- Information collected pursuant to a Business Associate Agreement with a HIPAA Covered Entity;
- Information collected in the course of a clinical trial pursuant to an Informed Consent Agreement; and
- Information that you have authorized us to use or disclose under circumstances that are different than those specified in this policy.
Personal Information Category
- Identifiers such as
- Unique personal identifier (e.g., online identifier)
- Internet Protocol address
- Date of Birth
- Phone Number
- Email address
- Account name
- Social security number
- Driver’s license number, or
- Other similar identifiers
- Characteristics of protected classifications under California/federal law (e.g., age, race, sex, disability status, veteran status, medical condition, etc.)
- Medical information (e.g., present diagnosis such as OSA diagnosis and whether you have or are attending a CHT screening, selection of a screening location and date, course of treatment such as a history of use of a CPAP, and other treatment related information such as doctor name and address, and how you heard about Inspire)
- Health insurance information
- Financial information, including employee banking information and commercial credit card numbers
- Biometric information (e.g., height, weight, BMI, sleep apnea analytics, medical history, or other data that contain identifying information)
- Commercial information (e.g., purchase history)
- National Provider Identification (NPI) number
- Internet or other electronic network activity information (e.g., browsing history, interaction with our website, computer and connection information such as browser type and version, operating system, and platform, the full Uniform Resource Locator (URL) clickstream to, though, and from the website, including date and time, cookie identifier and related cookie information, information you viewed or searched for, your mobile carrier and device type, etc.)
- Geolocation data
- Audio, electronic, visual, thermal, or similar information (e.g., call recordings)
- Professional, employment-related, or other similar information
- Educational information
- Inferences based on data analytics
Categories of Sources of Personal Information
We obtain the categories of personal information listed above from the following categories of sources:
- Directly from individuals’ interactions with us, including with the website, our devices and software, desktop and mobile applications, by email, and phone, and through our patient ambassadors and representatives. For example, Inspire collects personal information that you enter into data fields on any Inspire website or app, or provide to Inspire in connection with the Inspire Services. When you engage with our online chat service through a website, a transcript of the conversation may be stored by us. When you engage in a phone conversation with us in connection with any of the Inspire Services, we may record the call. When you attend an Inspire on-line or in-person educational or informational session, we may record the session.
- Social media sites (for example, if you access third-party services, such as Facebook, Google, or Twitter, through the Inspire Services to login to Inspire Services or to share information about your experience on Inspire Services with others, or if you access Inspire Services while logged into those third-party services, we may collect information from these third-party services)
- Web browsers
- Advertising, marketing, and analytic service providers
- Mailing list providers
- Technology service providers
- Publicly available sources
- Health care providers (such as a sleep clinic or doctor, where permitted by law)
- Insurance providers
- Organizations with whom we partner to provide services to consumers
- Human resources service providers
- Mailing list vendor
To protect your privacy, you should not provide Inspire with any information that is not specifically requested.
You understand that information you submit through the Inspire app and websites generally will not be protected under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). However, there may be specific features or aspects of the app that relate to information governed by HIPAA. In such instances, you may be presented within the app or otherwise with patient directives or HIPAA authorizations that direct or allow medical providers to share information with Inspire.
Information Inspire Automatically Collects.
Certain information may be automatically collected (that is, gathered without you actively providing the information) using various technologies, such as cookies, Internet tags, web beacons, local storage objects, and navigational data collection (log files, server logs, clickstream).
Like many websites, we may use cookie technology to collect additional website usage data and to improve our services. A cookie is a small data file that is transferred to your computer’s hard disk. Most Internet browsers automatically accept cookies. If you do not want cookies from Inspire or other websites, you can instruct your browser, by changing its settings, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. Each browser differs, so check with your browser’s manufacturer to understand how these controls function. However, some services may not function properly if you disable cookies.
Inspire may employ web beacons (also called single-pixel gifs), which are customized links or similar technologies, when sending you messages, newsletters, or promotional e-mails. We may keep track of how you interact with links across our services, including our email notifications. Web beacons allow Inspire to (a) determine whether you have opened, or acted upon, a promotional e-mail and which links you have clicked on in order to deliver to you more focused communications and other content, (b) allow Inspire to count the number of users who have visited certain web pages and effectively deliver co-branded services, and (c) enable Inspire to compile aggregated statistics and determine the efficacy of promotions by using web beacons from third parties, without allowing such third parties to use web beacons to collect or access your personal information.
Local Storage Objects.
Local storage objects (sometimes referred to as flash cookies) are similar to standard cookies except that they can be larger and are downloaded to a computer or mobile device by the Adobe Flash media player. Local storage objects can be controlled through the instructions on Adobe’s Setting Manager page.
