Privacy Policy

  1. Purpose and Scope of Privacy Policy

    This Privacy Policy ("Privacy Policy" or "Policy") describes the categories of personal information we ("Vizient", "we", "our") collect, the categories of sources from which we collect personal information, the purpose(s) for which we collect and/or process personal information, the categories of third parties with which we share personal information and the categories of personal information we share, the security measures we implement to protect personal information, the period for which we retain personal information, a description of your rights with regard to your personal information, and instructions for exercising your rights to your personal information. This Privacy Policy covers Vizient, headquartered in the United States at 290 E. John Carpenter Fwy, Irving, TX 75062, our subsidiaries and wholly or majority owned affiliates, and our websites, services (including, but not limited to, offline in connection with sales, marketing, services, and events), and applications where this Privacy Policy is posted ("Sites").

    This Privacy Policy does not apply to protected health information, as defined by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Rather, protected health information is managed in accordance with HIPAA, its implementing regulations, and the respective business associate agreements we have with covered entities.

  2. Personal Information We Collect and/or Process.

    "Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include de-identified data or information that is publicly available. The personal information we collect from you depends on how you use our Site(s). The categories of personal information we collect through our Site(s) may include:

    • Personal Information We Collect Automatically. We automatically collect the following identifiers and internet or other electronic network activity information about your use of our Site through cookies, web beacons, and other technologies: your domain name; country of origin, your browser type and operating system; Vizient web pages you view; links you click on the Vizient website; your IP address; the length of time you visit our Site; and the referring URL or webpage that led you to our Site. We may combine this information with other information that we have collected about you, including, where applicable, your username, name, business email and other personal information. Please see the Our Use of Cookies and Other Tracking Mechanisms section below for more information, including information on how to opt-out of cookies.

    • Personal Information We Collect Through Our Corporate Customer Relationships. In order to manage our customer relationships with our corporate customers, we collect identifiers and employment-related information about and from our corporate customers' employees and workforce. This information may include names, titles, business email addresses and phone numbers, work location, and information about an employee or workforce member's role at the corporate customer (such as the department they work in, products or issues worked on, and other similar information). We use this information to administer our corporate customer contracts and to market our services to corporate customers. When you/your employer are subscribed to one of our services, listservs or community portals, we may collect information such as your name, email address, profession, and customer affiliation.

    • Personal Information Collected through Vizient Services. Vizient collects and/or processes personal information from you when you access or use Vizient's services. The exact nature of the personal information collected or processed depends on the services provided and how you access and/or use Vizient's services. Vizient may collect or process (i) personal identifiers such as full name, email address, phone number, account login, and IP address; (ii) internet and other network activity including browsing activity; (iii) commercial activity including information about goods or services purchased, obtained, or considered; (iv) account login, in combination with the required security or access code, password, or credentials allowing access to an account; (v) geolocation data; and/or (vi) biometric information.

    • Medical Information Collected and Used in Vizient Services. Vizient collects medical information, called "protected health information" under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), in Vizient's role as a business associate to covered entities. Protected health information is used to support Vizient customers' health care operations and is received by Vizient in its capacity as a business associate. The privacy of such data is governed by HIPAA. Similarly, Vizient may collect other information that may be exempt from state consumer privacy laws, such as information to help its corporate customers obtain insurance or reinsurance insurance benefits, and information known as Patient Safety Work Product, or PSWP, which is governed by the Federal Patient Safety and Quality Improvement Act of 2008.

    • Collection of Employment or Professional Information. Vizient also collects identifiers and employment related information (i) from job applicants and employees; (ii) about consumers that are health care practitioners ("practitioners"); (iii) directly from our corporate health care customers as noted above; (iv) from vendors providing services to Vizient; and (v) from third party providers of data, such as health care claims data aggregators, healthcare vendors and suppliers, and governmental sources, in order to operate our business and provide services to our customers in the health care industry. For practitioners, this information may include DEA numbers and National Practitioner Identifiers, in addition to the information noted above. In some cases, this information may be provided to Vizient's customers. Vizient's customers can include health care providers and health systems, data aggregators working in the health care industry, pharmaceutical manufacturers and general medical supply vendors. If the personal information in question is not otherwise subject to an exemption from state privacy laws such as the California Consumer Practice Act ("CCPA") (e.g. as Protected Health Information under HIPAA), the transfer of personal information from Vizient to some customers may be considered a sale or sharing of personal information under the CCPA, Nebraska Data Privacy Act ("NDPA"), or Texas Data Privacy and Security Act ("TDPSA"). Texas, Nebraska, and California Consumers should review the chart in Section F below showing Vizient's personal information collection and disclosure practices.

