Last updated: June 9, 2022
Bamboo Health (“Bamboo Health”, “we”, “our”, or “us”) cares about your privacy. This Privacy Notice (“Privacy Notice”) describes how Bamboo Health collects, uses, and otherwise processes your personal information in connection with any associated websites that post or link to this Privacy Notice, including www.bamboohealth.com (the “Sites”).
In certain situations, Bamboo Health functions as a service provider for our customers. In the course of providing services for such customers, we may collect your personal information on behalf of our business customers. We refer to this type of personal information as “Customer Data.” We collect and process Customer Data on behalf of our business customers subject to restrictions set forth in our contracts with them, including HIPAA business associate agreements. This Privacy Notice does not apply to our collection and processing of Customer Data. We recommend referring to the privacy notice of the Bamboo Health customer with which you have a relationship for information on how they engage service providers, like us, to collect and process Customer Data on their behalf.
Sometimes we collect personal information automatically when an individual interacts with our Sites and sometimes, we collect personal information directly from an individual. At times, we may collect personal information about an individual from other sources and third parties, even before our first direct interaction.
We may collect any personal information you provide to us when, for example, you contact us for support or other inquiries through the Sites. The types of personal information that we may collect include:
Where an individual chooses to contact us, we may need additional information to fulfill their request or respond to their inquiry. We may provide additional privacy disclosures where the scope of the inquiry/request or the personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information the individual provides at that time.
As is true of most digital platforms, we and our third-party providers may also collect personal information from an individual’s device, browsing actions and website usage patterns automatically when visiting or interacting with our Sites, which may include log data (such as internet protocol (IP) address, operating system, browser type, browser id, the URL entered and the referring page/campaign, date/time of visit, the time spent on our Sites and any errors that may occur during the visit to our Sites), analytics data (such as the electronic path taken to our Sites, through our Sites and when exiting our Sites, as well as usage and activity on our Sites); and location data (such as general geographic location based on the log data we or our third-party providers collect).
To manage cookies, an individual may change their browser settings to: (i) notify them when they receive a cookie, so the individual can choose whether or not to accept it; (ii) disable existing cookies; or (iii) automatically reject cookies. Please note that doing so may negatively impact an individual’s experience using our Services, as some features and offerings may not work properly or at all. Depending on an individual’s device and operating system, the individual may not be able to delete or block all cookies. In addition, if an individual wants to reject cookies across all browsers and devices, the individual will need to do so on each browser on each device they actively use. An individual may also set their email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether they have accessed our email and performed certain functions with it.
For more information on our and third-party partners’ data collection and online advertising practices, please see the Third Party Tracking and Online Advertising section of this Privacy Notice.
Personal Information We Collect from Other Sources
We also obtain personal information from other sources, which we often combine with personal information we collect either automatically or directly from individuals.
We receive the same categories of personal information as described above from the following sources and third parties:
Bamboo Health may use your personal information for the following purposes:
We may aggregate, de-identify and/or anonymize any information collected through the Sites so that such information is no longer reasonably capable of being associated with you. We may use aggregated or anonymized information for any purpose, including for research and marketing purposes. We may share or publish aggregated or anonymized information that doesn’t specifically identify you, such as statistical information about visitors to our websites or statistical information about how customers use our products and services.
We may share, or we may permit third-party online advertising networks, social media companies, and other third-party services, to collect information about your use of our Sites over time so that they may play or display ads that may be relevant to your interests on other websites or apps, or on other devices you may use. Typically, though not always, the information we share is provided through cookies or similar tracking technologies, which recognize the device you are using and collect information, including hashed data, clickstream information, browser type, time and date you visited the website and other information. This information is used to display targeted ads on or through our services or on other websites, apps, or services. We or the online advertising networks use this information to make the advertisements you see online more relevant to your interests. We may also display targeted advertising to you through social media platforms, such as LinkedIn, Facebook, TikTok, Twitter, Google, Pinterest, and others. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our services while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. These advertisements are governed by the privacy policies of those social media companies that provide them.
Google Analytics and Advertising. We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to our services.
You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences, or by visiting NAI’s online resources at http://www.networkadvertising.org/choices.
To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Digital Advertising Alliance’s (DAA) resources and/or the Network Advertising Initiative’s (NAI) online resources, at www.aboutads.info/choices or http://www.networkadvertising.org/choices/ and you can opt-out of receiving some interest-based advertisements on mobile apps by visiting http://www.aboutads.info/appchoices. You may also be able to limit interest-based advertising through the settings menu on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest-based ads” (Android).
Marketing Communications: You can stop receiving marketing and non-transactional communications from us by clicking on the “unsubscribe” link located on the bottom of our emails, by replying or texting ‘STOP’ if you receive SMS communications, or by turning off push notifications on our apps on your device. Additionally, you may unsubscribe by contacting us using the information in the “Contact Us” section below. Please note that opting out of marketing communications does not opt you out of receiving important business communications related to your current relationship with us, such as information about your subscriptions, service announcements, or security information.
When you provide us with personal information via the Sites, Bamboo Health may store, process, and use that information for as long as is necessary for our business purposes, and to the extent necessary to comply with our legal, accounting, or compliance obligations.
The Sites are designed to provide information about our products and services, and we do not target the Sites at children. Bamboo Health does not knowingly collect or process information from children under the age of 13. If you are aware of a child providing his or her personal information, please contact us at [email protected].
