We at MST Services, LLC (“MST Services”, “us”, “our”, and/or “we”) respect the privacy of your personal data and are committed to protecting it through our compliance with this Privacy Policy. We have provided this Privacy Policy to explain how we collect, use, share and protect information about the users of our Website. This Privacy Policy is incorporated by reference in the MST Services License Agreement and Standard Contract, which govern your use of our services. The website mstservices.com and related pages are referred to as the “Site.”
By checking the box acknowledging that you have read and agree to this Privacy Policy and providing explicit consent at the time of your registration for your account, and by accessing or using our services, you consent to the collection, transfer, manipulation, storage, disclosure and other uses of Your Information (collectively, "use of your information") as described in this Privacy Policy and our Terms of Service. If you do not, or no longer, agree with or consent to this Privacy Policy and our Terms of Service, you may not access or use our services.
This Privacy Policy will inform you about the types of personal data we collect, the purposes for which we use the data, the ways in which the data is handled and your rights with regard to your personal data. Furthermore, this Privacy Policy is intended to satisfy the obligation of transparency under the EU General Data Protection Regulation ("GDPR") and the laws implementing GDPR.
"Your Information" or "Personal Data" means information about you, which may be of a confidential or sensitive nature and may include personally identifiable information ("PII"). PII means individually identifiable information that would allow us to determine the actual identity of a specific living person, while sensitive data may include information, comments, content and other information that you voluntarily provide.
MST Services collects information about you when you use our Website or access our services, and other online products and services, when you subscribe to our blog, when you register (or try to register) for a training or conference or when you take the training exam, when you email us and through other interactions and communications you have with us. Some sites collect information from Users for quality assurance and training purposes. These sites house recordings of therapy, supervision and consultation audio recordings as well as paperwork for consultation. We recommend that the MST clinical paperwork and recorded audio files used for QA purposes do not contain information that identifies clients or family members by name or location. Users should follow agency and accreditation guidelines.
We may change this Privacy Policy from time to time. If we decide to change this Privacy Policy, we will inform you by posting the revised Privacy Policy on the website. You may be required to accept the revised Privacy Policy terms. Those changes will go into effect on the "Last updated" date shown at the end of this Privacy Policy. By continuing to use the Site or Services, you consent to the revised Privacy Policy. We encourage you to periodically review the Privacy Policy for the latest information on our privacy practices.
Information Provided Directly By You
We collect information you provide directly to us, such as when you request information, create or modify your personal account, request Services, order a subscription to our Services, complete a MST Services form, survey, questionnaire or application, contact customer support, make a purchase, join or enroll for an event or otherwise communicate with us in any manner. This information may include, without limitation: your name, date of birth, e-mail address, physical address, phone number, photograph, or any other Personal Data you choose to provide, including health, clinical and therapeutic data and information.
Information Collected Through Your Use of Our Services
We collect information about your activity on our services, for instance how you use them (e.g., date and time you logged in, features you’ve been using, searches, clicks and pages which have been shown to you, referring webpage address, advertising that you click on) and how you interact with other users and us. Including those other examples set forth above, the following are situations in which you may provide Your Information to us:
We also automatically collect information via the Website through the use of various technologies, including, but not limited to Cookies. We may collect your IP address, browsing behavior and device IDs. This information is used by us in order to enable us to better understand how our Services are being used by visitors and allows us to administer and customize the Services to improve your overall experience.
Information Collected
You are free to elect not to share this information with us. This information is regarded by us as Personally Identifiable Information (“PII”) and as such it will not be shared with any person, company, agency or other entity, for any reason, including, without limitation, a) marketing purposes, b) advertising purposes, c) medical or clinical work and d) to your employer of insurance carrier.
Notwithstanding the foregoing, MST Services may disclose this data to law enforcement in compliance with a valid and legally enforceable subpoena.
Aggregated Data
We may collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data is de-identified or anonymized and does not constitute Personal Data as this data does not directly or indirectly reveal your identity. If we ever combine Aggregated Data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as PII which will only be used in accordance with this Privacy Policy.
