NOTICE OF PRIVACY PRACTICES    (45 CFR 164.520)   Effective date: 06/12/03

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. If you have any questions about this notice please contact the Hann's On Software Privacy Officer at .

Uses and Disclosures: Hann's On Software's customers include healthcare providers such as hospitals and pharmacies. Our customers may store your Protected Health Information (PHI) in software database files that we license to them for use in their practice. The licensed software and databases are stored at the customers' locations, not at Hann's On Software's location.

In most cases, we do not obtain PHI from our customers. However, if we do obtain PHI in any format, it will be destroyed, or returned to our customer, as soon as we have completed our software support duties.

Your Rights: Since we are not a healthcare provider, nor do we store or maintain PHI for our customers, you cannot obtain your healthcare information directly from our company. If you wish to review your healthcare information, please contact your healthcare facility or provider directly. You also have the right to receive a list of certain types of disclosures of your PHI that our customers may have made to us while obtaining our software support services.

Complaints: If you are concerned that one of our customers has violated your privacy rights, you should contact the customer's Privacy Official. If you are concerned that Hann's On Software has violated your privacy rights, you may contact our Privacy Official. If these actions do not satisfy your concerns, you may send a written complaint to the U.S. Department of Health and Social Services. Our Privacy Official can provide you with the appropriate address upon request.

Our Legal Duty: We are required by law to protect the privacy of your protected health information, provide this notice about our information practices, and follow the information practices that are described in this notice. Since Hann's On Software is not a healthcare provider, nor do we store or maintain PHI, we do not seek or require your acknowledgement of receipt of this notice. If we make a significant change in our policies, we will change our Privacy Notice and make the new Notice available to you via our website. You can also request a copy of our notice at any time.

The following is an example of the types of uses and disclosures of your Protected Health Information (PHI) that we are permitted to make. This example is not meant to be exhaustive, but describes the types of uses and disclosures of PHI that are most likely to occur:

Business Associates: Healthcare providers (i.e., our customers) may share your PHI with third party ‘business associates’ (e.g., Hann's On Software) so the third party can perform various activities for the healthcare provider (i.e., healthcare software support). Whenever an arrangement between a healthcare provider and a business associate involves the use or disclosure of your PHI, the healthcare provider will have a written contract with the business associate that contains terms that will protect the privacy of your PHI.

Hann's On Software will not disclose PHI to another party unless a business associate agreement protecting your PHI is also in effect with that party (e.g., another software vendor providing services to the same healthcare provider), and only if such disclosure is reasonably necessary for Hann's On Software to meet its obligations to its customer, the healthcare provider.

Since Hann's On Software is not a healthcare provider, nor do we store or maintain PHI for our customers, it is unlikely that we would be required to disclose PHI, even if it were legal for us to do so. Never-the-less, other uses and disclosures of your PHI will be made only with your written authorization, unless otherwise permitted or required by law as described below. You may revoke this authorization, at any time, in writing.

We may use or disclose your PHI in the following situations without your authorization or opportunity to object: (a) Health Oversight: to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections. (b) Legal Proceedings: in the course of legal proceedings. (c) Compliance: to the Department of Health and Human Services to investigate our compliance. (d) In general: we may use or disclose your PHI as required by law and limited to the relevant requirements of the law.

There are no anticipated circumstances in which you would have an opportunity to object prior to our using or disclosing your PHI.

The following is a statement of your rights with respect to your PHI, and a brief description of how you may exercise these rights.

Since Hann's On Software is not a healthcare provider, nor do we store or maintain PHI for our customers, you do not have the right to obtain, inspect, copy, restrict access to, receive communications about, or amend your PHI, from our company. You should contact your healthcare provider (e.g., the hospital, pharmacy, etc.) to exercise such rights.

You have the right to receive an accounting of certain disclosures of your PHI that your healthcare provider, Hann's On Software, or any of their business associates, may have made. This right applies to disclosures for purposes other than treatment, payment or healthcare operations. You have the right to receive specific information regarding these disclosures. The right to receive this information is subject to certain exceptions, restrictions and limitations.

You have the right to obtain a paper copy of our Notice of Privacy Practices and/or your healthcare provider's Notice of Privacy Practices, upon request, even if you have agreed to accept a notice electronically.

<END of Notice of Privacy Practices>