Third-Party Service Providers.
Inspire may use a variety of third-party services to help provide Inspire Services, such as developing and hosting our websites, operating a call center to support the Inspire Services, to help us understand the use of Inspire Services, and to provide you with advertising. We may also collect or otherwise gather information related to you from these third-party service providers. These third-party service providers may collect, store, and share information as further dictated by the privacy policies of those third parties.
You can prevent the collection of the data generated by Google Analytics in relation to your use of our websites and the processing of this data by downloading and installing the browser plug-in, with more information regarding how you can opt out of Google Analytics data collection as instructed here: https://tools.google.com/dlpage/gaoptout. This link provides instructions for installing an opt-out cookie on your device. As a result, the collection of data by Google Analytics is prevented in future for the website and browser as long as the opt-out cookie remains installed in your browser.
We may also use various Facebook services in relation to the Inspire Services. For example, we may live stream our online educational or informational sessions on Facebook. In addition, using the pixel tracking, we can keep track of what users do after they see or click on a Facebook advertisement. The pixel tracking enables us to monitor the effectiveness of Facebook ads for purposes of statistics and market research. Facebook may connect this data with your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s Data Policy which can be found at https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and outside of Facebook. A cookie can also be saved on your device for these purposes. You can opt out of various Facebook advertising options here: https://www.facebook.com/settings?tab=ads.
Additional general information regarding opt-out from interest-based advertising from companies belonging to the Network Advertising Initiative can be found here: http://optout.networkadvertising.org/#!/, information regarding opting out through the Digital Advertising Alliance can be found here: http://optout.aboutads.info/#!/.
Storage of Information
Our Use and Disclosure of Information Collected
In the past 12 months, we have used or disclosed the personal information we collect for our operational purposes and for one or more of the following business purposes:
- To develop, provide and improve products and services to consumers
- To respond to consumer requests
- To provide customer service
- To connect you with medical providers
- To share information collected through the Inspire Services with medical providers for purposes such as their understanding your familiarity with Inspire therapy
- To improve and personalize consumer access to and experience on our websites, for example, by telling and surveying consumers about new features, products, or services that may be of interest to them
- To enhance products and Inspire Services
- To develop and maintain records, including records of consumers’ personal information
- To contact consumers with information that might be of interest to them, including information about clinical trials and about products and services of ours and of others
- For advertising and marketing
- For analytical purposes and to research, develop, and improve programs, products, services and content
- For activities to monitor and maintain the quality or safety of our products and the Inspire Services
- For activities described to consumers when collecting their personal information or as otherwise permitted under CCPA
- For U.S. healthcare providers, to link name, National Provider Identifier (NPI), state license number, and/or IP address to web pages they visit, for compliance, marketing, and sales activities
- To conduct audits and perform troubleshooting activities of our websites, products, and services
- To detect and protect against security incidents and deceptive, malicious, or fraudulent activity
- To protect someone’s health, safety or welfare
- To ensure the websites, products, and apps, and other Inspire Services function as intended, including debugging and repairing
- To combine with other information and to create data that does not have any personal identifiers, such as names, e-mail address, or social security number, that identify you as a unique individual. Once we have de-identified information, it is non-personal information and we may treat it like other non-personal information.
- For human resources purposes, employment application and hiring, and employee-related activities. When you submit an inquiry about a job through an Inspire website, we may use the information you provide to match your experience and preferences with the job openings we have, and someone from Inspire may contact you about a possible employment opportunity. Please note that by submitting your information regarding employment opportunities with Inspire, you authorize us to transmit and store your information in our recruitment database.
- For training purposes
- For verifying customer information
- Evaluating ambassadors and patient representatives
- If you are enrolled in a clinical study, as described in the clinical study informed consent.
- If you have directed your provider to provide personal information for use in Inspire’s Care Tracker Program, to administer that program in accordance with the separate authorization you completed when you enrolled in that program.
- We also may disclose personal information to any other person with your consent.
How We Share Personal Information
Inspire may share personal information with any member of our corporate group.
In the ordinary course of business, we will share some personal information with companies that we hire to perform services or functions on our behalf such as marketing and advertising service providers, technology service providers, security service providers, analytics service providers, mailing and shipping providers, and employee-related service providers.
We may be required to release consumers’ personal information in response to a court order, subpoena, search warrant, law, regulation, or government investigation. In addition, we may keep, disclose, and use consumers’ personal information to comply with U.S. FDA and other governmental guidance, directions, regulations, and laws.
