Privacy Policy
Privacy Policy Last Updated 08.28.2024
This Privacy Notice describes how Panda Health, Inc. (“Panda,” “we,” “us,” “our,”) collects, uses, and shares personal information via our websites, mobile applications, forums, online platform, and marketplace (collectively, our “Services”). Panda offers a proprietary digital health intelligence platform and proprietary marketplace for health systems “Panda Members” and digital health suppliers “Panda Vendors” that have executed contracts with us to interact, learn, connect, and transact additional business. While it is possible for persons to have limited interactions with parts of our public websites, “You” and “Your” primarily refers to a natural person, who interacts with our full Services as an employee (or an agent, owner, director, officer, or contractor) of a Panda Member, Panda Vendor, or other third-party interacting with our Services. You agree to function as an employee of Your organization whose communications or transaction solely within the context of the business conducting due diligence regarding or providing or receiving a digital health or information technology product or service.
Panda Terms of Service is incorporated by reference into this Privacy Policy. This notice is adopted to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2023 “CCPA”. All other terms defined in the CCPA, or its implementing regulations have the same meanings when used in this notice. “Personal Information” is information that identifies, relates to, or could reasonably be linked directly or indirectly with a particular individual or household. We use Personal Information to operate our business and for various other purposes below.
| Category & Source | Collected (Personal Information may overlap with other categories) | Business Purpose (information may overlap with other categories) | To Whom Disclosed |
| Identifying & Personal information (from You & Your technology) | • Information about Your place of employment that you share as a Panda Vendor or Panda Member • Your work and/or personal email address, first name and last name, phone number, address, state, postal code, city • Login online identifier • Your or other employee’s signature(s) and bank or other financial information. • Your work website(s), any information You disclose to us as approved for other Vendors and Members to view, such as pricing, demonstrations, proposals, security questionnaires, HITRUST, SOC or other technical reports, etc. • Any information You choose to share through our Services, including our forums | • To fulfill the reason You provided the information as a potential or current Panda Vendor or Panda Member and access to our proprietary digital health intelligence platform and proprietary marketplace. • To collect information about the Services Your company offers and its contracting needs. • To contact You, manage/monitor/report on Your account, respond to Your requests, provide You support, and perform related accounting • To tell You about and administer our Services, target marketing/communications • To provide push notifications, updates, or security updates • To audit and count ad impressions to unique visitors, verifying positioning and quality of ad impressions | • Managed service and Business application providers • Panda Members (not CCPA Sensitive Personal Information) • Panda Vendors (not CCPA Sensitive Personal Information) • Analytics and advertising partners • IT, cloud, and hosting service providers |
| Commercial & Associated Information (from You, Your technology, & third-parties information below) | • Your use, data, and activities with our Services, such as transactions considered, purchased, or obtained (such as terms, pricing, etc.) • Any information You choose to share through our Services, including our forums | • For development, compliance, and undertaking of a potential or current contract for Services You request or sell • To provide You with news and digital health information • To help maintain Services safety, security, and integrity | • Managed service and Business application providers • Panda Members (not CCPA Sensitive Personal Information) • Panda Vendors (not CCPA Sensitive Personal Information) • Analytics and advertising partners • IT, cloud, and hosting service providers |
| Internet & network activity (from You, Your technology, & third-parties information below) | • IP addresses, browsing and search history, information on an interaction with Services or advertisement. | • To improve and personalize Services • To detect and prevent prohibited, illicit, or illegal activity • To detect security incidents, debugging, and repair errors that impair existing or intended functionality • For marketing and remarketing | • IT, cloud, and hosting service providers • Managed service and Business application providers • Analytics partners |
| Professional & employment information (from You, Your technology, & third-parties information below) | • Current or past job history or performance evaluations. | • To identify and process employment applicants, background checks and verifying qualifications for employment • To administer employee services | • Managed service and Business application providers |
| Inferences drawn from other personal information (from You, Your technology, & third-parties information below) | • Profile from directly and indirectly observing actions with our Services based on Your preferences, characteristics, predispositions, behaviors, and attitudes • Any information You choose to share through our Services, including our forums | • To undertake internal research for technological development • To provide, maintain, analyze, customize, measure, and improve our Services and experiences • To create and update an un-biased, fact-based rating assessment of Panda Vendors, such as benchmarking, marketing, performance improvement, quality assurance, feedback from Panda or current/past Panda Members related to customer service, processes, efficiencies of interactions, and project timelines • For marketing and remarketing | • Managed service and Business application providers • Panda Members (not CCPA Sensitive Personal Information) • Panda Vendors (not CCPA Sensitive Personal Information) • Analytics and advertising partners • IT, cloud, and hosting service providers |
