|General Security and Privacy|
|How Default Pages are Constructed|
|Email Security and Spam Prevention|
|AME "Profiling" Forbidden - Advertisements|
|Links to External Sites|
|FAA Statement on Privacy|
|FAA Policy on Release of Name after Accident/Incident|
|FAA Statement on Release of Information|
General Security and Privacy
Your privacy is extremely important to us and is strictly protected at all times. Your email address will never be sold or traded to third parties. Security is guaranteed for all e-commerce conducted on your FlightPhysical.com web site. We pay thousands of dollars to lease today's latest secure servers and security software to insure your pilot's online payment information, credit card numbers and check routing numbers are safe. We continually upgrade security systems to comply with or exceed ever changing e-commerce security guidelines. We contract to an external processing service experienced in e-commerce. FlightPhysical.com leases lines from CardService West®, and uses strong 128 bit Secure Socket Layer encryption technology to protect all transactions. All AMEs benefit from the economies of scale associated with our collective arrangement.
How Default Pages are Constructed
To build our Internet Directory, FlightPhysical.com uses publically available data from the FAA's directory of Aeromedical Examiners to build default web sites. Even though this data is a matter of public record, we still take measures to prevent widespread, unauthorized release of name, address and phone number information. For example, our search interface only releases limited subsets of the database at a time.
AME social security numbers and Pilot Certificate numbers reside only in the FAA database and are not stored on the flightphysical.com server and can not be extracted from us by any means. We no longer collect pilot certificate numbers for processing pilot exam payments. First two digits of AME numbers are used to modestly enhance security at initial registration.
Email Security and Spam Prevention
Email is very prone to abuse (spam). Your accounts are guarded to protect your privacy. Your office's email addresses are hidden behind multiple layers of hacker resistant security systems. Email addresses will only be used by us to communicate with you and will not be sold or given to any outside party without your express permission. Many AMEs desire to publicize their email addresses for the benefit of their online pilots and patients. That is their individual choice, after all, most AMEs are trying to get more publicity, not hide from potential clients.
Even when AMEs choose to post email addresses on his/her AME webpage, the AME's actual "POP" email address is protected by an extra layer of security. For your protection, we only release our own email addresses through your web sites. We will only post your FlightMD.com or FlightPhysical.com email alias (forwarding address), then behind the scenes the messages are directeed to your preferred destination account. This deters hackers and email spam-list builders.
To summarize, the posted email address is your flightphysical.com address which forwards to your actual business email address (POP account assigned by your ISP or other provider). This has the tremendous benefit of allowing you to pass out a permanent address to your pilots (ie. email@example.com) which can be redirected anytime through us. Even if your ISP or primary email account changes, your pilots and patients need not update their email address books.
As you gain experience as a web-based practice, you will find numerous other advantages to this forwarding strategy, including email permanence, and spam protection. We recommend separate office and home email addresses, and if you are getting too much email through your web site, you can always change or drop your flightphysical.com email address and retain full use of your ISP-assigned email address. You can also revert back to a purely phone-based scheduling process at anytime (this is the default/starting arrangement for all AMEs). If you choose to use one of our free email accounts (firstname.lastname@example.org) then you will be free to have incoming mail forwarded anywhere that you see fit and redirect the forwarding destination at any time.
We Advertise but do not Endorse or Engage in "Profiling"
We will not obtain personally identifying information about you when you visit our site unless you choose to provide us with such information. If you send us email or fill out online forms (AME Site Modification or Registration) to update your site or ask questions pertaining to business with FlightPhysical.com, we would use that information per your intent--solely to update your personal web site or respond to your message. We will not share the non-public information you give us with another party unless your inquiry relates to that party, or as otherwise required by law. We do not create individual profiles with the information you provide, nor do we give it away or sell any AME-provided information. All practice information that you choose to provide through email, phone, fax, or online submission via our Online AME Site Modification Form will be published on your private web page only.
We use a third-party advertising company (Google) to serve ads when you visit our Web site. This company may use information (excluding your name, address email address or telephone number) about your visits to this and other Web sites in order to provide advertisements about goods and services of interest to you. If you want more information, including instructions on how to opt out of all online advertising, please visit the Network Advertising Initiative.
Links to External Sites
FAA Statement on Privacy
A. Within the FAA, access to an individual's medical information is strictly on a "need to know" basis. The safeguards of the Privacy Act apply to the application for airman medical certification and to other medical files in the FAA's possession. The FAA does not release medical information without an order from a court of competent jurisdiction, written permission from the individual to whom it applies, or, with the individual's knowledge, during litigation of matters related to certification. The FAA does, however, on request, disclose the fact that an individual holds an airman medical certificate and its class, and it may provide medical information regarding a pilot involved in an accident to the NTSB (or to a physician of the appropriate medical discipline who is retained by the NTSB for use in aircraft accident investigation).
The AME, as a representative of the FAA, should treat the applicant's medical certification information in accordance with the requirements of the Privacy Act. Therefore, information should not be released without the written consent of the applicant or an order from a court of competent jurisdiction. In order to ensure that release of information is proper, whenever a court order or subpoena is received by the AME, the appropriate RFS, or the AMCD, should be contacted. Similarly, unless the applicant's written consent for release is of a routine nature; e.g., accompanying a standard insurance company request, advice should be sought from the FAA before releasing any information. In all cases, copies of all released information should be retained.
B. Health Insurance Portability and Accountability Act of 1996 (HIPAA) and Examiner's activities for the FAA. This Act provides specific patient protections and depending on an AME's activation and practice patterns, some may have to comply with additional requirements.
FAA Statement on Release of Information
Except in compliance with an order of a court of competent jurisdiction, or upon an applicant's written request, Examiners will not divulge or release copies of any reports prepared in connection with the examination to anyone other than the applicant or the FAA. A copy of the examination may be released to the applicant upon request. Upon receipt of a court subpoena or order, the AME shall notify the appropriate RFS. Other requests for FAA-archived medical information will be referred to: