EFFECTIVE DATE: January 1, 2020
LAST UPDATED: September 20, 2020
1. Scope and Consent
By visiting the Site, you acknowledge that your personal information will be handled as described in this Policy. As used herein, “personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer.
2. Information Practices: How We Collect, Use, Retain, and Disclose Personal Information
The information we collect through the Site, including all of its web pages, is controlled by Apexus, including its subsidiaries and wholly owned affiliates, which is headquartered in the United States at 290 E. John Carpenter Fwy, Irving, TX 75062.
The Information We Collect About You
We collect information about you directly from you and from third parties, as well as automatically through your use of our Services.
Information We Collect Directly from You through the Site. The information we collect from you depends on how you use our Site. To request more information from us, you must provide us with identifiers or employment-related information such as your name, your job title and the name of the customer company you work for, your contact information, such as your business email and phone number, and your reason for contacting us.
Information We Collect Through Our Corporate Customer Relationships. In order to manage our customer relationships with our corporate customers, we collect identifiers and employment-related information about and from our corporate customers' employees and workforce. This information may include names, titles, business email addresses and phone numbers, work location, and information about an employee or workforce client’s role at the corporate customer (such as the department they work in, products or issues worked on, and other similar information). We use this information to administer our corporate customer contracts and to market our Services to corporate customers. When you/your employer are subscribed to one of our Services, listservs or community portals, we may collect information such as your name, email address, profession, and customer affiliation.
Information Collected and Used in Apexus Services. Apexus collects medical information, called “protected health information” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), in Apexus’s role as a business associate to health care providers; however, not all Apexus Services collect protected health information, including its 340B prime vendor program (“PVP”). The protected health information is used to support Apexus customers’ health care operations and is received by Apexus in its capacity as a business associate to its clients. The privacy of such data is governed by HIPAA rather than any state privacy law.
Apexus also collects personal information about consumers that are health care practitioners (“ practitioners”) directly from its corporate health care customers, or from third party providers of data, such as health care claims data aggregators, and governmental sources, in order to provide Services to the health care industry. Apexus’ customers in the health care industry can include health care providers and health systems, data aggregators working in the health care industry, pharmaceutical manufacturers and general medical supply vendors. If the practitioner data in question is not otherwise exempt under the CCPA, the transfer to such customers can be considered a sale of personal information under the CCPA. You may review the chart showing Apexus’s practices in the past 12 months with respect to such personal information in Section 8 below.
How We Use Your Information
We use your information, including your personal information, for the following purposes:
- To provide our Services, to communicate with you about your use of our Site or Services, to respond to your inquiries, and for other customer service purposes.
- To tailor the content and information that we may send or display to you, to offer location customization, and personalized help and instructions, and to otherwise personalize your experiences while using the Site.
- For marketing and promotional purposes. For example, we may use your information, such as your email address, to send you a welcome email, news, and newsletters when your organization subscribes to our programs, special offers, and promotions, or to otherwise contact you about products or information we think may interest you.
- To better understand how users access and use our Site, both on an aggregated and individualized basis, in order to improve our Site and respond to user desires and preferences, and for other research and analytical purposes.
- To administer surveys and questionnaires.
- To administer our customer contracts. For example, we will use a customer's employee's contact information to send our invoices or to send service communications to.
- To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; to respond to a subpoena, warrant, court order, or other legal processes; or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.
How We Share Your Information
We share your information, including personal information, as follows:
- Affiliates. We may disclose the information we collect on the Site to our affiliates for the purposes described in this Policy; however, if we do so, their use and disclosure of your personal information will be subject to this Policy.
- Other Providers. We may disclose the information we collect from you to third-party vendors, service providers, contractors or agents who perform functions on our behalf. We also may share information provided to us by our clients to third parties as described in the chart in Section 8 below.
We also may disclose information in the following circumstances.
- Business Transfers. If we are or may be acquired by or merged with another company, if any of our assets are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the information we have collected from you to the other company.
