Privacy Policy
This Privacy Policy describes how Headwater Science collects, uses, and shares information about you when you use our website and services. By using our services, you agree to the collection and use of information in accordance with this policy.
Last Updated: January 2, 2025
If you are an EU resident, in addition to this Privacy Policy, see the section, "Additional Information for EU Residents." If you are a California resident, in addition to this Privacy Policy, see the section, "Additional Information for CA Residents."
What is Covered by this Privacy Policy?
Except as provided in the section, "What is Not Covered by this Privacy Policy?", this Privacy Policy explains the processing of personal information ("Personal Information") where the Personal Information is collected on the website or applications where this Privacy Policy is posted ("Websites").
What is Not Covered by this Privacy Policy?
This Privacy Policy does not apply to information processed:
through offline channels, such as outside of the Websites;
relating to our employees, personnel, contractors, or applicants for employment;
as agreed upon in relation to a contractual relationship with a clinical site, client or research partner;
information collected from individuals enrolled in our research study(ies), including study-related information.
This Privacy Policy does not apply to the information you provide or collected as a part of one of our clinical studies. If you're enrolled in one of our clinical studies, please refer to the relevant informed consent form provided to you in the enrollment process if you have any questions about how your Personal Information is handled, your data protection rights and who to contact with any questions.
Types of Information Collected
Information We May Collect Directly From You
We may collect two types of Personal Information: (i) personally identifiable information and (ii) non-personally identifiable information.
Personally Identifiable Information
Personally identifiable information is information that identifies you or can be used to identify or contact you. The categories of personally identifiable information that may be collected include but are not limited to:
Profile information, such as your name, email address, mailing address and telephone number;
Authentication information and account log-in credentials such as your username and password, when you sign up for an account with us;
Health-related information, such as information about a health condition from your medical records or otherwise, where such information is not provided as a part of a clinical study;
Troubleshooting and support data, which is data you provide, or we otherwise collect in connection with support queries we receive from you. This may include contact or authentication data, the content of your chats and other communications with us, and the product or service you are using related to your help inquiry;
Feedback and correspondence, such as information you provide in your responses to surveys, report a problem with the Websites, receive customer support or otherwise correspond with us;
Payment information, such as credit card number, billing address and other financial information, which may be collected by a third party payment processor;
Information about your interactions with our Websites. When you visit the Websites or use our services, we may collect information about the types of content you view and engage with, the services you use, features you interact with and preferences;
Information about your interests, such as information regarding your professional background, research interests, and specific areas of focus related to your use of our services;
Information to fulfill your requests for information or services;
Information relating to background checks, references, publications and/or professional credentials if you apply for or participate in a job or research opportunity with us;
Information you provide when you subscribe to our services or when you make a voluntary request for us to contact you.
Non-Personally Identifiable Information
Non-personally identifiable information is information that does not directly identify you or can reasonably be used to identify or contact you. The types of non-personally identifiable information that may be collected include, but are not limited to:
Information Stored in Cookies and Web Beacons. The Websites may also use available web-based technologies to collect personal information, such as cookies or web beacons. Cookies are pieces of information stored directly on users' computers or devices. Cookies allow us to collect information such as browser type, time spent on the online services, pages visited, referring URL, and other traffic and usage data. We may also use cookies for purposes such as determining what features interest our users, revising our site features or operations. Please note that some cookies and web beacons may be set by third parties, who may use the Websites to collect Personal Information about your online activities over time and across different services, applications, and other online products or services. For more information, see our Cookie Policy.
Pixel Tags and Log Files. The Websites may also use other tracking systems such as log files and pixel tags. For example, pixel tags, sometimes called web beacons, are similar in function to a cookie and can tell us certain information like what content has been viewed.
