Legal & Compliance

Privacy Policy

This Privacy Policy describes how UC Health, LLC, which includes all facilities and organizations that operate as part of the UC Health system, including but not limited to University of Cincinnati Medical Center, LLC, West Chester Hospital, LLC, Daniel Drake Center for Post-Acute Care, LLC, University of Cincinnati Physicians Company, LLC and all outpatient locations and physician practices affiliated with UC Health (collectively, “UC Health”, “we”, “us” or “our”), will collect and use information that you provide, and information collected from our website, mobile application, services and data transmitted to UC Health (the “Site”). 

This Privacy Policy does not apply to information collected from you offline or through websites and other online services unrelated to UC Health, including third-party websites, or to Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). UC Health’s use and disclosure of PHI is fully described in our Notice of Privacy Practices.

This Privacy Policy supplements UC Health’s Terms and Conditions, which users should also review. By using or accessing our Site, you are agreeing to this Privacy Policy and our Terms and Conditions. If you do not agree with our information practices described in this Privacy Policy, you may not use our Site. 


Information you provide. For certain services or activities, such as when you register with a service, subscribe to our alerts, or contact us directly, we may collect some or all the following types of information, and combine it with information we already have about you:

  1. Contact information, such as your full name, email address, phone number, and mailing address.
  2. Username and password.
  3. Payment information, including insurance information.
  4. Personal health information not protected by HIPAA.
  5. Records of communications.
  6. Your survey responses.
  7. Any other information you provide to us.

Information collected automatically. We collect information about you automatically as you navigate or use our Sites. Information collected automatically may include usage details, session replay and recording technology (recording your movements, clicks, etc. on our Site), and information collected through Adobe Analytics, cookies, pixel tracking and other tracking technologies. As you navigate through and interact with our Sites, we may use automatic data collection to collect certain information about your equipment, browsing actions, and patterns. All data collected is for our use and is proprietary to us only. 

We may also collect technical data to address and fix technical problems and improve our Site. Your device or browser settings may permit you to control the collection of this technical data. By using the Site, you consent to our use of cookies and similar technologies.

Information collected from other sources including third-party services and organizations. If you access the Site from an advertisement on a third-party website, application, or other service (a “Third-Party Service”) we may receive information from the owner of the Third-Party Service related to you or that advertisement and combine that with information we collect about you. To the extent we combine such third-party sourced information with personal information we collect directly from you on the Sites, we will treat the combined information as personal information under this Privacy Policy. Our website may contain links to external Third-Party Service. UC Health is not responsible for the content or privacy policies of a Third-Party Service. 


We may use the information we collect and combine to: 

  1. Communicate with you.
  2. Fulfill your requests for products, services, and information.
  3. Send you information about clinical services or general wellness from us or on behalf of our affiliates.
  4. Analyze the use of our Site and user data to provide, understand, and improve the Site.
  5. Conduct research using your information, which may be subject to your separate written authorization.
  6. Prevent potentially prohibited or illegal activities and otherwise in accordance with our Terms and Conditions.
  7. For any other purposes disclosed to you at the time we collect your information or pursuant to your consent.


We may share the information described in this Privacy Policy or as described at the time the information is collected.

Information gathered in any SMS campaign will not be shared for marketing purposes, including our EPIC Hello World campaign.

Information shared with authorized third-parties and services providers. We may share your information with third-party vendors and service providers that help us with specialized services, including billing, payment processing, providing medical advice for telemedicine services, management and hosting of telemedicine services, customer service, email deployment, business analytics, marketing (including but not limited to advertising, attribution, deep-linking, direct mail, mobile marketing, optimization and retargeting) advertising, performance monitoring, hosting, and data processing. These third-party vendors and service providers may not use your information for purposes other than those related to the services they are providing to us.

Information shared with corporate affiliates. We may share your information with our affiliates.

Information shared for legal purposes. We may disclose information to respond to subpoenas, court orders, legal process, law enforcement requests, legal claims or government inquiries, and to protect and defend the rights, interests, health, safety, and security of UC Health, our affiliates, patients, users, or the public.

Information shared in business transfers. HIPAA permits organizations to transfer PHI in certain circumstances. We can transfer your information as part of a transfer of the assets of the organization, merger, or consolidation or in the unlikely event of bankruptcy, if such transfer is permissible under HIPAA.

Sharing Protected Health Information. We may transfer your PHI as described in and permitted under HIPAA.

Information shared with your consent or at your direction. We may share information for any other purposes disclosed to you at the time we collect the information or pursuant to your consent or direction.


The Site may include hyperlinks to third-parties like other websites, online locations, platforms, or services for your convenience and information. Such linked websites may be operated by third-parties that are not owned or controlled by UC Health. They may use their own cookies, web beacons, and other tracking technologies to collect information about you, and they may solicit personal information directly from you. If you follow links from the Site to other websites, we encourage you to familiarize yourself with their privacy policies and terms and conditions. We are not responsible for the content or privacy practices of websites that we do not control.


We have implemented technical safeguards to protect the information we collect and use from theft, loss, and misuse. However, no data transmitted over the internet is guaranteed to be 100 percent secure.

The Site offer opportunities to communicate through email. Because regular email is not encrypted, the possibility exists that unauthorized individuals may intercept email messages. UC Health is not responsible for the privacy and security of email messages except those stored in our system.


The Site is located in and directed only at users in the United States. If you are visiting the Site from outside of the United States, your information may be transferred to or stored on servers in the United States where the privacy laws may not be as protective as those in your jurisdiction. By using the Site, you understand and consent to the transfer of your information to the United States and those third-parties with whom we share it as described in this Privacy Policy.


Under the California Online Privacy Protection Act (CALOPPA), businesses in California or with California-based consumers are required to notify users how they respond to Do Not Track settings. We do not support Do Not Track. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.


There is a variety of tools available to you to manage cookies and similar technologies that collect information related to your use of the Site, including:

Web browser controls to block and delete cookies, or to adjust your tracking preferences; and by visiting the Digital Advertising Alliance or Network Advertising Initiative respective websites to opt-out of receiving third-party participant companies advertising.

For cookies and similar technologies used on our mobile applications for applicable targeted advertising activities, use the settings in your mobile device(s) to opt out of having your information collected and used by us and our digital marketing partners.

Please note that disabling, removing, or blocking cookies may affect the functionality of the Site.


We currently do not offer any content directed at children under the age of 13. We do not collect any information from users whom we know are under the age of 13.


This Privacy Policy is effective as of November 9, 2023. We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Subject to applicable law, your continued use of the Site indicates your consent to the terms of the posted Privacy Policy. We encourage you to periodically review this Privacy Policy. The continued use of our Site after revisions to this Privacy Policy indicate your acceptance of the changes.


If you have any questions about this Privacy Policy, please click here to contact UC Health.