Inspire may share your information with health care providers to assist or aid in your treatment. For example, we may share personal information: with non-Inspire staff at health care providers’ offices for the purpose of setting appointments or finding area providers, when you have requested that we do so, and contacting you to set appointments or attend a community health talk after you have completed a form to make such a request; with medical providers and their staff for purposes such as their understanding of your level of education regarding the Inspire products and services or so that they can assist with and track your therapy journey through the Care Tracker or otherwise; with Inspire therapy patient ambassadors, when you indicate an interest in contacting them; and as described in any informed consent that you have executed as a study subject. When you use our find a doctor feature and e-mail a doctor, the information you provide to be e-mailed will be sent to that doctor. If you are enrolled in a clinical study, we may keep, use and disclose personal information as described in the clinical study informed consent.
If you engage with an Inspire therapy patient ambassador by choosing, for example, to send them an e-mail, the information you provide will be sent to that ambassador. When you attend an in-person or on-line educational session sponsored by Inspire, you understand that your identity, and any information that you choose to disclose about yourself, either visually, verbally or in writing, will not be private. Other participants and presenters may be able to see and/or hear you or your communications, the presentation may be recorded and shared, the presentation may be live-streamed on Facebook or other platforms, and the on-line platform may not be secure.
We use reasonable measures to help protect information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. You should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100 percent secure. Please note that information collected by third parties may not have the same security protections as information you submit to us, and we are not responsible for protecting the security of such information.
Protecting the privacy of children is very important to us. For that reason, our websites and the Inspire Services do not solicit, collect or maintain personally identifiable information from users we actually know are under age 18. If you are a parent or guardian, please contact us if you believe information regarding a child has been collected by us through our Website.
Do Not Track
At this time, our websites do not honor do not track requests from web browsers.
ADDITIONAL STATE-SPECIFIC PRIVACY NOTICES
We do not sell your personal information, but nevertheless we offer an opt out to sales of your data in an overabundance of caution to ensure compliance with Nevada law. Verified requests under Nevada law (NRS 603A) to not make any sale of any covered information we have collected or will collect regarding you may be sent to [email protected] Please include in your email “Request for Nevada Opt-Out” in the subject line and in the body of your message and please indicate in the body of your e-mail that the message is Attn: Privacy Officer.
California consumers have the right to request that we disclose the personal information we collect, use, disclose, and sell. Please see the Submit a Request section below to request the personal information we collect, use, and disclose. Please also review the information generally in this policy regarding the categories of personal information we collect, the sources of personal information, the business or commercial purposes for which personal information is used, and the categories of third parties with whom personal information is shared.
The CCPA states it does not apply to a variety of types of information, such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data.
Categories of Personal Information We Sell
We do not sell personal information.
Rights under California Law
- Right to Know. If you are a California consumer, you have the right to ask us to disclose to you the following information up to two times in a twelve-month period:
- The categories of personal information we have collected about you.
- The categories of sources from which we collected the personal information.
- Our business or commercial purpose for collecting personal information.
- The categories of third parties with whom we share personal information.
- What categories of personal data we disclose about you for business purposes.
- What categories of personal information we sell about you.
- The specific pieces of personal information we have collected about you, subject to certain limitations under CCPA regulations.
- Right to Delete. If you are a California consumer, you have the right to ask us to delete the personal information about you we have collected. We may deny the request based on applicable exemptions.
- Right to Opt-out. If a business sells personal information to third parties, California consumers have the right, at any time, to opt out of the sale or disclosure of their personal information to third parties. Inspire does not sell personal information to third parties.
Submit a Request. to submit a request to know the personal information we have about you or to submit a request to delete your personal information, please email [email protected] or call us at 763-205-7970. When you submit a request to know or delete, you must provide your first name, last name, and email address.
Authorized Agent. You may designate an authorized agent to make a request under the CCPA on your behalf. To be able to act, authorized agents must submit proof that they are authorized to act on your behalf. We may deny requests from claimed authorized agents who do not submit adequate proof that they are authorized to act on your behalf.
Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before complying with your requests. For example, for requests to know and delete, we will attempt to match your identity to the information stored in our files. If we cannot, we will ask you to provide additional identifying information. We will use information you provide in your request for the purpose of verifying your identity or authority to make the request.
Right to non-discrimination. You have the right not to receive discriminatory treatment by Inspire for exercising privacy rights conferred by the CCPA.
Contact for Inspire
If you have questions about our use of personal information, please contact us by any of the following:
Emailing us at [email protected]
Sending a letter to the following address:
Inspire Medical Systems
Attn: Privacy Officer
5500 Wayzata Blvd., Suite 1600
Golden Valley, MN 55416