Cedar - Privacy Policy

Privacy Policy

Privacy Policy

Privacy Policy

As patients trust us with sensitive information, privacy is at the core of everything we do

Privacy Policy

Effective Date: July 2023

Last Updated: November 2024

Introduction

Cedar Cares, Inc. (“Cedar”, “we”, “our”, or “us”) is a consumer-friendly enterprise platform that reduces administrative and billing friction, leading to better outcomes for providers, payers, and the people they serve.

This Privacy Policy tells you how Cedar handles your personal information collected from or about you by Cedar on its own behalf, such as through the Cedar corporate website (collectively, the “Website”). 

This Privacy Policy does not describe when we process personal information about you on behalf of our customers, such as health care systems and providers. We provide services to our customers as a data processor and/or business associate. This means that our customers, not Cedar, determine the purpose and means of the processing of personal information. If you have questions or would like to exercise your legal rights with respect to personal information in this context, please contact your health care provider. 

By using the Website, you acknowledge that you have read this Privacy Policy, and consent to the handling of your personal information as described in this Privacy Policy, which we may update from time to time as described in the “Changes to this Policy” section, below.

Cedar is a United States company. The Cedar Website is not intended for users outside of the United States.

Please review this Privacy Policy carefully before using the Website.

Information we collect and receive

1. How we collect information

We collect personal information directly from you in the below contexts. We also collect personal information from you using sources like advertising or marketing networks, data analytics providers, information aggregators, and other service providers or third parties. 

  • If you complete any forms on our Website or otherwise access the Website

  • In connection with your interactions, inquiries, or other requests

  • If you participate in a contest, promotion, or survey

  • If you contact us via e-mail or through our customer service, including through the use of online chat tools that we may make available

  • We and our third-party vendors may use tracking tools like browser cookies, flash cookies, pixels, and web beacons to automatically collect information from you. Please see “How do we use cookies and other tracking technologies?” for more information.

2. Categories of Information

The information that we collect includes the following categories:

Account Information. When you create an account, you provide us with information such as a username and password.

Contact Information. This may include your name, telephone number, including mobile device number, email address, and/or mailing address.

Employment and Professional Information. This includes your occupation, industry or professional credentials, specialty practice areas, and other industry affiliations.

Website Activity and Device Information. Our servers automatically record some information about your interactions with the Website, such as number of log-ins, time and date of payments and visits to the Website, the type of device you are using, your operating system, your IP address, sites or apps visited before and after coming to our Website, and data from online cookies and similar technologies, which may be collected over time and across different websites and apps.

Commercial Information. We collect information about your product and service preferences and interests, including your interest in our products.

Social Media Information. Account names, handles, biographies, and other details that you make available on social media networks.

Communications and Other Information You Provide to Us. We collect the content of your messages that you send to us (including via call, text, email, or chat) in addition to metadata associated with that message, such as the timing and method of communication.

Location Information. We may collect the approximate location of your device from your IP address. 

Other information that we may infer based on the above.

How we use your information

We use, on behalf of your healthcare provider, your information in accordance with applicable laws to:

To provide and maintain the Website and our products and services. 

To analyze and improve our Website, including developing new products or services. 

To enhance and help us better understand your browsing experience, needs, and preferences and provide consistent, personalized services and experiences across our Website.

To promote and conduct educational or promotional events, including those that may be in person, and to support our marketing and advertising activities, including delivering personalized advertising.

To contact you. Please note that we may communicate with you by email, telephone call, text message or mail. We also may contact you by telephone or text message at your wireless device number using autodialer technology.

To respond to your requests. If you contact us with a concern or question, we will use your information to respond to you.

To protect the security, availability, and integrity of the Website.

To protect us, our users, and the public, and comply with applicable law, regulation, or legal process, including to investigate, prevent, and respond to fraud and abuse, resolve disputes and protect the rights of users and third parties, respond to claims and legal process (such as subpoenas and court orders), fulfill our reporting obligations, monitor and enforce compliance with our contracts, and otherwise detect, prevent, or stop any activity that may be illegal, unethical, or legally actionable

To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our customers is among the assets transferred.

Your privacy choices

You can review and change certain personal information related to your use of the Website (such as your name and contact information) by contacting us using the information provided at the end of this Privacy Policy.

If you prefer not to receive promotional communications from us, you can let us know by contacting us using the information provided at the end of this Privacy Policy. You may also follow the instructions included with the message, such as by following unsubscribe or opt out links. Please note that we may still send you messages in response to your inquiries or about other non-promotional items, such as managing your account or relationship with us. 

Disclosing your information

We may disclose the information that we collect to the following categories of third parties: 

Service providers. We engage vendors to perform certain functions on our behalf such as: auditing and accounting firms, professional services consultants, providers of data hosting, storage, and analytics services, and IT and security vendors.

Social media platforms. Where you choose to interact with us through social media, your interaction with these platforms typically allows the social media company to collect some information about you through cookies and other digital tracking mechanisms that they place on your device. In some cases, the social media company may recognize you through these technologies even when you do not interact with their platform. Please visit the social media companies’ respective privacy policies to better understand their data collection practices and the controls they make available to you.