- In Response to Legal Process. We also may disclose the information we collect from you in order to comply with the law, a judicial proceeding, court order, or other legal processes, such as in response to a court order or a subpoena.
- To Protect Us and Others. We also may disclose the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service or this Policy, or as evidence in litigation in which Apexus is involved.
- Aggregate and De-Identified Information. We may share aggregate or de-identified information about users with third parties for marketing, advertising, research or similar purposes.
Cookies. Cookies are alphanumeric identifiers that we transfer to your computer's hard drive through your web browser for record-keeping purposes. Some cookies allow us to understand aggregated activities at our Site.
Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.
4. Third-Party Links
Our Site may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.
5. Security of My Personal Information
We have implemented reasonable security measures to protect the information we collect from unauthorized access, exfiltration, theft, loss, misuse, disclosure, alteration, or destruction. Please be aware that despite our best efforts, no data security measures can guarantee security.
You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
6. Children's Privacy
Our Site is not directed to children under the age of sixteen (16), nor do we market products or services to such children. We request that children do not provide personally identifiable information through our Site. We do not knowingly collect or sell personal information from children under 16 without parental consent.
7. Additional Choices
We may send periodic promotional emails to you. You may opt-out of such promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 15 business days for us to process such opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about your account or any services you have requested or received from us.
8. For California Consumers: Summary of Information Practices in Last 12 Months
The following table summarizes our personal information collection, use, and sharing practices in the preceding 12 months since we last updated this Policy. As reflected in this table, we may share your personal information with a variety of outside entities.
|Category of Personal Information Collected||Categories of Sources||Commercial/Business Purpose for Collection||Categories of Third Parties with Whom Apexus Shares PI||Categories of Vendors with Whom Apexus Sells PI|
|Identifiers Examples: Full name, email address, phone number, account login, IP address||You; service providers; and other tracking technologies on our website||Processing or fulfilling transactions; debugging to identify and repair errors that impair existing intended functionality; providing internal analytic services; providing Customer services; protecting against malicious, deceptive, fraudulent or illegal activity||Service providers; payment processors; third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event; affiliates, professional advisors; law enforcement authorities; those involved in legal proceedings, with consent.||Except as provided below, Apexus does not sell personal information.|
|Internet and other network activity Example: Browsing activity||You, Your mobile devices and computers used to access our Site||Marketing, customer, or analytic services; enabling or effecting, directly or indirectly, a commercial transaction|
|Commercial Activity Examples: Information about goods or services purchased, obtained, or considered||You, Your mobile device and computers used to access our site||Processing or fulfilling orders and transactions; marketing, customer or analytic services|
|Professional or Employment-related Information Examples: Job history, educational history||Applicants; corporate customers; and outside sources, such as credit bureaus. We may also collect and use health care practitioner employment related data (e.g. National Practitioner Identifiers (NPIs), office locations and addresses collected from our customers, governmental sources and health care claims aggregators||Process and evaluate applications for positions with Apexus; facilitate administrative purposes, such as payments to contractors, marketing, customer or analytic services; provide services for customers’ health care operations||Service providers, such as HR vendors or cloud providers||As part of its Services (excluding PVP), Personal information including professional and employment related information of practitioners is provided to customers in the health care industry, including health care providers and systems, data aggregators in the health care industry, pharmaceutical manufacturers and other suppliers to the health care industry. These third party transfers may be considered sales of data under the CCPA.|
|Biometric Information Examples: Image and video recording||Security systems||Safety and security enforcement|
Apexus receives personal information in the above categories acting in its capacity under California law as a service provider/business associate to Covered Entities located in California. Apexus may share this information as required to fulfill its contracts with its client health care institutions. If an exemption under the California Consumer Privacy Act (“CCPA”) does not apply to this information, you are free to contact the health care institution directly about the types of data collected by the institution and provided to Apexus.
