Information from Other Sources.
We may also collect and combine your Personal Information with information from other sources or third parties. To see all the categories of other sources of your Personal Information, please refer to our Appendix Chart.
These other sources include:
- Data providers, who collect and process personal information from consumers, such as data licensors or data brokers.
- Public records or widely available sources, such as government records.
- Health and medical claims data, including diagnosis and procedure codes, prescription treatments, and other related health information. For HCPs only, we collect historical prescribing activity.
- Research partners, such as universities, non-profit organizations, companies, and other relevant organizations, for research and advocacy purposes.
- Service Providers, such as IT, analytics, and advertising service providers and ad networks; we also use vendors to generate leads and create customer profiles.
- Social Networks, such as Meta or Google. You may connect or use your third party network accounts to sign into the Services. This sends your social media account information or content to your account with us. If you use our Services or share information with social media sites, please know that others may read, collect, or use your information. By connecting your Site account, you may link sensitive health interests with your social media profiles in a way that could be used by those platforms.
Information of Healthcare Professionals (HCPs).
We also have advertising Services for our partners who want to reach medical professionals. Depending on how you use the Services, you may directly provide us with your National Provider Identifier (NPI), job title, professional qualifications, certifications and credentials, medical license number, specialty or area of practice, and affiliation with a medical facility or organization.
Combining Professional and Personal Data: We maintain a database of HCPs and may combine that professional information (like your specialty or NPI number) with information about your online activity to show you relevant medical-related ads. This allows us to reach you in both your professional (“white coat”) and personal (“blue jean”) moments.
User Trends Inform HCP Ads: We may analyze anonymized, high-level trends from our patient communities to help optimize the advertising shown to HCPs. For example, if we see a surge of User interest in a new type of treatment, we may use that insight and information from medical claims data to inform marketing campaigns directed at relevant medical specialists. We collect professional information about licensed U.S. HCPs from public sources and third-party data providers. Where required by law or contract, we may also process and share HCP compensation data to facilitate our clients’ compliance with legal obligations, such as the Physician Payments Sunshine Act or Open Payments (42 U.S.C. § 1320a-7h).
Information of Health or Patient Leaders.
If you participate in the Social Health Network, you may provide us with your resume, curriculum vitae, education details, social media channels, or certification information. Our relationship with Health Leaders is governed by a separate agreement. As part of that partnership, we collect their public profile, content, and contact information as part of that partnership, including any data related to our Health Leader Certification Program, our Social Health Network community, and Patient Leadership Council. For more information, please see the Supplemental Terms for the Social Health Network.
How We Use Your Personal Information.
To see how we use your Personal Information, please refer to our Appendix Chart. We (or our service providers acting on your behalf) may use your Personal Information for the following business purposes, or as otherwise described when we collect it:
Provide, Maintain, and Improve the Sites and Services. We use your Personal Information to:
- Provide the Sites and Services.
- Create and manage accounts, User Site profiles, and Site experiences.
- Respond to your communications, contact you if necessary or requested, and send you information about Health Union, our Sites or Services.
- Send you communications such as announcements, updates, security alerts, password resets, support or other administrative messages. Health Union may send communications by sent via email, Site or social media message or notification, text or SMS message, telephone, and/or direct mailing.
- Administer promotions, events, giveaways, and awards, which may include sharing your contact information and address information to fulfill a prize or award.
Research and Development. We use your Personal Information to:
- Operate and test the Services. For example, conducting surveys, market research, managing communications, and analyzing our current Services, products, and promotions.
- Develop, market, sell, or provide the Services, which include providing tailored advertisements on the Services and other websites.
- Send you communications about opportunities to participate in research surveys, panel interviews, paid clinical trial opportunities, and more.
A Note on Our Research and Insights Offerings.
It is important for you to know that the anonymized and aggregated trends from this research also help us build more relevant communities and inform the advertising audiences we create. We will never share your individual, personally identifiable research responses with our advertising partners. Any direct participation in further research with one of our partners will always require a separate and specific invitation that you are free to accept or decline.
