OrasureHealthcare respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy describes: 1. how OrasureHealthcare (“we”, “us” or “our”) collects, uses, discloses, protects, and otherwise processes the Personal Information of our customers (collectively, “you” or “your”); 2. the types of Personal Information we may collect from you; 3. and our practices for collecting, using, disclosing, and protecting Personal Information. In this Privacy Policy, personal information and personal health information are collectively referred to as “Personal Information”. Unless otherwise required by applicable law, we only collect, use, disclose, and otherwise process your Personal Information, and the Personal Information of your spouse and other dependants, in accordance with this Privacy Policy. We take steps to ensure that the Personal Information that we collect is adequate, relevant, not excessive, and used for the purposes for which it was collected.
“OrasureHealthcare” when used in this Privacy Policy means, collectively, ORASURE HEALTHCARE LLP, and all of their respective affiliates and subsidiaries. OrasureHealthcare LLP is the primary company that houses health services and benefits administration businesses. OrasureHealthcare’s health products, and services (collectively, the “Services”) are accessed through an online platform that is accessible to all users on the OrasureHealthcare website https://www.orasurehealthcare.com (collectively referred to as the “Platform”). This Privacy Policy applies to the Services, the Platform, and the use of the Platform. This Privacy Policy also applies to OrasureHealthcare, as well as the website of each entity that comprises OrasureHealthcare, to the extent that any such entity collects, uses or discloses Personal Information in connection with the operation of the Platform or the Services. Please note that each entity within OrasureHealthcare may have its own website(s), application(s), and services that are unrelated to the Services or the Platform, and any use, collection, disclosure or other processing of Personal Information in connection with such website(s), application(s), and services is governed by such entity’s separate privacy policy.
By providing your consent to OrasureHealthcare’s collection, use, disclosure, and other processing of your Personal Information in connection with your use of the Services and the Platform, you agree: (i) that you have reviewed this Privacy Policy; and (ii) to the terms and conditions of this Privacy Policy and to the Terms & Conditions governing use of the Services and the Platform.
The methods that we use for collecting, using, disclosing, protecting retaining, and otherwise processing Personal Information are consistent and compliant with all applicable privacy laws. When applicable, this includes, without limitation, India’s Digital Personal Data Protection Act (DPDP Act). OrasureHealthcare follows the eight privacy principles outlined in DPDPA and the privacy principles set in Indian privacy laws.
We are responsible for the Personal Information under our control. We have established this Privacy Policy and internal procedures to keep your information safe and we have specific personnel who make sure that we stay compliant with this Privacy Policy. All employees of OrasureHealthcare and other persons or organizations who act for or on our behalf are responsible for the protection of your Personal Information. Our Privacy Officer is responsible for overseeing our privacy program, which includes the policies, procedures, and staff training we have established to ensure that our employees adhere to the applicable obligations set out in this Privacy Policy.
We clearly identify the purposes for which we are collecting Personal Information before or at the time of collection (or after the time of collection if the Personal Information will be used for a different purpose). We ask for your Personal Information for the purposes related to the operation of the Platform and the Services, including (but not limited to) providing and administering the Services, confirming identity, account administration, benefits administration, billing, fraud prevention, analytics, communications, and legal/regulatory recordkeeping.
We limit the collection of Personal Information to that which is needed for the purposes identified by us or as otherwise permitted by law. Depending on the product or service we are providing to you, we may collect Personal Information about you including name, contact details, medical and health information, banking information, transaction data, device and usage data, demographics, and account/profile information.
Except as permitted by law, we only use or disclose Personal Information for the purposes for which it was collected. We retain Personal Information only for as long as necessary to serve such purposes, or as otherwise required or permitted by law. We destroy, erase or anonymize Personal Information when we no longer need to retain it.
We endeavour to ensure Personal Information under our control is accurate, complete, and as up to date as possible. You can check and update your Personal Information by logging into your user account or by contacting us.
To protect Personal Information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification, we use appropriate physical, administrative, and technological safeguards that match the sensitivity of the information under our control.
We make information about our policies and procedures and how we manage Personal Information available to you. To receive copies or more information regarding any such policies and procedures, please contact our Privacy Officer.
If you send us a written request, we will tell you what Personal Information about you we have and how we use and disclose it. You may be required to provide sufficient proof of your identity. We will give you access to your Personal Information, with certain exceptions permitted by law.
We are committed to answering and resolving any privacy related questions, concerns, complaints, and inquiries. Please contact OrasureHealthcare's Privacy Officer at privacy.office@orasurehealthcare.com or by mail at the address provided in the full policy.
We may, from time to time, revise this Privacy Policy. The most current version of this Privacy Policy governs how we process your Personal Information and is available at www.orasurehealthcare.com/privacy-policy.
Our websites may use cookies. Cookies are tiny elements of data that are sent to your browser when you visit any of our websites. Cookies allow us to recognize you when you return to our websites. You may set your browser to notify you when you receive a cookie or to not accept certain cookies.
Our websites may gather traffic patterns, site usage information, and other aggregated data to evaluate your preferences and the effectiveness of our websites. This aggregate usage data does not identify you individually.
Our websites are not intended for any individual under the age of 18, and we do not knowingly allow individuals under the age of 18 to create their own user account. Individuals under 18 may access our websites only via a parent or guardian's account.
Depending on where you live, you may have rights such as deletion, restriction, data portability, and objection to processing. Subject to applicable law, you may request deletion, restriction of use, or data portability of your Personal Information.
Subject to applicable law, if at any time we use automated decision making to process your Personal Information, you have the right to object. You also have the right to receive your Personal Information in a structured, commonly used format.
Our IVR system allows secure access to your Personal Information when you call. When you enroll, you give express consent to use your voiceprint for authentication. Voiceprints are encrypted and used only to confirm identity. You may withdraw consent, but doing so will prevent future use of the voiceprint system.