  3. How We Use Your Personal Information

    We process your information, including your personal information, for the following purposes:

    • To provide our services, to communicate with you about your use of our Site or services, to respond to your inquiries, and for other customer-service purposes.

    • To tailor the content and information that we may send or display to you, to offer location customization, personalized help and instructions, and to otherwise personalize your experiences while using the Site(s).

    • For marketing and promotional purposes. For example, we may use your personal information, such as your email address, to send you a welcome email, news, and newsletters when you or your organization subscribe to our programs, special offers, and promotions, or to otherwise contact you about products or information we think may interest you.

    • To better understand how users access and use our Site(s), both on an aggregated and individualized basis, in order to improve our Site(s) and respond to user desires and preferences, and for other research and analytical purposes.

    • To administer surveys and questionnaires.

    • To administer our customer contracts. For example, we may use a customer's employee's contact information to send our invoices or to send service communications.

    • To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; to respond to a subpoena, warrant, court order, or other legal processes; or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.

    • To protect the safety, rights, property, or security of Vizient, our services, any third party, or the general public; to detect, prevent, or otherwise address fraud, security, or technical issues; to prevent or stop activity that Vizient, in its sole discretion, may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity; to use as evidence in litigation; to conduct audits; and to enforce this Privacy Policy or our Terms of Use.

  4. How We Share Your Personal Information

    We share your information, including personal information, as follows:

    • Affiliates. We may disclose the personal information we collect on the Site(s) to our affiliates or subsidiaries for the purposes described in this Policy; however, if we do so, their use and disclosure of your personal information will be subject to this Policy.

    • Third-Parties and Processors. We may disclose the personal information we collect from you to third-party vendors, processors, service providers, customers, contractors or agents who receive our services or who perform services on our behalf. For more information, please see the table in Section F below.

    • Business Transfers. We may disclose personal information if we are or may be acquired by or merged with another company, if any of our assets are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the information we have collected from you to the other company.

    • In Response to Legal Process. We also may disclose the information we collect from you in order to comply with the law, a judicial proceeding, court order, or other legal processes, such as in response to a court order or a subpoena.

    • To Protect Us and Others. We also may disclose the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service or this Policy, or as evidence in litigation in which Vizient is involved.

    • Aggregate and De-Identified Information. We may share aggregated or de-identified information about you with third parties for marketing, advertising, research or similar purposes.

  5. Children's Privacy

    Our Site(s) is/are not directed to children under the age of sixteen (16), nor do we market products or services to such children. We request that children (or a parent acting on a child's behalf) do not provide personally identifiable information through our Site(s). We do not knowingly collect, share, or sell personal information from children under sixteen (16) without parental consent. Nor do we sell or share the personal information of consumers if we have actual knowledge that the consumer is less than sixteen (16) years of age, unless the consumer, in the case of consumers at least thirteen (13) years of age and less than sixteen (16) years of age, or the consumer's parent or guardian, in the case of consumers who are less than thirteen (13) years of age, has affirmatively authorized the sale or sharing of the consumer's personal information.

  6. Notices to and Rights of Texas, Nebraska, and California Consumers

    The following information is provided for the benefit of Texas, Nebraska, and California Consumers, including Vizient job applicants, employees, directors, officers, and contractors who meet the definition of a Consumer under the CCPA/CPRA, Nebraska Data Privacy Act, or Texas Data Privacy and Security Act. Vizient collects, stores, processes, and retains the personal information of Texas, Nebraska, and California Consumers in accordance with this Section F.

    1. Categories of Personal Information Vizient Sells or Shares, including Categories of Personal Information Vizient has Sold or Shared for a Business Purpose in the Last Twelve (12) Months

      The following table summarizes (a) the categories of personal information/sensitive personal information that Vizient collects, (b) the categories of sources from which personal information/sensitive personal information was collected, (c) the business purpose for collection, (d) the categories of third parties with whom Vizient has shared or sold personal information/sensitive personal information, and (e) the associated retention period for each category of personal information/sensitive personal information. As reflected in this table, we may sell or share your personal information/sensitive personal information with a variety of outside entities.