A Special Note on Our “In America” Surveys.
Our research, such as the “In America” survey and other projects on our Insights Offerings page, are one of the most important ways we gather insights. Your participation helps us, our partners, and the entire health community better understand the real-world patient experience.
It is important for you to know that the information from these surveys is a direct and primary source of the Zero-Party Data that fuels our ILLUMINÉ™ engine. The data is analyzed to develop the custom advertising programs and audience segments we’ve described above.
While your individual survey responses always remain confidential and are only reported in aggregate, the trends and insights we learn from the survey population are a key part of how we build advertising audiences. For example, if survey trends show that a large portion of a community is dissatisfied with their current treatment, that insight helps us create an advertising segment for people who may be “looking to switch.”
Your participation in these surveys is always voluntary. We also conduct market research on behalf of our clients and customers, which may offer a paid incentive for your time. These research opportunities will be clearly labeled as “on behalf of a sponsor” and will have a separate and specific notice for obtaining your consent.
Security and Legal Compliance. We use your Personal Information to:
- Detect and protect against fraud, errors, or criminal activity.
- Prevent, detect, and investigate security incidents and possibly illegal or prohibited activities.
- Protect the rights, property, and safety of you, Health Union, or another party.
Resolve disputes and respond to claims that a post or other content violates third-party rights.
- Meet our legal obligations and maintain internal organization functions, such as for compliance, tax purposes, or for an audit.
Marketing and Advertising. We Use your Personal Information to:
- Direct Marketing Communications.
We use your Personal Information to send you direct marketing communications via physical or electronic mail. These communications may include news, updates and other relevant information relating to our Services.
You can opt-out of receiving marketing emails by: (1) clicking the unsubscribe link included at the bottom of our marketing communications; (2) emailing us “unsubscribe” at privacy@health-union.com; or (3) updating your communication preferences in your account profile settings.
Please note that even if you opt out of marketing communications, we may continue to send you non-marketing communications or transactional messages, such as those related to your account, transactions, or legal notices.
- Site or Community Notifications.
If you choose to create an account or join the Site community, we use your Personal Information to send you notifications about Site activity. For example, when another User replies to your post or interacts with you on the Site. Site notifications are sent by email and/or received on-site.
To customize your Site or community notification settings, visit the notifications settings section of your User profile. You can also unsubscribe from these Site emails by clicking the unsubscribe link included at the bottom of the email notification or emailing us at helpdesk@health-union.com.
Please note: The following information regarding Interest Based Advertising does not apply to Users located in the European Union (EU) or European Economic Area (EEA). In compliance with EU privacy laws including GDPR, Health Union does not use cookies, beacons or similar tracking technologies for Users we know to be in the EU/EEA.
Interest Based Advertising. We use your Personal and Non-Personal Information to:
- Facilitate and display contextual advertisements from third parties on our Sites and Services.
- Engage in targeted advertising on other websites or mobile applications, even if those websites or mobile applications are owned by third parties.
Interest-based advertising (also known as “personalized,” or “tailored” or “targeted” advertising) uses previously collected data about a person, web browser, or device to create customized advertisements based on inferred or stated preferences and interests. These ads may use User attributes, preferences, interests, or intent linked to or inferred about that User, browser, or device. These advertisements can appear on various websites, applications, or devices.
We may use consumer data obtained from data brokers and marketing vendors to supplement the Personal Information you provided us for marketing and interest based advertising services, data services, and insights offerings, as well as providing aggregated or de-identified patient experience insights through our offerings, including community sponsorships and influencer marketing solutions.
To provide our Services and deliver relevant advertising, we work with a variety of third party partners. This section describes how and why we share Personal Information. To see all the categories of information we share or disclose, please refer to our Appendix Chart.
