Ovia Health Non-App Privacy Policy
Introduction and scope
This Privacy Policy (“Policy”) describes how Ovuline, Inc., doing business as Ovia Health (“Ovia”) collects, uses and shares personal data collected by Ovia from business contacts, prospective business contacts, and other individuals who may come into contact with Ovia as part of Ovia’s internal operations, management and administration or through Ovia’s corporate website (“Ovia Operations”). Ovia Health is a subsidiary of Labcorp, a global life-sciences leader.
This Policy does not apply to personal data collected from job applicants and employees, which is governed by privacy notices provided as part of the recruitment, application and employment process. This Policy does not apply to personal data collected from users of the Ovia, Ovia Pregnancy and Ovia Parenting apps and health coaching services. If you are a user of the Ovia, Ovia Pregnancy or Ovia Parenting apps, you should review the Ovia Health App Privacy Policy here.
In this Policy, the term “personal data” refers to information relating to an identified or identifiable individual. The term “you” refers to individuals who come into contact with Ovia.
Personal Data We Collect
We collect the following categories of personal data in connection with Ovia Operations:
| Category | Examples of Data We Collect In this Category |
| Identifiers | Name, email address, postal address Device identifiers such as IP address, AdID, IDFA |
| General personal information including employment, education, health information | Employer, job title |
| Legally protected classifications such as race or gender | Gender |
| Purchase histories or interests | Interest in Ovia products based on your browsing history |
| Internet and app activity information | Ovia website and white paper browsing history, Ovia email opens and views Device type, operating system, other device parameters |
| Professional and employment related | Name of employer, title, job type, industry |
| Inferences | Ovia product interest |
Where Do We Get Personal Data?
| Categories of Data Sources | Examples of Our Use of These Sources |
| Direct collection from your interaction with Ovia’s sales and marketing activities | We collect personal data when you attend an Ovia event or webinar, meet Ovia representatives at a trade show or other public event, respond to an Ovia survey, or subscribe to an Ovia email list. |
| Third party directories, including LinkedIn, social networks, business directories, list providers. | We build our contact lists through use of third party sources and list rentals and purchases |
| Technical and device information through tags, pixels, cookies, IP addresses, AdID, IDFA and similar tracking technologies (“tracking technologies”) | We use technical device information and tracking technologies to identify your interactions with Ovia’s website and content and to gauge your interest in our products. |
How and Why Do We Use Personal Data?
We collect and use your personal data, in all of the categories discussed above, for Ovia Operations, including:
- Developing, advertising, marketing and providing Ovia’s products and services and conducting surveys
- Operating and maintaining the security of Ovia’s products, services, equipment and networks
- To comply with law and law enforcement requests
- To conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ovia’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ovia about employees is among the assets transferred
Lawful Processing. We collect, use and otherwise process personal data as allowed under applicable law, including where based on one or more of the following:
– The consent you provide to us at the point of collection of your personal information;
– The performance of the contract we have with you;
– The compliance of a legal obligation to which we are subject;
– The legitimate interests of Ovia, you or a third party, where not overridden by your interests, fundamental rights or freedoms. Ovia’s legitimate interests include the lawful conduct of its business.
When We Share Personal Data, What Categories of Recipients Do We Share With?
| Categories of Recipients | Examples of Recipients We Share With |
| Service Providers | Ovia’s B2B customer data is processed and stored by service providers working on Ovia’s behalf, including our cloud services provider Amazon Web Services, our marketing automation solution Eloqua, and Salesforce, which provides us with customer relationship management systems. |
| Marketing technology vendors | Our marketing materials and ads may contain tracking technologies which allow Ovia and the vendors we work with to collect technical information from your mobile device (such as IP address, AdID) to track your interaction with our content and ads. |
| Analytics providers | We share technical information from your device with analytics companies to understand the performance of our marketing and website. |
| Social media platforms and networks | We may share device data with social media networks to measure the effectiveness of advertising on those networks. |
| Affiliates and Successors | We may share data with our parent company Labcorp and with companies under common control, and with any successors in the event of merger, acquisition, or similar transaction. |
| Government Authorities and Recipients of Compelled Disclosures | Ovia may provide personal data to courts, law enforcement, and governmental authorities and other third parties if required by law, subpoena, directive from a regulatory authority or as otherwise necessary to comply with legal requirements or to protect the rights or property of Ovia or third parties. Please also see How Does Ovia Respond to Data Requests |
What Categories of Personal Information Do We Sell or Share for Advertising?
When Ovia purchases advertising or analytics services, we may do so under terms that permit the providers of such services to re-use personal data they acquire for their own purposes, which may include personalized advertising. The categories of information that may be shared in these circumstances are described below.
| Category of Personal Information | Categories of Recipients | Purpose of Sale or Ad Sharing |
| Identifiers General personal information Internet and app activity information | We share online identifiers and web tracking information with analytics providers, advertising networks, advertising platforms, and advertising technology providers. | To receive advertising or analytics services. |
| Legally protected classifications such as race Purchase histories or interests Professional and employment related Inferences | Not shared. | Not applicable. |
No Selling or Sharing of Personal Information of Consumers under 16
To its knowledge, Ovia does not sell or share any personal data of consumers under 16.
