Privacy Notice

THIS POLICY EXPLAINS HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

This HIPAA Privacy Policy is about Your Information, Your Rights, and Our Responsibility.

OUR PLEDGE REGARDING HEALTH INFORMATION:

We understand that health information about you is personal, and we are committed to doing our best to protect the privacy of the data that you or any others share with us. This information is called Protected Health Information (PHI), and it comes from you, your physicians, hospitals, and other healthcare service institutions involved in your care. We will only use and disclose the minimum necessary information for the intended purpose and consented by you or as required by law.

This Privacy Policy will tell you how we may use and disclose your health information with your consent or as required by law. It also describes your rights and certain obligations we have regarding the use and disclosure of health information.

We may share your information to:

We are required by law to:

Who will need to follow this Privacy Policy:

YOUR RIGHTS REGARDING HEALTH INFORMATION ABOUT YOU:

This section describes your rights and our responsibilities to help you. Your rights include, but are not limited to, the following:

California Resident Privacy Rights

Residents of the State of California have the right to request from certain businesses with whom the California resident has an established business relationship, a list of all third parties to which the business, during the immediately preceding calendar year, has disclosed certain personally identifiable information for direct marketing purposes. We are only required to respond to a customer request once during any calendar year. To obtain this information, you should send a written request to privacyofficer@cohort.science with the subject heading “California Privacy Rights.” In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California Privacy Rights requirements, and only information on covered sharing will be included in our response.

What additional information do you need if you are located in the European Economic Area (EEA), Switzerland or the United Kingdom (UK)?

In addition to the disclosures made elsewhere in the Privacy Policy regarding our privacy registries, you have certain rights under applicable data protection laws in some regions, such as the UK. Our legal basis for collecting data in these regions can vary depending on the nature of the information and the purpose for which we collect it. This applies to the ‘personal data’, as defined under applicable data protection laws, of natural persons located in the EEA, Switzerland and the UK. Any terms not defined herein have the meaning ascribed to them elsewhere in the Privacy Policy or, if not defined in the Privacy Policy, in applicable data protection laws.

The General Data Protection Regulation (GDPR) requires us to explain the valid legal basis we rely on in order to process your personal information. As such, we may rely on the following legal basis to process your personal information: We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you. We may process your information where we believe it is necessary to comply with our legal obligations, such as cooperating with a law enforcement body or regulatory agency, exercising or defending our legal rights, or disclosing your information as evidence in litigation in which we are involved. We may process your information where it is necessary to protect your vital interests or the vital interests of a third party, such as in situations involving potential threats to the safety of any person. In addition, we may process your personal information for the purpose of the legitimate interests pursued by us, or by a third party, as per the provisions of the applicable data protection law, ensuring your interests and fundamental rights are always protected.

You have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv), if applicable, to data portability. In certain circumstances, you may also have the right to object to processing your personal information. You can make such a request by contacting us by using the contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws.

If you believe we are unlawfully processing your personal information, you also have the right to complain to the UK Data Protection Authority-ICO.

In the case of processing special categories of personal information, as per the definition in applicable data protection law, your consent is our lawful basis for processing. If we rely on your consent to process your personal information, you can withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided below. However, please note that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

To contact Cohort Science Ltd DPO, please contact dpo@cohort.science

Changes to this Policy. We have the right to change this Policy. All changes to the Policy will apply to the information we already have about you and any information we receive in the future. We will post a copy of the current Policy on our website accesspd.org. The effective date and version control of the current Policy will be posted in the Policy’s footer. If we make material changes to this Policy, we will provide you with the updated Policy within further communications.

For more information, see also:
http://www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html

How to contact us. If you have any questions about this Policy, or if you need to make a request to the Privacy Officer, please contact us at Cohort Science Ltd c/o Privacy Officer please email us at privacyofficer@cohort.science or +1-888-454-5580.

A copy of this Privacy Policy will be available upon request.