is placed on your hard drive by a web page server. Cookies contain information that can later be read by a web server in the domain that issued the cookie to you.  There are several types of cookies:

  • Session cookies provide information about how a website is used during a single browser session while a user is visiting a website and usually expire after the browser is closed.
  • Persistent cookies remain on your device between different browser sessions for a set amount of time in order to enable the website to remember user preferences, settings, or actions across other sites. A persistent cookie will remain on a user’s device for a set period of time specified in the cookie.
  • First-party cookies are cookies set by the operator of the website you are visiting.
  • Third-party cookies are cookies set by third parties that are different from the operator website you are visiting.
  • Web beacons, tags and scripts may be used in the Website or in our emails to help us to deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon.

 

Our collection of cookies

We, our marketing partners, affiliates, and analytics or service providers use cookies and other similar technologies. You can see what cookies we place and/or collect and for what purposes by clicking “Show Details” on the cookie banner when you first visit the Website. If you are not presented with a cookie banner, please delete your cookies and re-visit the Website.

We group the cookies that we collect into the following categories based upon their function (note that all types of cookies, as described above, will be found in each category):

Category
Description
Category
Necessary Cookies
Description
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The Website cannot function properly without these cookies.
Category
Preference Cookies
Description
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
Category
Statistics Cookies
Description
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Category
Marketing Cookies
Description
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

Third-party cookies

The Website allows third-parties to place cookies on your Internet-connected device in order to deliver advertisements based upon your web-browsing habits and history. Further, in order to provide interoperability and plug-ins (like YouTube), the Website allows these third-parties to place and collect cookies on your Internet-connected device. However, you can restrict the third-party collection of cookies through the instructions provided in the section How to Restrict Cookies below. Further, you can choose to reject third-party cookies by clicking “Deny” on the cookie banner when you first visit the Website.

Do Not Track

Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking across websites. Most modern web browsers give you the option to send a Do Not Track signal to the websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a website should respond to this signal, so we do not take any action in response to this signal. CorVel does not have a mechanism in place to respond to DNT signals. Instead, in addition to publicly available external tools, we offer you the choices described in this Cookies Policy to manage the collection and use of information about you.

How to Restrict Cookies

You can choose to restrict all non-necessary cookies by clicking “Deny” on the cookie banner when you first visit the Website or choose which specific non-necessary cookies to accept or reject by clicking “Show Details.” If you are not presented with a cookie banner, please delete your cookies and re-visit the Website.

You can also adjust the settings in your browser in order to restrict or block cookies that are set by the Website (or any other website on the Internet). Your browser may include information on how to adjust your settings. Alternatively, you may visit the U.S. Federal Trade Commission’s website www.consumer.ftc.gov to obtain comprehensive general information about cookies and how to adjust the cookie settings on various browsers.

You can control and delete these cookies through your browser settings through the following:

  • Google Chrome
  • Mozilla Firefox
  • Safari
  • Opera
  • Microsoft Internet Explorer
  • Microsoft Edge
  • Safari for iOS (iPhone and iPad)
  • Chrome for Android

 

Or you can also use the following cookie management and disposal tool from Google Analytics by downloading and installing the browser plug-in from the following link: http://tools.google.com/dlpage/gaoptout.

Please be aware that restricting cookies may impact the functionality of the Website. For example, refusing cookies will not allow CorVel to present the Website in your preferred language. Additional general information about cookies, including how to be notified about the placement of new cookies and how to disable cookies, can be found at www.allaboutcookies.org.

Changes to this policy

If there are any material changes to this Policy, you will be notified by the posting of a prominent notice on our Websites prior to the change becoming effective. We encourage you to periodically review this page for the latest information on the Policy. Your continued use of the Websites constitutes your agreement to be bound by such changes to this Policy. Your only remedy, if you do not accept the terms of this Policy, is to discontinue use of and access to the Websites. The content of this Policy is for your general information and use only. These cookies are subject to change without notice. You acknowledge that this information may contain inaccuracies or errors and is subject to change and we expressly exclude liability for any such inaccuracies or errors to the fullest extent permitted by law.

Our Services
  • Workers' Compensation
  • Liability Management
  • Disability Management
Company
  • About
  • Executive Team
  • Careers
  • News & Press
  • Investors
Support
  • Contact Us
  • Find a Provider
  • Find a Pharmacy
  • CA MPN Lookup
  • State Legislation
Our Technology
  • CareMC Edge
  • CogencyIQ
Insights
  • Case Studies
  • White Papers
  • .compInsights
  • Blog
Providers
  • Join Our Network
  • Provider Portal
  • Provider Relations
CorVel. All rights reserved.
  • Privacy Policy
  • Code of ethics
  • Trademarks
  • Accessibility
  • HIPAA
  • URAC