Categories of Personal Information Disclosed for Business Purposes
| Category | Categories of Recipients | Business Purpose for Sharing |
| Identifiers | Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers. | For internal operations (hosting, marketing, analytics) and to purchase ads. |
| General personal information | Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. | For internal operations (hosting, marketing, analytics). |
| Legally protected classifications such as race, gender | Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. | For internal operations (hosting, marketing, analytics). |
| Purchase histories or interests | Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems,. | For internal operations (hosting, marketing, analytics). |
| Internet and app activity information | Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers. | For internal operations (hosting, marketing, analytics) and to purchase ads. |
| Professional and employment related | Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. | For internal operations (hosting, marketing, analytics). |
| Inferences | Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. | For internal operations (hosting, marketing, analytics). |
Third Parties Controlling the Collection of Personal Information
When Ovia discloses personal data to third parties, we may disclose to processors who act on Ovia’s behalf and to controllers, third parties who act on their own behalf even if they also provide services to Ovia. The controllers to whom we disclose B2B personal data are:
- Google: We use Google technology and services to obtain analytics. As a result of this, Google obtains and uses certain of your personal data as described here.
- Demandbase: We use tracking technologies from Demandbase on our website to measure the effectiveness of our advertising and marketing. Demandbase may reuse that information for its own purposes as described in its Privacy Policy.
- Advertising Platforms and AdTech Vendors: Some ads purchased by Ovia include tracking technologies (tags or pixels, in particular) that allow advertising platforms or adtech vendors to measure ad performance. Information derived from your interaction with Ovia ads, marketing or content may be reused to make inferences about your interests and to show you other advertising.
Data Retention
We retain your personal information for a period of five years after last activity. After this retention period ends, we delete your data.
While these are our standard retention periods, you can delete your data at any time as described in the next section.
What Are Your Choices?
You may opt-out of Ovia marketing emails at any time by using the ‘unsubscribe’ link at the bottom of any Ovia marketing email or by contacting us at support@oviahealth.com.
Access, Deletion and Correction
You may access, correct and delete the personal data Ovia holds about you at any time. Ovia honors any consumer data rights provided by applicable law. Ovia does not discriminate or retaliate for the exercise of data subject rights. You can email Ovia at support@oviahealth.com to exercise these rights. Ovia may require you to verify your identity in order to exercise these rights. Any authorized agents seeking to exercise data subject rights on behalf of any Ovia users should contact support@oviahealth.com with their request.
Do Not Sell or Share My Personal Information
You have the right to opt-out of the sale or sharing of your personal data for advertising. To exercise your opt-out right, click on the “do not sell or share my personal information” link at the bottom of our homepage.
Global Privacy Control
Ovia respects ‘do not sell’ signals sent by your browser. You will need to send this signal from each browser you use.
Appeal Rights
If your request to exercise your rights is refused, you may send your notice of appeal by email to legal@oviahealth.com, for review by Ovia’s Legal Department. We will resolve your appeal within 30 days of the date of receipt of your email.
Other Relevant Information
Even if you exercise your rights described above, Ovia reserves the right to retain personal data as permitted by applicable law.
Data Security
Ovia protects personal data with security measures that are consistent with industry standards, including background checks on all employees and data encryption in transit and at rest. We will notify you of security incidents as required by law.
Data Retention
We store personal data for the period that your relationship with Ovia is active and then for a further retention period that reflects the period during which we reasonably anticipate you may remain interested in information about Ovia. After this retention period ends, we delete your data.
How to Contact Ovia?
To contact Ovia to exercise your privacy choices, please see “What Are Your Choices?” above.
Ovia has designated a Data Protection Officer. To contact our Data Protection Officer or for questions or complaints about Ovia’s processing of personal data, contact us at:
Data Protection Officer
Ovuline, Inc., dba Ovia Health
263 Summer Street, Floor 6,
Boston, MA 02210
legal@oviahealth.com
Data subjects located in the EEA or UK may contact the Data Protection Officer at the address above or Ovia’s EU and UK representative at dpo@labcorp.com.
You may also have the legal right to lodge a complaint about Ovia’s data processing with your local consumer protection or data protection authority.
Other Issues
Children: Ovia does not knowingly collect personal data under Ovia Operations from children under 13 (for the US) or from individuals for whom parental consent is required for collection or processing of personal data.
Third Party Websites or Apps: Some Ovia properties may take you to websites or apps that are operated by other companies. Ovia is not responsible for the privacy practices of its advertisers, sponsors or others. You should review the privacy policies of those sites and apps.
Legal requirements: Ovia may provide personal data to courts, law enforcement and governmental authorities if required by law or to protect the rights or property of Ovia or third parties. Ovia may access, use and preserve data to comply with law, in anticipation of litigation, or to protect the rights or property of Ovia or third parties, even if the data is subject to a deletion request from you. We may also provide information to law enforcement or authorities to protect the safety of users of the apps or others.
Sale, merger, or change of ownership, transfer to affiliates: If Ovia Health merges with another company, or its equity securities or all or a part of its assets are sold to a third party, your personal data may be transferred to the buyer or successor entity. Your personal data may also be shared with affiliated companies under common ownership or control with Ovia.
Changes to this Policy
Ovia may modify this Policy from time to time by posting an updated version of the Policy.
Last updated: July 1, 2024