Last updated April 8, 2025
Quantiles (“we” or “us”) recognizes the importance of protecting the privacy of your personal information, and we have prepared this Privacy Policy to provide you with important information about our privacy practices. This Privacy Policy applies when you use any website, mobile, or tablet application or other online service that links and refers to this Privacy Policy (collectively, the “Services”). This Privacy Policy explains what personal data we collect as part of the Services and the purpose for that collection. We also explain how we use your personal data and your choices about that use. By visiting the Services or submitting your personal data, you consent to the practices described in this Privacy Policy. We at Quantiles provide or manage a range of data analytics and related services for businesses, healthcare professionals, and the community through our wholly and majority owned affiliates and other third parties (“data analytics”). This Privacy Policy does not apply to information collected by our affiliated or managed entities, other websites or online services.
We collect personal information that identifies, relates to, describes, or could reasonably be linked to an individual or household. The types of personal information we collect may include:
We automatically collect certain information when you use our Services, such as:
In order to take advantage of the Services or features offered or provided by the Services, you may be asked to provide personal information. For example, if you request information from us through the Services, we may collect your name, e-mail address, mailing address and phone number.
In addition to the information you provide to us, we may collect information about your use of the Services. For example, we may collect:
We may receive information about you from publicly and commercially available sources, as permitted by law, which we may combine with other information we receive from or about you. For example, we may receive information about you from a social media site if you connect to the Services through that site.
We use your information for the following purposes:
Consent
We may otherwise use your information with your consent or at your direction.
We may share your personal information, or information that does not identify you personally (such as aggregated or de-identified data), for the following purposes:
With Our Affiliates
We may share information within the Quantiles corporate group, including with our wholly and majority-owned affiliates, to support service delivery, analytics, internal operations, and other purposes outlined in this Privacy Policy.
With Service Providers
We engage third-party service providers, contractors, and consultants to perform services on our behalf. These include services such as:
These providers may access your personal information only as necessary to perform their duties and are contractually obligated to safeguard it and use it only for the purposes for which we disclose it to them.
With Your Consent
We may share your information with third parties if you give us your consent. For example, if you join a mailing list, sweepstakes, or promotion, we may use the contact information you provide to send updates, offers, or other communications from us or our partners.
For Legal Compliance and Protection
We may disclose personal information when we believe it is necessary or appropriate to:
In the Event of a Business Transfer
If Quantiles is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. The recipient will be required to handle your personal information in accordance with this Privacy Policy.
In Aggregated or De-Identified Form
We may share aggregated or de-identified data with third parties for research, analytics, marketing, or other lawful purposes. This information does not identify you personally.
We may use cookies, web beacons, and similar tracking technologies to facilitate administration and navigation on the Services, to better understand and improve the Services, and to provide you with a customized online experience.
Cookies
Our Site may use 'cookies' — small data files stored on your device—to identify repeat visitors, manage session information, track your preferences, and enhance your user experience. Cookies may also be used in password-protected areas and to track purchases or browsing history.
Opting out of cookies
You can set your browser to refuse or delete cookies. Please note that disabling cookies may affect the functionality of certain features on our Services. To manage your preferences, refer to your browser settings. Additional information is available at www.allaboutcookies.org. Cookies and similar technologies are not used by us to automatically retrieve personal information without your knowledge.
Web beacons and other tracking technologies
We may also use web beacons (also called “pixels”) to collect information about how you interact with our content. Web beacons are embedded in emails, videos, and web pages and may collect information such as your IP address, browser type, date/time of access, and whether you’ve interacted with specific content. This helps us understand user engagement and optimize our communications.
Clickstream data
As you navigate the internet, a trail of electronic information—known as “clickstream data”—may be captured. This data can tell us about your browser, device, referring site, and time spent on pages. We aim to collect and use clickstream data in a manner that does not personally identify you. This information is used in aggregated or anonymized form to improve the performance and usability of our Services.
Do not track signals
Some web browsers may transmit “Do Not Track” signals to websites. There is currently no industry standard for how websites should respond. At this time, we do not respond to “Do Not Track” signals. If standards emerge in the future, we may update our approach accordingly.
