EFFECTIVE DATE: January 1, 2023
LAST UPDATED: March 5, 2025
Privacy Policy
A. Purpose and Scope of Privacy Policy
This Privacy Policy (“Privacy Policy” or “Policy”) describes the categories of personal information we (“Apexus”, “we”, “our”) collect, the categories of sources from which we collect personal information, the purpose(s) for which we collect and/or process personal information, the categories of third parties with which we share personal information and the categories of personal information we share, the security measures we implement to protect personal information, the period for which we retain personal information, a description of your rights with regard to your personal information, and instructions for exercising your rights to your personal information. This Privacy Policy covers Apexus, headquartered in the United States at 290 E. John Carpenter Fwy, Irving, TX 75062, our subsidiaries and wholly or majority owned affiliates, and our websites, services (including, but not limited to, offline in connection with sales, marketing, services, and events), and applications where this Privacy Policy is posted (“Sites”).
This Privacy Policy does not apply to protected health information, as defined by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Rather, protected health information is managed in accordance with HIPAA, its implementing regulations, and the respective business associate agreements we have with covered entities.
B. Personal Information We Collect and/or Process.
“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include de-identified data or information that is publicly available. The personal information we collect from you depends on how you use our Site(s). The categories of personal information we collect through our Site(s) may include:
C. How We Use Your Personal Information
We process your information, including your personal information, for the following purposes:
D. How We Share Your Personal Information
We share your information, including personal information, as follows:
E. Children’s Privacy
Our Site(s) is/are not directed to children under the age of sixteen (16), nor do we market products or services to such children. We request that children (or a parent acting on a child’s behalf) do not provide personally identifiable information through our Site(s). We do not knowingly collect, share, or sell personal information from children under sixteen (16) without parental consent. Nor do we sell or share the personal information of consumers if we have actual knowledge that the consumer is less than sixteen (16) years of age, unless the consumer, in the case of consumers at least thirteen (13) years of age and less than sixteen (16) years of age, or the consumer’s parent or guardian, in the case of consumers who are less than thirteen (13) years of age, has affirmatively authorized the sale or sharing of the consumer’s personal information.
F. Notices to and Rights of Texas, Nebraska, and California Consumers
The following information is provided for the benefit of Texas, Nebraska, and California Consumers, including Apexus job applicants, employees, directors, officers, and contractors who meet the definition of a Consumer under the CCPA/CPRA, Nebraska Data Privacy Act, or Texas Data Privacy and Security Act. Apexus collects, stores, processes, and retains the personal information of Texas, Nebraska, and California Consumers in accordance with this Section F.
(i) Categories of Personal Information Apexus Sells or Shares, including Categories of Personal Information Apexus has Sold or Shared for a Business Purpose in the Last Twelve (12) Months
The following table summarizes (a) the categories of personal information/sensitive personal information that Apexus collects, (b) the categories of sources from which personal information/sensitive personal information was collected, (c) the business purpose for collection, (d) the categories of third parties with whom Apexus has shared or sold personal information/sensitive personal information, and (e) the associated retention period for each category of personal information/sensitive personal information. As reflected in this table, we may sell or share your personal information/sensitive personal information with a variety of outside entities.
Please note, Apexus’s ongoing collection, purposes for collection or use, sharing, selling, and retention of personal information/sensitive personal information are performed in accordance with the disclosures in the table below.