Apexus acts as a Business Associate as defined by HIPAA, and as part of its Services, personal information which is de-identified in accordance with HIPAA Section 164.514(b) is provided to customers in the health care industry, such as health care providers and systems, data aggregators in the health care industry, pharmaceutical manufacturers and other suppliers to the health care industry. These transfers are considered sales of de-identified personal information under the CCPA.
Sale of Personal Information. Except as specified above, we do not sell your information for money, but we and our business partners use tracking technologies to help us understand our customers and visitors to the Services, enhance your online experience, and customize our offerings in ways that may be deemed a "sale" of personal information under the CCPA. This includes working with third parties, such as ad networks, which collect personal information via tracking technologies to serve personalized advertisements on and off our Services, provide us with data collection, reporting, and ad response measurement. To the extent we or our partners use such technologies on the Services, we offer an opt-out as discussed below.
California Consumers: Choices for Access, Deletion, and Right to Non-Discrimination.
If you are a California resident, you have the right to know what personal information we collect, use, disclose or sell about you under the CCPA. Additionally, you have the right to access, delete, and opt-out of the sale of your personal information
To exercise these privacy rights and choices, please follow the instructions below:
- How to request access to your personal information: You may request access to your personal information twice in a 12-month period. To do so, please complete the online form by clicking here or call at 1.800.842.5146. The Access Report will be delivered by mail or electronically at your request. Note, we may not always be able to fully address your request; for example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
- How to request deletion of your personal information: You may request that Apexus delete the personal information it has collected and/or maintained about you. To do so, please complete the online form by clicking here or call at 1.800.842.5146. Note, we may need to retain certain personal information as permitted by law, such as to complete the transaction for which the personal information was collected, provide a requested good or service, detect security incidents, protect against malicious, deceptive, fraudulent or illegal activities, comply with legal obligations or to enable solely internal uses that are reasonably aligned with your expectations or lawful within the context in which you provided the information.
We reserve the right to charge a fee where permitted by law, for instance, if your request is manifestly unfounded or excessive. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Verification: Please note, we will take steps to verify your identity before fulfilling any of the above requests. We will request a copy of your identification with your California residency as well as request you to verify through an authentication e-mail.
Authorized Agents: Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your or your minor child's personal information. In order to designate an authorized agent to make a request on your behalf, you must provide written proof that you have consented to this designation unless the agent has power of attorney pursuant to California Probate Code sections 4000-4465. If you are submitting a request via an authorized agent, please direct your authorized agent to submit its attestation/power of attorney to Apexus using the email CCPACompliance@apexus.com. You must also verify your identity directly with us by providing a copy of your government issued identification.
Response Timing and Format: We will respond to a verified consumer request for personal information within 45 days of receipt. If we require more time (up to 90 days), we will notify you of the reason and extension period in writing.
Anti-Discrimination Right: You have the right to be free from discrimination in product quality, goods or services if you choose to exercise your privacy rights under the CCPA.
Do Not Track: Your browser may deliver a "Do-Not-Track ('DNT') signal" to this Site. We will honor a "Do-Not-Track" signal as a valid opt-out request.
9. Contact Us
If you have questions, comments, or concerns about the privacy aspects of our Site or if you have a disability and need access to this privacy/legal policy, please email us at email@example.com, or call us at 1.800.842.5146. If you are a California consumer exercising one of your rights under CCPA, you may call us at 1.800.842.5146 or contact us at CCPACompliance@apexus.com.
These web pages contain confidential and/or proprietary information and are provided “as is” and “as available.” APEXUS MAKES NO WARRANTY, EXPRESS OR IMPLIED, OF THE VALIDITY OF SERVICES OR ITS APPROPRIATENESS FOR USE IN ANY MANNER, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE OR NONINFRINGEMENT. BY ACCESSING THE SERVICES, YOU ASSUME THE ENTIRE RISK. APEXUS DOES NOT WARRANT OR MAKE ANY REPRESENTATIONS CONCERNING THE USE OF THESE DOCUMENTS OR THE ACCURACY, COMPLETENESS, RELIABILITY OR USEFULNESS OF ANY INFORMATION IN THEM. WHILE APEXUS ATTEMPTS TO MAKE YOUR ACCESS TO AND USE OF OUR SERVICES SAFE, WE CANNOT AND DO NOT REPRESENT OR WARRANT THAT OUR SERVICES OR SERVERS ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. Apexus neither warrants nor represents that your use of content on this Site will not infringe rights of third parties not affiliated with Apexus.