      Please note, Vizient's ongoing collection, purposes for collection or use, sharing, selling, and retention of personal information/sensitive personal information are performed in accordance with the disclosures in the table below.

      Categories of Personal Information Collected Categories of Sources Commercial/Business Purpose for Collection Is the Personal Information Sold or Shared? Categories of Third Parties with Whom Vizient Sold or Shared Personal Information
      Identifiers

      Examples: Full name, email address, phone number, account login, IP address      		 You; service providers; and other tracking technologies on our website Processing or fulfilling transactions; debugging to identify and repair errors that impair existing intended functionality; providing internal analytic services; providing Customer services; protecting against malicious, deceptive, fraudulent or illegal activity Yes Service providers; payment processors; third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event; affiliates, professional advisors; law enforcement authorities; those involved in legal proceedings, with consent.
      Internet and other network activity

      Example: Browsing activity      		 You, Your mobile devices and computers used to access our Site Marketing, customer, or analytic services; enabling or effecting, directly or indirectly, a commercial transaction Yes Vendors such as medical services providers, third-party marketers, cloud providers, analytics services providers, and service providers in the online advertising industry.
      Commercial Activity

      Examples: Information about goods or services purchased, obtained, or considered      		 You, Your mobile device and computers used to access our site Processing or fulfilling orders and transactions; marketing, customer or analytic services Yes Vendors such as health care providers and systems, health care service providers, data aggregators, third-party marketers, cloud providers, service providers in the online advertising industry and other suppliers to the health care industry.
      Professional or Employment-related Information

      Examples: Job history, educational history       		(e.g. National Practitioner Identifiers (NPIs), Drug Enforcement Administration (DEA) Numbers, office locations and addresses collected from our customers, governmental sources and health care claims aggregators Process and evaluate applications for positions with Vizient; facilitate administrative purposes, such as payments to contractors, marketing, customer or analytic services; provide services for customers' health care operations Yes Service providers, such as HR vendors or cloud providers
      Social Security, Drivers License, State Identification Card, or Passport Number Employment applications, resumes, HR documents, email, phone correspondence, documentation completed throughout the application and employment terms Performing services on behalf of the business No N/A
      Account Login, in combination with the required security or access code, password, or credentials allowing access to an account Vizient HR, Vizient IT Security Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Vizient, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Vizient No N/A
      Geolocation Data Vizient IT Security Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Vizient, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Vizient No N/A
      Medical Information or Health Insurance Information Vizient's employee health insurance plan documentation and associated forms, employee health applications Performing services on behalf of the Vizient, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. No N/A
      Personal information collected and analyzed concerning a consumer's sex life or sexual orientation Vizient's employee health insurance plan and associated forms, employee health applications Performing services on behalf of the Vizient, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. No N/A
      Biometric Information

      Examples: Image, fingerprint, voice audio, and video recording      		 Security systems, HR Documentation, IT Security Helping to ensure security and integrity to the extent the use of the consumer's personal information is reasonably necessary and proportionate for these purposes. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. No N/A

    2. Categories of Personal Information Vizient Discloses for a Business Purpose, including Categories of Personal Information Vizient has Disclosed for a Business Purpose in the Last Twelve (12) Months

      The following table summarizes (a) the categories of personal information that Vizient collects, (b) the categories of sources from which personal information was collected, (c) the business purpose for collection, (d) the categories of third parties with whom Vizient discloses personal information, (e) the categories of third parties with whom Vizient discloses personal information, and (f) the associated retention period for each category of personal information. As reflected in this table, we may disclose your personal information to a variety of outside entities.

      Please note, Vizient's ongoing collection, use, disclosure, and retention of personal information are performed in accordance with the disclosures in the table below.