When the information we collect about you is aggregated, deidentified, or otherwise does not identify you, we may use that Non-Personal Information for any purpose or disclose it to third parties, to the extent permitted by law. In addition, we may share or disclose your Personal Information to the following types of individuals or entities:
- Service Providers: We use third party vendors to help operate our business and provide, maintain, and improve the Sites and Services. These vendors have access to your Personal Information to perform specific tasks on our behalf. These services include i) website hosting and cloud storage, ii) IT and data analytics, iii) system administrators, iv) consent management, and v) payment processors. We also service provider technologies that allow us to provide certain features through our Sites or Services, such as video, podcasts, or chat technologies.
- Individuals or Other Parties with Your Consent: We share your information with other parties that you identify through our Sites or Services, at your direction or request. For example, if you request information about a clinical trial, we will share your Personal Information with the clinical trial sponsor as necessary to facilitate your request.
- Other Users of our Services. If you choose to post content or engage in our Site communities or Social Health Network, forums, social media pages, or in connection with other community-based features.
- Business Partners: Our business partners, which include companies or organizations with whom you already have a relationship or are affiliated, such as pharmaceutical and life science companies.
- Marketing and Advertising Service Providers: We use third party vendors, such as email marketing platforms, customer relationship management providers, Google Analytics, Meta and LinkedIn to i) assist with lead generation, ii) host information relating to customers and business partners and potential customers or business partners, iii) marketing automation, iv) advertisement placement and targeting, and v) marketing campaigns and communications.
- Ad Network Partners: To deliver relevant advertising on other websites, applications, and platforms, we share the audience segments we create with a wide range of third-party advertising and technology partners. While we do not share your name or email address for these purposes without your explicit consent, we do share identifiers (such as a cookie ID, mobile ad ID, or hashed email address) linked to your inferred interests and characteristics. Our network of partners includes the following categories:
- Data Management Platforms (DMPs) and Data On-ramps: Services that help us securely transfer our audience segments to the broader advertising ecosystem.
- Demand-Side Platforms (DSPs) and Ad Exchanges: Technology platforms that advertisers use to purchase and manage ad placements across the internet.
- Social Media Platforms: To deliver interest based advertising and content within their networks.
- Connected TV (CTV), Online Video, and Audio Platforms: To show relevant ads on streaming services and other digital media channels.
- Analytics and Measurement Partners:
- To ensure the accuracy and relevance of the audience segments we create, we may work with specialized data partners to verify our information. This process may involve comparing the information we hold with external data sources, such as de-identified medical claims data, to confirm that our audience segments meet the quality standards required by our advertising partners.
- Analytics partners help us and our clients measure the effectiveness of our advertising campaigns and Services. We also use data analytics to i) perform specific analyses on Site or client customer data, ii) understand traffic and usage patterns, iii) track marketing conversions, iv) optimize our Sites, and v) identify potential new customers or users. We also use business intelligence and visualization platforms to process and visualize our data for internal analysis.
- Affiliates, Related Entities, Investors, and Operational Partners: As stated above, when you interact with a Health Union Site or Service, we make your Personal Information available to each of our business divisions and operating brands or Sites.
- Professional Advisors: We may also share your Personal Information with our professional advisors, which include lawyers, accountants, licensed medical professionals, and other similar professional advisors.
- Buyers or business transferees: Acquiring and other relevant parties (and their advisors) to business transactions (or potential transactions) involving a corporate divestiture, merger, consolidation, change in control, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Health Union or our affiliates (including, in connection with a bankruptcy, reorganization, liquidation or similar proceedings).
- Regulatory and governmental authorities. As necessary to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request for information, or to otherwise protect our rights, we may disclose your Personal Information to regulatory and government authorities, law enforcement agencies, and courts.
- Protection of rights, property, or safety. When we have a good faith belief that access, use, preservation, or disclosure of such Personal Information is reasonably necessary as required or permitted by law, or to protect the rights, property, or safety of Health Union, its clients, Users, or the public. We share your information to enforce, defend, or advance our agreements with you, as well as with our clients and partners.
Please note that in some situations, the technology service providers we use may collect your Personal Information instantly and simultaneously with our collection of the same information.