B. Information Not Legal Advice
This Site makes use of licensed stock photography that is intended for illustrative purposes only. The professional services depicted are not necessarily services provided by Apexus. The information contained in these web pages and in material referenced by these web pages, is intended for informational and educational purposes only, and does not constitute legal, financial, accounting, medical or other professional advice.
C. Limitation of Liability
The information herein should not be considered a substitute for your independent professional judgment or expert advice from a competent professional. Under no circumstances shall Apexus, its affiliates, or any copyright holder, be liable for any actual, incidental, indirect, special, punitive, or consequential damages arising from or related to this Site or the Services, even if Apexus, or its affiliates, have been advised of the possibility of such damages.
The Site and its content will be transmitted over a medium that may be beyond the control and jurisdiction of Apexus. Accordingly, Apexus assumes no liability for or relating to the delay, failure, interruption, or corruption of any information transmitted in connection with your use of the Site.
D. Limited License
All content on the Site (including, without limitation, text, design, graphics, logos, icons, images, audio clips, downloads, interfaces, code and software, as well as the selection and arrangement thereof, collectively “ Apexus Content”), is the exclusive property of and owned by Apexus, its licensors or its content providers and is protected by copyright, trademark and other applicable laws. As a visitor to the Site, you are our guest. Apexus and its third-party content contributors grant you a limited, nonexclusive, nontransferable, non-sublicensable, revocable license to access the Apexus Content. You may copy, download and print the Apexus Content solely for your personal, non-commercial benefit, provided that you shall not modify or delete any copyright, trademark or other proprietary notice that appears on the Apexus Content. However, such license is subject to these Terms and does not include any right to modify, distribute, transmit, perform, broadcast, publish, upload, license, reverse engineer, transfer or sell the Apexus Content. Any use of our Apexus Content, other than as authorized herein, without our prior written permission, is strictly prohibited and will terminate the license granted herein. You agree to abide by all additional restrictions displayed on the Site as it may be updated from time to time.
Except as explicitly stated in these Terms, Apexus and our licensors reserve all rights, title, and interest in and to our Services and the Apexus Content. Apexus reserves the right to prohibit any person from using the Site for any reason, at its sole discretion.
E. Prohibited Uses
We reserve the right to deny access to you at any time if you engage in prohibited activity, such as posting copyright-protected content without approval from the author, unauthorized copying or use of information or functionality on the Site, attempting to obtain unauthorized access to restricted areas of the Site, using slanderous, profane or inappropriate language in communications involving or in the Website, or infecting the Website with computer viruses or other destructive functionality.
You may not use contact information provided on the Site for unauthorized purposes, including marketing. You may not use any hardware or software intended to damage or interfere with the proper working of the site or to surreptitiously intercept any system, data or personal information from the Site. You agree not to interrupt or attempt to interrupt the operation of the Site in any way. Apexus reserves the right, in its sole discretion, to limit or terminate Your access to or use of the site at any time without notice. Termination of your access or use will not waive or affect any other right or relief to which Apexus may be entitled at law or in equity. Any content found to be in violation of these Terms will be removed.
F. Dispute Resolution; Binding Arbitration
Please read the following section carefully because it requires you to arbitrate certain disputes and claims, including all privacy related claims, with Apexus and limits the manner in which you can seek relief from us, unless you opt out of arbitration by following the instructions set forth below. No class or representative actions or arbitrations are allowed under this arbitration provision. In addition, arbitration precludes you from suing in court or having a jury trial.