Category of Personal Information Collected | Categories of Sources | Commercial/Business Purpose for Collection | Is the Personal Information Sold or Shared? | Categories of Third Parties with Whom Apexus Sold or Shared PI |
---|---|---|---|---|
Identifiers Examples: Full name, email address, phone number, account login, IP address |
You; service providers; and other tracking technologies on our website | Processing or fulfilling transactions; debugging to identify and repair errors that impair existing intended functionality; providing internal analytic services; providing Customer services; protecting against malicious, deceptive, fraudulent or illegal activity | Yes | Service providers; payment processors; third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event; affiliates, professional advisors; law enforcement authorities; those involved in legal proceedings, with consent. |
Internet and other network activity Example:Browsing activity |
You, Your mobile devices and computers used to access our Site | Marketing, customer, or analytic services; enabling or effecting, directly or indirectly, a commercial transaction | Yes | Vendors such as medical services providers, third-party marketers, cloud providers, analytics services providers, and service providers in the online advertising industry. |
Commercial Activity Examples: Information about goods or services purchased, obtained, or considered |
You, Your mobile device and computers used to access our site | Processing or fulfilling orders and transactions; marketing, customer or analytic services | Yes | Vendors such as health care providers and systems, health care service providers, data aggregators, third-party marketers, cloud providers, service providers in the online advertising industry and other suppliers to the health care industry. |
Professional or Employment-related Information Examples: Job history, educational history |
Applicants; corporate customers; and outside sources, such as credit bureaus. (e.g. National Practitioner Identifiers (NPIs), Drug Enforcement Administration (DEA) Numbers, office locations and addresses collected from our customers, governmental sources and health care claims aggregators | Process and evaluate applications for positions with Apexus; facilitate administrative purposes, such as payments to contractors, marketing, customer or analytic services; provide services for customers’ health care operations | Yes | Service providers, such as HR vendors or cloud providers |
Social Security, Drivers License, State Identification Card, or Passport Number | Employment applications, resumes, HR documents, email, phone correspondence, documentation completed throughout the application and employment terms | Performing services on behalf of the business | No | N/A |
Account Login, in combination with the required security or access code, password, or credentials allowing access to an account | Apexus HR, Apexus IT Security | Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Apexus, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Apexus | No | N/A |
Geolocation Data | Apexus IT Security | Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Apexus, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Apexus | No | N/A |
Medical Information or Health Insurance Information | Apexus’s employee health insurance plan documentation and associated forms, employee health applications | Performing services on behalf of the Apexus, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. | No | N/A |
Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation | Apexus’s employee health insurance plan and associated forms, employee health applications | Performing services on behalf of the Apexus, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. | No | N/A |
Biometric Information Examples: Image, fingerprint, voice audio, and video recording |
Security systems, HR Documentation, IT Security | Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. | No | N/A |
(ii) Categories of Personal Information Apexus Discloses for a Business Purpose, including Categories of Personal Information Apexus has Disclosed for a Business Purpose in the Last Twelve (12) Months
The following table summarizes (a) the categories of personal information that Apexus collects, (b) the categories of sources from which personal information was collected, (c) the business purpose for collection, (d) the categories of third parties with whom Apexus discloses personal information, (e) the categories of third parties with whom Apexus discloses personal information, and (f) the associated retention period for each category of personal information. As reflected in this table, we may disclose your personal information to a variety of outside entities.
Please note, Apexus’s ongoing collection, use, disclosure, and retention of personal information are performed in accordance with the disclosures in the table below.
Category of Personal Information Collected | Categories of Sources | Commercial/Business Purpose for Collection | Is the Personal Information Disclosed to third parties? | Categories of Third Parties with Whom Apexus Disclosed PI | Categories of Third Parties with Whom Apexus Discloses PI |
---|---|---|---|---|---|
Identifiers Examples: Full name, email address, phone number, account login, IP address |
You; service providers; and other tracking technologies on our website | Processing or fulfilling transactions; debugging to identify and repair errors that impair existing intended functionality; providing internal analytic services; providing Customer services; protecting against malicious, deceptive, fraudulent or illegal activity | Yes | Service providers; payment processors; third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event; affiliates, professional advisors; law enforcement authorities; those involved in legal proceedings, with consent. | Service providers; payment processors; third parties that assume control over all or part of the business in connection with a merger, acquisition, bankruptcy, or similar event; affiliates, professional advisors; law enforcement authorities; those involved in legal proceedings, with consent. |
Internet and other network activity Example: Browsing activity |
You, Your mobile devices and computers used to access our Site | Marketing, customer, or analytic services; enabling or effecting, directly or indirectly, a commercial transaction | Yes | Vendors such as third-party marketers, cloud providers, and service providers in the online advertising industry. |
Vendors such as medical services providers, third-party marketers, cloud providers, analytics services providers, and service providers in the online advertising industry. |
Commercial Activity Examples: Information about goods or services purchased, obtained, or considered |
You, Your mobile device and computers used to access our site | Processing or fulfilling orders and transactions; marketing, customer or analytic services | Yes | Vendors such as health care providers and systems, health care service providers, data aggregators, third-party marketers, cloud providers, service providers in the online advertising industry and other suppliers to the health care industry. | Vendors such as health care providers and systems, health care service providers, data aggregators, third-party marketers, cloud providers, service providers in the online advertising industry and other suppliers to the health care industry. |