Non-Personal Information We Share or Disclose.
As stated above, we may aggregate, de-identify, or anonymize your personal information by applicable legal standards and industry best practices.
We may share such Non-Personal Information about your use of our Sites and Services with our advertising and analytics partners, who may combine it with other information that you have previously provided to them. We share or make available Non-Personal Information, including aggregated or anonymized data:
- with analytics, search engines, or other service providers that help us provide, deliver, and improve our Services.
- to report to our affiliates, licensors and service providers, advertising partners, and ad networks about the use of various aspects of the Services.
- with other users or prospective users of the Services; and
- to advertisers and advertising networks and data service providers to create, select, and show relevant advertisements.
We implement industry-standard pseudonymization techniques and only share technical identifiers (such as hashed IDs) with associated de-identified interest categories. We prohibit re-identification attempts and require partners to maintain appropriate security measures. This sharing may be considered a “sale” or “sharing” of Personal Information under certain state privacy laws.
For more details on how we share Non-Personal Information, see our Appendix Chart.
Our Use of Artificial Intelligence (“AI”).
We do not use AI to make automated decisions that produce legal or similarly significant effects concerning you, as defined under applicable privacy laws. We use AI and Machine Learning technologies or tools for productivity purposes, content creation, and to support our operations.
Our AI usage is limited to analyzing aggregated and de-identified data for analyzing aggregated and de-identified data for research, advertising, and operational purposes. For example, we may use these tools to analyze your responses to our “In America” surveys, or insights provided by our Patient Leadership Council, to create our insights offerings. These tools help us identify patterns, trends, and insights for market research purposes. We do not share individual responses. Our insights are not shared with any third parties, except for the study sponsor where otherwise agreed. Our findings and reports are presented on an aggregated or de-identified basis.
Links to Third-Party Sites.
Please be aware that if you click on or interact with an advertisement on our Site, the advertiser may still assume that you meet its target criteria, even though we haven’t shared your Personal Information.
Google Analytics.
We use Google Analytics to analyze the audience of the Services and improve the performance of our Sites and content. For more information on how Google Analytics collects and processes data, please visit the following site: http://www.google.com/policies/privacy/partners/. Google Analytics and our third-party vendors (including Google) may use this information to display relevant ads through remarketing services based on your previous interactions with our Services. Once the visitor leaves the Services, custom advertisements appear on a Google search results page or other web pages. Data collected through “DoubleClick cookies” doesn’t include your Personal Information. By visiting Google’s Ads Settings, set your preferences for how Google advertises to you. http://www.google.com/settings/ads. You can permanently opt out of the Google Analytics Advertising Features by visiting this page: http://tools.google.com/dlpage/gaoptout.
How We Respond to “Do Not Track” Signals.
Our Sites do not currently respond to or support “Do Not Track” browser signals. Some Internet browsers can be configured to send “Do Not Track” signals to websites or services you visit, but these features aren’t uniform across browsers and industry participants disagree on what “Do Not Track” means in this context.
Automated Privacy Control (Global Privacy Control).
We treat a Global Privacy Control (“GPC”) signal as a valid request to opt out of the sale or sharing of your personal information for the browser from which it is sent. To learn more about GPC, visit https://globalprivacycontrol.org/. If you enable GPC, your preferences will only apply to the browser or device you are currently using to interact with our Sites or applications and not to other devices or browsers. If you use a different device or browser, you will need to check that GPC is enabled to ensure your preferences are recognized in connection with the browser or device you’re using.
Digital Advertising Alliance.
Health Union (and some of our third-party advertisers and display networks) take part in the Digital Advertising Alliance’s Self-Regulatory Program for Online Behavioral Advertising and Self-Regulatory Program for Multi-Site Data and allow consumers to opt out of targeted advertising based on web activity tracking. For more information, visit http://www.aboutads.info/choices/. Even if our third party advertisers or display networks participate in the Digital Advertising Alliance’s Self-Regulatory Program for Online Behavioral Advertising or Self-Regulatory Program for Multi-Site Data, and you opt out of targeted advertising based on web activity tracking, you still will receive standard advertisements from us. You will still receive targeted advertisements from third parties. You will likely need to re-click the link and follow the instructions provided if you delete cookies or other similar technology or use a different computer, device, or browser.