Companies involved in advertising. We work with companies that assist us in advertising our products, services, and Website to you and others who may be similarly interested. These companies may use tracking technologies on our Website to collect or receive information over time and across different websites or platforms, including this Website and elsewhere on the internet, and use that information to provide measurement services and provide you with targeted ads. Please note that some jurisdictions may consider this activity a “sale” of personal information.

Corporate affiliates. We may disclose personal information within our corporate family of companies.

Business partners. We may work with other companies to provide you with certain product or service offerings.

Law enforcement, government agencies, or parties in a legal proceeding. We may share personal information with these entities to comply with the law or assist law enforcement. We may also provide your personal information to third parties in the context of a subpoena or similar legal process.

In the context of a merger or similar transaction. We may buy or our business or a portion of our business or assets may be bought by other businesses or entities. In any such event, we may transfer or assign the information we have collected as part of such merger, acquisition, sale change of control or other disposition of assets. In such transactions, your information may be included in the transferred business assets. Also, in the unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your information is treated, transferred, or used, and your personal information may be included in the transferred assets.

As otherwise described to you and with your consent in accordance with applicable law.

We may share aggregate or de-identified information, such as statistical information, with third parties.

Cookies and other tracking technologies

We and our third-party vendors may use “cookies”, pixel tags, and other tracking technologies to keep, and sometimes track, information about you on our Website. Cookies are small data files that are sent to your browser or related software from a Web server and stored on your computer’s hard drive. Cookies track where you travel on the Website and what you look at. In doing so, a cookie may enable us to relate your use of the Website to your information. Many other websites use cookies for very similar purposes.

Most browsers can be set to inform you when a cookie has been sent to you and provide you with the opportunity to refuse that cookie. Additionally, your Flash player can be set to reject or delete Flash cookies. Refusing a cookie will generally not interfere with your use of the Website. However, refusal of a cookie may, in some cases, preclude you from using or negatively impact the display or function of the website or certain areas or features of the Website. Please note that our Website does not currently recognize “Do Not Track” signals. 

Third Party Analytics

We use automated applications, such as Google Analytics, to evaluate usage of our Website. We also may use other analytic means to evaluate our Website. We use these tools to help us improve the Website, performance, and user experiences. These entities may use cookies and other tracking technologies to perform their services. To learn how Google Analytics collects and processes data, please visit: “How Google uses data when you use our partners’ sites or apps” located at www.google.com/policies/privacy/partners.

Security

We maintain certain administrative, technical, and physical safeguards designed to protect the privacy and security of the information we collect through the Website. However, no information system can be 100% secure, so we cannot guarantee the absolute security of your information. Moreover, we are not responsible for the security of information you transmit to the Website over networks that we do not control, including the Internet and wireless networks.

Of course, we appreciate your help in safeguarding the integrity of your own privacy. Please keep your username and password confidential and safe from discovery by others, and close your browser or mobile app after you are done. Just as important, we encourage you to let us know immediately if you suspect that the information you share with us is being used by an unauthorized person or in an unauthorized manner. To contact us, see the contact information below.

Children’s information

Our Website is not directed to children, and we do not knowingly collect online information from children under the age of 18 or minors. Accordingly, we do not have actual knowledge that we sell or share the personal information of consumers under the age of 16 years old. However, if we learn that we have received personal information directly from a child under the age of 18 without appropriate parental consent, we will delete that information from our database.

Retention

We retain personal information for as long as needed or permitted in light of the purposes for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:  

  • The length of time we have an ongoing relationship with you and provide the Website to you (for example, for as long as you are signed up to receive our promotional communications);
  • Whether there is a legal obligation to which we are subject (for example, we are required to keep certain business records for a certain period of time); or
  • Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Your privacy rights

You may have some or all of the rights listed below (“Data Subject Rights”) with respect to the personal information that we collect or process about you, however, these rights differ depending on your place of residency, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah,  and Virginia. Please note that we reserve the right to honor your Data Subject Rights to the extent required by applicable law.

  • Right to Confirm Processing, Access, and/or Obtain a Copy: If you ask us, we will confirm whether we are processing your personal information. Additionally, upon request, we will provide you with a copy of all personal information you are lawfully entitled to receive, potentially including specific pieces of information, along with certain other details.
  • Right to Amend: If you believe your personal information is inaccurate or incomplete, you may request that we correct it.
  • Right to Delete: You may request that we delete personal information that we maintain about you.
  • Right of Portability: You may request that we move, copy, or transfer the personal information that we maintain about you to another organization. 
  • Right to Revoke Consent and/or Opt Out of Certain Processing Activities: You may ask us to restrict or stop the processing of your personal information in certain contexts, such as if we process personal information that is considered “sensitive” under applicable law or engage in certain automated decision-making activities.
  • Right to Opt Out of Targeted Advertising: We engage in targeted advertising, which is the practice of serving you tailored advertisements based your personal information gathered over time and across other businesses, websites, applications, or services. Some jurisdictions refer to this activity as “sharing.” You have the right to opt out of this practice.
  • Right to Opt Out of Sales: Some locations may consider targeted advertising a “sale” of personal information. You may request that we not “sell” your personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising Data Subject Rights, but we may charge a reasonable fee as permitted by law in fulfilling these rights, such as if you request multiple copies of your personal information.
  • Right to Appeal: If we deny your request to exercise a Data Subject Right, you may have the right to appeal the decision with us. If you would like to appeal a prior decision, please be sure to include information about your prior request so that we may locate our earlier determination. 
  • Right to Lodge a Complaint: You may submit a complaint to us and/or the competent supervisory authority in the place in which you live if you have any concerns about our processing of your personal information.

