This Privacy Notice for Mango ACO, LLC (“Mango ACO,” “we,” “us,” or “our”) describes how and why we may access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at info@mangoaco.com.
This summary provides key points from our Privacy Notice. See the full sections below for details.
In short: This Notice covers personal information collected through the Mango ACO website and general business communications. It does not replace HIPAA notices or Business Associate Agreements governing patient/beneficiary data.
This Notice applies to information collected through https://mangoaco.com/ and related business communications with prospective and current participating physicians, practices, and other visitors. It does not govern Protected Health Information (PHI) that Mango ACO or its participating providers process in connection with delivering or coordinating patient care or Medicare Shared Savings Program operations — that data is addressed separately in Section 4 and, where applicable, in a separate HIPAA Notice of Privacy Practices.
In short: We collect personal information that you voluntarily provide to us.
We collect personal information you voluntarily provide when you express interest in Mango ACO, apply to join our ACO network, request a consultation, or otherwise contact us. This may include:
All personal information you provide must be true, complete, and accurate; please notify us of any changes.
In short: Some information — such as your IP address and browser/device characteristics — is collected automatically when you visit our Services, including through Google Tag Manager and related analytics tools.
When you visit the Services, we and our service providers automatically collect certain technical information, including:
The Site uses Google Tag Manager and may use other analytics or advertising technologies described in Section 6.
If you apply for or discuss participation in the Mango ACO network on behalf of a physician practice, we may also collect practice-level and professional information such as National Provider Identifier (NPI), Tax Identification Number (TIN), practice size, and specialty, for purposes of evaluating and administering participation.
In short: We process your information to provide, improve, and administer our Services, evaluate ACO participation, communicate with you, for security and fraud prevention, and to comply with law.
We process personal information for reasons including:
In short: Mango ACO operates as a Medicare Shared Savings Program Accountable Care Organization. In that role, we and our participating providers process claims data and other health information about Medicare beneficiaries under HIPAA and our CMS Participation Agreement. That processing is governed by this section and by separate HIPAA-required notices, not by the general website provisions above.
As an ACO participating in the Medicare Shared Savings Program (MSSP), Mango ACO receives and uses claims data and other health information about Medicare beneficiaries attributed to our network, consistent with the Data Use Agreement we maintain with the Centers for Medicare & Medicaid Services (CMS) and applicable law, including the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations.
Where Mango ACO functions as a HIPAA Business Associate of a participating physician practice, our use and disclosure of Protected Health Information (PHI) is governed by a Business Associate Agreement (BAA) with that practice and by the HIPAA Privacy, Security, and Breach Notification Rules, not by this website Notice.
This includes, where applicable to our operations:
If you are a patient of a physician participating in the Mango ACO network, questions about how your health information is used should generally be directed first to your treating practice, whose own Notice of Privacy Practices governs your PHI. You may also contact Mango ACO using the details in Section 14.
This website does not knowingly collect PHI through website forms. Please do not submit protected health information (such as diagnoses, treatment details, or Medicare Beneficiary Identifiers) through general contact or consultation-request forms on the Site.
In short: We may share information with service providers who perform work on our behalf, with CMS and healthcare partners in connection with our ACO operations, and in other specific situations described below.
Vendors, Consultants, and Other Service Providers. We may share information with third-party vendors and service providers who perform services on our behalf (for example, website hosting, analytics, email delivery, and scheduling tools) and require access to do that work. We enter into contracts designed to require these parties to protect personal information and use it only as we instruct.
Categories of third parties we may share information with include:
We may also share personal information:
We have not sold consumer personal information collected through the website to third parties for monetary consideration. To the extent any use of analytics or advertising cookies is considered a “sale” or “sharing” under applicable state law, see your opt-out rights in Sections 6 and 12.
Text Messaging Opt-In Data. Participating providers may voluntarily opt in to receive care coordination alerts from Mango ACO by text message. Mobile phone numbers and text messaging opt-in and consent data are collected solely to deliver those alerts and maintain consent records, and are not shared with third parties or affiliates for marketing or promotional purposes. Providers may opt out at any time by replying STOP to any message.
