Allscripts Healthcare, LLC d/b/a Veradigm (“Veradigm”) respects the privacy of every person who visits our website. This Privacy Policy outlines the information Veradigm will collect and how we will use that information. This statement will also tell you how you can verify the accuracy of your personal data submitted to Veradigm through our website via computers, smart phones and other mobile devices, and how you can request that we delete or update your personal data. We have developed our privacy policy from industry guidelines and standards, and national laws and requirements. This Privacy Policy highlights our strong commitment to protect your privacy. Thanks again for placing your trust in Veradigm.
Veradigm is an integrated data systems and services business that combines data-driven clinical insights with actionable tools for clinical workflow, research, analytics and media. Our solutions are designed to help key healthcare stakeholders to improve the quality, efficiency, and value of healthcare delivery - from biopharma to health plans, healthcare providers, health technology partners, and most importantly, the patients they serve.
Veradigm’s primary goal in collecting personal data from you is to give you a meaningful, enjoyable and customized experience while using our website and to allow us to develop new products and services that are relevant to visitors like you. Personal data also allows us to provide services and features that most likely meet your needs, and to customize our service to make your online experience smooth and efficient.
Personal Data
Aggregate and Statistical Data
We will not collect sensitive information through our website unless it is required. We ask that you not send us or share any sensitive Personal Data (e.g., government-issued or financial account numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, genetic, or biometric data, criminal background or trade union membership) unless we specifically request this information.
Allscripts’ website is not directed to minors. If you believe that we have mistakenly or unintentionally collected Personal Data of a minor through our website without appropriate consent, please notify us as detailed in our Contact Information section below so that we may immediately delete the information from our servers and make any other necessary corrections.
Personal Data
Aggregate and Statistical Data
We collect and process (i.e., use) personal data about you where we have lawful bases. In a majority of the cases, processing will be justified on the basis of:
Veradigm is committed to keeping the data you provide us secure and will take reasonable precautions to protect your personal data from loss, misuse or alteration. Vendors, contractors, or partners of Veradigm who have access to your personal data in connection with providing services for Veradigm are required to keep the information confidential and are not permitted to use this information for any other purpose than to carry out the services they are performing for us. When necessary, we use secure connections on our web site to protect information during its transmission. Access to your personal data is password-protected and we regularly monitor our system for possible vulnerabilities and attacks.
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected. At the end of that retention period, your data will either be deleted completely or anonymized, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Except as stated below, we will not share, trade or sell personal data of our visitors for use by any business. However, aggregated and statistical data from our visitors may be shared with our partners. For example, we may let a partner know that approximately “75% of our visitors use high speed connections or access our site after 7pm.” Occasionally, we may share personal data from you (such as name, mailing addresses and e-mail addresses) with vendors, contractors or partners of Veradigm in connection with services that these individuals or entities perform for or with Veradigm. These vendors, contractors or partners are restricted from using this personal data in any way other than to provide services for Veradigm, and they may not share or resell this data. The services they provide may include such activities as direct mailing, fulfillment services, or e-mail campaigns. Veradigm may share your personal data with any person or company that acquires Veradigm’s business or any portion of the Veradigm business to which your personal data relates. Veradigm will ensure that any person or company to which your personal data is transferred agrees to abide by the same privacy obligations as Veradigm. Veradigm also reserves the right to share personal data to respond to duly authorized information requests of governmental authorities or where required by law.
Veradigm works with clients internationally and has developed global data privacy and security practices designed to ensure that your personal data is appropriately handled and protected. Please note that personal data may be transferred, accessed and stored globally as necessary for the uses and disclosures stated above in accordance with this policy. By providing your personal data to Veradigm, you agree to Veradigm transferring your personal data to its affiliates globally and to third party entities that provide services to Veradigm.
Veradigm leverages the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce. Veradigm has implemented appropriate safeguards for transfers of personal data originating from the European Economic Area (“EEA”) to Veradigm affiliates and unaffiliated third parties located outside the EEA. If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/list.
Our website may provide, or third parties may provide, links to other World Wide Web sites or resources. This Policy applies only to our website. It does not apply to services offered by third parties, including websites and other online services to which our website may display links. When you click on such links, you may be visiting websites or interactive services operated by third parties, who have their own information collection practices. We do not have control over how any third party collects or uses information, so we recommend that you review their privacy policies to learn of their practices.
If you are a resident of the EEA, subject to certain exemptions, the processing activity and jurisdiction:
You can contact us to request to exercise these rights at any time by contacting: DataProtectionOfficer@allscripts.com. If we choose not to act upon your request we will explain to you the reasons for our refusal.
If you are a California resident, you may be afforded certain additional rights under the California Consumer Privacy Act of 2018 regarding our use of your personal information. To learn more about your California privacy rights, visit our CALIFORNIA PRIVACY NOTICE.
We hope this Privacy Policy has been helpful in explaining how we handle your personal data and your rights to control it.
If you have any questions that we have not answered, please contact our Data Protection Officer who will be pleased to help you:
If you are based in the EEA, you may email our Data Protection Officer at dataprotectionofficer@allscripts.com. If feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office.
You can contact them online to www.ico.org.uk/concerns
If you are based outside the UK, you may have the right to lodge your complaint with the relevant data protection regulator in your country of residence.
We may update this Privacy Policy from time to time. When we update this Privacy Policy, we will post the changes on our website and applications. We encourage you to check this Privacy Policy regularly for changes. If we make any material changes to this Privacy Policy we will notify you before they take effect either through the site or application or by sending you a notification. Unless otherwise noted, any changes we make to this Privacy Policy will become effective immediately once posted on this page. Please see the effective date noted below for the latest revision date. Your continued use of the site or services following any changes to this Privacy Policy indicates your consent to the practices described in the revised Privacy Policy.
Date of Last Update: December 31, 2019