| Geolocation data (from You, Your technology, & third-parties information below) | • Physical location (based on IP address), including City, State, Zip, Country • Any information You choose to share through our Services, including our forums | • To help us understand how You use our Services and to help us improve our Service • To detect and prevent prohibited, illicit, or illegal activity • To detect security incidents, debugging, and repair errors that impair existing or intended functionality | • IT, cloud, and hosting service providers |
| Protected Class Information (only if directly from You) | • Only information You directly choose to share on our Member/Vendor forums • Our online surveys may ask respondents for contact, demographic and other Personal Information. The ways in which such information may be used or disclosed will be described in the survey materials | n/a | • Managed service and Business application providers • Panda Members (not CCPA Sensitive Personal Information) • Panda Vendors (not CCPA Sensitive Personal Information) • Analytics and advertising partners • IT, cloud, and hosting service providers |
| Sensory data (only if directly from You) | • Any audio information You directly choose to share on our Member/Vendor forums | n/a | • Managed service and Business application providers • Panda Members (not CCPA Sensitive Personal Information) • Panda Vendors (not CCPA Sensitive Personal Information) • Analytics and advertising partners • IT, cloud, and hosting service providers |
| Non-public education information (only if directly from You) | • Only information You directly choose to share on our Member/Vendor forums | n/a | • Managed service and Business application providers • Panda Members (not CCPA Sensitive Personal Information) • Panda Vendors (not CCPA Sensitive Personal Information) • Analytics and advertising partners • IT, cloud, and hosting service providers |
| Biometric Information (only if directly from You) | • Any information You choose to share through our Services, including our forums | n/a | • Managed service and Business application providers • Panda Members (not CCPA Sensitive Information) • Panda Vendors (not CCPA Sensitive Information) • Analytics and advertising partners • IT, cloud, and hosting service providers |
General Personal Information Use
- With other participants on our proprietary digital health intelligence platform and proprietary marketplace in connection with our Services, including our forums for Panda Vendors and Panda Members.
- With our professional advisors who provide legal, compliance, accounting, banking, or consulting services.
- For other legal purposes, such as to enforce our terms and conditions, comply with a legal obligation, protect the rights of Panda or against legal liability, or to exercise or defend legal claims.
- To comply with our legal obligations or to protect our interests, property or legal rights, or those of Panda Members, Panda Vendors, or third parties.
- To prevent or investigate possible wrongdoing in connection with the Service and protect the personal safety of participants of the Service or the public.
- With law enforcement, officials, or other third parties when we are compelled to do so by a subpoena, court order, or similar law enforcement request, or when we believe in good faith that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate violations of this Privacy Notice or other applicable terms.
- With companies or other entities in connection with, or during the negotiation of, any merger, sale of company stock or assets, financing, acquisition, divestiture or dissolution of all or a portion of our business. If Panda engages in a merger, acquisition, or asset sale, You understand that Your Personal Data will be automatically transferred and could become subject to a different Privacy Policy.
- For other purposes permitted by law or to which You consent.
Third Party Information We Collect
Information from third-party sources. Advertisers, analytic Services, and other third parties provide us information in connection with tools we offer and through tools they use to collect information about You when You use our Services. The information they collect may be associated with Your personal information or they may collect information about Your online activities over time, including web traffic data. They and we may use this information to provide You with interest-based advertising or other targeted content, to understand our Services, audiences, and to otherwise analyze traffic on our Services.
Information we collect through automatic data collection technologies. We may collect data regarding Your use of our Services through cookies, web beacons, and other automatically collected information. This data may include Your IP address; date and time You access the Services and the pages and content You access during Your visit; websites that You link to or from; emails from us that You open and the links You click on within those emails. Cookies are small identifiers sent from a web server that are stored on Your device for the purpose of identifying Your browser or storing information or settings in Your browser. Cookies may also be used to personalize Your visit by storing Your preferences or displaying content based upon what You have viewed on the Services and other websites. Web beacons or pixel tags connect web pages to web servers and their cookies. We and others may use these and similar technologies on our Services and other websites.
Google AnalyticsGoogle Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy.
Heap AnalyticsHeap is a product analytics platform that collects and analyzes data about how You are interacting with our website and mobile application. Heap does this by collecting data on what You are doing, including but not limited to what webpages You visit, what You click on, where You are located, what browser or platform You are using, and other types of behavioral data. For more information on the privacy practices of Heap, please visit the Heap Privacy Policy web page: https://policies.google.com/privacy.
NextRollPlease note that we may combine the information we gather about You in identifiable form, including information from third parties. We may use this information, for example, to improve and personalize our Services, content, and advertising. Specifically, we use the third-party provider, NextRoll, Inc. (“NextRoll”), who may collect information about Your activity on our Services to enable us to:
- Measure and analyze traffic and browsing activity on our websites;
- Show advertisements for our Services to You on third-party websites.
