Privacy Policy

1. Who we are

VantaUM provides physician medical review for independent third-party administrators (TPAs), self-insured employers, and benefit organizations. A physician signs every determination. HIPAA-compliant, BAA in place, encrypted. This policy governs the information we handle through our public website and business interactions. It is not a Notice of Privacy Practices under the Health Insurance Portability and Accountability Act (“HIPAA”). See Section 9 regarding protected health information.

2. Scope of this policy

This policy applies to information collected through the Site and our sales, marketing, and support activities. It does not apply to information we process on behalf of our clients within our operational platform, which is governed by our agreements with those clients (including Business Associate Agreements) and by applicable law.

3. Information we collect

We collect the following categories of information:

• Information you provide. When you contact us, request a demo, subscribe to updates, or complete a form (including advertising lead forms), we collect details such as your name, business email address, company, job title, phone number, and the contents of your message.
• Information collected automatically. When you visit the Site, we and our service providers may automatically collect technical and usage information such as your IP address, device and browser type, pages viewed, referring URLs, and interaction data, through cookies and similar technologies.
• Information from advertising and analytics partners. If you reach us through an advertisement (for example, on LinkedIn), we may receive limited information about that interaction, such as the campaign you engaged with and, where you have provided it, contact details submitted through the platform’s lead form.

We do not intentionally collect protected health information or other sensitive personal information through the Site. Please do not submit such information through website forms.

4. How we use information

We use the information we collect to:

• respond to your inquiries and provide the information or demonstrations you request;
• operate, maintain, secure, and improve the Site and our services;
• communicate with you about our services, including marketing communications you may opt out of at any time;
• measure and improve the performance of our marketing and advertising;
• detect, prevent, and address fraud, security, and technical issues; and
• comply with legal obligations and enforce our agreements.

5. Cookies, analytics, and advertising

We and our partners use cookies, pixels, tags, and similar technologies to operate the Site, understand how it is used, and measure and deliver advertising. This may include analytics providers and advertising platforms such as LinkedIn (for example, the LinkedIn Insight Tag) and similar services. These partners may set cookies that help us and them understand ad performance and show you relevant advertising on their platforms.

You can control cookies through your browser settings and can opt out of interest-based advertising through tools offered by the platforms and industry programs, including the Digital Advertising Alliance and each platform’s own ad-settings controls (for example, LinkedIn’s advertising preferences). Disabling cookies may affect Site functionality.

6. How we share information

We do not sell your personal information. We may share information:

• with service providers that perform functions on our behalf (such as hosting, analytics, email, and advertising measurement), under contractual confidentiality and data-protection obligations;
• with advertising and analytics partners as described in Section 5;
• for legal reasons, where required to comply with law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of VantaUM, our users, or others; and
• in a business transaction, such as a merger, acquisition, financing, or sale of assets, in which case information may be transferred as a business asset.

7. Protected health information (HIPAA)

In providing physician medical review to our clients, VantaUM may act as a “business associate” and process protected health information (“PHI”) on their behalf. That PHI is handled in accordance with HIPAA, our Business Associate Agreements, and our clients’ instructions — not under this website policy. This Site is not intended for the submission of PHI, and individuals seeking information about the use of their health information should contact their health plan or provider.

8. Data security

We maintain administrative, technical, and physical safeguards designed to protect the information we hold against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data retention

We retain information for as long as necessary to fulfill the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing (including targeted advertising and the “sale” or “sharing” of personal information as those terms are defined under laws such as the California Consumer Privacy Act), and to withdraw consent. Residents of the European Economic Area and the United Kingdom may have rights under the GDPR and UK GDPR. To exercise any right, contact us using the details below. We will not discriminate against you for exercising these rights, and we will respond as required by applicable law.

11. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for interpreting these signals, we do not currently respond to them. We honor the cookie and advertising controls described in Section 5.

12. Children’s privacy

The Site is intended for a business audience and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

13. International users

We operate in the United States, and information we collect is processed and stored in the United States. If you access the Site from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

14. Third-party links

The Site may link to third-party websites and services that we do not control. This policy does not apply to those third parties, and we encourage you to review their privacy policies.

15. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Effective date” above and, where appropriate, provide additional notice. Your continued use of the Site after an update constitutes acceptance of the revised policy.

16. Contact us

If you have questions about this policy or our privacy practices, or wish to exercise a privacy right, contact us at:

VantaUM, a Wells Onyx company
hello@wellsonyx.com