(i) No Representative Actions. To the fullest extent permitted by applicable law, you and Apexus agree that any dispute arising out of related these Terms, including claims related to privacy and data security, is personal to you and Apexus and that any dispute will be resolved solely through individual action, and will not be brought as a class arbitration, class action or any other type of representative proceeding.
(ii) Arbitration Disputes. Except for small claims disputes in which you or Apexus seeks to bring an individual action in small claims court located in the county of your billing address or disputes in which you or Apexus seeks injunctive or other equitable relief for the alleged infringement or misappropriation of intellectual property, you and Apexus waive your rights to a jury trial and to have any other dispute arising out of or related to these Terms, including claims related to privacy and data security, (collectively, “Disputes”) resolved in court. Instead, for any Dispute that you have against Apexus you agree to first contact Apexus and attempt to resolve the claim informally by sending a written notice of your claim (“ Notice”) to Apexus by email at firstname.lastname@example.org or by certified mail addressed to 290 E. John Carpenter Fwy, Irving, TX 75062. The Notice must (a) include your name, residence address, email address, and telephone number; (b) describe the nature and basis of the Dispute; and (c) set forth the specific relief sought. Our notice to you will be similar in form to that described above. If you and Apexus cannot reach an agreement to resolve the Dispute within thirty (30) days after such Notice is received, then either party may submit the Dispute to binding arbitration administered by JAMS or, under the limited circumstances set forth above, in court. All Disputes submitted to JAMS will be resolved through confidential, binding arbitration before one arbitrator. Arbitration proceedings will be held in Dallas Texas unless you are a consumer, in which case you may elect to hold the arbitration in your county of residence. For purposes of this Section 11(F), a “consumer” means a person using the Services for personal, family or household purposes. You and Apexus agree that Disputes will be held in accordance with the JAMS Streamlined Arbitration Rules and Procedures (“ JAMS Rules”). The most recent version of the JAMS Rules are available on the JAMS website and are hereby incorporated by reference. You either acknowledge and agree that you have read and understand the JAMS Rules or waive your opportunity to read the JAMS Rules and waive any claim that the JAMS Rules are unfair or should not apply for any reason.
(iii) You and Apexus agree that these Terms affect interstate commerce and that the enforceability of this Section 11(F) will be substantively and procedurally governed by the Federal Arbitration Act, 9 U.S.C. § 1, et seq. (the “ FAA”), to the maximum extent permitted by applicable law. As limited by the FAA, these Terms and the JAMS Rules, the arbitrator will have exclusive authority to make all procedural and substantive decisions regarding any Dispute and to grant any remedy that would otherwise be available in court, including the power to determine the question of arbitrability. The arbitrator may conduct only an individual arbitration and may not consolidate more than one individual’s claims, preside over any type of class or representative proceeding or preside over any proceeding involving more than one individual.
(iv) The arbitration will allow for the discovery or exchange of non-privileged information relevant to the Dispute. The arbitrator, Apexus, and you will maintain the confidentiality of any arbitration proceedings, judgments and awards, including information gathered, prepared and presented for purposes of the arbitration or related to the Dispute(s) therein. The arbitrator will have the authority to make appropriate rulings to safeguard confidentiality, unless the law provides to the contrary. The duty of confidentiality does not apply to the extent that disclosure is necessary to prepare for or conduct the arbitration hearing on the merits, in connection with a court application for a preliminary remedy or in connection with a judicial challenge to an arbitration award or its enforcement, or to the extent that disclosure is otherwise required by law or judicial decision.
(v) You and Apexus agree that for any arbitration you initiate, you will pay the filing fee (up to a maximum of $250 if you are a consumer), and Apexus will pay the remaining JAMS fees and costs. For any arbitration initiated by Apexus, Apexus will pay all JAMS fees and costs. You and Apexus agree that the state or federal courts of the State of Texas and the United States sitting in Dallas, Texas have exclusive jurisdiction over any appeals and the enforcement of an arbitration award.
