Privacy statement

This privacy statement describes how we collect, share and further process your personal data when we interact with you, directly or by means of third parties or automatic tools; by offering you a service; because we are engaged in a contract and to fulfill our contractual obligations; as well as when you contact us for different reasons including to report an adverse event related to any of our products. It includes:
  • Our general notice providing the foundational aspects of our privacy practices
  • Market-specific supplemental notices providing additional details relevant to your location
  • Relationship-based supplemental notices providing tailored information based on your relationship with us, such as our Careers privacy statement for job applicants
Specific privacy notices provided at the time of collecting your personal data may describe additional privacy details and practices that apply to that particular data.

We encourage you to read the full privacy statement carefully to better understand the various ways in which your personal data can be processed. If you have any questions about this privacy statement, please do not hesitate to contact us.

If you come across any technical terms, such as “cookies,” “IP addresses,” or “data subject,” please check out our glossary of key terms.

To get started, first ensure that you have selected your location and language in the menu at the top right corner of this page. Then select the J&J business relevant to you and your relationship to J&J using the filters below to display:
  • The J&J company you interact with and how to contact us
  • How to exercise your privacy rights
  • Supplemental notice(s), if any are relevant to you
  • Tailored information on what personal data we collect about you and for which purposes we process it
Table of Content
Who controls your personal data and how to contact us
Supplemental notices
How we collect your personal data
The personal data we collect about you and for which purposes we process it
Use of artificial intelligence and emerging technologies
Collection of personal data from minors
With whom we share your personal data
What we do in case we share your personal data internationally
Your rights to your personal data
How we protect your personal data
For how long we retain your personal data
What to consider when making use of the third-party sites or services we work with
Updates to this privacy statement

Effective date:

This privacy statement is effective since October 23, 2025.

Who controls your personal data and how to contact us
Based on your selection above the Johnson & Johnson company shown below in the “Contact Us” tile is the legal entity you interact with and the data controller of your personal data. If more than one company is shown please check the relevant legal entity that is indicated in the channel where you interact with us (e.g., email, website, mobile app, contract) to identify the relevant one for you. If you have any questions about this Privacy Statement or about how we process personal data, please reach out to us.

Important! If you wish to contact us specifically to exercise your rights in relation to your personal data, please use a method listed in the tile “How to exercise your privacy rights”.
Expand Collapse
Contact us
Johnson & Johnson Services Inc.
1 Johnson & Johnson Plaza
New Brunswick, NJ 08901, USA

Contact: https://www.jnj.com/contact-us

Data Protection Officer: emeaprivacy@its.jnj.com
Contact us
Janssen Pharmaceuticals, Inc.
1125 Trenton-Harbourton Rd.
Titusville, NJ 08560, USA

Actelion Pharmaceuticals US, Inc.
1125 Trenton-Harbourton Rd.
Titusville, NJ 08560, USA

Janssen Biotech, Inc.
800/850 Ridgeview Drive
Horsham, PA 196044, USA

Janssen Global Services, LLC
700 US Route 202 South
Raritan, NJ 08869, USA

Janssen Products, LP
800/850 Ridgeview Drive
Horsham, PA 196044, USA

Janssen Scientific Affairs, LLC
1125 Trenton-Harbourton Rd.
Titusville, NJ 08560, USA

Johnson & Johnson Health Care Systems, Inc.
1000 US Highway 202 South
Raritan, NJ 08869, USA

Patriot Pharmaceuticals, LLC
200 Tournament Drive,
Horsham, PA 196044, USA

Patient Service Center, LLC
304 Merchant Lane
Pittsburgh, PA 15205, USA

Contact us: please find the appropriate channel on https://innovativemedicine.jnj.com/us/contact-us
Contact us
Medical Device Business Services, Inc.
700 Orthopaedic Dr.
Warsaw, IN 46582

Abiomed, Inc.
22 Cherry Hill Drive
Danvers, MA 01923, USA

Biosense Webster, Inc.
31 Technology Drive, Suite 200
Irvine, CA 92618, USA

DePuy Orthopaedics, Inc.
325 Paramount Drive
Raynham, MA 02767

Ethicon US, LLC.
1000 Route 202
Raritan NJ 08869, USA

Johnson & Johnson Surgical Vision, Inc.
31 Technology Drive, Suite 200
Irvine, CA 92618, USA

Johnson & Johnson Vision Care, Inc.
7500 Centurion Parkway
Jacksonville, FL 32256, USA

Mentor Worldwide LLC.
31 Technology Drive, Suite 200
Irvine, CA 92618, USA

Contact us: please find the appropriate channel on https://www.jnjmedtech.com/en-US/contact-us
Contact us
Please select the J&J business relevant to you and your relationship to J&J using the filters above to display the J&J company you interact with and how to contact us.
How to exercise your privacy rights
You can exercise your privacy rights as explained in the section Your rights to your personal data by submitting your request using one of these methods:

If you are an employee of Johnson & Johnson Family of Companies in any country, please submit your request via AskGS.
How to exercise your privacy rights
You can exercise your privacy rights as explained in the section Your rights to your personal data by submitting your request using one of these methods:

To appeal our decision on your data subject requests, you may click here . Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.
How to exercise your privacy rights
You can exercise your privacy rights as explained in the section Your rights to your personal data by submitting your request using one of these methods:
To appeal our decision on your privacy request you may complete this form. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.
How to exercise your privacy rights
You can exercise your privacy rights as explained in the section Your rights to your personal data by submitting your request using one of these methods:

If you are an employee of Johnson & Johnson Family of Companies in any country, please submit your request via AskGS.
How to exercise your privacy rights
You can exercise your privacy rights as explained in the section Your rights to your personal data by submitting your request using one of these methods:

If you are an employee of Johnson & Johnson Family of Companies in any country, please submit your request via AskGS.
How to exercise your privacy rights
You can exercise your privacy rights as explained in the section Your rights to your personal data by submitting your request using one of these methods:
To appeal our decision on your privacy request you may complete this form. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.
How to exercise your privacy rights
You can exercise your privacy rights as explained in the section Your rights to your personal data by submitting your request using one of these methods:


If you are an employee of Johnson & Johnson Family of Companies in any country, please submit your request via AskGS.
How to exercise your privacy rights
Please select the J&J business relevant to you and your relationship to J&J using the filters above to display how to exercise your privacy rights.
How to exercise your privacy rights
Please select the J&J business relevant to you and your relationship to J&J using the filters above to display how to exercise your privacy rights.
How to exercise your privacy rights
Please select the J&J business relevant to you and your relationship to J&J using the filters above to display how to exercise your privacy rights.
How to exercise your privacy rights
Please select the J&J business relevant to you and your relationship to J&J using the filters above to display how to exercise your privacy rights.
Supplemental notices
Based on your selection above, the following notices may supplement this Privacy Statement to you, as applicable:
Expand Collapse
Supplemental notices
Supplemental notices
How we collect your personal data
We and our service providers collect personal data that you provide to us directly, we collect automatically, we receive indirectly from third parties we have a relationship with, or information from registries or publicly available sources.

Information you provide to us directly

  • When you provide personal data to us through your use of our digital services such as when you sign up for a newsletter, make a purchase, register an account, attend a meeting, conference, training or other event, post on our social media pages or product review pages, or contact customer service or any of our contact centers
  • When you get in touch with us to provide feedback, to make a request or ask a question, including those related to medical information
  • When you provide us with information about our products related to undesirable side effects and interactions, lack of effectiveness, quality complaints and/or other aspects related to the safety or quality of our products
  • When you take part in research studies, including clinical trials and market research studies, interviews or surveys
  • When we are engaged with you in a contractual relationship for the provision of services and you provide us with information for us to perform our obligations under that contract
  • When you provide us with information during day-to-day interactions with our sales representatives
  • When you share information via “testimonials” (your experience of living with a disease or condition).

Information we collect automatically

We might collect information as listed below either directly from you or via third parties. This type of information may not always reveal your specific identity or may not directly relate to you and may therefore not always be considered to be personal data. However, where this is the case, we may use and disclose such information according to the purposes and the legal basis as described in this Privacy Statement, except where we are required to do otherwise under applicable law. If we combine such information with personal data, we will treat the combined information as personal data as long as it is combined.
  • When you use and navigate our digital services we might automatically collect information from you, such as when you click on links or conduct a search, the pages you have visited, the website you came from and the searches you have performed. In this context we might use “cookies” or similar technologies to collect the personal data, as permitted by applicable laws. We and our service providers may use the information for the following purposes:
    • For security reasons
    • To facilitate navigation
    • To display information more effectively
    • To personalize your experience and to select which of our advertisements or offers are most likely to appeal to you and display them while you are using our Services, as permitted by applicable laws
    • To track your responses to our advertisements, as permitted by applicable laws
    • To recognize your computer or device, in order to make your navigation experience easier, such as to remember what is in your shopping cart
    • To gather statistical information about your usage of our digital services in order to continually improve their design and functionality, to understand how individuals use them, and to assist us with resolving questions regarding them
    • To calculate usage levels, diagnosing server problems and administering the website or app
    • To derive your approximate location from your IP address or through your browser, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, and internet browser type and version. In this case we may collect similar information if you access our digital services through a mobile device. We and our service providers may use the information to ensure that our digital services function properly.
    • To use pixel tags, web beacons, clear GIFs, or other similar technologies, which may be used in connection with some pages and HTML formatted email messages related to our websites or apps. We and our service providers may use the information for the following purposes:
      • To track the actions of users and email recipients, namely to automatically monitor and collect information on how you engage with the email content we send to you, to help us understand when/if you have opened the email, and what contents and features in the email are of interest to you. When you engage with our email content such as clicking a link to a web page, or accessing a document, we may collect information such as your IP address and type of browser to help us identify you, so that we can personalize the contents as well as tailor the look and feel of the browsing experience in a way that is relevant to your needs and preferences
      • To measure the success of our marketing campaigns and compile statistics about the usage of our digital services
      • To use other technologies, like reCAPTCHA, which is a test to tell humans and bot or automated accesses apart when you use our digital services.
Where applicable, you will be informed about the cookies and other devices implemented in the Cookie Policy, available in the digital service you use. When required by applicable law you may be prompted to confirm your cookies preferences.

As permitted by applicable laws, and subject to your cookie preferences, we may use third party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use our digital or online services, based on information relating to your access to and use of such services on any of your devices. To do so, these companies may place or recognize a unique cookie on your browser (including by pixel tags). They may also use these technologies, along with information they collect about your online use, to recognize and serve advertisements to you across the devices you use such as a mobile phone and a laptop.

You will have the opportunity to manage your cookies preferences, as applicable, by following your browser’s or preference center’s instructions or even by modifying your settings; however, if you do not accept them, you may experience some inconvenience in your use of the website or app. You may also not receive advertising or other offers from us that are relevant to your interests and needs.

To learn more about cookies, please visit http://www.allaboutcookies.org.

Information we receive from third parties or collect from publicly available sources

  • We receive information from Johnson & Johnson affiliates. A list of our affiliates is available here
  • From healthcare providers, patient advocacy groups, educational institutions, and other business partners which may be in the context of clinical research, market research, disease awareness campaigns, mentoring programs, training events, adverse events or managing complaints etc.
  • From caregivers that might provide us with information about you in the context of a service or the submission of a product safety or quality complaint
  • From other third parties that would have the relevant authority to provide personal data related to you
  • From other third-party information providers, including industry dedicated services such as, among others, MedScape, IQVIA, Veeva, Sermo, G-med, and Google advertising network
  • From third parties with whom we jointly market a product
  • From data brokers who are in the business of collecting or aggregating information about you sourced from publicly available databases
  • From publicly available sources like social media networks, for example when you post on your social media profiles or in any other digital service in which you might be registered about our company, our products and more in general about different drugs and diseases, in which case we may engage in social media listening
  • From your social media profiles, such as on LinkedIn, X, Instagram, Facebook and Medscape. For example, if you connect your social media account to your services account, you will share certain personal data from your social media account with us, such as your name, e-mail address, photo, and contacts or friends
Unless we have collected your consent or we have another legal basis, we will receive only unidentified or aggregate information.