Cookies, Log Files and Anonymous Identifiers
When you use our Services through your mobile phone, tablet, computer or other devices, we may collect information regarding and related to your device, such as hardware models and IDs, device type, operating system version, the request type, the content of your request and basic usage information about your use of our Services, such as date and time. In addition, we may collect information regarding application-level events and associate that with your account to provide customer service. We may also collect and store information locally on your device using mechanisms such as browser web storage and application data caches.
Call and SMS Data
If you choose to contact us for any purpose using the call or SMS features of your mobile device, we may collect your name; your contact details; and the content, date, and time of your message as well as our reply and any follow-up action we take in relation to your inquiry. You consent to the receipt, collection, and storage of this information.
Children's Privacy
The mstservices.com site is intended for users who have attained the age of majority where they reside (18 years of age or older in most jurisdictions). Furthermore, we do not knowingly collect PII from persons under the age of 13 in the United States ("U.S."), or under the age of 16 in the European Union ("EU"), the "Protected Age". If you are under the Protected Age, please do not provide us with information of any kind whatsoever. If you have reason to believe that we may have accidentally received information from a child under the Protected Age, please contact us immediately. If we become aware that we have inadvertently received Personal Data from a person under the Protected Age, we will delete such information from our records.
Protective Measures We Use
We protect Your Information using commercially reasonable technical and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. Although we take measures to secure Your Information, no information system can be 100% secure. We cannot guarantee the security of our information storage, nor can we guarantee that the information you supply will not be intercepted while being transmitted to and from us over the Internet including, without limitation, email and text transmissions. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.
The Legal Basis and Reasons for Collecting and Processing Your Personal Data
The data protection laws in certain jurisdictions require companies to tell you about the legal grounds they rely on to use or disclose your Personal Data. To the extent those laws apply, our legal grounds are as follows:
Legitimate Interest: Most often, we handle Personal Data on the ground that it furthers our legitimate interests in commercial activities such as the following:
When you engage in those activities listed in Section 2;
Processing billing and payments;
Administering our website and business; analyzing the use of the website and our Services; assuring the security of our website and Services; maintaining back-ups of our databases; and communicating with you; and Marketing.
We only rely on our or a third party’s legitimate interests to process your Personal Data when those interests are not overridden by your rights and interests.
Legal Compliance: We need to use and disclose Personal Data in certain ways to comply with our legal obligations, for instance to comply with our tax and accounting obligations or to protect our legal rights or the legal rights of others, including you;
Execution of a Contract: We need to process some Personal Data in order to meet contractual obligations to the individual to whom the Personal Data pertains. For instance, we need your Personal Data to provide you with our Services pursuant to our Terms of Service agreement and any subscription for our Services that you order.
Consent: Where required by law, and in some other cases, we handle Personal Data on the basis of consent. For example, we rely on consent to send you newsletters or for the use of certain Cookies.
How We Use Information We Collect
We use information that we collect about you or that you provide to us for the purposes described in this Privacy Policy and when the law allows us to do so.
For example, we use Your Information for the following purposes:
How We Share Information We Collect
We may share the information we collect about you as described in this Privacy Policy or as described at the time of collection or sharing, including in the following circumstances:
Sharing Information With Law Enforcement
MST Services is committed to cooperating with law enforcement while respecting each individual’s right to privacy. If MST Services receives a request for user account information from a government agency investigating criminal activity, we will review the request to be certain that it satisfies all legal requirements before releasing information to the requesting agency.
Furthermore, under 18 U.S.C. §§ 2702(b)(8) and 2702(c)(4) (Voluntary Disclosure Of Customer Communications or Records), MST Services may disclose user account information to law enforcement, without a subpoena, court order, or search warrant, in response to a valid emergency when we believe that doing so is necessary to prevent death or serious physical harm to someone. MST Services will not release more information than it prudently believes is necessary to prevent harm in an emergency situation.
Links to Third-Party Websites
Our Services, as well as the email messages sent with respect to our Services, may contain links or access to websites operated by third parties that are beyond our control. Links or access to third parties from our Services are not an endorsement by us of such third parties, or their websites, applications, products, services, or practices. We are not responsible for the privacy policy, terms and conditions, practices or the content of such third parties. These third parties may send their own Cookies to you and independently collect data.