      Categories of Personal Information Collected Categories of Sources Commercial/Business Purpose for Collection Is the Personal Information Disclosed to Third Parties? Categories of Third Parties with Whom Vizient Disclosed PI Categories of Third Parties with Whom Vizient Discloses PI
      Identifiers

      Examples: Full name, email address, phone number, account login, IP address       		You; service providers; and other tracking technologies on our website Processing or fulfilling transactions; debugging to identify and repair errors that impair existing intended functionality; providing internal analytic services; providing Customer services; protecting against malicious, deceptive, fraudulent or illegal activity Yes Service providers; payment processors; third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event; affiliates, professional advisors; law enforcement authorities; those involved in legal proceedings, with consent. Service providers; payment processors; third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event; affiliates, professional advisors; law enforcement authorities; those involved in legal proceedings, with consent.
      Internet and other network activity

      Example: Browsing activity      		 You, Your mobile devices and computers used to access our Site Marketing, customer, or analytic services; enabling or effecting, directly or indirectly, a commercial transaction Yes Vendors such as third-party marketers, cloud providers, and service providers in the online advertising industry. Vendors such as medical services providers, third-party marketers, cloud providers, analytics services providers, and service providers in the online advertising industry.
      Commercial Activity

      Examples: Information about goods or services purchased, obtained, or considered      		 You, Your mobile device and computers used to access our site Processing or fulfilling orders and transactions; marketing, customer or analytic services Yes Vendors such as health care providers and systems, health care service providers, data aggregators, third-party marketers, cloud providers, service providers in the online advertising industry and other suppliers to the health care industry. Vendors such as health care providers and systems, health care service providers, data aggregators, third-party marketers, cloud providers, service providers in the online advertising industry and other suppliers to the health care industry.
      Professional or Employment-related Information

      Examples: Job history, educational history       		(e.g. National Practitioner Identifiers (NPIs), Drug Enforcement Administration (DEA) Numbers, office locations and addresses collected from our customers, governmental sources and health care claims aggregators Process and evaluate applications for positions with Vizient; facilitate administrative purposes, such as payments to contractors, marketing, customer or analytic services; provide services for customers' health care operations Yes Service providers, such as HR vendors or cloud providers. As part of its Services, Personal information including professional and employment related information of practitioners is provided to customers in the health care industry, including health care providers and systems, data aggregators in the health care industry, pharmaceutical manufacturers and other suppliers to the health care industry. These third party transfers may be considered disclosures of data under the CCPA. Service providers, such as HR vendors or cloud providers. As part of its Services, Personal information including professional and employment related information of practitioners is provided to customers in the health care industry, including health care providers and systems, data aggregators in the health care industry, pharmaceutical manufacturers and other suppliers to the health care industry. These third party transfers may be considered disclosures of data under the CCPA.
      Social Security, Drivers License, State Identification Card, or Passport Number Employment applications, resumes, HR documents, email, phone correspondence, documentation completed throughout the application and employment terms Performing services on behalf of the business Yes Service providers, such as HR vendors or cloud providers N/A
      Account Login, in combination with the required security or access code, password, or credentials allowing access to an account Vizient HR, Vizient IT Security Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Vizient, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Vizient No N/A N/A
      Geolocation Data Vizient IT Security Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Vizient, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Vizient No Service providers such as cloud providers, security auditors, or IT consultants N/A
      Medical Information or Health Insurance Information Vizient's employee health insurance plan documentation and associated forms, employee health applications Performing services on behalf of the Vizient, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. Yes Service providers such as medical providers, medical services providers, payment processors Service providers such as medical providers, medical services providers, payment processors
      Personal information collected and analyzed concerning a consumer's sex life or sexual orientation Vizient's employee health insurance plan and associated forms, employee health applications Performing services on behalf of the Vizient, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. Yes Service providers such as medical providers, medical services providers, payment processors Service providers such as medical providers, medical services providers, payment processors
      Biometric Information

      Examples: Image and video recording      		 Security Systems, HR Documentation, IT Security Helping to ensure security and integrity to the extent the use of the consumer's personal information is reasonably necessary and proportionate for these purposes. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. Yes Service providers, such as HR vendors or cloud providers Service providers, such as HR vendors, security auditors, or cloud providers

    3. Data Retention

      Vizient retains each category of personal information for the time required to fulfill the business purpose for which it was collected and to conduct the activities contemplated in this Privacy Policy, unless a different retention period is required by applicable law, or to otherwise fulfill a legal obligation or protect our legal rights. Our data retention policy is designed to retain data for as long as needed for us to comply with our contractual obligations, employment obligations, and other business purposes, including legal obligations to retain data. We may retain some information from closed accounts so that we can comply with law, prevent fraud, assist with investigations, resolve disputes, analyze or troubleshoot programs, enforce our Terms of Use, or take other actions permitted by law.

    4. Sale of Personal Information

      Except as specified in this Privacy Policy, for each of the categories of personal information collected above, we do not sell your personal information for money, but we and our business partners use tracking technologies to help us understand our customers and visitors use of the Site(s), enhance your online experience, and customize our offerings in ways that may be deemed a "sharing" or "sale" of personal information under the certain state privacy laws. This includes working with third parties, such as ad networks, which collect personal information via tracking technologies to serve personalized advertisements on and off our Site(s), provide us with data collection, reporting, and ad response measurement. To the extent we or our partners use such technologies on the Site(s), we offer an opt-out as discussed below.

    5. Consumer Rights.

      If you are a Texas, Nebraska, or California Consumer as defined by the Texas Data Privacy and Security Act, Nebraska Data Privacy Act, or CCPA and CPRA, respectively, you have certain rights with regard to your personal information.

      California consumers have (a) the right to know what personal information we collect about you and access such information, (b) the right to know what personal information is sold or shared, and to whom, (c) the right to correct inaccurate personal information, (d) the right to delete your personal information, (e) the right to opt-out of the sale or sharing of your personal information, (f) the right to limit the use and disclosure of sensitive personal information, and (g) the right to no retaliation following opt-out or exercise of other rights.

      Texas and Nebraska consumers have the rights to (i) confirm whether Vizient is processing your personal information and access such personal information; (ii) correct inaccuracies in your personal information, taking into account the nature of the personal information and the purpose of processing your personal information; (iii) deleted personal information provided by you or that we've obtained about you; (iv) if your personal information is available in a digital format, obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format; and (v) Opt-Out of processing of your personal information for purposes of targeted advertising, the sale of personal information, and profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you, the consumer.

      To exercise these rights and choices, please follow the instructions below:

      California Consumers:

      • How to request the right to know: You may request to know the (i) categories of personal information we have collected about you; (ii) categories of sources from which your personal information is collected; (iii) the business or commercial purpose(s) for collecting, selling, or sharing personal information; (iv) the categories of third parties to whom we disclose personal information; and (v) the specific pieces of personal information we have collected about you. Please note, this information is available in this Section F. To exercise your rights, please complete the online form by clicking here or calling 1-800-842-5146. The information will be delivered by mail or electronically at your request. Note, we may not always be able to fully address your request; for example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

      • How to request access to your personal information: You may request access to your personal information twice in a 12-month period. You may request (i) the categories of personal information Vizient has collected about you; (ii) the categories of sources from which the personal information is collected; (iii) the business or commercial purpose for collecting, selling, or sharing personal information; (iv) the categories of third parties to whom the business discloses personal information; (v) the specific pieces of personal information Vizient has collected about you. To do so, please complete the online form by clicking here or calling 1-800-842-5146. The information will be delivered by mail or electronically at your request. Note, we may not always be able to fully address your request; for example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

      • How to request the right to know what personal information is sold or shared and to whom: You may request to know the (i) the categories of personal information we have collected about you, (ii) the categories of personal information about you that we have sold or shared and the categories of third parties to whom your personal information was sold or shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared, (iii) the categories of your personal information we have disclosed for a business purpose and the categories of persons to whom it was disclosed. To do so, please complete the online form by clicking here or calling 1-800-842-5146.

      • How to correct inaccurate personal information: You may request that Vizient correct inaccurate personal information we've collected about you. Vizient will use commercially reasonable efforts to correct the inaccurate personal information as directed by you, taking into account the nature of the personal information and the purposes of the processing of the personal information. To do so, please complete the online form by clicking here or calling 1-800-842-5146.

      • How to request deletion of your personal information: You may request that Vizient delete the personal information it has collected and/or maintained about you. To do so, please complete the online form by clicking here or calling 1-800-842-5146. Upon receipt of a verifiable consumer request to delete your personal information, except as otherwise permitted by law, we will delete your personal information from our records, notify any service providers or contractors to delete your personal information, and notify all third parties to whom we have sold or shared your personal information to delete your personal information unless it proves impossible or involves disproportionate effort. Note, we may retain certain personal information as permitted by law, such as to complete the transaction for which the personal information was collected, provide a requested good or service, detect security incidents, protect against malicious, deceptive, fraudulent or illegal activities, comply with legal obligations or to enable solely internal uses that are reasonably aligned with your expectations or lawful within the context in which you provided the information.

      • How to opt-out of the sale or sharing of personal information: You, or a person authorized by you, have the right to opt-out of the sale or sharing of your personal information. At any time, you may direct Vizient not to sell or share your personal information. To do so, please click here, click the Do Not Sell or Share My Personal Information link at the bottom of the home page, or call 1-800-842-5146. Vizient will cease providing your personal information to third parties unless there is a legally valid reason to do so. Please note that, as to cookies, you will need to opt out again if you visit one of our Sites from a different device or browser of if you clear your cookies.

      • Right to Limit Use and Disclosure of Sensitive personal information: You have the right, at any time, to direct Vizient to limit the use of your sensitive personal information to those uses that (i) are necessary to perform the services or provide the goods as reasonably expected by an average consumer who requests those goods or services; (ii) help ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate to that purpose; (iii) are short term, transient use, including, but not limited to, non-personalized advertising as a part of your current transaction with Vizient, provided that your personal information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside your then current interaction with Vizient; (iv) are necessary to perform services on behalf of Vizient, including maintaining or servicing accounts, providing customer service, processing and fulfilling orders and transactions, verify customer information, process payment, provide financing, provide analytic services, provide storage, or provide similar services on behalf of Vizient; or (v) are undertaken to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Vizient, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Vizient.

      • Right to Non-Discrimination: You have the right to be free from discrimination in product quality, goods or services if you choose to exercise your privacy rights under the CCPA or CPRA. Vizient will not deny you goods or services, charge different prices or rates for goods or services, or retaliate against an employee, applicant, or independent contractor as a result of exercising any rights described in this Privacy Policy. Notwithstanding the above, Vizient may charge you a different price or rate, may provide a different level of quality or goods, or may not be able to provide certain goods or services if your personal information is required for such goods or services and you elect not to provide such personal information.

      Texas and Nebraska Consumers:

      • How to confirm whether Vizient is processing your personal information and access such personal information: You may request to confirm whether we have collected or processed personal information about you and access such personal information. To exercise your rights to confirm and access, please complete the online form by clicking here or calling 1-800-842-5146. The information will be delivered by mail or electronically at your request. Note, we may not always be able to fully address your request; for example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

      • How to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purpose of processing your personal information: You may request that Vizient correct inaccurate personal information we've collected about you. Vizient will use commercially reasonable efforts to correct the inaccurate personal information as directed by you, taking into account the nature of the personal information and the purposes of the processing of the personal information. To do so, please complete the online form by clicking here or calling 1-800-842-5146.

      • How to delete personal information provided by you or that we've obtained about you: You may request that Vizient delete the personal information it has collected and/or maintained about you. To do so, please complete the online form by clicking here or calling 1-800-842-5146. Upon receipt of a verifiable consumer request to delete your personal information, except as otherwise permitted by law, we will delete your personal information from our records, notify any service providers or contractors to delete your personal information, and notify all third parties to whom we have sold or shared your personal information to delete your personal information unless it proves impossible or involves disproportionate effort. Note, we may retain certain personal information as permitted by law, such as to complete the transaction for which the personal information was collected, provide a requested good or service, detect security incidents, protect against malicious, deceptive, fraudulent or illegal activities, comply with legal obligations or to enable solely internal uses that are reasonably aligned with your expectations or lawful within the context in which you provided the information.

      • If your personal information is available in a digital format, how to obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format: To exercise your rights to confirm and access, please complete the online form by clicking here or calling 1-800-842-5146. The information will be delivered by mail or electronically at your request. Note, we may not always be able to fully address your request; for example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

      • How to Opt-Out of processing of your personal information for purposes of targeted advertising, the sale of personal information, and profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you, the consumer: You, or a person authorized by you, have the right to opt-out of the processing of your personal information for purposes of targeted advertising, the sale of personal information, and profiling in furtherance of a decision that produces legal or similarly significant effect concerning you, the consumer. At any time, you may direct Vizient not to process your personal information for these purposes. To do so, please click here, click the Do Not Sell or Share My Personal Information link at the bottom of the home page, or call 1-800-842-5146. Vizient will cease processing your personal information for these purposes unless there is a legally valid reason to do so. Please note that, as to cookies, you will need to opt out again if you visit one of our Sites from a different device or browser of if you clear your cookies.