If you submit any personal data relating to another individual to us, for example if you are a caregiver or a healthcare professional and are providing us with information about a patient, you represent that you have the authority to do so as permitted by and complying with applicable law and to permit us to use the information in accordance with this Privacy Statement.
Expand Collapse
The personal data we collect about you and for which purposes we process it
It is important to us that you understand the types of personal data we collect, how we use that personal data, and the legal basis for such collection, processing, and use. Because these details vary across our different businesses and the individuals with whom we interact, we provide the dropdown choices above, which are tailored to your relationship with us.

In any event, unless we specifically request it we ask that you do not send us and you do not disclose any special categories of personal data (sensitive personal data such as social security number, government ID, or national ID number, racial or ethnic origin, political opinions, religion or other beliefs, health, biometric data or genetic data, criminal background, or trade union membership) on or through our digital services or otherwise to us.
Expand Collapse
Health care professionals
In summary

We collect and use personal data from healthcare practitioners, researchers, and other medical professionals who interact with us for such purposes as fostering innovation and partnerships, order fulfillment, clinical research, educational events, and promoting our medical products.

In this context, we collect personal data such as your name, your contact information, services you engaged in, your preferences, your transaction history, your specialty, your practice/institution name, among others for the following purposes:
  • Customer relationship management, communication and marketing
    To manage our relationship with you and communicate with you. Additionally, we want to understand how to improve our interactions and how to offer you relevant information both for educational and for promotional purposes
  • Accomplishing our business purposes
    To pursue our business purposes and goals, which imply the development of products and services and the continuous improvement of those products and services we already market. In this context, we need to understand how effective those products and services are in each of the markets in which we operate
  • Comply with our contractual obligations
    To honour and comply with the contractual agreements to which we are bound
  • Comply with our legal obligations
    To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws

In detail

We may process your personal data to

1. To respond to inquiries and manage relationships

Example of activities:
  • Responding to inquiries, requests, and complaints, such as to send you documents or product information you request or assist you in using our services
  • Sending you important information regarding our relationship with you, our services, any changes to our terms, conditions, and policies and/or other administrative or transactional information;
  • Answering medical information requests
  • Providing you with patient’s educational materials
  • Determining the effectiveness of our campaigns and business strategies in order to improve our processes, service and practices related to our interactions with you
  • Understanding your opinion and feedback by means of interviews, market research studies or surveys in order to inform our decisions to improve our products and services and develop new ones
  • Considering your involvement in our scientific and medical research activities, such as selecting sites and investigators for our clinical trials
  • Managing product orders, including the manufacturing and provision of personalized medicine such as CAR-T treatments
  • Performing interviews or surveys to understand more about our products and the markets we operate in, and to improve our treatments, healthcare services, systems and process efficiency
  • Conducting audits to verify that our internal processes function as intended
Personal data examples:
  • Name, contact information, professional details, digital services account username or other company identifiers
  • Other information specific to your inquiry or request such as role specialty, practice/institution name and transaction information
Legal basis:
  • Manage our contractual relationship with you
  • Because you have granted us your consent
  • To comply with a legal obligation
  • On the basis of our legitimate interest, when applicable

2. To provide the functionality of our digital assets and fulfill orders

Example of activities:
  • Providing our services to you such as arranging access to your online account or the public space of the website, and facilitating your orders and delivery of ordered products
  • Confirming your condition as Healthcare Professional to grant you access to reserved information
  • Protecting your interaction with our digital assets
  • Understanding your preferences and tailor our interactions with you
  • Improving your experience with our digital assets
  • Identifying the trends in the usage of our digital services and the parts of our services that are most interesting to you
  • Developing new digital products and online services
  • Sending you information about the service such as changes to our terms and conditions
  • Responding to your queries and requests
Personal data examples:
  • Name, contact information
  • Role and practice/institution name, digital services account information or other company or online identifiers
  • Social media account ID
  • Communication/content preferences (e.g., frequency, subject matter)
  • Order information, transaction history, navigation history, reactions to our online activities
  • Payment information (e.g., credit card or bank account information); and tax withholding information
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • On the basis of our legitimate interest, when applicable
  • With your consent to the extent required by law

3. To inform and plan our commercial strategy and engagement activities, and to personalize our services and provide you with tailored offers

Examples of activities:
  • Understanding your interests and preferences, so that we can personalize our interactions with you and provide you with information and/or offers tailored to your interests, such as targeted advertising tailored to your interests on our online services as well as our marketing partner’s platforms
  • Better understanding your preferences so that we can deliver content via our services that we believe will be relevant and interesting to you
  • Inviting you to conferences and other events that may be of interest to you
  • To carry out these purposes, we may use automated means, including profiling
Personal data examples:
  • Name, contact information
  • Services account username or other Company or online identifiers
  • Social media account ID
  • Communication/content preferences (e.g., frequency, subject matter)
  • Transaction history, event and conference attendance history
  • Role, license information and qualifications
  • Name of practice/institution, specialty, practice information (ex. number of patients), practice needs
  • Clinical experience, education history (e.g., university degrees and graduation dates)
  • Publications, research activities; advocacy and other public initiatives (e.g., lobbying, legislative initiatives), awards, biographical information, employment experience, participation in/contribution to clinical trials, and membership in associations, boards and other organizations
  • Prescribing information, transaction history, collaborators, communication preferences, events in which you have participated, or you have been invited as speaker
Legal basis:
  • Based on our legitimate interests, when applicable
  • With your consent to the extent required by applicable law