Information Collected in Connection with Analytics Technology. We may use various technologies to learn more about how visitors use the Websites, such as Google Analytics. Google Analytics uses cookies to help us analyze how visitors use the Websites. The information generated by the cookies about your use of the Websites includes your IP address. To learn more about Google Analytics practices and to opt-out, visit https://www.google.com/settings/ads or by downloading the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
A cookie banner will appear on your screen the first time when you visit our website, or access the website with a new device, informing you of our use of cookies. You may change your browser settings to block, manage, or delete cookies, but doing so may prevent you from using the functionality of the Websites.
Unique and online identifiers such as device identifiers, internet protocol addresses, cookie identifiers, beacon identifiers, pixel tags or mobile ad identifiers or similar technology;
Usage information such as how visitors interact with the Websites and browse behavior;
Device information such as device type, operating system, device identifiers, internet service provider, mobile network information, and browser type;
Aggregated data such as general demographic information, information regarding visitor interests or trends, and other summary information obtained from the collection of personal information from multiple individuals.
Information We Collect From Third Parties
We may receive personal information from third parties who have your permission to share the information with us, including your healthcare provider(s), healthcare organizations, research organizations and other sources. We may combine the information we collect from you with information we receive from third parties in a way that allows us to identify you or contact you.
Information Collected Automatically Through Technology
We may use automated technologies or systems when you interact with the Websites to collect certain personal information about you. This may include information such as:
Device identifiers, such as IP address, device identifiers, or mobile ad identifiers;
Browsing, search, and usage data, such as information about what pages you visit, links you click, content you view and interact with, and how much time you spend on the Websites;
Information collected through the use of cookies, web beacons, pixel tags, and similar technologies;
Information about how you use our services, features, and functionalities;
Referring URL or the webpage that led you to the Websites;
Information to help detect and prevent fraud and abuse.
Use of Personal Information
How We Use Your Personal Information
We may use the personal information we collect, including any of the categories of personal information described above, for one or more of the following business purposes and commercial purposes:
To provide, maintain, administer or operate the Websites or services;
To improve, enhance, correct or modify the Websites or services;
To personalize and improve your experience on the Websites or with our services;
To respond to your questions, requests, comments, or concerns, and for other customer service purposes;
To fulfill a request or transaction;
To identify and authenticate you;
To establish and manage your account;
To provide customer service and to respond to your inquiries, comments, questions, and concerns;
To send marketing, promotional, and other communications regarding products, services, or events;
To conduct surveys, questionnaires, or focus groups;
To understand your interests, preferences, professional background and needs;
To understand your experience with our Websites and services;
To better understand how visitors use the Websites;
To provide information relevant to you based on your interactions with the Websites and services;
To develop, test, and improve our products and services;
To diagnose and resolve technical issues and ensure technical functionality of the Websites and services;
To prevent, detect, and address technical and security issues, fraud, abuse, and other harmful activities;
To comply with applicable laws and regulations;
To respond to legal process, such as a subpoena or court order;
To protect the rights, property, and safety of Headwater Science, our users, and the general public;
To enforce our terms and conditions and other agreements;
To establish, exercise, or defend legal claims;
For other purposes as described to you at the time of collection;
As otherwise described in this Privacy Policy or in our terms of use;
For the purposes of our legitimate business interests.
How We Share or Disclose Information
We may disclose personal information that we collect or that you provide as described in this Privacy Policy and under the following circumstances:
To our affiliated entities for business purposes;
To third party service providers who perform services on our behalf, including website hosts, customer relationship management (CRM) providers, analytics providers, payment processors, and vendors who provide technical support;
To legal authorities and other governmental entities if required by law or if in good faith we believe disclosure is necessary to establish or exercise legal rights, to enforce our agreements, to protect the property or rights of our users or the general public, to prevent or stop activity we consider to be illegal or unethical, or to protect the security or integrity of the Websites or services;
If there is a change of control, merger, acquisition, or sale of all or substantially all of our assets, we may disclose your personal information in connection with these transactions;
To other parties with your consent or at your direction;
As otherwise described in this Privacy Policy or in our terms of use.
Security
We take reasonable precautions to protect the personal information we collect and maintain. However, no method of transmission over the internet or electronic storage is completely secure. Therefore, while we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its complete security.
