Ovia Health Non-App Privacy Policy

Introduction and scope

This Privacy Policy (“Policy”) describes how Ovuline, Inc., doing business as Ovia Health (“Ovia”) collects, uses and shares personal data collected by Ovia from business contacts, prospective business contacts, and other individuals who may come into contact with Ovia as part of Ovia’s internal operations, management and administration or through Ovia’s corporate website (“Ovia Operations”). Ovia Health is a subsidiary of Labcorp, a global life-sciences leader.

This Policy does not apply to personal data collected from job applicants and employees, which is governed by privacy notices provided as part of the recruitment, application and employment process. This Policy does not apply to personal data collected from users of the Ovia, Ovia Pregnancy and Ovia Parenting apps and health coaching services. If you are a user of the Ovia, Ovia Pregnancy or Ovia Parenting apps, you should review the Ovia Health App Privacy Policy here.

In this Policy, the term “personal data” refers to information relating to an identified or identifiable individual. The term “you” refers to individuals who come into contact with Ovia.

Personal Data We Collect

We collect the following categories of personal data in connection with Ovia Operations:

CategoryExamples of Data We Collect In this Category
IdentifiersName, email address, postal address
Device identifiers such as IP address, AdID, IDFA
General personal information including employment, education, health informationEmployer, job title
Legally protected classifications such as race or genderGender
Purchase histories or interestsInterest in Ovia products based on your browsing history
Internet and app activity informationOvia website and white paper browsing history, Ovia email opens and views
Device type, operating system, other device parameters
Professional and employment relatedName of employer, title, job type, industry
InferencesOvia product interest

Where Do We Get Personal Data?

Categories of Data SourcesExamples of Our Use of These Sources
Direct collection from your interaction with Ovia’s sales and marketing activitiesWe collect personal data when you attend an Ovia event or webinar, meet Ovia representatives at a trade show or other public event, respond to an Ovia survey, or subscribe to an Ovia email list.
Third party directories, including LinkedIn, social networks, business directories, list providers.We build our contact lists through use of third party sources and list rentals and purchases
Technical and device information through tags, pixels, cookies, IP addresses, AdID, IDFA and similar tracking technologies (“tracking technologies”)We use technical device information and tracking technologies to identify your interactions with Ovia’s website and content and to gauge your interest in our products. 

How and Why Do We Use Personal Data?

We collect and use your personal data, in all of the categories discussed above, for Ovia Operations, including:

  • Developing, advertising, marketing and providing Ovia’s products and services and conducting surveys
  • Operating and maintaining the security of Ovia’s products, services, equipment and networks
  • To comply with law and law enforcement requests
  • To conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ovia’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ovia about employees is among the assets transferred

Lawful Processing. We collect, use and otherwise process personal data as allowed under applicable law, including where based on one or more of the following:

– The consent you provide to us at the point of collection of your personal information;

– The performance of the contract we have with you;

– The compliance of a legal obligation to which we are subject;

– The legitimate interests of Ovia, you or a third party, where not overridden by your interests, fundamental rights or freedoms. Ovia’s legitimate interests include the lawful conduct of its business.

When We Share Personal Data, What Categories of Recipients Do We Share With?

Categories of RecipientsExamples of Recipients We Share With
Service ProvidersOvia’s B2B customer data is processed and stored by service providers working on Ovia’s behalf, including our cloud services provider Amazon Web Services, our marketing automation solution Eloqua, and Salesforce, which provides us with customer relationship management systems.
Marketing technology vendorsOur marketing materials and ads may contain tracking technologies which allow Ovia and the vendors we work with to collect technical information from your mobile device (such as IP address, AdID) to track your interaction with our content and ads.
Analytics providersWe share technical information from your device with analytics companies to understand the performance of our marketing and website.
Social media platforms and networksWe may share device data with social media networks to measure the effectiveness of advertising on those networks.
Affiliates and SuccessorsWe may share data with our parent company Labcorp and with companies under common control, and with any successors in the event of merger, acquisition, or similar transaction.
Government Authorities and Recipients of Compelled DisclosuresOvia may provide personal data to courts, law enforcement, and governmental authorities and other third parties if required by law, subpoena, directive from a regulatory authority or as otherwise necessary to comply with legal requirements or to protect the rights or property of Ovia or third parties.

Please also see How Does Ovia Respond to Data Requests

What Categories of Personal Information Do We Sell or Share for Advertising?

When Ovia purchases advertising or analytics services, we may do so under terms that permit the providers of such services to re-use personal data they acquire for their own purposes, which may include personalized advertising. The categories of information that may be shared in these circumstances are described below.

Category of Personal InformationCategories of RecipientsPurpose of Sale or Ad Sharing
Identifiers

General personal information

Internet and app activity information
We share online identifiers and web tracking information with analytics providers, advertising networks, advertising platforms, and advertising technology providers.To receive advertising or analytics services.
Legally protected classifications such as race

Purchase histories or interests

Professional and employment related

Inferences
Not shared.Not applicable.

No Selling or Sharing of Personal Information of Consumers under 16

To its knowledge, Ovia does not sell or share any personal data of consumers under 16.