4. To provide marketing materials

Example of activities:
  • Providing marketing related e-mails, with information about our services, new products and other news about our company
  • Determining the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users, and operate and expand our business activities, for example, understanding which parts of our services are of most interest so we can focus our energies on those parts
  • Creating a profile on you, considering our interactions with you and combining those insights with other information we collect from different sources, including from those that are publicly available
  • Analyzing the information we have about you in order to determine the best way to communicate and engage with you. Some of this analysis is performed by the use of technologies that helps us use the information in order to derive conclusions which inform our decision-making processes
Personal data examples:
  • Name, contact information;
  • Services account username or other company or online identifiers
  • Communication preferences (e.g., frequency, subject matter)
  • Transaction history, event and conference attendance history
  • If and when an email is opened and if any of the links were clicked, engagement rate, IP address, type of device and provider
  • Role, license information and qualifications
  • Name of practice/institution, specialty, practice information (e.g., number of patients), practice needs
  • Clinical experience, education history (e.g., university degrees and graduation dates)
  • Publications, research activities, advocacy and other public initiatives (e.g., lobbying, legislative initiatives), awards, biographical information, employment experience, participation in/contribution to clinical trials, and membership in associations, boards and other organizations
Legal basis:
  • With your consent
  • Where we have a legitimate interest, when applicable

5. To perform clinical studies and research

Example of activities:
  • Assessing and selecting sites and investigators for our clinical trials, administering patient treatment programs such as managed access programs or product orders such as CAR-T treatments
  • Managing clinical trials and medical research including monitoring and auditing the trial or research related activities
  • Developing feasibility assessments for future studies
  • Publishing research results of clinical trials or medical research as defined in the respective agreement you enter into with us
  • Providing training and education that may be required for the execution of clinical trials or medical research
Personal data examples:
  • Name, contact information; services account username or other Company or online identifiers
  • Social media account ID
  • Transaction history, event and conference attendance history
  • Role, license information and qualifications, name of practice/institution, specialty, practice information (e.g., number of patients, patient demographics and types of conditions), practice needs
  • Clinical experience, education history (e.g., university degrees and graduation dates)
  • Publications, research activities, advocacy and other public initiatives (e.g., lobbying, legislative initiatives), awards, biographical information, employment experience, participation in/contribution to clinical trials, and membership in associations, boards and other organizations
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law

6. To organize conferences and events (including educational events)

Example of activities:
  • Preparing for and coordinating conferences and other events, including educational events (e.g., booking travel and accommodations, catering)
  • Communicating with participants (and potential participants), communicating about and promoting events
  • Communicating with speakers and coordinating programming; and communicating with participants during events
  • Managing and maintaining the list of attendees at events
Personal data examples:
  • Name, contact information
  • Services account username or other company or online identifiers
  • Social media account ID
  • Event and conference attendance history; dietary restrictions and preferences
  • Feedback on programming and other input, such as through polling and questionnaires
  • Travel booking information (e.g., passport number), payment information (e.g., credit card or bank account information)
  • Role, license information and qualifications, name of practice/institution, specialty, practice information (clinical experience, education history (e.g., university degrees and graduation dates)
  • Publications, research activities, advocacy and other public initiatives (e.g., lobbying, legislative initiatives), awards, biographical information, employment experience, participation in/contribution to clinical trials, and membership in associations, boards and other organizations
  • Profile pictures, photographs and video of events
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law

7. To foster innovation and partnerships

Example of activities:
  • Fostering new relationships with and connections among providers, researchers and other professionals who may be interested in our current research or products, for example by providing you with medical and scientific information, as well as with information about local and/or international medical events you may wish to attend or at which you may wish to speak
Personal data examples:
  • Name, contact information
  • Services account username or other company or online identifiers
  • Social media account ID
  • Communication preferences (e.g., frequency, subject matter)
  • Transaction history, event and conference attendance history
  • Role, license information and qualifications, name of practice/institution, specialty, practice information (e.g., number of patients), practice needs, clinical experience, education history (e.g., university degrees and graduation dates)
  • Publications, research activities, advocacy and other public initiatives (e.g., lobbying, legislative initiatives), awards, biographical information, employment experience, participation in/contribution to clinical trials, and membership in associations, boards and other organizations
Legal basis:
  • Based on our legitimate interests, when applicable
  • With your consent to the extent required by applicable law

8. To develop and improve our products and services

Example of activities:
  • Developing new products and offerings, for example by conducting interviews and surveys
  • Enhancing, improving, repairing, maintaining, or modifying our current products and offerings
  • Identifying usage trends, for example, understanding which parts of our products and services are of most interest to healthcare providers
Personal data examples:
  • Name, contact information
  • Services account username or other Company or online identifiers
  • Social media account ID
  • Transaction history, other Services usage history, feedback and other input, such as through polling and questionnaires, event and conference attendance history
  • Role, license information and qualifications, name of practice/institution, specialty, practice information (e.g., number of patients), practice needs
  • Clinical experience, education history (e.g., university degrees and graduation dates), publications, research activities, advocacy and other public initiatives (e.g., lobbying, legislative initiatives), awards, biographical information, employment experience, participation in/contribution to clinical trials, and membership in associations, boards and other organizations
Legal basis:
  • To manage our contractual relationship with you
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law

9. To comply with applicable laws and regulations

Example of activities:
  • Managing Transfer of Value (‘TOV’) disclosures, including disclosing payments and other TOV to comply with transparency reporting laws
  • Preparing regulatory filings, correspondence, and communications to government authorities concerning clinical trials or studies
  • Preparing and submitting regulatory filings, correspondence, and interacting with government authorities concerning our medical activities
  • Answering requests from public and government authorities, which may include authorities outside your country of residence
  • Performing background checks as permitted/required by applicable laws
  • Enforcing our terms and conditions
  • Protecting and defend our rights, privacy, safety, or property, and/or that of our affiliates, you, or others
  • Conducting audits in order to verify the adjustment of our internal procedures with legal or regulatory requirements
Personal data examples:
  • Name, contact information
  • Services account username or other company or online identifiers
  • Transaction history, gifts, payments and other interactions relevant to transfer of value disclosures, event and conference attendance history
  • Role, license information and qualifications, name of practice/institution, specialty, participation in/contribution to clinical trials, and any other information required to prepare communications, disclosures and filings regarding transfers of value or clinical studies
Legal basis:
  • To comply with a legal obligation
  • With your consent to the extent required by applicable law