Some of the content, functionality, and analytics on our Services may be provided by third-party service providers. These third parties may collect or receive certain information about you and your use of the Services, including through cookies, web beacons, and similar technologies. This information may be combined with data collected across different websites, apps, and devices over time.
We require these providers to contractually agree to use any data collected on our behalf solely for the purpose of providing services to us and not for their own commercial use. However, we do not control the privacy practices of third parties outside of these contractual obligations. We encourage you to review the privacy policies of any third-party services you interact with through our Services.
Our Services may contain links to third-party websites, including co-branded or affiliated sites. These websites are not governed by this Privacy Policy, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of each third-party site you visit.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This section outlines your rights and how to exercise them.
Personal Information We Collect
In the past 12 months, we may have collected the following categories of personal information:
We collect this information for the purposes described in the “Information We Collect” and “How We Use Information” sections above.
Your Rights Under CCPA/CPRA
As a California resident, you may exercise the following rights:
How to Exercise Your Rights
To exercise any of the above rights, you may contact us via:
We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf.
Retention
We retain personal information only as long as necessary for the purposes for which it was collected and to comply with legal obligations, as described in our “Data Retention” section.
Quantiles may act as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) when we provide services to Covered Entities such as healthcare providers, payers, or healthcare clearinghouses. In such cases, we may receive, access, process, or store Protected Health Information (PHI) on their behalf in accordance with applicable Business Associate Agreements (BAAs) and HIPAA requirements.
When we do not act as a Business Associate, the data we collect, use, or analyze—including de-identified or aggregated health data—is not considered PHI and is not subject to HIPAA.
We take appropriate technical, administrative, and physical safeguards to protect health-related information regardless of whether HIPAA applies, and we are committed to ensuring compliance with all applicable data protection laws.
Disclosure of information for marketing purposes
If you wish to change your preferences about being contacted or withdraw your consent to be contacted, we encourage you to follow the instructions in any email or other message you receive, and contact the applicable organization sending you the information directly, since they are subject to separate privacy policies. If you do not receive a response or are not unsubscribed promptly, you may also let us know by sending us a written request by email to hello@quantiles.io. When composing your email, please include the phrase “Unsubscribe Request” in the subject line and body of the request.
Access, update, or correct information and other data subject rights
You may have certain rights as a data subject under local law. For example, you may have the right to access, update, or correct inaccuracies in your personal information in our custody and control, subject to certain exceptions prescribed by law, or the right to data portability. If you would like to access, review, or update your information or otherwise exercise your rights, please contact us as hello@quantiles.io.
Other important information
The Site is maintained in the United States of America. By using the Site, you freely and specifically give us your consent to export your Personal Information to the USA and to store and use it in the USA as specified in this Privacy Policy. You understand that data stored in the USA may be subject to lawful requests by the courts or law enforcement authorities in the USA. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn we have collected such information, we will delete it in accordance with applicable law.
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to:
The specific retention period for different types of data may vary depending on the sensitivity of the data, applicable legal requirements, and the nature of our relationship with you. For example:
Once the applicable retention period has expired, we will securely delete, anonymize, or aggregate your personal information unless we are required by law to retain it longer.
If you have specific questions about our data retention practices or would like to request deletion of your personal information, you may contact us at hello@quantiles.io.
Your information is secured using a variety of safeguards, including technical, administrative, and physical controls, but it is important to note that no security system can be completely impervious to breaches.
We may update this Privacy Policy from time to time without prior notice to reflect changes in our information practices. Any changes to the Privacy Policy will become effective when posted. We recommend that you revisit this Privacy Policy periodically to ensure that you are aware of our current privacy practices. Your continued use of the Services following the posting of changes will mean that you accept the updated Privacy Policy.
If you have any questions about this Privacy Policy or our information-handling practices, please contact us by email as follows: hello@quantiles.io. We are not responsible for the privacy practices of third parties, which are subject to their respective privacy policies.