Categories of Personal Information Disclosed for Business Purposes

CategoryCategories of RecipientsBusiness Purpose for Sharing
IdentifiersCloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers.For internal operations (hosting, marketing, analytics) and to purchase ads.
General personal informationCloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems.For internal operations (hosting, marketing, analytics).
Legally protected classifications such as race, genderCloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems.For internal operations (hosting, marketing, analytics).
Purchase histories or interestsCloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems,.For internal operations (hosting, marketing, analytics).
Internet and app activity informationCloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers.For internal operations (hosting, marketing, analytics) and to purchase ads.
Professional and employment relatedCloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems.For internal operations (hosting, marketing, analytics).
InferencesCloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems.For internal operations (hosting, marketing, analytics).

Third Parties Controlling the Collection of Personal Information

When Ovia discloses personal data to third parties, we may disclose to processors who act on Ovia’s behalf and to controllers, third parties who act on their own behalf even if they also provide services to Ovia. The controllers to whom we disclose B2B personal data are:

  • Google: We use Google technology and services to obtain analytics. As a result of this, Google obtains and uses certain of your personal data as described here.
  • Demandbase: We use tracking technologies from Demandbase on our website to measure the effectiveness of our advertising and marketing. Demandbase may reuse that information for its own purposes as described in its Privacy Policy.
  • Advertising Platforms and AdTech Vendors: Some ads purchased by Ovia include tracking technologies (tags or pixels, in particular) that allow advertising platforms or adtech vendors to measure ad performance. Information derived from your interaction with Ovia ads, marketing or content may be reused to make inferences about your interests and to show you other advertising.

Data Retention

We retain your personal information for a period of five years after last activity. After this retention period ends, we delete your data.

While these are our standard retention periods, you can delete your data at any time as described in the next section.

What Are Your Choices?

You may opt-out of Ovia marketing emails at any time by using the ‘unsubscribe’ link at the bottom of any Ovia marketing email or by contacting us at support@oviahealth.com.

Access, Deletion and Correction

You may access, correct and delete the personal data Ovia holds about you at any time. Ovia honors any consumer data rights provided by applicable law. Ovia does not discriminate or retaliate for the exercise of data subject rights. You can email Ovia at support@oviahealth.com to exercise these rights. Ovia may require you to verify your identity in order to exercise these rights. Any authorized agents seeking to exercise data subject rights on behalf of any Ovia users should contact support@oviahealth.com with their request.

Do Not Sell or Share My Personal Information

You have the right to opt-out of the sale or sharing of your personal data for advertising. To exercise your opt-out right, click on “reject all non-essential cookies” on the Cookie Notice that appears on the Ovia Health home page.

Global Privacy Control

Ovia respects ‘do not sell’ signals sent by your browser. You will need to send this signal from each browser you use.

Appeal Rights

If your request to exercise your rights is refused, you may send your notice of appeal by email to legal@oviahealth.com, for review by Ovia’s Legal Department. We will resolve your appeal within 30 days of the date of receipt of your email.

Other Relevant Information

Even if you exercise your rights described above, Ovia reserves the right to retain personal data as permitted by applicable law.

Data Security

Ovia protects personal data with security measures that are consistent with industry standards, including background checks on all employees and data encryption in transit and at rest. We will notify you of security incidents as required by law.

Data Retention

We store personal data for the period that your relationship with Ovia is active and then for a further retention period that reflects the period during which we reasonably anticipate you may remain interested in information about Ovia. After this retention period ends, we delete your data.

How to Contact Ovia?

To contact Ovia to exercise your privacy choices, please see “What Are Your Choices?” above.

Ovia has designated a Data Protection Officer. To contact our Data Protection Officer or for questions or complaints about Ovia’s processing of personal data, contact us at:

Data Protection Officer

Ovuline, Inc., dba Ovia Health

308 Congress Street, Floor 6,

Boston, MA 02210

legal@oviahealth.com

Data subjects located in the EEA may contact the Data Protection Officer at the address above or Ovia’s EU representative at the address below:

DP-Dock GmbH

Ovuline, Inc., doing business as Ovia Health

Ballindamm 39

20095 Hamburg, Germany

E-Mail: oviahealth@gdpr-rep.com

Data Subjects located in the UK may contact the Data Protection Officer at the address above or Ovia’s UK representative at the address below:

DP Data Protection Services UK Ltd.

Attn: Ovia Health

16 Great Queen Street

Covent Garden, London, WC2B 5AH

United Kingdom

Email: oviahealth@gdpr-rep.com

You may also have the legal right to lodge a complaint about Ovia’s data processing with your local consumer protection or data protection authority.

Other Issues

Children: Ovia does not knowingly collect personal data under Ovia Operations from children under 13 (for the US) or from individuals for whom parental consent is required for collection or processing of personal data.

Third Party Websites or Apps: Some Ovia properties may take you to websites or apps that are operated by other companies. Ovia is not responsible for the privacy practices of its advertisers, sponsors or others. You should review the privacy policies of those sites and apps.

Legal requirements: Ovia may provide personal data to courts, law enforcement and governmental authorities if required by law or to protect the rights or property of Ovia or third parties. Ovia may access, use and preserve data to comply with law, in anticipation of litigation, or to protect the rights or property of Ovia or third parties, even if the data is subject to a deletion request from you. We may also provide information to law enforcement or authorities to protect the safety of users of the apps or others.

Sale, merger, or change of ownership, transfer to affiliates: If Ovia Health merges with another company, or its equity securities or all or a part of its assets are sold to a third party, your personal data may be transferred to the buyer or successor entity. Your personal data may also be shared with affiliated companies under common ownership or control with Ovia.

Changes to this Policy

Ovia may modify this Policy from time to time by posting an updated version of the Policy.

Last updated: December 21, 2022