Children’s Privacy.
As stated in our Terms of Use, our Services are not intended for children or individuals under 18 years of age. We do not knowingly collect Personal Information from children or individuals under 18 years of age. If we learn that we have inadvertently collected Personal Information from someone under 18, we will promptly delete such information under applicable children’s privacy laws and regulations. Individuals under the age of 18 should only use our Services with the permission and supervision of a parent or guardian. Individuals under 18 should not attempt to provide us with any Personal Information. If you think we have received Personal Information from children or individuals under the age of 18, please contact us immediately at privacy@health-union.com. By registering for an account or submitting any Personal Information to us, you represent and warrant that you are 18 years of age or older.
Security.
While we implement industry-standard technical, administrative, and physical safeguards to protect your Personal Information, no Internet data transmission or storage can ever be guaranteed entirely secure. It may be possible for third parties not under Health Union’s control to intercept or access transmissions or communications. Please protect your data by carefully selecting and protecting your password. Limit access to your computer, device, and browser. Always sign out of your account when finished. FOR MORE DETAILED INFORMATION ON OUR SECURITY PRACTICES, PLEASE VISIT OUR HEALTH UNION TRUST CENTER at https://security.health-union.com/.
Data Retention.
We retain your Personal Information and Sensitive Personal Information for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations , whichever is the longer. In some cases, we retain Personal Information for a longer period. We also keep anonymous or aggregated information that cannot identify you personally. We maintain specific retention schedules for different categories of information and regularly review and delete data that is no longer needed. The criteria used to determine our retention periods include i) to fulfill the purpose for which the information was collected, ii) for as long as you have an account with us or until you submit a data deletion request, and iii) as required by a legal obligation.
Account Deletion.
You may close your Site account/s through your account profile settings. Deleting your account is a permanent action and is separate from requesting a deletion of your Personal Information. Please note that, as stated in our Terms of Use, certain User Content may remain on our Sites in anonymized form even after account deletion; such anonymized content continues to be governed by our Terms of Use. To request deletion of your Personal Information, please submit your request at privacy@health-union.com or via the Privacy Rights Request Form.
Data Transfers.
Health Union is a global business and is headquartered in the United States. We transfer to, store, and process the information we collect in the country or territory where our business partners or service providers are based or have facilities. This could be a location different from your home country. Other countries or territories may not have the same data protection standards as your home country. When we transfer your Personal Information to other countries, we implement appropriate safeguards as required by applicable data protection laws, which may include Standard Contractual Clauses or other legally approved transfer mechanisms. We protect Personal Information that we transfer under this Privacy Notice. We also require our business partners and service providers to adhere to this Privacy Notice and applicable privacy laws through contractual agreements.
Your Privacy Rights.
You may have specific legal rights regarding your Personal Information. These rights are sometimes called the “Right to Do Not Sell or Share My Personal Information,” the “Right to Limit the Use of My Sensitive Personal Information,” and the “Right to Opt Out of Targeted Advertising.” As stated above, Health Union does not engage in automated decision-making or profiling that has a legal or similarly significant effect.
At Health Union, the data we use for these distinct purposes is the same under these consumer privacy laws. Subject to exceptions, you have the right to opt out of interest based advertising in two ways:
1. Opt Out of Cookies and Tracking Technologies for Targeted Advertising
This option only applies to the browser and device from which you submit the request. You may still see personalized advertising on other platforms based on your activity and health interests.
You can opt out of the use of Tracking Technologies by reviewing the “Targeting Cookies” setting in your Cookie Preferences or by enabling the Global Privacy Control on your browser or device.