10. To inquire regarding participation in clinical trial or study

Example of activities:
  • Gaining information regarding individuals who may wish to participate in a clinical trial
Personal data examples:
  • Contact information, healthcare provider, information relating to clinical trial
Legal basis:
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law

11. To run our business effectively

Example of activities:
  • Assessing the effectiveness of our operations and business strategies
  • Monitoring fraud and improving security such as detecting and preventing cyberattacks or attempts to commit identity theft
  • Conducting audits to verify that our internal processes function as intended, and in compliance with our legal and contractual obligations
  • Enforcing our terms and conditions in our contracts and digital services
  • Protecting our rights, security and property, and/or those of our affiliates
  • Establishing, exercising or defending any legal claims
  • Responding to any allegations of wrongdoing
Personal data examples:
  • Name, contact information
  • Services account username or other company or online identifiers
  • Social media account ID
  • Communication/content preferences
  • Transaction history
  • Interactions with the products and services, frequency of such interaction
Legal basis:
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law

12. To respond to medical information requests

Example of activities:
  • Responding to any unsolicited request from a Healthcare Professional (HCP) for medical, scientific, or technical information that gets routed to Medical Affairs (MA) because it cannot be answered based on the particular product’s current prescribing information, or Instructions For Use (IFU), as cleared or approved by the appropriate competent regulatory authority (e.g., Food and Drug Administration (FDA), or other local authority)
Personal data examples:
  • Country, title, healthcare profession, first name, last name, specialty, hospital/institution/office, contact information such as response method, address, email address, telephone number, J&J contact/sales rep, product information
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law
Patients and caregivers
In summary

We may process your personal data to
  • Provide our products, services and related support

    We collect and use your personal data to offer and provide to you the products and services that you, your caregiver or your doctor have requested, or to provide the website features or other digital services that you use. Additionally, we will use your personal data to respond to your queries and requests
  • Develop and improve our products, services and processes

    We collect and use your personal data to develop and improve our products, services and processes, by means of, among others, market research studies, analysis to understand your preferences and interests or to recruit suitable patients to our clinical trials and studies
  • Run our business effectively

    We collect and use your personal data to ensure that our business is running effectively by means of, among others, assessing the effectiveness of our activities and operations or conducting audits to verify our internal processes
  • Work with you

    We collect and use your personal data to engage with patients, caregivers, and related patient advocacy groups to get input into the development of our products and services
  • Comply with our contractual obligations

    To honour and comply with the contractual agreements to which we are bound
  • Comply with our legal obligations

    To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws
In detail

We may process your personal data to

1. To respond to inquiries and relationship management

Example of activities:
  • Responding to inquiries, requests, and complaints
  • Sending you important information regarding our relationship with you, our services, any changes to our terms, conditions, and policies and/or other administrative or transactional information
  • Answering medical information requests
  • Determining the effectiveness of our campaigns and business strategies in order to improve our processes, service and practices related to our interactions with you
  • Understanding your opinion and feedback by means of interviews, market research studies or surveys in order to inform our decisions to improve our products and services and develop new ones
  • To consider your involvement in our scientific and medical research activities, such as selecting suitable patients for our clinical trials
  • Performing interviews or surveys to understand more about our products and the markets we operate in, and to improve our treatments, healthcare services, systems and process efficiencies
  • Conducting audits to verify that our internal processes function as intended
Personal data examples:
  • Name, contact information
  • Services account username or other company or online identifiers
  • Social media account ID
  • Communication/content preferences
  • Transaction history
  • Sensitive information, like diagnosis, symptoms and other health related information
  • Family and employment status, as required
  • Interactions with the products and services, frequency of such interaction
Legal basis:
  • To manage our contractual relationship with you
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law
2. To supply personalized medicine

Example of activities:
  • Manufacturing and supplying our personalized medicines to you.
Personal data examples:
  • Name
  • Date of Birth
  • Weight
  • Limited information about your disease and treatment, such as lines of treatment, disease progression
  • Lab results that concern infectious diseases
  • Cell characteristics and single cell RNA sequencing
Legal Basis:
  • To fulfill our legal obligations
3. To provide the functionality of our digital assets and fulfill orders

Example of activities:
  • Providing our services to you, such as arranging access to your online account or the public space of the website, and fulfilling your orders
  • Protecting your interaction with our digital assets
  • Understanding your preferences and tailoring our interactions with you
  • Improving your experience with our digital assets
Personal data examples:
  • Name, contact information
  • Services account username or other company or online identifiers
  • Social media account ID
  • Communication/content preferences
  • Transaction history
  • Sensitive information, like diagnosis, symptoms and other health related information
  • Family and employment status, as required
Legal basis:
  • To manage our contractual relationship with you
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law
4. To personalize our services and provide you with tailored offers

Example of activities:
  • Identifying the trends in the usage of our digital services and the parts of our services that are most interesting to you
  • Developing new digital products and online services
  • Sending you information about the service, such as changes to our terms and conditions
  • Responding to your queries and requests
  • Understanding your interests and preferences, so that we can personalize our interactions with you and provide you with information and/or offers tailored to your interests
Personal data examples:
  • Name, contact information
  • Services account username or other company or online identifiers
  • Social media account ID
  • Communication/content preferences
  • Transaction history
  • Interactions with the products and services, frequency of such interaction
Legal basis:
  • Based on our legitimate interest, when applicable;
  • With your consent to the extent required by applicable law
5. To run our business effectively

Example of activities:
  • Assessing the effectiveness of our operations and business strategies
  • Monitoring fraud and improving security, such as detecting and preventing cyberattacks or attempts to commit identity theft
  • Conducting audits to verify that our internal processes function as intended, and in compliance with our legal and contractual obligations
  • Enforcing our terms and conditions in our contracts and digital services
  • Protecting our rights, security and property, and/or those of our affiliates
  • Establishing, exercising or defending any legal claims
  • Responding to any allegations of wrongdoing
Personal data examples:
  • Name, contact information
  • Services account username or other Company or online identifiers
  • Social media account ID
  • Communication/content preferences
  • Transaction history
  • Sensitive information, like diagnosis, symptoms and other health related information
  • Family and employment status, as required
  • Interactions with the products and services, frequency of such interaction
Legal basis:
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law
6. To develop and improve our products and services

