Privacy Policy

OrasureHealthcare respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy describes: 1. how OrasureHealthcare ("we", "us" or "our") collects, uses, discloses, protects, and otherwise processes the Personal Information of our customers (collectively, "you" or "your"); 2. the types of Personal Information we may collect from you; 3. and our practices for collecting, using, disclosing, and protecting Personal Information. In this Privacy Policy, personal information and personal health information are collectively referred to as "Personal Information". Unless otherwise required by applicable law, we only collect, use, disclose, and otherwise process your Personal Information, and the Personal Information of your spouse and other dependants, in accordance with this Privacy Policy. We take steps to ensure that the Personal Information that we collect is adequate, relevant, not excessive, and used for the purposes for which it was collected.

"OrasureHealthcare" when used in this Privacy Policy means, collectively, ORASURE HEALTHCARE LLP, and all of their respective affiliates and subsidiaries. OrasureHealthcare LLP is the primary company that houses health services and benefits administration businesses. OrasureHealthcare’s health products, and services (collectively, the "Services") are accessed through an online platform that is accessible to all users on the OrasureHealthcare website https://www.orasurehealthcare.com (collectively referred to as the "Platform"). This Privacy Policy applies to the Services, the Platform, and the use of the Platform. This Privacy Policy also applies to OrasureHealthcare, as well as the website of each entity that comprises OrasureHealthcare, to the extent that any such entity collects, uses or discloses Personal Information in connection with the operation of the Platform or the Services. Please note that each entity within OrasureHealthcare may have its own website(s), application(s), and services that are unrelated to the Services or the Platform, and any use, collection, disclosure or other processing of Personal Information in connection with such website(s), application(s), and services is governed by such entity’s separate privacy policy.

By providing your consent to OrasureHealthcare’s collection, use, disclosure, and other processing of your Personal Information in connection with your use of the Services and the Platform, you agree: (i) that you have reviewed this Privacy Policy; and (ii) to the terms and conditions of this Privacy Policy and to the Terms & Conditions governing use of the Services and the Platform. Except under the exceptions permitted by law, we need your consent to collect, use, or disclose your Personal Information. These exceptions include, without limitation, instances where legal, medical, or security reasons make it impossible or impractical to seek your consent. You can withdraw your consent any time, subject to legal, regulatory, or contractual requirements.

The methods that we use for collecting, using, disclosing, protecting retaining, and otherwise processing Personal Information are consistent and compliant with all applicable privacy laws, including where applicable India’s Digital Personal Data Protection Act (DPDP Act). OrasureHealthcare follows the eight privacy principles outlined in DPDPA and the privacy principles set in Indian privacy laws.

We are responsible for the Personal Information under our control. We have established this Privacy Policy and internal procedures to keep your information safe and we have specific personnel who make sure that we stay compliant with this Privacy Policy. Our Privacy Officer is responsible for overseeing our privacy program, which includes policies, procedures, and staff training to ensure employee adherence.

We clearly identify the purposes for which we are collecting Personal Information before or at the time of collection. We ask for your Personal Information for purposes related to the operation of the Platform and the Services, including: to provide and administer the Services; to confirm your identity; to create and administer your account; to administer benefits plans and process insurance claims; to bill and collect payment; to prevent fraud; to analyze data and improve services; to contact you via Electronic Communication; and other administrative and regulatory purposes.

We limit the collection of Personal Information to what is needed for identified purposes. Depending on the product or service, collected data may include name, date of birth, contact details, medical and health information, banking information, membership and claims data, device and usage data, and account/profile information.

We may collect or receive Personal Information from completed applications and forms; interactions with us (including social media and surveys); telehealth consultations; your plan sponsor or employer; your Personal Representative; medical records and providers; professional and regulatory bodies; other insurance carriers; and cookies and device identifiers.

Except as permitted by law, we use or disclose Personal Information only for the purposes for which it was collected and retain it only as long as necessary. We destroy, erase or anonymize Personal Information when we no longer need to retain it.

We may disclose Personal Information to third parties necessary to administer products and services, to authorized employees and agents, to employers and plan sponsors for administration, to service providers (e.g., data storage, claims processing), to entities within OrasureHealthcare, to legally authorized parties, and where required by law or legal process. We take precautions and limit disclosures to what is reasonably required.

We endeavour to ensure Personal Information under our control is accurate, complete, and up to date. You can verify and update your information via your account or by contacting us.

We use appropriate physical, administrative, and technological safeguards to protect Personal Information against loss, theft, and unauthorized access. Our employees receive confidentiality agreements and privacy training. Personal Information is kept in a secure environment.

We make information about our policies and procedures and how we manage Personal Information available to you. To receive copies or more information, contact our Privacy Officer.

On written request we will tell you what Personal Information we have about you and how we use and disclose it, subject to legal exceptions. You may verify and request corrections to your Personal Information.

We are committed to answering and resolving privacy-related questions, concerns, complaints, and inquiries. Contact our Privacy Officer by email at privacy.office@orasurehealthcare.com or by mail at the address provided in the policy.

We may revise this Privacy Policy from time to time to reflect changes in laws or our practices. The most current version is available at www.orasurehealthcare.com/privacy-policy.

Our websites, including the Platform, may use cookies to recognize you, remember preferences, authenticate sessions, and support marketing and analytics. You may configure your browser to block or notify about cookies.

We may gather traffic patterns and aggregated site usage information to evaluate preferences and effectiveness. This aggregate data does not identify you personally.

Our websites are not intended for individuals under 18 and we do not knowingly collect Personal Information from minors. Individuals under 18 should not submit Personal Information.

Depending on your location, you may have rights such as requesting de-indexation, deletion, restriction or objection to processing, and data portability, subject to applicable law and exemptions.