The Bamboo Health Sites may include links to other third-party websites or resources (“Third-Party Sites”) offered by independent organizations that may or may not be affiliated with Bamboo Health. Bamboo Health has no control over these Third-Party Sites and does not endorse and is not responsible for any content, advertising, products, services, or other materials found on the Third-Party Sites. To learn about the personal information practices of third parties, please visit their respective privacy policies.
We will update this Privacy Notice from time to time to reflect changes in our practices, updated technologies, emerging legal and regulatory requirements, and other factors. If we do, we will notify individuals by email to their registered email address, by prominent posting on our online services, or through other appropriate means. All changes shall be effective from the date of publication unless otherwise provided. The date the Privacy Notice was last revised is identified at the top of the page. We encourage you to periodically review this Privacy Notice to stay informed about our collection, processing and sharing of your personal information.
If you have questions regarding this Privacy Notice or our privacy practices, please contact Bamboo Health at [email protected], or write to us at the following mailing address:
9901 Linn Station Rd., Suite 500
Louisville, Kentucky 40223, USA
These Additional California Privacy Disclosures (the “CA Disclosures”) supplement the information contained in our Privacy Notice and apply solely to individual residents of the State of California (“consumers”).
These CA Disclosures provide additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California within the scope of the California Consumer Privacy Act of 2018 (“CCPA”).
Unless otherwise expressly stated, all terms in these CA Disclosures have the same meaning as defined in our Privacy Notice or as otherwise defined in the CCPA.
When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include information that is made publicly available from government records, that is deidentified or aggregated such that it is not reasonably capable of being associated with an individual, or that is otherwise excluded from the CCPA’s scope.
For the purposes of these CA Disclosures, personal information does not include:
In the last 12 months, we have collected the following categories of personal information from and about you:
We collect this information directly from individuals, their browser or device when they interact with our services, our affiliates, an individual’s employer, our service providers and business partners, social media and professional networks, information providers and other publicly available sources. For more information about the personal information that we collect and how we collect it, please refer to the Information Bamboo Collects About You section of our Privacy Notice.
We use the above categories of personal information for a variety of purposes. For example, we use personal information to communicate with customers about our services, to provide customers with our services, and to otherwise operate our business. For more information about our use of Personal Information, please refer to the How Bamboo Health Uses Your Information section of our Privacy Notice.
As further described in the How Your Information May Be Shared section of our Privacy Notice, we disclose personal information to third parties for business purposes.
Disclosure for Business Purposes
In the last 12 months, we have disclosed for business purposes all categories of personal information outlined above to the following categories of recipients: Corporate Affiliates, Business Partners, Service Providers, and certain other third parties where individuals have provided consent or direction, or where we are complying with law or protecting our rights (such as to our legal advisors).
Sale of Personal Information
As is common practice among companies that operate online, in the last 12 months, we have allowed certain third-party providers to collect information about consumers directly through our website and other online services for purposes of analyzing and optimizing our services, delivering ads, providing content and ads that are more relevant, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. As a result of this practice, in the last 12 months, we have sold the following categories of personal information to these third-party providers, subject to each consumer’s settings and their right to opt-out:
Since our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 16, we do not sell personal information of consumers we know to be under the age of 16.
For more information about how we otherwise disclose personal information, please refer to the How Your Information May Be Shared section of our Privacy Notice.
If you are a California resident, the CCPA allows you to make certain requests about your personal information. Specifically, the CCPA allows you to request us to:
|The Right to Know||You have the right to request any or all of the following information relating to the personal information we have collected about you or disclosed in the last 12 months, upon verification of your identity:
|The Right to Request Deletion||You have the right to request the deletion of personal information that we have collected from you, subject to certain exceptions.|
|The Right to Opt Out of Personal Information Sales||You have the right to direct us not to sell personal information we have collected about you to third parties now or in the future.|
|The Right to Non-Discrimination||You have the right not to receive discriminatory treatment for exercising any of the rights described above.
However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.
|“Shine the Light”||California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83).|
To Exercise Your Right to Know or Right to Deletion
Please submit a request by:
We will need to verify your identity before processing your request. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with a request to exercise the right to know and/or the right to deletion to that personal information identified in our Privacy Notice, certain requests may require us to obtain additional personal information from you such as name, address, and date of birth. In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity.
To Exercise Your Right to Opt Out of Personal Information Sales
As described above, we permit third party advertising networks, social media companies and other third party businesses to collect and disclose your personal information (including preferences, geolocation, commercial information and internet, network and device information) directly from your browser or device through cookies or tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us. These third parties use this information for the purposes of serving ads that are more relevant, for ad campaign measurement and analytics, and for fraud detection and reporting and may sell that information to other businesses for advertising and other purposes. By visiting here, you can opt out from sales of this type of personal information by businesses that participate in the opt-out tool. To make opt-out requests related to mobile apps on your device for businesses participating in the DAA’s CCPA App-based Opt-Out Tool, you can download the appropriate app at www.youradchoices.com/appchoices. To learn more about how third parties collect information through tracking technologies and what other choices you may have in relation to those activities, please see Third Party Tracking and Online Advertising section of our Privacy Notice.
To Submit a Request as an Authorized Agent
In certain circumstances, you are permitted to use an authorized agent (as that term is defined by the CCPA) to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf by:
We may deny a request in the event we are not able to verify the authorized agent’s authority to act on your behalf.
We do not and will not “sell” the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “Right to Opt In”) from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.
The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. To opt out of such sharing, please email us at [email protected].