Example of activities:
  • Conducting market research, through interviews or surveys
  • Analyzing the data we collect to understand your preferences and interests, so that we can develop our products and services to meet your needs and improve our interactions with you
  • Identifying and diagnosing any technical or other problems with the provision of our services, or if and how the performance of our services and the efficiency of our processes can be improved
Personal data examples:
  • Name, contact information
  • Services account username or other Company or online identifiers
  • Social media account ID
  • Communication/content preferences
  • Transaction history
  • Sensitive information, like diagnosis, symptoms and other health related information
  • Family and employment status, as required
  • Interactions with the products and services, frequency of such interaction
Legal basis:
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law
7. To perform clinical studies and research, including post-market surveillance

Example of activities:
  • Helping us to recruit suitable patients to our clinical trials
  • Providing you with adverts on social media about our clinical research, tailored to your location, gender, age and/or general interests
  • Managing the clinical trial and medical research including monitoring and auditing the trial or research related activities
  • Performing clinical research when we receive information obtained from existing patient health records of the healthcare organization
Personal data examples:
  • Name, contact information, in certain countries location, gender and age
  • Sensitive information, like diagnosis, symptoms and other health related information
  • Family (including pregnancy) and employment status, as required
Legal basis:
  • Public interest
  • Based on our legitimate interest, when applicable
  • Protection of health
  • With your consent to the extent required by applicable law
8. To organize events and engagements

Example of activities:
  • Providing you with information about the engagement and the required tools
  • Organizing logistics and providing any necessary travel arrangements
  • Making payments where agreed and permitted (to you or to your patient advocacy group)
  • Recording the event so that it may be used for educational, training, disease awareness and/or promotional purposes, as we will further explain to you at the time of recording
Personal data examples:
  • Name, contact information
  • Services account username or other Company or online identifiers
  • Social media account ID
  • Communication/content preferences
  • Transaction history
  • Sensitive information, like diagnosis, symptoms and other health related information
  • Family (including pregnancy) and employment status, as required
Legal basis:
  • To manage our contractual relationship with you
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law
9. To comply with applicable laws and regulations

Example of activities:
  • Preparing regulatory filings, correspondence, and communications to government authorities concerning clinical trials
  • Preparing and submitting regulatory filings, correspondence, and interact with government authorities concerning our medical activities
  • Answering requests from public and government authorities, which may include authorities outside your country of residence
  • Enforcing our terms and conditions
  • Protecting and defending our rights, privacy, safety, or property, and/or that of our affiliates, you, or others
  • Conducting audits in order to verify the adjustment of our internal procedures with legal or regulatory requirements
Personal data examples:
  • Name, contact information
  • Services account username or other Company or online identifiers
  • Transaction history, payments and other relevant interactions
  • Any other information required to prepare communications, disclosures and filings regarding our clinical activities
Legal Basis:
  • To fulfill our legal obligations
  • With your consent to the extent required by applicable law
Business contacts and visitors
In summary

We collect and use personal data from those individuals with whom we interact in other contexts, such as: individuals representing or acting in their own capacity as suppliers, service providers, wholesalers, distributors, and visitors to our physical premises.
  • Comply with our contractual obligations
    To honor and comply with the contractual agreements to which we are bound
  • Comply with our legal obligations
    To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws
  • Run our business effectively
    We collect and use your personal data to ensure that our business is running effectively by means of, among others, assessing the effectiveness of our activities and operations, including security, or conducting audits to verify our internal processes
  • Work with you
    We collect and use your personal data to engage with suppliers, service providers and visitors to get input into the development of our products and services

In detail

We may process your personal data to

1. To facilitate providing services

Example of activities:
  • Onboarding partners, provision user accounts and access
  • Facilitating and/or performing services
  • Providing feedback and managing relationships
  • Facilitating contract renewals
  • Facilitating termination and winding-down (including information about the employees of the suppliers)
  • Elaborating and developing surveys to understand how to improve our internal processes affecting our supplier, service providers or vendors
Personal data examples:
  • Name, contact information
  • Role and company/organization information
  • Services account information.
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • With your consent to the extent required by applicable law
2. To respond to inquiries

Example of activities:
  • Responding to inquiries, requests, and complaints, such as sending you documents or information you request or assisting when providing our services
Personal data examples:
  • Name, contact information
  • Role and company/organization information
  • Services account username
  • Other information specific to your inquiry or request
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
3. To develop new partnerships

Example of activities:
  • Researching and communicating with potential partners, conducting diligence and security checks, facilitating bids and proposals
  • Facilitating contracting processes
Personal data examples:
  • Name, contact information
  • Role and company/organization information
  • Social media ID
  • Other information relevant to the potential partnership, such as work performed for other Company teams or third-party clients
Legal basis:
  • To manage our contractual relationship with you
  • Based on our legitimate interest, when applicable
4. To welcome visitors at our physical premises

Example of activities:
  • Registering visits in our systems
  • Performing applicable on-site security steps and checks (e.g., printing a visitor badge)
  • Preparing for and coordinating room bookings and/or conferences and other events (e.g., booking travel and accommodations, catering)
  • Engaging in pre-visit and follow-up communications
Personal data examples:
  • Name, contact information
  • Role and company/organization information
  • Government-issued ID to verify your identity
  • Room booking and conference/event attendance details
  • Travel information and receiving Company personnel (e.g., the business contact or team at the Company who organized the visit or event)
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • Based on our legitimate interest, when applicable
  • With your consent to the extent required by applicable law
5. To communicate important changes

Example of activities:
  • Sending you important information regarding our relationship with you, our digital services, any changes to our terms, conditions, and policies and/or other administrative information
Personal data examples:
  • Name, contact information
  • Digital services account information
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • Based on our legitimate interest, when applicable
Shareholders
In summary
We collect and use personal data from those individuals that hold any kind of corporate right over the companies part of our group of companies.
  • Comply with our contractual obligations
    To honor and comply with the contractual agreements to which we are bound
  • Comply with our legal obligations
    To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws
In detail

