Online Privacy Policy

Last updated on May 16, 2023

1. Introduction to Online Privacy Policy. Welcome to the websites, mobile applications, and digital online services (“Online Services”) provided by University Hospitals and our affiliates (“University Hospitals,” “we,” “us,” or “our”). In this Online Privacy Policy, we explain how we collect, use, share, and protect your information when you use or access University Hospitals’ Online Services. This Online Privacy Policy supplements University Hospitals Online Services Terms of Use, which users should also review. By using or accessing our Online Services, clicking “I Accept,” or creating an account, you are agreeing to this Online Privacy Policy and the collection of data described in this Online Privacy Policy. When you use the Online Services, you agree to our collection and sharing of the information described in this Online Privacy Policy. If you do not agree with our information practices described in this Online Privacy Policy, you may not use our Online Services.

   This Online Privacy Policy applies to all Online Services where it is posted. Other University Hospitals’ Online Services may have their own privacy policies that apply to those Online Services. This Online Privacy Policy does not apply to information that is considered protected health information under the Health Insurance Portability and Accountability Act (“HIPAA”).

2. Information We Collect. When you use our Online Services, we collect information from or about you, as well as the device you have used to access the Online Services, in a variety of ways.

   • Information you provide to us: We collect and store information that you provide directly to us on or through the Online Services. For example, we collect information about you when you pay a bill, sign up for emails, take a survey, make a donation, create an account or register for our Online Services, use various features of the services, post comments on our sites, fill out a form, schedule an appointment, conduct a search, call us, request support, chat or otherwise communicate with us. Depending on the service, we may collect the following kinds of information from you, and we may use this information to contact you or combine that information with other information we have about you or your device:
     • Account information, such as your name, email address, password, postal address, billing address, shipping address, phone numbers, age, date of birth, drivers’ license number, and any other information you provide;
     • Transaction information, such as your health insurance information and limited payment information from you, such as payment method and payment card information;
     • Information about others, such as the names and the contact information of your providers, your representatives, and any dependents in your care;
     • Health information, such as your past and present medical condition, medication information, and treatment history; and
     • Other information you choose to provide, such as when you conduct a search; fill out a form; request an appointment; participate in a survey, assessment, contest, or promotion; use other interactive areas of the online services such as chat or other communication features; have live audio and video visits or interactions; or request technical or customer support.
   • Browser or device information: We also collect certain information automatically when you use or navigate our Online Services, such as the following types of information.
     • Log information, including where our systems record certain log file and usage information such as your Internet Protocol (“IP”) address, browser type and language, operating system, referring URLs, date and time of your visit, pages viewed, links clicked, movements through the Online Services, and other information about your activities on our Online Services.
     • Device information, such as the device used to access or use the Online Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information. If your device settings permit, we may also collect information about the location of your device to facilitate your use of certain features of the Online Services.
   • Pixels, cookies, and similar tools: We may use cookies, pixel tags, web beacons, embedded scripts, local objects, and other tracking technologies (collectively referred to as “Cookies”) to automatically collect the types of Log and Device information described above, which may include third-party Cookies. By using our Online Services, you consent to our use of Cookies. See paragraph 5 below for additional information about our use of Cookies.
   • Third parties and their tools: We may allow others to provide analytics, marketing, or other services using Cookies to collect information about your use of our Online Services and other websites.
3. How We Use Your Information. We may use information we collect in a number of ways, depending on the service, including to:
   • Communicate with you;
   • Provide you with information or services, including personalized information;
   • Make features and functions in the Online Services available for your use;
   • Optimize your web experience or provide customer service;
   • Conduct research and analysis and generate reports;
   • Market and advertise to you, including through use of survey or other data you provide to us, our services and those of our partners or others;
   • Enforce or apply our Terms of Use and other agreements;
   • Improve, evaluate, or enhance our services and operations, including the Online Services;
   • Respond to your comments and inquiries, and provide customer services, including chat or survey functions;
   • Monitor and analyze trends, usage and activities in connection with our Online Services;
   • Comply with applicable laws, regulations, and court orders; and
   • We may also de-identify or aggregate your data or otherwise combine information collected through different Online Services or portions of our Online Services.
4. How We Share Your Information. We may share information we collect about you in the following ways:
   • With our service providers, consultants, and vendors to maintain, improve, monitor, provide, and protect our Online Services;
   • With other entities that are affiliates or subsidiaries of University Hospitals;
   • In the course of legal proceedings or in response to legal orders or government requests, and as otherwise required by law;
   • As needed to support compliance, operations, and corporate governance functions; and
   • In connection with a transfer of ownership or assets, a corporate reorganization, merger, or acquisition.

5. Cookies Notice. This Cookies Notice describes how we collect, use, and store information through Cookies on our Online Services, the reasons we use Cookies, and how you can manage settings related to Cookies.

   • What are Cookies and why does University Hospitals use them? A Cookie is a text, image, or other file stored on your computer, mobile, or other device by your web browser when you visit or use an Online Service, and that your browser provides to us each time you return to the Online Service. Almost every website uses these files. Cookies may store certain information such as your IP address, operating system, device information, browser type and language, referring URLs, access times, pages viewed, links clicked, movements through the Online Services, and other information about your activities or use of the Online Service.

     Cookies are used to identify the content you view, the content you provide so that you do not have to re-enter it each time you visit our Online Services, and your preferences and settings. Cookies also help us provide you with customized content; speed navigation through our Online Services; allow us to learn about your visit and use of our Online Services; and to market products and services to you based on your interests and preferences. Cookies vary in duration. Session Cookies, for example, last for a defined amount of time such as while your internet browser is open. Persistent Cookies are stored on your device for longer periods. Both types of Cookies can create an identification that is unique to your device.

   • What types of Cookies does University Hospitals use? We may use different types of Cookies, depending on the Online Service. We classify Cookies into the following four main categories, described in detail below: (1) necessary cookies; (2) performance cookies; (3) functional cookies; and (4) analytics cookies.
     

     Category	Description
     Necessary Cookies	Necessary Cookies are needed to make the Online Service work. These Cookies are used for technical purposes such as enabling better navigation on the Online Services.
     Performance Cookies	Performance Cookies can be used for various performance purposes, including tracking the number of visitors to the Online Service and information such as the number of views a page gets, how much time a user spends on a page, and other pertinent web statistics. These Cookies improve the performance of the Online Services and the user experience.
     Functional Cookies	Functional Cookies enable the Online Service to save information already entered (such as user names, language choices, and your location), so that it can offer you improved and more personalized functions. Functional Cookies are also used to enable features you request, such as playing videos.
     Analytics Cookies	Analytics Cookies collect information such as IP address, device ID, browser information, geolocation, content viewed, or other information for the purpose of analyzing and measuring how visitors use the Online Services and specific functions and features.

   • How to manage and disable Cookies. You can see various Cookies used on websites accessed through browsers like Google Chrome or Microsoft Edge by right clicking on the webpage, selecting the Inspect tool, and clicking on the word Cookies under the Application tab. You can also manage or disable certain Cookies by adjusting your browser or device settings. Browsers and devices are different, so refer to the settings menu of your browser or device control settings for instructions on how to see or change your Cookie preferences. If you choose not to receive Cookies, our Online Services, or portions of our Online Services, may not function properly or be available to you. You may also learn more about managing and disabling Cookies, and more information on Cookies generally at www.allaboutcookies.org.
6. Do Not Track Disclosure. We do not respond to web browser Do Not Track signals at this time.
7. Notice to Non-U.S. Residents and Non-Ohio Residents. University Hospitals provides services in the State of Ohio in the United States. We are subject to certain United States federal laws and regulations and certain Ohio state laws and regulations that govern the privacy and security of patient healthcare information. The data protection laws of other countries and other states may differ as to how your personal information is protected. As a non-U.S. resident or non-Ohio resident, when you use our Online Services, provide your personal or other information to us, or direct your healthcare provider to provide your information to us, you consent that University Hospitals may process your information in the State of Ohio, in the United States, subject to the applicable state laws of Ohio and federal laws of the United States.
8. Site Security Disclosures. Our online forms are not encrypted unless noted otherwise, and information you input may be accessed by unauthorized users prior to you sending it to us. PLEASE NOTE THAT, BY ITS VERY NATURE, NO DATA STORAGE SYSTEM OR TRANSMISSION OF DATA OVER THE INTERNET OR OTHER PUBLIC NETWORK CAN BE ABSOLUTELY SECURE. UNIVERSITY HOSPITALS CANNOT GUARANTEE THE COMPLETE SECURITY OF ELECTRONIC INFORMATION. Moreover, where a login or password is needed to access our Online Services, you are responsible for keeping the login and password confidential. Do not share your login or password with anyone.

9. Children. The Children’s Online Privacy Protection Act of 1998 (COPPA) addresses how information is gathered and used from children under the age of 13. While University Hospitals is a non-commercial, nonprofit organization not subject to COPPA, University Hospitals’ Online Services are directed at an adult audience and are not intended or designed to attract children under the age of 13. With the exception of certain information in our patient portals as authorized by law, we do not knowingly collect, maintain, or use personal information from children under 13 years of age.

   If you learn that your child has provided us with personal information through our Online Services without your consent, you may alert us at Webeditor@UHhospitals.org. If we learn that a child has provided such personal information, except as required and authorized by law, we will take steps to delete such information.

10. Modification. University Hospitals can modify this Online Privacy Policy at any time in its sole discretion and such modifications will become effective and binding upon posting online. New services, terms, and specific Cookies may be added without notice to you. You agree to review this Online Privacy Policy and Cookies Notice periodically because you will be bound and deemed on notice of any changes with continued use of the Online Services.
11. Contact Information. Should you have any questions or want more information regarding University Hospitals’ Online Services, please send an email to Webeditor@UHhospitals.org.