Ambience Healthcare procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Data Subject Rights. Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights available to them under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. If these rights apply to you, they may permit you to request that we: Right of access: You have the right to request access to your personal information and to ascertain the nature of the data being processed.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to restriction of processing: You have the right to limit the way in which we process your personal information under specific circumstances.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To request that we delete personal information that we have collected from you.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to data portability: You have the right to obtain and reuse your personal data in a structured, commonly used, machine-readable format that supports re-use for your own purposes across different services, thereby enabling you to move, copy or transfer your data easily.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To request that we correct inaccurate personal information that we maintain about you.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to erasure: You have the right to request the deletion or removal of your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was originally collected.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ California residents may exercise the above rights by contacting us as detailed herein. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. We may ask you to provide us with information necessary to reasonably verify your identity before responding to your request. We may require you to use your email address in order to perform such verification. We will consider all requests and provide our response within the time period required by applicable law. Please note, however, that certain information may be exempt from such requests. If we deny your request in whole or in part, you may have the right to appeal the decision. In such circumstances, we will provide you with information regarding the appeals process. You may only make a consumer request for access or data portability twice within a 12-month period. We will not discriminate against you for exercising any of your rights. Any disclosures we provide will only cover the 12-month period preceding the consumer request's receipt.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If applicable, you may make a complaint to the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached. In instances where we process personal information on behalf of our customer, rights requests should be directed to the relevant customer. Ambience is not established in the EU, however we do maintain a designated UK and EU representatives under Article 27 of GDPR: EU - Ireland Representative Adam Brogden + 353 15 549 700 Instant EU GDPR Representative Ltd Office 2 12A Lower Main Street, Lucan Co. Dublin K78 X5P8 Ireland UK Representative Adam Brogden + 441 772 217 800 GDPR Local Ltd 1st Floor Front Suite 27-29 North Street, Brighton England BN1 1EB The fastest, most convenient way to contact GDPR Local is via these forms: UK: https://ambiencehealthcareinc.gdprlocal.com/uk EU: https://ambiencehealthcareinc.gdprlocal.com/eu You can also send an email to contact@gdprlocal.com . XIII. UPDATES TO THIS PRIVACY POLICY We reserve the right to make updates and revisions to this Policy at our discretion and at any time. When we make changes to this Policy, we will post the updated notice on our Sites. Any changes will be effective as of the posting of the new Policy. Your continued use of our Sites following the posting of changes constitutes your acceptance of such changes. XIV.CONTACT If you have any questions or comments about this Policy, the ways in which Ambience collects and uses your information described here, your choices and rights regarding such use, or you wish to exercise your rights under an applicable state law, please contact us by: Email : security@ambiencehealthcare.com .” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To opt out of the sale or sharing of your personal information.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right of rectification: You have the right to request the rectification or amendment of incorrect personal information we hold about you.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to object to processing: You have the right to object to the processing of your personal data in certain circumstances, including opposition to direct marketing.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you are a California resident, you may have the following rights with respect to the personal information we process about you: To request information about the categories of personal information we have collected about you, the categories of sources from which we collected the personal information, the purposes for collecting or sharing the personal information, the categories of third parties with whom we have shared or sold your personal information, and the specific pieces of personal information we have collected about you.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ To delete your personal information that we have obtained.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ While we maintain your information, we protect it using administrative, physical, and technical security safeguards designed to protect your information. Despite these measures, we cannot guarantee the security of the information we maintain about you. We retain information for different periods of time depending on the purposes for which we collect and use it, as described in this Policy. We will not retain information for longer than needed to fulfill these purposes unless a longer retention period is required to comply with legal obligations. Also, there may be technical or other operational reasons where we are unable to delete or de-identify your information. Where this is the case, we will take reasonable measures to prevent further processing your information. VIII. COOKIES AND AUTOMATED DATA COLLECTION TECHNOLOGIES We, as well as third parties that provide advertising and analytics services to us, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the services. Technologies are essentially small data files placed on your computer, tablet, mobile phone, or other devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our services. Cookies . Cookies are small text files placed in visitors’ computer browsers to store their preferences. Most browsers allow you to block and delete cookies. However, if you do that, the Services may not work properly.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger, or acquisition of all or any part of our business.