Third Party Links
The Websites may contain links to third-party websites, applications, and other online services that are not operated by us. This Privacy Policy does not apply to third-party websites, applications, or online services, and we are not responsible for their privacy practices. Please be aware that we have no control over third-party websites or applications, and you should review their privacy policies before providing personal information or otherwise interacting with them.
Retention of Personal Information
We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements, except where otherwise required by applicable law. The length of time we retain personal information depends on the purposes for which we use it. In some cases, we may retain personal information for longer periods as necessary to comply with our legal obligations.
Your Rights and Choices
Communication Preferences
We offer you choices regarding the collection and use of your personal information. You may choose to stop receiving promotional communications from us by following the unsubscribe instructions included in such communications or by contacting us directly at privacy@headwaterscience.com.
Cookies and Tracking Technologies
A cookie banner will appear on your screen the first time when you visit our website, or access the website with a new device, informing you of our use of cookies. You may change your browser settings to block, manage, or delete cookies, but doing so may prevent you from using the functionality of the Websites. The means by which you can refuse cookies through your web browser may vary from browser to browser and you should visit your browser's help menu for more information.
Access, Correction, Deletion and Portability Rights
Depending on your location and applicable laws, you may have the following rights with respect to your personal information:
The right to request access to the personal information we hold about you;
The right to request correction or amendment of your personal information if it is inaccurate;
The right to request deletion of your personal information;
The right to request portability of your personal information, to the extent provided by law;
The right to request and obtain a copy of personal information you have provided to us in a portable format;
The right to opt-out of the sale or sharing of your personal information, to the extent permitted by law;
The right to appeal a denial of a request for rights outlined above, to the extent provided by law;
The right to be free from discrimination on the basis of exercising these rights.
To exercise any of these rights, please submit a request by emailing privacy@headwaterscience.com. Please note that we may need to verify your identity or obtain additional information before we can process your request. We will respond to requests in accordance with applicable law.
Children
The Websites are not intended for children under the age of 13. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that a child under the age of 13 has provided us with personal information, we will delete such information immediately. If you believe we have collected information from a child under the age of 13, please contact us immediately at privacy@headwaterscience.com.
Additional Information for EU Residents
This section applies to individuals who are located in the European Union ("EU Residents") at the time personal information is collected.
Legal Basis for Processing
We process personal information on the following legal bases:
Consent: We process personal information when you have provided your explicit consent to such processing for a specific purpose;
Performance of a Contract: We process personal information to perform a contract or service you have requested from us;
Legitimate Interests: We process personal information to pursue our legitimate business interests, such as understanding how visitors use our Websites, improving our services, preventing fraud and abuse, and ensuring the security of our Websites and services;
Compliance with Legal Obligations: We process personal information to comply with applicable laws and regulations.
Your Rights as an EU Resident
Depending on the legal basis for which personal information is processed, you may have the following rights:
The right to request access to personal information we hold about you;
The right to request correction of inaccurate personal information;
The right to request deletion of personal information;
The right to restrict our processing of your personal information;
The right to request portability of personal information to the extent provided by law;
The right to object to our processing of your personal information;
The right to withdraw consent where we are relying on consent as the legal basis for processing;
The right to lodge a complaint with your local data protection authority.
Data Protection Officer and Transfers
We may transfer personal information outside of the EU to countries that may not provide the same level of protection as your home country. When we do so, we will implement appropriate safeguards, such as standard contractual clauses, to protect your personal information. For more information regarding our data protection practices or to exercise your rights, you may contact our Data Protection Officer at privacy@headwaterscience.com.