To exercise your cookie preferences, please use the Cookies Preferences Center button below:
For more information about opting out of targeted digital advertisements, visit the websites of the Digital Advertising Alliance’s YourAdChoices Self-Regulatory Program for Online Behavioral Advertising or the Network Advertising Initiative.
2. To Opt Out of other disclosures that may be considered “selling,” “sharing,” or “targeted advertising,” and are not based on Cookies and Tracking Technologies on this Site, you must complete our privacy rights request form or email us at privacy@health-union.com.
By submitting the privacy rights request form, you will be opted out of the use of other disclosures that may be considered “selling”, “sharing”, or “targeted advertising” and are not based on cookies and similar technologies on this site. You will also be opted out of Targeting Cookies and similar technologies on our Site. Please note that your choice will only apply to your current browser/device.
3. Other Privacy Rights.
You may have – under certain data protection laws – other legal rights when it comes to how we handle your Personal Information. However, these rights aren’t absolute, and in some instances, we may deny your request. We may refuse your request if a legal exception applies. Or if we’re legally required to keep or process your Personal Information in a way incompatible with your request. We’ll let you know if this is the case once we process your request.
- Know and Access. Confirm if we are processing your Personal Information and/or access to specific data;
- Data Portability. Obtain a copy of your Personal Information in a readily usable format that allows you to transmit the data to another entity, where the process is carried out by automated means;
- Correct. Update or correct inaccurate Personal Information that we maintain about you. You may update or correct your Site account information, by selecting “Edit my profile” in your User account;
- Delete. Delete Personal Information we have collected from you, subject to certain exceptions;
- Obtain a List of Third Parties. Receive a list of third parties to whom we have disclosed your Personal Information;
- Appeal. If we deny your privacy rights request, you may request an appeal, and we will respond within 45 days. For some Users, you may have the right to file a complaint with your state Attorney General’s office; and
- No Discrimination. You have the right not to receive discriminatory treatment for exercising any of your privacy rights.
Authorized Agent.
You may designate an authorized agent to submit a request on your behalf. To do so, you must (1) verify your own identity directly with us; and (2) provide the authorized agent with written documentation of their authority to act on your behalf, such as: (a) a power of attorney; (b) sufficient evidence to show that you have provided the authorized agent signed permission to act on your behalf; or (c) other valid proof of authorization as required by applicable state law and directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.
You won’t have to pay a fee to access your Personal Information or exercise your privacy rights. However, as permitted by applicable law, we may charge a reasonable administrative fee if your requests are manifestly unfounded, excessive, or repetitive. We will notify you of any applicable fees before proceeding with your request.
To exercise a Right to “Opt-Out” and other data privacy rights, complete our privacy rights request or email us at privacy@health-union.com.
If there are any conflicts between this section and any other provision of this Privacy Notice and the applicable law of your jurisdiction, the more protective provision shall control the extent of such conflict. If you have questions about this section or whether any of the following rights apply to you, please contact us at privacy@health-union.com.
Our Process for Privacy Rights Requests.
You are not required to create an account with us to submit a verifiable or authenticated consumer request. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
Once you submit your request, we will respond within the timeframe permitted by applicable law. If your request is complex or you’ve made several requests, it may take us longer to complete. We’ll notify you if that happens and keep you updated.
Some privacy requests require verification to confirm that the request originated from you. We typically request additional information from you to confirm your identity, which may include, but is not limited to, your email address, mailing address, account name, and/or the date of your last interaction with us. This is a security measure and a legal requirement that protects against inadvertent disclosure. We will only use the Personal Information you provide to verify your identity and complete your request.
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact privacy@health-union.com. If you do not respond to our request for verification or refuse to provide verification when required, we will be unable to complete your request.
Except where otherwise noted, we will respond to your request within forty-five (45) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. As described below, in some jurisdictions, an authorized agent may submit a request to exercise your rights on your behalf.
To exercise your “Opt Out” rights related to targeted marketing or exercise privacy rights related to accessing, deleting, or correcting your Personal Information, please visit Your Privacy Choices or email us at privacy@health-union.com.