Professional or Employment-related Information Examples: Job history, educational history |
Applicants; corporate customers; and outside sources, such as credit bureaus. (e.g. National Practitioner Identifiers (NPIs), Drug Enforcement Administration (DEA) Numbers, office locations and addresses collected from our customers, governmental sources and health care claims aggregators | Process and evaluate applications for positions with Apexus; facilitate administrative purposes, such as payments to contractors, marketing, customer or analytic services; provide services for customers’ health care operations | Yes | Service providers, such as HR vendors or cloud providers. As part of its Services, Personal information including professional and employment related information of practitioners is provided to customers in the health care industry, including health care providers and systems, data aggregators in the health care industry, pharmaceutical manufacturers and other suppliers to the health care industry. These third party transfers may be considered disclosures of data under the CCPA. | Service providers, such as HR vendors or cloud providers. As part of its Services, Personal information including professional and employment related information of practitioners is provided to customers in the health care industry, including health care providers and systems, data aggregators in the health care industry, pharmaceutical manufacturers and other suppliers to the health care industry. These third party transfers may be considered disclosures of data under the CCPA. |
Social Security, Drivers License, State Identification Card, or Passport Number | Employment applications, resumes, HR documents, email, phone correspondence, documentation completed throughout the application and employment terms | Performing services on behalf of the business | Yes | Service providers, such as HR vendors or cloud providers | N/A |
Account Login, in combination with the required security or access code, password, or credentials allowing access to an account | Apexus HR, Apexus IT Security | Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Apexus, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Apexus | No | N/A | N/A |
Geolocation Data | Apexus IT Security | Performing services on behalf of the business, ensuring the security and integrity, undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by Apexus, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Apexus | No | Service providers such as cloud providers, security auditors, or IT consultants | N/A |
Medical Information or Health Insurance Information | Apexus’s employee health insurance plan documentation and associated forms, employee health applications | Performing services on behalf of the Apexus, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. | Yes | Service providers such as medical providers, medical services providers, payment processors | Service providers such as medical providers, medical services providers, payment processors |
Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation | Apexus’s employee health insurance plan and associated forms, employee health applications | Performing services on behalf of the Apexus, or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, providing storage, or providing similar services. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. | Yes | Service providers such as medical providers, medical services providers, payment processors | Service providers such as medical providers, medical services providers, payment processors |
Biometric Information Examples: Image and video recording |
Security Systems, HR Documentation, IT Security | Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes. Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. | Yes | Service providers, such as HR vendors or cloud providers | Service providers, such as HR vendors, security auditors, or cloud providers |
(iii) Data Retention
Apexus retains each category of personal information for the time required to fulfill the business purpose for which it was collected and to conduct the activities contemplated in this Privacy Policy, unless a different retention period is required by applicable law, or to otherwise fulfill a legal obligation or protect our legal rights. Our data retention policy is designed to retain data for as long as needed for us to comply with our contractual obligations, employment obligations, and other business purposes, including legal obligations to retain data. We may retain some information from closed accounts so that we can comply with law, prevent fraud, assist with investigations, resolve disputes, analyze or troubleshoot programs, enforce our Terms of Use, or take other actions permitted by law.
(iv) Sale of Personal Information
Except as specified in this Privacy Policy, for each of the categories of personal information collected above, we do not sell your personal information for money, but we and our business partners use tracking technologies to help us understand our customers and visitors use of the Site(s), enhance your online experience, and customize our offerings in ways that may be deemed a “sharing” or "sale" of personal information under the certain state privacy laws. This includes working with third parties, such as ad networks, which collect personal information via tracking technologies to serve personalized advertisements on and off our Site(s), provide us with data collection, reporting, and ad response measurement. To the extent we or our partners use such technologies on the Site(s), we offer an opt-out as discussed below.
(v) Consumer Rights.
If you are a Texas, Nebraska, or California Consumer as defined by the Texas Data Privacy and Security Act, Nebraska Data Privacy Act, or CCPA and CPRA, respectively, you have certain rights with regard to your personal information.
California consumers have (a) the right to know what personal information we collect about you and access such information, (b) the right to know what personal information is sold or shared, and to whom, (c) the right to correct inaccurate personal information, (d) the right to delete your personal information, (e) the right to opt-out of the sale or sharing of your personal information, (f) the right to limit the use and disclosure of sensitive personal information, and (g) the right to no retaliation following opt-out or exercise of other rights.
Texas and Nebraska consumers have the rights to (i) confirm whether Apexus is processing your personal information and access such personal information; (ii) correct inaccuracies in your personal information, taking into account the nature of the personal information and the purpose of processing your personal information; (iii) deleted personal information provided by you or that we’ve obtained about you; (iv) if your personal information is available in a digital format, obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format; and (v) Opt-Out of processing of your personal information for purposes of targeted advertising, the sale of personal information, and profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you, the consumer.