In short: We use cookies and similar tracking technologies, including Google Tag Manager and Google Analytics, to operate and improve the Site.
We use cookies and similar technologies (such as tags and pixels) to operate the Site securely, remember preferences, and understand how visitors use the Site. We use Google Tag Manager to deploy analytics and, if enabled, advertising tags.
We may use Google Analytics to analyze use of the Services. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout. For more information about Google's privacy practices, see https://policies.google.com/privacy.
Most browsers let you refuse or delete cookies through browser settings.
In short: We keep personal information only as long as necessary for the purposes in this Notice, unless a longer period is required by law.
We retain personal information for as long as needed to fulfill the purposes described in this Notice, unless a longer retention period is required by law — for example, CMS record-retention requirements applicable to MSSP participation records, or HIPAA's six-year minimum retention period for certain HIPAA-related documentation. When there is no ongoing legitimate need to process personal information, we will delete or anonymize it, or, if that is not possible, securely isolate it until deletion is possible.
In short: We use administrative, technical, and physical security measures designed to protect personal information, including health information processed as part of our ACO operations.
We have implemented technical and organizational security measures designed to protect personal information we process, including safeguards required under the HIPAA Security Rule for PHI. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Transmission of information to and from the Services is at your own risk.
In short: We do not knowingly collect data from or market to children under 18 through this website.
We do not knowingly collect, solicit, or sell personal information from children under 18 years of age through the Site. By using the Services, you represent that you are at least 18, or that you are a parent/guardian consenting on behalf of a minor. If we learn we have collected data from a child under 18 in violation of this Notice, we will take reasonable steps to delete that information. Contact us at info@mangoaco.com if you become aware of such data.
In short: Depending on your state of residence, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain marketing or processing.
Withdrawing Consent. Where we rely on your consent to process personal information, you may withdraw it at any time by contacting us using the details in Section 14. This will not affect the lawfulness of processing before withdrawal.
Opting Out of Marketing. You can unsubscribe from marketing emails at any time using the unsubscribe link in those emails, or by contacting us. We may still send you service-related, non-marketing communications.
If you have questions about your privacy rights, email info@mangoaco.com.
Most browsers include a Do-Not-Track (“DNT”) feature. Because no uniform industry standard for recognizing and responding to DNT signals has been finalized, we do not currently respond to DNT signals. If a standard is adopted that we must follow, we will update this Notice accordingly.
In short: If you are a resident of California, Colorado, Connecticut, and other states with comprehensive privacy laws, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing.
The table below shows categories of personal information collected through the Site in the past twelve (12) months, reflecting Mango ACO's actual data practices rather than un-customized template defaults. This table addresses website-level data only; health/claims information handled under our MSSP ACO role is addressed in Section 4.
We have not sold or shared personal information collected via the Site to third parties for monetary consideration in the preceding twelve (12) months.
To exercise these rights, contact us at info@mangoaco.com, call +1 888-737-1852, or write to the address in Section 14. You may designate an authorized agent to submit a request on your behalf, subject to identity/authority verification. We will verify your identity before acting on a request and may ask for additional information to do so.
In short: Yes — we will update this Notice as necessary to stay compliant with applicable law.
We may update this Privacy Notice from time to time. The updated version will be indicated by a revised “Last updated” date. If we make material changes, we may notify you by prominently posting a notice or directly notifying you. We encourage you to review this Notice periodically.
If you have questions or comments about this Notice, contact us at:
Mango ACO, LLC
255 Giralda Avenue, 5th Floor
Miami, FL 33134
United States
Email: info@mangoaco.com
Phone: +1 888-737-1852
Based on applicable law in your state or country of residence, you may have the right to request access to, correction of, or deletion of the personal information we have collected from you, or to withdraw consent to our processing of it. These rights may be limited in some circumstances by applicable law. To make such a request, contact us using the details in Section 14.