We may process your personal data for

1. Shareholder Management

Example of activities:
  • Maintaining a shareholder register
  • Providing shareholder materials and other communications
  • Paying dividends
  • Facilitating exercise of shareholder rights
Personal data examples:
  • Name, contact information
  • Bank account information
  • Details of shares held and elections
  • Date of death
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation, when applicable
Reporters of an Adverse Event or a Product Safety Complaint
In summary

We collect and use personal data from those individuals that report a safety or product quality complaint to us or that are affected by such complaint in any way, in order to fulfill our obligation to monitor and guarantee the safety of our products.
  • Comply with our legal obligations
    To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws
  • For reasons of public interest in the area of public health
    To protect public health against serious threats to health or in order to ensure high standards of quality and safety of healthcare and of medicinal products or medical devices
  • Develop and improve our products, services and processes
    To prevent our products from being incorrectly used or applied and to improve them appropriately to enhance safety
In detail

We may process your personal data to

1. To ensure the safety of our medical products and comply related legal obligations

Example of activities:
  • Monitoring, detecting and evaluating the safe use of our products, including through adverse events, Medical Device Vigilance or medical occurrences as well as its follow-up
  • Taking steps to address any safety concerns and prevent future occurrences
  • Answering and addressing the complaints related to product quality and/or effectiveness, stability, reliability, safety, performance or usage of our products
  • Reporting to relevant health and other authorities
  • Otherwise complying with its obligations applicable laws relating to the safety of medicinal products as imposed by competent health authorities
  • Preventing the incorrect or inaccurate use of our products and services
  • Improving our products and services
  • Complying with our obligations under applicable laws and regulations relating to safety reporting or as imposed by competent authorities
Personal data examples:
  • Name
  • Contact information
  • Healthcare provider or other third part details (if reported by provider or other third party)
  • Any information relevant to the specific concern, which may include the applicable medical product (e.g., the specific drug taken or device used) patient identifiers, demographic information (e.g., age, date of birth, sex, gender, weight, height, ethnicity), health data (e.g., medical product usage information, family history, symptoms), and lifestyle data (ex. consumption of tobacco, dietary habits)
Legal basis:
  • To comply with a legal obligation
  • For reasons of public interest in the area of public health
  • Based on our legitimate interest, when applicable
2. To manage (product) complaints

Example of activities:
  • Answering and addressing (product) complaints. A complaint is any written, electronic or oral communication that alleges deficiencies related to the identity, quality, durability, reliability, safety, effectiveness, or performance of a device after it is released for distribution. Distribution is defined as outside of Johnson & Johnson control
Personal data examples:
  • Contact Information
  • Product Information
Legal basis:
  • To manage our contractual relationship with you
  • To comply with a legal obligation
  • Based on our legitimate interest, when applicable
Job candidates
Further information is included in:
Select your relationship to J&J
Please select the J&J business relevant to you and your relationship to J&J using the filters above to display tailored information on what personal data we collect about you and for which purposes we process it.
Use of artificial intelligence and emerging technologies
We may use new tools and technologies, including artificial intelligence (AI), in connection with our products, services, and operations. Where personal data is processed by these technologies, such processing is limited to the purposes described in this Privacy Statement and/or any supplemental privacy notices provided at the time of data collection.

We treat the training of AI models as a distinct use of personal data. Therefore, we will only use your personal data for this purpose where we have a separate and valid legal basis under applicable data protection laws—such as your consent or our legitimate interests—and have met all relevant legal requirements including implementing safeguards and ensuring transparency.

Furthermore, we do not use AI or other automated technologies to make decisions that may produce legal or similarly significant effects concerning you, except in limited circumstances where:
  • You have been clearly informed of such automated processing,
  • The processing is permitted by applicable law, and
  • You are provided with meaningful information about the logic involved, as well as the opportunity to request human intervention or review.
Expand Collapse
Collection of personal data from minors
Johnson & Johnson collects personal data from minors in limited cases, subject to obtaining verified parental/guardian consent, as applicable. In processing the personal data of minors, we consider the age of majority as defined by the applicable law as well as the type of communications we provide. If personal data about minors has been provided to us by mistake and you would like to request that such personal data be removed, please follow the instructions described in the section Your rights to your personal data.
Expand Collapse
With whom we share your personal data
We may share your personal data with our affiliates and third parties.
The types of third-parties we may share your personal data with include:
  • Johnson & Johnson affiliates
    We may share your personal data with our affiliates for the purposes described in this Privacy Statement. A list of our affiliates is available here
  • Third-party co-branding and co-marketing partners
    We may share your personal data with our third-party partners with whom we offer a co-branded or co-marketed product or service
  • Third-party service providers
    We may share your personal data with our third-party service providers, who provide services such as website hosting and moderating, mobile application hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, customer service, email and direct mail delivery services, auditing and other services
  • Vendors
    We may also share your personal data with vendors we engage with directly or indirectly in the organization of local and international training and events, such as venues, transportation companies, as applicable
  • Third-party advertising partners
    Where applicable, to improve the effectiveness of our communication with you and our marketing campaigns, we may share your personal data with our third-party advertising partners, including social media, medical journals and publishers, such as, but not limited to, Facebook, LinkedIn, X and Medscape
  • Research and collaboration and licensing partners
    To enable clinical and medical research and collaboration, or healthcare technology innovation and development, your personal data may be shared with our research and collaboration partners, our licensing partners and our technology partners
  • Healthcare Providers and Healthcare Professionals
    We may share your personal data with healthcare providers and healthcare professionals
  • Posting and Social Sharing
    By using our digital services, you may elect to disclose personal data
    • On profile pages, blogs, product reviews, and other services to which you are able to post information and content (including our social media pages). Please note that any information you post or disclose through these services will become public and may be available to other users and the general public
    • Through your social sharing activity. When you connect your services account to your social media account, you will share personal data with your friends associated with your social media account, with other users, and with your social media account provider.
    By doing so, you understand that the use of shared personal data will be governed by the social media provider’s own privacy statement.
  • Other situations:
    • In the event of a reorganization, merger (when a brand or one of our businesses with which you’ve shared personal data is sold to another company), divestiture, acquisition, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings) we may need to share your personal data with the third parties involved. In such events we will ensure that the party receiving your personal data will abide by the terms of this Privacy Statement.
    • We may also use and disclose to third parties your personal data to enforce our terms and conditions, comply with legal process or applicable laws, which may include laws outside your place of residence, and in response to requests from public or government authorities, including authorities outside your place of residence.
    • For other legal reasons:
      • To ensure compliance with and enforce our terms and conditions and policies
      • To protect our rights, privacy, safety or property, and/or that of our affiliates, you or others
      • For audits, to verify that our internal processes function as intended and to address legal, regulatory, or contractual requirements
      • For fraud prevention and security monitoring purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft
      • To comply with obligations relating to scientific research such as when performing interventional clinical trials or obligations associated with manufacturing pharmaceutical products.
    • To aggregate and/or anonymize personal data so that it will no longer be considered personal data. We do so to generate other data for our use, which we may use and disclose for any purpose, as it no longer identifies you or any other individual; and
    • For data analysis, for example, to improve the efficiency of our services.
Where applicable laws require, we will obtain your consent for sharing your personal data with third parties.
Expand Collapse
What we do in case we share your personal data internationally
Your personal data may be stored and processed in any location where we have facilities or service providers. By the use of our services or by providing consent to us (where required by law), your information may be transferred to other locations. For example, if you are in the European Union, your information may be transferred to the United States, which may provide for different data protection rules. Nonetheless, appropriate contractual and other measures are in place, in accordance with local requirements or applicable law, to protect personal data when it is transferred to our affiliates or third parties in other locations. Some locations outside your place of residence are recognized as providing an adequate level of data protection. Consult the links to learn more about locations recognized as adequate by:

For transfers to locations not deemed adequate, we have ensured that appropriate measures are in place to protect your personal data, including by ensuring that the recipient is bound by Standard Contractual Clauses as may be provided for in applicable laws where you reside. You may obtain a copy of these measures by contacting us in accordance with the Section Who controls your personal data and how to contact us.
Expand Collapse
Your rights to your personal data
You can exercise any of your rights by using any of the method(s) provided in the tile How to exercise your privacy rights above.
When processing is based on your consent (e.g., for us to deliver marketing communications or newsletters), you have the right to withdraw your consent at any time. Note that this will not affect our processing of your personal data based on consent before your withdrawal.

Specifically, if you withdraw your consent for receiving marketing communications from us, we may still send you communications that are necessary for managing our relationship with you such as transactional communications, account authentication, scheduling a meeting, and responding to your inquiries.

Please note that in these cases we may not be able to directly remove your personal data from the databases of our affiliates or third-party partners with which we have already shared your information, and in such case we will notify our affiliates or third-party partners of your request.

Your additional rights regarding our processing of your personal data

Consistent with applicable law, you also have the right to request:
  • Information about the personal data we collected, used or shared or otherwise disclosed
  • Access to your personal data
  • An electronic copy in a structured, commonly used and machine-readable format of the personal data you provided to us for purposes of transmitting it to another company
  • Correction of inaccurate information we hold about you
  • Deletion of your personal data when foreseen by applicable law
  • Restriction of processing of your personal data when foreseen by applicable law, such as while we are processing your correction or objection request. While processing is restricted, your personal data will remain stored by us, but we will not process it except with your consent, for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or reasons of important public interest
  • Object to the processing for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing
  • Object to processing of your personal data (including profiling) on grounds relating to your situation in certain cases
  • Object to being subject to a decision based solely on automated processing, including profiling, which produces legal effects for you or similarly significantly affects you.
Please note that, if you exercise your right to correct or delete your personal data, we may need to retain certain information for record-keeping purposes and/or to complete any transactions that you began prior to requesting a correction or deletion (e.g., when you make a purchase, you may not be able to correct or delete the personal data provided until after the completion of such purchase).

You have the right to be free from unlawful discrimination for exercising your rights.

For your protection, we may only implement requests with respect to the personal data associated with the email address that you use to send us your request, and we may need to verify your identity. To do so, we may request additional personal data from you, such as email address or postal address.

We will respond to your request as soon as reasonably practicable and consistent with applicable law. If circumstances cause any delay in our response, you will be promptly notified and provided with a date for our response.

If we are not able to satisfy your request, you may lodge a complaint with the competent supervisory authority:
Expand Collapse
How we protect your personal data
We take utmost care of, and we are responsible for taking reasonable steps to protect your personal data from unauthorized access, amendment or disclosure and from improper use, loss or intrusion. We use reasonable organizational, technical, and administrative measures designed to protect personal data under our control. Where appropriate these can include technical solutions like firewalls, intrusion detection or encryption and organizational and physical controls such as training staff on identification of data incidents, locked filing cabinets where data may be stored, if at all, and risks or access restrictions.

To determine the level of protection required in each case, we appropriately assess the nature of your personal data together with the risk of a security incident occurring.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you have with us has been compromised), please immediately notify us following the instructions in the section Who controls your personal data and how to contact us.
Expand Collapse
For how long we retain your personal data
We will retain your personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law.

The criteria used to determine our retention periods include:
  • the length of time we have an ongoing relationship with you and provide a service to you
  • whether there is a legal/regulatory obligation to which we are subject
  • whether retention is advisable in light of our legal position (such as in regard to certification requirements, applicable statutes of limitations, litigation, or regulatory investigations).
Expand Collapse
What to consider when making use of the third-party sites or services we work with
Our services may contain links to sites of third parties, including to those with whom you might have created your own account to allow you to make a payment to us in the context of a service previously requested. This Privacy Statement does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site, app, or other online service that is available through our digital services or to which our digital services contain a link. In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook/Meta, Apple, Google, Microsoft, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any personal data you disclose to other organizations through or in connection with our apps or our social media pages.
Expand Collapse
Updates to this privacy statement
We may change this Privacy Statement from time to time. Any changes will become effective when we post the revised Privacy Statement on this page. We recommend that you regularly review this Privacy Statement.
Expand Collapse