EFFECTIVE DATE: 7/17/2024
LAST UPDATED: 9/21/2026

  1. Sources of Personal Data
  2. Types of Personal Data We Collect
  3. How We Use Personal Data
  4. How We Disclose Personal Data
  5. Data Retention
  6. Rights Concerning Personal Data
  7. Contact Us

 

Surescripts, LLC together with its subsidiaries and affiliates (collectively, "Company" "us," "we," or "our") is committed to protecting the privacy of Personal Data (i.e., information reasonably related to a specific individual). This Privacy Notice (“Notice”) describes how we process Personal Data of California residents who are current or former employees (and their dependents) and other people who work with us who are California residents (together referred to as “Personnel” or “you’”). If you interact with our website, purchase our products or services, or otherwise engage with us outside of the employment context, the privacy notice provided in connection with that interaction applies instead, not this Notice.

Whenever you interact with us on behalf of another individual or entity, such as if you provide information about a dependent, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Changes: We may update this Notice from time to time. Any updated Notice will be effective when posted. Please check this Notice periodically for updates.

This Notice does not form part of any contract of employment or other contract to provide services and does not give you any contractual rights.

1. Sources of Personal Data

We collect Personal Data about you from the following sources:

  1. Directly from you. We may collect Personal Data you provide to us directly, such as when you register for benefits and through your daily interactions with us during your employment.
  2. Data collected automatically and through tracking technologies. We may automatically collect information or inferences about you through your use of or interactions with Company devices or technology resources. This may include information about how you use Company resources to browse the Internet, the content of sent and received emails, and your use of Company devices (except where limited by applicable law).
  3. From third parties. We may collect Personal Data from third parties, such as companies that provide benefits, payroll, travel, or other services. We may also receive Personal Data from your colleagues or supervisors, such as in the context of performance evaluations.

We may combine information that we receive from the various sources described in this Notice, including third-party sources, and use or disclose the combined information for the purposes identified below.

2. Types of Personal Data We Collect

We may collect the following types of Personal Data about you and your family members, such as spouses, partners, children, dependents, or parents, as applicable:

  1. Identifiers, such as name; email address; physical address; telephone number; business contact information; device identifiers (including IP address); and usernames.
  2. Records about you, such as financial information used for payroll (including salary, wage, bonus, stock and similar information); signatures; background check information; shareholder information; information about company-provided benefits such as corporate credit cards or cars; student loan contributions; your civil/marital status; and emergency contact and next of kin information.
  3. Protected class and demographic information, such as age (including birthdates); military or veteran status; and gender.
  4. Internet or other electronic network activity information, such as information relating to your use of or interactions with Company devices and technology resources (including browsing and search history).
  5. Non-precise geolocation data, such as your location as derived from your IP address.
  6. Audio, electronic, visual, or other sensory information, such as photographs; security camera footage in public areas of Company facilities; and recordings of meetings or events.
  7. Professional or employment-related information, such as job title and functions; professional affiliations; performance information; resume data; and other human resource records (including records related to parental or other leaves of absence).
  8. Education information, such as education history; academic certificates and licenses; and other relevant skills (including languages spoken).
  9. Inferences drawn from any information we collect to create a profile about you regarding preferences, characteristics, or behavior.
  10. Sensitive Personal Data, including the following:
    1. Social Security number, driver’s license, state identification card, or passport number.
    2. Precise geolocation.
    3. Racial or ethnic origin, or information about your religious or philosophical beliefs, should you choose to provide it.
    4. Union membership.
    5. Content of mail, email, and text messages where we are not the intended recipient (such as the content of emails you send to third parties, which may include personal emails sent using your Company email address).
    6. Information about your health, including medical conditions and pregnancy, vaccination status, health and sickness records, disabilities, incident/accident information involving health data, whether you were exposed to someone who tested positive for communicable diseases or whether you are currently experiencing any flu-like or other relevant symptoms, and information about your health insurance, including insurance policy number.
    7. Information concerning your sexual orientation, should you choose to provide it.

3. How We Use Personal Data

We may use Personal Data for the following purposes:

  1. Human resources management, such as onboarding and offboarding; enrollment and administration of payroll and benefits (including medical, retirement, and leave-related benefits); managing travel, relocation, and reimbursements; reviewing, evaluating, and supporting performance (including by conducting performance reviews and disciplinary actions, providing trainings, and monitoring attendance timekeeping); conducting background checks; conducting and monitoring diversity and inclusion-related activities and opportunities; supporting alumni programs; and providing complaint/hotline programs.
  2. For our internal business and research purposes, such as enforcing our policies and rules; evaluating and changing our business operations, human resource processes, and workforce performance; documenting, maintaining, and auditing business records; supporting productivity and business development efforts; document management; and IT administration.
  3. For legal, safety or security reasons, such as complying with legal, reporting, and similar requirements; investigating and responding to claims against the Company, its personnel, and its customers; for the establishment, exercise or defense of legal claims; protecting our, your, our customers’, and other third parties’ safety (including managing spread of communicable diseases), property or rights; detecting, preventing, and responding to security incidents; and protecting against malicious, deceptive, fraudulent, or illegal activity.
  4. Workplace monitoring, such as monitoring Company facilities (including through CCTV in common areas); recording meetings; monitoring attendance and timekeeping; and monitoring email, Internet, device, vehicle, and other asset usage.
  5. In connection with a corporate transaction, such as if we acquire, or some or all of our assets are acquired by another entity; or we engage in another form of corporate change.
  6. For marketing or promotional purposes, such as externally promoting the Company and our brands, goods, and services. For example, we may provide business partners with or publicly post the names, business contact information of account representatives, or pictures of Personnel who attend public Company events.
  7. To make other programs and services available to you, such as wellness programs and discount programs.

We only use Sensitive Personal Information for the following purposes: (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) for short-term, transient use, including non-personalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) for purposes that do not infer characteristics about you.

We may use anonymized, de-identified, or aggregated information for any purpose.

4. How We Disclose Personal Data

We may disclose Personal Data to third parties, including the categories of recipients described below. We do not “sell” or “share” for targeted advertising Personnel Personal Data (as those terms are defined in the California Consumer Privacy Act). We disclose each of the categories of Personal Data we collect to the following categories of third parties for a business purpose:

  1. Affiliates and subsidiaries, including parent entities; corporate affiliates, subsidiaries, and business units; and other companies that share common ownership with us.
  2. Service providers that work on our behalf to provide products and services, such as IT and monitoring; payroll processing; onboarding; learning and training; email and other communications systems; mailing and printing; maintenance and facilities management; and data analytics and workforce assessment.
  3. Third parties that independently maintain information about you, such as providers of benefits (including health, insurance, financial, retirement and other benefits), background check services; wellness programs; and travel services. We do not control the practices of such third parties and you should consult their privacy notices for questions about their privacy practices.
  4. Professional consultants, such as accountants; lawyers; financial advisors; and audit firms.
  5. Law enforcement, government agencies, and other recipients for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements; to enforce or apply our policies; and to protect our, our customers’, or third parties’ safety, property, or rights.
  6. To other entities in connection with a corporate transaction, such as if we, or some or all our assets, are acquired by another entity, including through a sale in connection with bankruptcy, or other forms of corporate change.
  7. Entities to which you have consented to the disclosure, where consent is required by law.

We may disclose anonymized, de-identified, or aggregated information for any purpose permitted by law.

5. Data Retention

Your Personal Data will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to do otherwise by applicable law. This includes retaining your Personal Data to maintain our employment relationship with you; to improve our business over time; to ensure the ongoing legality, safety and security of our services and relationships; and for other legitimate business purposes otherwise in accordance with our internal retention procedures. Once your employment or other contractual relationship with us has terminated, we may retain your Personal Data in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as in order to enable easier future onboarding or to demonstrate our business practices and contractual obligations or to comply with applicable law.

6. Rights Concerning Personal Data

California residents may have certain rights, subject to legal limitations, concerning the collection, use, and disclosure of Personal Data under the CCPA, such as:

  • Right to Know. You have the right to request information about the categories of Personal Data we have collected about you, the categories of sources from which we collected the Personal Data, the purposes for collecting, selling, or sharing the Personal Data, and to whom we have disclosed Personal Data and why. You may also request the specific pieces of Personal Data we have collected about you.
  • Right to Delete. You have the right to request that we delete Personal Data that we have collected from you.
  • Right to Correct. You have the right to request that we correct inaccurate Personal Data that we maintain about you.

California residents may submit requests to exercise the rights above by emailing us at PrivacyOffice@Surescripts.com or calling us at 833-713-5186. We will not discriminate against you for exercising your privacy rights.

Verification: In order to process requests, we will need to obtain information to locate you in our records or verify your identity depending on the nature of the request. In most cases, we will collect some or all the following data elements: first and last name, email address, and telephone number. In some cases, we may request different or additional information.

Authorized Agents: Authorized agents may exercise rights on behalf of California residents by submitting a request via PrivacyOffice@Surescripts.com or by calling us at 833-713-5186 and indicating that they are submitting the request as an agent. We will require the agent to demonstrate authority to act on behalf of the resident. We may also require the resident to verify their own identity directly with us or to directly confirm with us that they provided the authorized agent permission to submit the request.

7. Contact Information

If you have questions regarding this Privacy Notice or how we use your Personal Data, please contact us at:

PrivacyOffice@Surescripts.com

833-713-5186