If you visit or access a third-party Website, application or other property that is linked or accessed from our Services, we encourage you to read any privacy policies and terms and conditions of that third party before providing any personally identifiable information. If you have a question about the terms and conditions, privacy policy, practices or contents of a third party, please contact the third party directly.
Do Not Track Settings
Some web browsers may give you the ability to enable a "do not track" feature that sends signals to the websites you visit, indicating that you do not want your online activities tracked. This is different than blocking or deleting Cookies, as browsers with a "do not track" feature enabled may still accept Cookies. There currently is no accepted standard for how to respond to this signal, and we do not take any action in response to this signal.
International Privacy Practices
In order to provide our products and services to you, we may send and store your Personal Data outside of the country where you reside or are located, including to the United States.
We are committed to protecting the privacy and confidentiality of Personal Data when it is transferred. If you reside or are located within the European Union ("EU") or European Economic Area ("EEA") and such transfers occur, we take appropriate steps to provide the same level of protection for the processing carried out in any such countries as you would have within the EU and EEA.
Personal data relating to individuals in the European Economic Area, the United Kingdom, and Switzerland is governed by Standard Contractual Clauses. https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
By checking the box acknowledging that you have read and agree to this Privacy Policy, and providing explicit consent at the time of your registration for your account, users who reside or are located in countries outside of the United States agree and consent to the transfer to and processing of Personal Data on servers located outside of the country where they reside.
MST Services complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) as set forth by the U.S. Department of Commerce. MST Services has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/
In compliance with the DPF Principles, MST Services commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our DPF policy should first contact MST Services at: info@mstservices.com
In compliance with the EU-U.S. DPF, MST Services commits to cooperate and comply with the advice of the panel established by the EU data protection authorities (DPAs) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF.
MST Services is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) and it is possible, under certain conditions, for an individual to invoke binding arbitration.
Account Information
You may correct your account information at any time by logging into your online account. If you wish to cancel your account, you may do so from within your account or you may email us at ----info@mstservices.com and follow the instruction we will provide to you. Please note that in some cases we may retain certain information about you as required by law, or for legitimate business purposes to the extent permitted by law.
Promotional Information Opt Out
You may opt out of receiving promotional messages from us at any time by following the instructions in those messages sent to you or by contacting us at any time using the Contact Us information at the end of this Privacy Policy. If you opt out, we may still send you non-promotional communications, such as those about your account, about Services you have requested, or our ongoing business relations.
Your Access and Rights to Your Personal Data
Depending on applicable law, you may have certain rights in relation to Personal Data we hold about you. You can exercise any of the following rights by contacting us using any of the methods in the Contact section below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We will consider all requests and provide our response within the time period stated by applicable law. Please note that certain information may be exempt from such requests in some circumstance, which may include if we need to keep processing Your Information for our legitimate interest or to comply with a legal obligation.
We collect and use these categories of Personal Data for our business and commercial purposes described in the “How We Use Information We Collect” section above, including providing and improving our Services, ensuring the safety and security of our Services, and advertising and marketing our business.
Data Storage
MST Services uses third party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run our products. We may hire vendor companies to provide limited services on our behalf, such as providing technical support, hosting data, and to assist us in providing the products and services.
By contractual agreement, those companies must treat users’ information in accordance with this Privacy Policy. MST Services remains liable in cases of onward transfers to third parties under the principles of this policy if the third-party processes such personal information in a manner inconsistent with the principles, unless MST Services proves that it is not responsible for the event giving rise to the damage.
Our Information Retention Policy
Unless you request that we delete certain information, we retain the information we collect for as long as your account is active or as needed to provide you services. Following termination or deactivation of your account, we will retain information for at least 1 year and may retain the information for as long as needed for our business and legal purposes.
Contact Us
If you have any questions or if you would like to contact us about our processing of your Personal Data, including exercising your rights as outlined above, please contact us at info@mstservices.com; 3490 Piedmont Rd NE, Suite 304, Atlanta, GA 30305. When you contact us, we may ask you to verify your identity.
Last updated: August 1, 2023
3490 Piedmont Rd NE, Suite 304
Atlanta, GA 30305