(vi) Any Dispute must be filed within one year after the relevant claim arose; otherwise, the Dispute is permanently barred, which means that you and Apexus will not have the right to assert the claim.
(vii) You have the right to opt out of binding arbitration within 30 days of the date you first accepted the terms of this Section 11(F) by contacting us at email@example.com. In order to be effective, the opt-out notice must include your full name and address and clearly indicate your intent to opt out of binding arbitration. By opting out of binding arbitration, you are agreeing to resolve Disputes in accordance with Section 11(F).
(viii) If any portion of this Section 11(F) is found to be unenforceable or unlawful for any reason, (a) the unenforceable or unlawful provision shall be severed from these Terms; (b) severance of the unenforceable or unlawful provision shall have no impact whatsoever on the remainder of this Section 11(F) or the parties’ ability to compel arbitration of any remaining claims on an individual basis pursuant to this Section 11(F); and (c) to the extent that any claims must therefore proceed on a class, collective, consolidated, or representative basis, such claims must be litigated in a civil court of competent jurisdiction and not in arbitration, and the parties agree that litigation of those claims shall be stayed pending the outcome of any individual claims in arbitration. Further, if any part of this Section 11(F) is found to prohibit an individual claim seeking public injunctive relief, that provision will have no effect to the extent such relief is allowed to be sought out of arbitration, and the remainder of this Section 11(F) will be enforceable.
G. Guidelines for Linking
If you wish to link to Apexus's Website, you must request permission to do so in writing, either by contacting us at firstname.lastname@example.org or by U.S. mail at Apexus, Inc., 290 E. John Carpenter Freeway, Irving, Texas 75062, listing the URL of your site. Anyone linking to Apexus's Website must comply with these guidelines for linking to Apexus's Site and all applicable laws. A site that links to Apexus's Site:
- May link to, but not replicate, Apexus content
- Should not create a browser, border or frame environment around Apexus content
- Should not imply that Apexus is endorsing it or its products
- Should not misrepresent its relationship with Apexus
- Should not present false information about Apexus products or services
- Should not use the Apexus logo without written permission from Apexus
- Should not contain content that could be construed as distasteful, offensive or controversial
- Should contain only content that is appropriate for all age groups.
H. Client Contributed Content
Within the client-only area of apexus.com and acentrusrx.com are many documents and discussions contributed by individuals within our client organizations. This content is for information sharing purposes only and should not be construed as clinically proven, endorsed, or recommended by Apexus or contributors. Posting of copyrighted materials, in whole or in part, is EXPRESSLY PROHIBITED without the prior written permission of the copyright holder, and may subject the user and their employer to legal liability for copyright infringement, and a denial of further access to this Site. Users may post hypertext links to, or URLs for, copyrighted materials already on the Internet unless prohibited by the copyright holder or applicable law. Users may also refer to copyrighted materials by title and/or author or publisher, but may not actually post the materials without prior written permission of the copyright holder. Site visitors agree to not disclose information in this Site to any third party, other than Apexus, LLC, its regional offices, subsidiaries and health care clients. Site visitors agree to not submit information to this Site that is covered by the Health insurance Portability and Accountability Act of 1996 as amended (“HIPAA”), such as patient identifiable information (i.e. “Protected Health Information”).
The appearance of any information or materials on this Site does not constitute an endorsement or recommendation by Apexus or its affiliates. This Site contains copyrighted materials and proprietary materials owned by either Apexus or third parties who have given their permission to post their materials to this Site. These materials are protected by the United States copyright laws and international treaty provisions, and may be downloaded and/or printed for personal use only. Any posting of information, or any other use of information or materials on this Site, including, but not limited to, reproducing, copying, transmitting, or distributing, in whole or in part, is EXPRESSLY PROHIBITED without the prior written consent of the copyright holder. Information, comments, discussions, and materials on this Site may be discoverable in response to a valid request by a court of competent jurisdiction or governmental agency.