What Information Do We Collect?
Personal Information You Disclose to Us
In short: We collect personal information that you voluntarily provide to us.
We collect personal information you provide when you express an interest in obtaining information about us or our Services, participate in activities related to the Services, or otherwise contact us.
Personal information may include:
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
Sensitive Information
We do not process sensitive personal information.
Information Automatically Collected
In short: Some information is collected automatically when you use our Services.
This information may include:
- Internet Protocol (IP) address
- Browser and device characteristics
- Operating system
- Language preferences
- Usage and log data
- Approximate location data
This information does not reveal your specific identity but is used to maintain security, operate our Services, and perform analytics. We also collect information through cookies and similar technologies.
How Do We Process Your Information?
In short: We process your personal information to provide and administer Services, communicate with users, ensure security, prevent fraud, comply with legal obligations, and protect vital interests.
What Legal Bases Do We Rely on To Process Your Information?
We only process personal information when we have a valid legal basis under applicable law, including:
- Your consent
- Compliance with legal obligations
- Protection of vital interests
- Legitimate business interests
If you are located in the EU or UK, processing is based on consent, legal obligations, or vital interests as required under GDPR.
If you are located in Canada, processing may be based on express or implied consent or other permissible legal grounds.
When and With Whom Do We Share Your Personal Information?
In short: We may share personal information in limited circumstances, including:
- Business transfers such as mergers, acquisitions, or financing
We do not sell personal information.
Do We Use Cookies and Other Tracking Technologies?
We use cookies, web beacons, pixels, and similar technologies to:
- Maintain security
- Prevent system failures
- Save user preferences
- Support basic site functions
We may also use third party services such as Google Analytics and HotJar for analytics purposes. You may opt out through browser settings or Google’s opt out tools.
How Long Do We Keep Your Information?
We keep personal information only for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required by law. When information is no longer needed, it is deleted or anonymized.
Do We Collect Information From Minors?
No. We do not knowingly collect or market to individuals under 18 years of age.
What Are Your Privacy Rights?
Depending on your location, you may have rights to:
- Request access to your personal information
- Correct inaccurate information
- Request deletion
- Restrict or object to processing
- Withdraw consent
Requests can be submitted by contacting us.
Controls for Do Not Track Features
We do not currently respond to Do Not Track signals due to the lack of an industry standard.
Do United States Residents Have Specific Privacy Rights?
Residents of certain U.S. states (including California, Colorado, Connecticut, Texas, and others) may have additional rights related to accessing, correcting, deleting, or opting out of the processing of their personal information. We do not sell personal information.
Do We Make Updates to This Notice?
Yes. We may update this Privacy Notice to remain compliant with relevant laws. The updated version will be indicated by a revised date.
How Can You Contact Us About This Notice?
Harvard Pilgrim Health Care Institute, LLC
401 Park Drive, Suite 401
Boston, MA 02215
United States
Email: rwe@hphci.harvard.edu
How Can You Review, Update, or Delete Your Data?
Based on applicable laws, you may request access to, correction of, or deletion of your personal information by submitting a data subject access request or contacting us directly.