We may share data, such as hashed email derived from emails or other online identifiers collected on our Services with NextRoll. This allows our partners to recognize and deliver You ads across devices and browsers. To read more about the technologies used by NextRoll and their cross-device capabilities please refer to NextRoll’s Privacy Notice. NextRoll may use non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit You to block such technologies. For this reason, You can use the following third-party tools to decline the collection and use of information for the purpose of serving You interest-based advertising.
The Network Advertising Initiative’s opt-out platform: http://www.networkadvertising.org/choices/.
The Digital Advertising Alliance’s opt-out platform: http://optout.aboutads.info/?c=2&lang=EN.
Other parties may collect personally identifiable information about Your online activities over time and across third-party websites when You use our website or Services. We do not respond to “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party websites or online services.
Information We Do Not CollectYou explicitly agree to never send or share any personal or health system patient Personally identifiable information “PII” and/or protected health information “PHI.” Panda will not accept nor store, process, etc. any PHI or PHI/PII of any health patients.
We do not use or disclose Sensitive Personal Information for purposes other than those permitted under the CCPA.
Our Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. If You are a parent or guardian and You are aware that Your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers.
How We Secure InformationWe are committed to maintaining measures to protect the security of Your information. Of course, despite these measures, no network or system is ever entirely secure, and we cannot guarantee the security of networks and systems that we operate or that are operated on our behalf. Please note that, by its nature, our Services function as a marketplace; information posted in the marketplace, such as supplier details and product and/or service information, will be visible to other participants in the marketplace.
What Choices Do I Have?Marketing communications. You may receive marketing information from Panda when You sign up for communications from us. You may opt out of receiving marketing emails, by following the unsubscribe link in each email, or by contacting us at legal@panda.health. Please note that You may continue to receive non-marketing emails from us after You opt-out.
Cookies. You have several choices about certain cookies. Most web browsers automatically accept cookies, but You may modify Your browser’s setting to notify You of cookie placement or decline cookies. If You choose to decline cookies, certain features of our website may not function properly as a result. We use both Session and Persistent Cookies for the purposes set out below:
Necessary / Essential Cookies
Type: Session Cookies
Administered by: Us
Purpose: These Cookies are essential to provide You with Services available through our Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the Services that You have asked for cannot be provided, and we only use these Cookies to provide You with those services.
Cookies Policy / Notice Acceptance Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies identify if users have accepted the use of cookies on the website.
Functionality Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies allow us to remember choices You make when You use the website, such as remembering Your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter Your preferences every time You use the website.
Tracking and Performance Cookies
Type: Persistent Cookies
Administered by: Third-Parties
Purpose: These Cookies are used to track information about traffic to the website and how users use the website. The information gathered via these Cookies may directly or indirectly identify You as an individual visitor. This is because the information collected is typically linked to a pseudonymous identifier associated with the device You use to access the website. We may also use these Cookies to evaluate new pages, features, or new functionality of the website to see how our users react to them.
Limiting and Opting out and Requests for Correction or Deletion of DataYou have a right to request access to Your personal data. You may send us a request for access, provision of such information will be subject to the supply of appropriate evidence of Your identity. You also have the right to request that we correct or update Your Personal Information. You have the right to opt out of receiving marketing communications or any other information from the Forum or about Forum events and can do so by (a) following the instructions for opt-out in the relevant marketing communication or (b) by contacting us at legal@panda.health.
Links to Other WebsitesOur Service may contain links to other websites that are not operated by us. If You click on a third-party link, You will be directed to that third party’s website. We advise You to review the Privacy Policy of every website You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party websites or services.
Selling Personal InformationAs defined by the CCPA, we may sell and share certain online identifiers for the purposes of online advertising and analytics. Specifically, we disclose online identifiers to advertising partners and analytics providers for online analytics and advertising personalization.
How Long Do We Retain Personal Data?The criteria we use to determine specific retention periods include: the type of data; whether You have provided Your consent and have not withdrawn it; whether there are other legal grounds for the continued processing; whether You have objected to the processing and there are no overriding legitimate grounds for the processing; and whether retention or deletion is necessary to comply with legal obligations.
Our Non-Discrimination Policy If You choose to exercise any of Your CCPA rights, we will not discriminate against You.
Updates to Our Privacy NoticeWe may update this Privacy Notice occasionally to provide clarification or notice of changes to our practices. If we make changes, we will revise the Last Updated Date at the top of this Privacy Notice. Changes to this Privacy Notice will be effective once they are posted unless otherwise indicated.