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Please note that when you interact with other entities, including when you leave our Sites, those entities may independently collect information about you and solicit information from you. The information collected and stored by those entities remains subject to their own policies and practices, including what information they share with us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Other users through the Sites (when you make your information public or otherwise accessible” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Where we believe that it is necessary to avoid liability or violations of the law;” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ When we believe that we need to share information about you to provide a service that you have requested from us or from others;” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ With our customers, when you engage in our surveys as an authorized user, through the onboarding process, through surveys collecting feedback on how we are doing, surveys administered post interaction with us related to support or training, and other surveys, including focus groups and usability design activities such as click tests, card sorts, and other surveys and tests you participate in. We typically notify you in advance that we will share your information with our customers if you complete a survey.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Analytics . We may also use Google Analytics, Marketo, LinkedIn Analytics, Gigya, Site Improve, Facebook Analytics, and Twitter Analytics and other service providers to collect information regarding visit, or behavior and visitor demographics on our Services. Other third party tools . We use other third party tools which allow us to track the performance of our Sites. These tools provide us with information about errors, app and website performance, and other technical details we may use to improve our Sites and/or the Services.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Some of our Sites and services may have social media and technology integrations that are operated or controlled by separate entities. We also may collect information from third party social media and marketing companies to enhance our data sets. Some examples include: Links. Our Sites include links that hyperlink to websites, platforms, and other services not operated or controlled by us.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ With third parties that provide use audience matching services. For instance, we may incorporate the Facebook pixel on our non-patient facing Sites and may share your email address with Facebook as part of our use of Facebook Custom Audiences. This helps us find more potential customers that have similar interests as you do. Some technology services may provide us with their own data, which is then uploaded into another technology service for matching common factors between those datasets.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To protect the rights, property, life, health, security, and safety of us, the Sites, or anyone else;” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We also share information with other entities in the following situations: Where you have given us your consent to share or use information about you;” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may also collect information from other sources, such as lead generation companies, social networks, and business partners that offer co-branded services or help us sell or distribute our products. We may also collect information from other users of our services or from available sources.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ To any other person with notice to you and your consent to the disclosure.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ With our related entities and/or affiliates for business purposes including, but not limited to, customer support, marketing, technical and business operations. We also may share information with affiliates for commercial purposes.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ At your request or direction, such as when you choose to share information with a social network about your activities on the Sites; or” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Platform Linking. Our Sites may offer you the ability to link to another service or partner to retrieve certain data about your account on that service. For more information about how these platforms handle information about you, please refer to their respective privacy policies and terms of use.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Where we are required by law or other legal process to disclose information, and where required, in response to a lawful request by public authorities, including meeting national security or law enforcement requirements;” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Sites that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes in particular: Customers who are residents of California may request (i) a list of the categories of personal information disclosed by us to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To make such a request, please contact us as detailed herein. We may require additional information from you to allow us to verify your identity and we are only required to respond to requests once during any calendar year.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We disclose the following categories of personal information for commercial purposes: identifiers, commercial information, internet activity, and geolocation data. We share information outside of Ambience in the following circumstances: With service providers and vendors that provide services to us, such as to provide analytics, manage our content, administer ads, provide insights to us related to marketing needs, for market research purposes, and to analyze our marketing efforts.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Notwithstanding the above, we may share information that does not identify you and could not reasonably be used to identify you (including information that has been aggregated, anonymized, or de-identified) except as prohibited by applicable law. With respect to de-identified patient information, we disclose such deidentified information to third parties when permissible pursuant to our contractual commitments with our customers and in accordance with Health Insurance Portability and Accountability Act (“HIPAA”) requirements or other applicable law. We employ the safe harbor method or the expert determination method, as enumerated under HIPAA. Those third parties to whom the deidentified data is disclosed are third party service providers/vendors with whom we have relationships and/or academic researchers and/or institutions that are contributing to healthcare.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Liking, Sharing, and Logging-In. We may embed a pixel or SDK on our Sites that allows you to “like” or “share” content on, or log in to, your account through social media. If you choose to engage with such integration, we may receive information from the social network that you have authorized to share with us. Please note that the social network may independently collect information about you through the integration.” | Captured 2026-07-19Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.