Additional Information for California Residents
This section applies to individuals who are California residents and provides information about the personal information we may collect from you, how we use such information, and your rights with respect to such information. The terms used in this section have the meanings set forth in the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Categories of California Personal Information Collected
In the preceding 12 months, we have collected and may collect the following categories of California Personal Information from California consumers:
Personal identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers;
Additional personal identifiers not included in the above category, such as a signature, physical characteristics or description, insurance policy number, education information, or employment-related information;
Protected classification characteristics under California or federal law, such as age if 40 years or older, race, color, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, military or veteran status, genetic information (including familial genetic information), or citizenship status;
Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
Biometric information, such as genetic, physiological, behavioral, and biological characteristics, or activity patterns used to identify or authenticate the consumer;
Internet or other electronic network activity information that identifies or could reasonably be linked to you, such as browsing history, search history and information regarding an individual's interaction with an internet website, application, or advertisement;
Professional or employment-related information, such as current or past job history;
Inferences drawn from Personal Information, such as a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes;
Geolocation data, such as precise location information from your device or rough location generated based on IP address.
Sources of California Personal Information
We collect California Personal Information from the sources described in the "Use of Personal Information" section of this Privacy Policy.
Use of California Personal Information
We may use the categories of California Personal Information that we collect, as described above, for one or more of the business purposes and commercial purposes described in the "Use of Personal Information" section above.
Disclosures of California Personal Information for a Business Purpose
We may disclose the categories of California Personal Information that we collect as indicated above to the categories of third parties described in the "How We Share or Disclose Information" section above. In the preceding 12 months, we may have disclosed all of the categories of California Personal Information listed above to our service providers and other third parties when you direct us to do so, or when you use our services to do so.
Sales of California Personal Information
In the preceding 12 months, we have not sold California Personal Information, and we do not have actual knowledge that we sell California Personal Information of consumers under 16 years of age.
California Personal Information Rights and Choices
The CCPA and other California laws provide consumers with specific rights regarding their California Personal Information. This section describes those rights and explains how to exercise those rights to the extent we direct the purposes and means of the processing of your California Personal Information and otherwise qualify as a "business" under the CCPA.
Access to Specific Information and Data Portability Rights
California residents have the right to request that we disclose certain information to you about our collection, use, disclosure, and sale of your California Personal Information over the past 12 months. If we receive and confirm a verifiable consumer request from you, we will disclose to you, depending on the scope of the request:
The categories of California Personal Information we collected about you;
The categories of sources for the California Personal Information we collected about you;
Our business or commercial purpose for collecting California Personal Information about you;
The categories of third parties with which we share your California Personal Information;
The specific pieces of California Personal Information we collected about you;
If we disclosed your California Personal Information for a business purpose, a list of the categories of third parties to whom we disclosed California Personal Information for a business purpose identifying the categories of California Personal Information disclosed to those parties in the preceding 12 months.
Deletion Request Rights
California residents have the right to request that we delete California Personal Information, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete your California Personal Information from our records, unless an exception applies.
Correction Request Rights
California residents have the right to request that we correct inaccuracies in their personal information, taking into account the nature of the personal information and the purposes of the processing of your personal information.
Opt-Out Rights
California consumers have the right to opt out of the selling or sharing of personal information. You may submit an opt-out request by contacting us at privacy@headwaterscience.com.
Exercising Access, Data Portability, and Deletion Rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by emailing us at privacy@headwaterscience.com.
You may designate an authorized agent to submit requests on your behalf through a signed written permission that authorizes the agent to act on your behalf. We may mandate additional requirements when submitted through an authorized agent, such as requiring you to verify your identity directly with us or to directly confirm the authorized agent's permission to act on your behalf.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. Your request must provide information sufficient to permit us to reasonably verify you are the person about whom we collected California Personal Information, or an authorized agent of that person.
We cannot respond to your request or provide you with California Personal Information if we cannot verify your identity or authority to make the request and confirm the California Personal Information relates to you.
Making a verifiable consumer request does not require you to create an account with us. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.
Non-Discrimination
Subject to certain exceptions, you have a right to not receive discriminatory treatment for exercising your access, data portability, and deletion rights described above.
Contact Us
If you have any concerns or questions about this Privacy Policy and the privacy practices set forth herein, please contact us directly:
Headwater Science 700 Park Office Drive, Suite 200 Durham, NC 27713 +1 (984) 234-0268 privacy@headwaterscience.com