To exercise these rights and choices, please follow the instructions below:
California Consumers:
Texas and Nebraska Consumers:
Apexus will respond to your request to exercise your rights in a prompt and timely manner. We reserve the right to charge a fee where permitted by law, for instance, if your request is manifestly unfounded or excessive. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Verification: Please note, we will take steps to verify your identity before fulfilling any of the above requests. We will request a copy of your identification with your Texas, Nebraska, or California residency as well as request you to verify through an authentication e-mail. We may also require other authentication that is reasonable in light of the nature of the personal information requested.
Authorized Agents: Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your or your minor child's personal information. In order to designate an authorized agent to make a request on your behalf, you or your authorized agent must provide written proof that you have consented to this designation unless the agent has power of attorney pursuant to applicable law. If you are submitting a request via an authorized agent, please direct your authorized agent to submit its attestation/power of attorney to Apexus using the email stateprivacycompliance@apexus.com. You must also verify your identity directly with us by providing a copy of your government issued identification.
Response Timing and Format: We will respond to a verified consumer request for personal information within 45 days of receipt. If we require more time (up to 90 days), we will notify you of the reason and extension period in writing. Disclosure of required information will be made in writing and delivered to you through your account with Apexus, if you maintain an account with Apexus, or by mail or electronically at your election, in a readily usable format that allows you to transmit the information from one entity to another without hindrance. The disclosure of the required information will cover the twelve (12) month period preceding Apexus’s receipt of your verified request provided that, you may request that Apexus disclose the required information beyond the twelve (12) month period and Apexus will provide that information unless doing so proves impossible or would involve disproportionate effort. Your right to request information beyond the twelve (12) month period shall only apply to personal information collected on or after January 1, 2022.
Do Not Track: Your browser may deliver a "Do-Not-Track ('DNT') signal" to the Site. We will honor a "Do-Not-Track" signal as a valid opt-out request.
H. Our Use of Cookies and Other Tracking Mechanisms
We and our third-party service providers may use cookies and other tracking mechanisms to track information about your use of our Site(s).
Cookies. Cookies are alphanumeric identifiers that we transfer to your computer's hard drive through your web browser for record-keeping purposes. Some cookies allow us to understand activities on our Sites.
We offer an opt-out from the use of cookies and other tracking technologies in connection with our Sites, which may in some cases constitute the sale of your personal information under the CCPA/CPRA or other privacy laws. To do so, please opt-out via the cookie consent banner presented at the bottom of your browser the first time you access our Site(s) or complete the online form by clicking our Do Not Sell or Share My personal information link or calling 1-800-842-5146. For cookies, this will cause information to cease to be added to any cookies or other tracking technologies that have been set on our Services or block them entirely; for our other programs, Apexus will cease providing your personal information to third parties. You may update your cookie preferences at any time by clicking the “Update Cookie Preferences” link at the bottom of the homepage. Please note that, as to cookies, you will need to opt out again if you visit one of our Services from a different device or browser of if you clear your cookies.
Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser settings to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.
Service Provider Analytics. We use automated devices and applications, such as Google Analytics and LogRocket, to evaluate usage of our Site. We also may use other analytic means to evaluate our Site. We use these tools to help us improve our Site, performance, and user experiences. These entities may use cookies and other tracking technologies to perform their services. To learn more about Google's and LogRocket’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/ and LogRocket’s Privacy Policy at https://logrocket.com/privacy. You can also download the Google Analytics Opt-out Browser Add-on to prevent their data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout. You can further manage your browser’s ability to accept cookies or remove persistent cookies by following directions provided in your internet browser’s “help” file. These entities may collect certain non-PII regarding your use of the Apexus website, such as IP addresses, browser types, domain names, internet-service provider(ISP), referring/exit pages, operating system, date/time stamp, and clickstream data.
I. Third Party Links
Our Site may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.
J. Security of Your personal information
We have implemented reasonable technical and administrative security measures to protect the information we collect from unauthorized access, exfiltration, theft, loss, misuse, disclosure, alteration, or destruction. Please be aware that despite our best efforts, no data security measures can guarantee security.
You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
K. Additional Choices
We may send periodic promotional emails to you. You may opt-out of such promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 15 business days for us to process such opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about your account or any services you have requested or received from us.
L. Contact Us
If you have questions, comments, or concerns about the privacy aspects of our Site or if you have a disability and need access to this privacy/legal policy, please email us at legalprivacynotice@apexus.com or call us at 1-800-842-5146. If you are a California consumer exercising one of your rights under CCPA/CPRA, you may call us at 1-800-842-5146 or contact us at stateprivacycompliance@apexus.com.
M. Changes to this Policy
This Policy was last updated as of the date set forth above. We may change this Policy from time to time in our sole discretion, so please be sure to check back periodically. We will post any changes to this Policy on our Site.