Privacy Policy & Advertising Disclosures

1. Information We Collect

We collect information necessary to deliver commercial medical database intelligence, answer enterprise quote inquiries, process sample file requests, and improve our website performance:

a. Information You Provide Voluntarily

• Business Contact Information: Full name, professional work email address, company name, clinical or commercial organization, job title, and project requirements submitted through our contact and sample request forms.
• Transaction & Billing Data: Company billing address, authorized representative contact details, tax identification, and payment confirmation details (payment card processing is executed through PCI-DSS Level 1 compliant gateways; we never store raw credit card numbers).
• Client Data Files: Provider lists submitted for proprietary appending, NPI enrichment, or hygiene verification, processed under strict non-disclosure obligations.

b. Information Collected Automatically

• Technical & Log Data: Internet Protocol (IP) address, browser type and version, operating system, referrer URL, pages visited, duration of visit, and device identifiers.
• Analytics & Interaction Data: Navigation paths, scroll depth, form submission interactions, and campaign attribution parameters (UTM tags) collected via analytics tools.

c. B2B Healthcare Professional (HCP) Directory Intelligence

Our master database aggregates public records, government registries (CMS NPPES NPI-1 and NPI-2 registries), state licensing boards, medical society rosters, academic medical center publications, and postal authorities. This includes provider names, clinical specialties, state license status, primary practice physical addresses, phone numbers, and direct professional business emails.

2. How We Collect Information

We collect information through:

• Direct Inquiries: Interactive forms on our website for quote calculations, sample CSV downloads, data appending assessments, and contact submissions.
• Automated Technologies: Pixels, cookies, and local storage deployed on our website to ensure fast loading, session security, analytics, and advertising conversion measurement.
• Official Government & Public Registries: Continuous monthly synchronization against the Centers for Medicare & Medicaid Services (CMS) NPPES National Provider Identifier registry and 50 state medical, nursing, and dental boards.

3. Third-Party Advertising Disclosures (Google, Meta, LinkedIn)

To market our B2B healthcare intelligence solutions to marketers, recruiters, and pharmaceutical/medtech enterprises, we participate in digital advertising programs with major advertising platforms, including Google Ads, Meta Ads (Facebook & Instagram), and LinkedIn Marketing Solutions. In compliance with each platform’s advertiser policies, we provide the following disclosures:

a. Google Ads & Google Analytics

We use Google Ads (including conversion tracking, remarketing tags, and Google Tag Manager) and Google Analytics 4 (GA4).

• Third-party vendors, including Google, use cookies and/or device identifiers to serve ads based on someone’s past visits to our website.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to eHealthcareLists.com and/or other sites on the Internet.
• We adhere strictly to Google’s Personalized Advertising Policies and do not use sensitive personal data, clinical health conditions, or Protected Health Information for ad targeting.
• Opt-Out: You may opt out of personalized advertising by visiting Google Ads Settings. You may also opt out of third-party vendor cookies by visiting the Network Advertising Initiative (NAI) opt-out page or the Digital Advertising Alliance (DAA) Consumer Choice tool.

b. Meta Ads (Facebook & Instagram)

We use the Meta Pixel and Meta Conversions API (CAPI) to measure ad performance, optimize B2B audience targeting, and deliver relevant advertisements across Meta platforms.

• Third parties, including Meta Platforms, Inc., may use cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet, and use that information to provide measurement services and target ads.
• Event data collected through our website (such as page views or sample request conversions) may be transmitted to Meta in a hashed, pseudonymized format for measurement and audience verification.
• Opt-Out: You can manage your Meta ad preferences or opt out of interest-based advertising on Meta by visiting Facebook Ad Preferences or through the YourAdChoices program.

c. LinkedIn Marketing Solutions & Insight Tag

We deploy the LinkedIn Insight Tag on our website, a lightweight snippet of code provided by LinkedIn Corporation.

• The LinkedIn Insight Tag enables in-depth campaign reporting, conversion tracking, website demographic reporting, and retargeting to LinkedIn members who visit our website.
• LinkedIn uses cookies to collect data regarding members’ visits to our website, including URL, referrer, IP address, device and browser characteristics, and timestamp. IP addresses are truncated or hashed, and direct identifiers are removed within 7 days to make the data pseudonymous.
• eHealthcareLists receives only aggregated, anonymized reports from LinkedIn regarding website audience demographics and ad conversions; we do not receive personal identity records of individual LinkedIn users from this tool.
• Opt-Out: LinkedIn members can adjust their advertising settings by visiting LinkedIn Ad Settings. Non-members can opt out of retargeting and guest controls at LinkedIn Guest Controls.