  7. Responses to Requests from Texas, Nebraska, and California Consumers.

    Vizient will respond to your request to exercise your rights in a prompt and timely manner. We reserve the right to charge a fee where permitted by law, for instance, if your request is manifestly unfounded or excessive. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

    Verification: Please note, we will take steps to verify your identity before fulfilling any of the above requests. We will request a copy of your identification with your Texas, Nebraska, or California residency as well as request you to verify through an authentication e-mail. We may also require other authentication that is reasonable in light of the nature of the personal information requested.

    Authorized Agents: Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your or your minor child's personal information. In order to designate an authorized agent to make a request on your behalf, you or your authorized agent must provide written proof that you have consented to this designation unless the agent has power of attorney pursuant to applicable law. If you are submitting a request via an authorized agent, please direct your authorized agent to submit its attestation/power of attorney to Vizient using the email stateprivacycompliance@vizientinc.com. You must also verify your identity directly with us by providing a copy of your government issued identification.

    Response Timing and Format: We will respond to a verified consumer request for personal information within 45 days of receipt. If we require more time (up to 90 days), we will notify you of the reason and extension period in writing. Disclosure of required information will be made in writing and delivered to you through your account with Vizient, if you maintain an account with Vizient, or by mail or electronically at your election, in a readily usable format that allows you to transmit the information from one entity to another without hindrance. The disclosure of the required information will cover the twelve (12) month period preceding Vizient's receipt of your verified request provided that, you may request that Vizient disclose the required information beyond the twelve (12) month period and Vizient will provide that information unless doing so proves impossible or would involve disproportionate effort. Your right to request information beyond the twelve (12) month period shall only apply to personal information collected on or after January 1, 2022.

  8. Our Use of Cookies and Other Tracking Mechanisms

    We and our third-party service providers may use cookies and other tracking mechanisms to track information about your use of our Site(s).

    Cookies. Cookies are alphanumeric identifiers that we transfer to your computer's hard drive through your web browser for record-keeping purposes. Some cookies allow us to understand activities on our Sites.

    Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser settings to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.

    Service Provider Analytics. We use automated devices and applications, such as Google Analytics and Terminus, to evaluate usage of our Site. We also may use other analytic means to evaluate our Site. We use these tools to help us improve our Site, performance, and user experiences. These entities may use cookies and other tracking technologies to perform their services. To learn more about Google's and Terminus's privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/ and Terminus Privacy Policy at https://terminus.com/privacy-policy/. You can also download the Google Analytics Opt-out Browser Add-on to prevent their data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout. You can further manage your browser's ability to accept cookies or remove persistent cookies by following directions provided in your internet browser's "help" file. These entities may collect certain non-PII regarding your use of the Vizient website, such as IP addresses, browser types, domain names, internet-service provider(ISP), referring/exit pages, operating system, date/time stamp, and clickstream data.

  9. Third Party Links

    Our Site may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

  10. Security of Your personal information

    We have implemented reasonable technical and administrative security measures to protect the information we collect from unauthorized access, exfiltration, theft, loss, misuse, disclosure, alteration, or destruction. Please be aware that despite our best efforts, no data security measures can guarantee security.

    You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

  11. Additional Choices

    We may send periodic promotional emails to you. You may opt-out of such promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 15 business days for us to process such opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about your account or any services you have requested or received from us.

  12. Contact Us

    If you have questions, comments, or concerns about the privacy aspects of our Site or if you have a disability and need access to this privacy/legal policy, please email us at legalprivacynotice@vizientinc.com or call us at 1-800-842-5146. If you are a California consumer exercising one of your rights under CCPA/CPRA, you may call us at 1-800-842-5146 or contact us at stateprivacycompliance@vizientinc.com.

  13. Changes to this Policy

    This Policy was last updated as of the date set forth above. We may change this Policy from time to time in our sole discretion, so please be sure to check back periodically. We will post any changes to this Policy on our Site.