If you or your authorized agents would like to exercise a Data Subject Right, you may do so by following the instructions at the end of this Privacy Policy. In order to process your request to exercise a Data Subject Right, we will ask you to verify your identity by confirming your name, e-mail address, phone number, or other identifiable information that we have in our records, such as most recent interaction with us, if applicable. We will require the authorized agent to demonstrate authority to act on your behalf, such as by providing signed permission. We may also verify the authenticity of the request directly with you.

Additional disclosures for California residents

If you reside in California, please read this section for additional disclosures about how we collect, use, and disclose information about you under the California Consumer Privacy Act, as amended (or “CCPA”) (California Civil Code Section 1798.100 et seq.).

  • Categories of Personal Information Collected: In the previous 12 months, we have collected the personal information listed in the section “Information we collect and receive” above. This information falls into the following categories under the CCPA: identifiers; categories of personal information described in Cal. Civ. Code 1798.80(e); employment or professional information; commercial information; geolocation information; internet or electronic network activity information; audio, electronic, visual, and similar information, inferences drawn from the above categories. Additionally, we collect the following “sensitive” personal information: characteristics of protected classifications, contents of messages that you send to our customer service providers. 
  • Sensitive Personal Information Uses or Disclosures: We do not use or disclose “sensitive” personal information for purposes other than those specified by the CCPA.
  • Business or Commercial Purpose for Collecting and Selling Information: We collect personal information for the business and commercial purposes described in “Information we collect and receive” and “How we use your information” above.
  • Categories of Sources of Personal Information: We collect personal information from and about you as described in “How we collect information” above.
  • Categories of Third Parties with Whom We Disclose Information: We may disclose your personal information with third parties as described in “Disclosing your information” above.
  • Categories of Personal Information Disclosed: In the preceding 12 months, we have disclosed the categories of personal information listed in “Information we collect and receive” for the reasons described in “Disclosing your information” above.
  • Sale or Share of Personal Information: Because we engage in the practice of cross context behavioral advertising, also known as online targeted advertising, we may “sell” and/or “share” your personal information as those terms are defined by the CCPA. In the preceding 12 months, we may have “sold” or “shared” identifiers, commercial information, and internet or electronic network activity information with data analytics, advertising networks, and/or social media networks.

Changes to this Privacy Policy

We reserve the right to change this Privacy Policy from time to time by posting a new Privacy Policy to this page. You are advised to check this Privacy Policy regularly for any changes. By continuing to use the Website after such changes have been made, you agree to those changes. If we make any material changes to this Privacy Policy, we will either notify you or place a prominent notice on our Website.

Contact Information

If you have any questions about this privacy policy or Cedar’s privacy practices, or wish to exercise your Data Subject Rights, please do not hesitate to contact us at:

Email: [email protected]
Postal Address:
Cedar Cares, Inc.
32 6th Avenue, 18th Floor
New York, NY 10013
Attn: Privacy Officer

Additional information for job applicants

This section supplements the information provided above and describes the additional personal information we collect when you apply for a job with us. We may collect the personal information in the below list in the following ways: directly from you; from publicly available sources, such as government entities, public records systems, and social media networks; data analytics providers and data brokers; or as you may otherwise authorize, such as a former employers or references. 

Please note if you use our Website in the job application process, additional information is collected, as described above. We may collect the personal information categories listed in Cal. Civ. Code § 1798.80(e) (the California Customer Records Statute) in addition to the categories of personal information listed below. Items with an asterisk (*) may be considered “sensitive” personal information according to the CCPA.

  • Identifiers*: Government-issued identification numbers, including your Social Security, driver’s license, passport, state identification card, or military identification card numbers
  • Demographics and Protected Classifications*: citizenship, gender, data of birth, age, and other traditionally protected classifications that you choose to disclose, such as race and ethnicity, marital status, sexual orientation, veteran or military status, disability, and medical status
  • Professional or Employment Related Information: professional associations and employment history, including name of employer, position, employer contact information, and associated employment records and references
  • Educational Information: educational institutions attended, degrees and certifications attained, and other educational or student records, which may include details about attendance, grades, and academic and disciplinary history

We generally collect this personal information in order to evaluate your application for employment. For more details about how we use and disclose the personal information listed here, please refer to “How we use your information” and “Disclosing your information” above.