4. Cookies & Tracking Technologies

Our website uses session and persistent cookies, web beacons, and pixel tags to provide secure navigation, analyze site performance, and support our advertising campaigns:

• Strictly Necessary Cookies: Essential for website routing, security, anti-bot validation, and form execution.
• Performance & Analytics Cookies: Enable us to measure page visits, bounce rates, and traffic sources (e.g., Google Analytics, Microsoft Clarity).
• Targeting & Marketing Cookies: Placed by our advertising partners (Google, Meta, LinkedIn) to build a profile of your interests and show you relevant commercial advertisements on other websites.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, certain interactive features (such as live count calculations) may require cookies to function correctly.

5. How We Use Your Information

We use collected data solely for legitimate commercial and operational purposes:

• Fulfillment of Inquiries: Generating customized count reports, delivering test sample (.CSV) spreadsheets, calculating volume pricing tiers, and fulfilling ordered datasets.
• Client Communications: Responding directly to your inquiries and providing delivery updates via email.
• Data Quality & Hygiene: Cross-referencing submitted records against CMS NPPES registries and state boards to maintain our 95% deliverability SLA.
• Platform Security: Detecting and mitigating malicious bots, automated scraping, fraudulent submissions, and unauthorized system access.
• Advertising & Analytics: Measuring campaign return on investment, optimizing digital ads across Google, Meta, and LinkedIn, and understanding market demand for healthcare specialty segments.

6. Data Sharing & Disclosures

eHealthcareLists does not sell, lease, or rent customer personal contact information submitted through our inquiry forms to consumer third-party data brokers. We disclose information only under the following limited circumstances:

• Authorized Service Providers: Vetted technology partners who provide cloud infrastructure, database hosting, transactional email delivery, and CRM processing under strict data processing agreements.
• Digital Advertising Platforms: Pseudonymized or hashed interaction signals transmitted to Google, Meta, and LinkedIn for advertising attribution and conversion measurement as described in Section 3.
• Legal & Regulatory Compliance: When required by lawful court order, subpoena, or applicable statute, or to defend the legal rights, safety, and property of eHealthcareLists and our users.
• Business Restructuring: In the event of a merger, corporate acquisition, or asset transfer, where the acquiring entity assumes privacy obligations consistent with this Policy.

7. Your Privacy Rights (CCPA / CPRA & GDPR)

Depending on your jurisdiction (including the State of California under the California Consumer Privacy Act as amended by the CPRA, and the European Union / United Kingdom under the General Data Protection Regulation), you enjoy specific statutory privacy rights:

• Right to Know / Access: You have the right to request disclosure of the specific categories and pieces of personal information we have collected about you.
• Right to Correction: You have the right to request that we correct inaccurate personal information.
• Right to Deletion: You have the right to request the deletion of personal information collected from you, subject to legal retention obligations.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you (through price discrimination, denial of service, or diminished quality) for exercising any of your privacy rights.

To submit a verified data subject request or exercise your rights, email our compliance team at [email protected] or [email protected]. We will verify your identity and respond within statutory timeframes (30 to 45 days).

8. CAN-SPAM & Marketing Compliance

eHealthcareLists strictly adheres to the U.S. Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (CAN-SPAM Act), the Canadian Anti-Spam Legislation (CASL), and applicable international commercial electronic messaging laws:

• We maintain verified direct business emails strictly for professional B2B commercial outreach.
• All marketing emails originating from eHealthcareLists include a clear opt-out / unsubscribe link and our physical mailing address in Wilmington, Delaware.
• We never use misleading subject lines, deceptive headers, or falsified sender domains.
• Unsubscribe requests are processed automatically and honored promptly within statutory limits.

9. Data Security & Retention

We implement administrative, technical, and physical safeguards designed to protect personal and business information against unauthorized access, destruction, loss, alteration, or disclosure. These measures include TLS 1.3 cryptographic protocols, encrypted rest storage, least-privilege administrative access controls, and routine security assessments.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, satisfy our contractual obligations, resolve commercial disputes, and comply with legal, tax, and accounting retention requirements.

10. Corporate Contact Information

If you have questions, comments, or requests regarding this Privacy Policy, our advertising practices, or your privacy rights, please contact our legal and compliance office: