Privacy Statement | Haemonetics®

Privacy Statement

Last Updated: Jan. 13, 2023

Haemonetics (“we”, “us,” or “our”) is committed to the protection of personal data in our possession in accordance with the laws and regulations of all countries in which we do business. This Privacy Policy sets forth the types of information we collect from haemonetics.com (the “Site”) or that you provide to us through other means, how we may use that information, to whom and under what circumstances we may disclose it, and how we protect it. Use of Haemonetics’ mobile applications is governed by separate privacy policies, linked here. By using this Site or voluntarily providing personal information to us, you consent to the terms of this Privacy Policy. If you do not agree to the policy, please do not use the Site.

The information we collect and how we use and share it

For the 12-month period prior to the date of this Privacy Policy, we explain here what categories of personal information we have collected, where we got it from, why it is needed, and with whom we shared it:

Category of Personal Information Collected	Source of information	Purpose for Collection	Categories of recipients
Identification and Contact information: such as your name, address, email address, telephone numbers, or other contact information	From you	To open and maintain records of our interactions with you and your company; to send you catalogs and other marketing; to send you information related to products and services, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages; to communicate with you about products and services offered by Haemonetics and our selected partners; and to manage and administer our programs and services	Our service providers who assist with mailings and other communications, and selected partners and affiliates that we believe may have offers or be of interest to you
Purchase and order information: contact information, together with purchase details, delivery details, payment details, any communications we have received about your order or purchase	From you	To validate, confirm, verify, deliver, install, and track your order, including to arrange for shipping, handle returns and refunds, maintain a record of the purchases you make; to service products you purchased from us; and to provide you offers that may be of interest to you	Our service providers who process, fulfill and ship orders
Information you provide about a third party: name, address, and contact details of recipient for delivery, if different from yours; if you send someone else a communication from the Site we may collect information such as that person's name, telephone number, email, and/or shipping address.	From you	To deliver to the person or company at the address which you have requested; to deliver to or communicate with the person at the address which you have requested	Our service providers who process, fulfill, and ship orders and our co-marketing partners
Payment information: name, card issuer and card type, credit or debit card number, expiration date, CVV code, billing address, bank account number, and other bank account details	From you and your payment card issuer	To verify that the right person is using the right card or account, meet the requirements of the card brands or account issuers, and to make sure we are paid for what you buy	Our service providers who process payments for us. These third-party service providers are prohibited from using personal information for any other purpose and are contractually required to comply with all applicable laws and requirements, which may include Payment Card Industry Data Security Standards if they are processing payments for us
Legal information: fraud checks or flags raised about your transactions, the payment card you want to use, payment card refusals, suspected crimes, complaints, claims and accidents	From you, the police, crime and fraud prevention agencies, payment card providers, the public, regulators, your and our professional advisors and representatives	To protect you, other customers and our business against criminal activities and risks, make sure we understand and can meet our legal obligations to you and others and can defend ourselves	Our service providers who help us with fraud protection and credit risk reduction, law enforcement and other governmental authorities in accordance with applicable law
Preference information: your marketing preferences, your account settings including any default preferences, any preferences you have indicated, the types of services/offers that interest you, or the areas of our website that you visit	From you, from our website technology interaction with your browser/devices and cookies and other similar technologies tracking the pages you visit, the marketing messages you open and the links you follow	To enhance your online experience, including to recognize you and welcome you to the Site; to provide you with customized Site or content	Our third-party vendors and other service providers that perform website analytic services for us
Other voluntary information: any voluntary information you provide us with, such as responses to surveys or competitions and social media account details; by sending an e-mail through our Site and/or to the addresses indicated on our Site or by calling, e-mailing, texting, or chatting online with our Customer Service. Please note that, with your consent, we record calls to our customer service team	From you	o know you better; to make our communications with you more personal; to learn and improve from your survey feedback; to organize events; to handle your requests; to contact you when necessary or requested, including to respond to your comments and questions and provide customer service.	Our service providers who administer surveys and promotions and our co-marketing partners; Our service providers who assist us with customer service
Personalization: your journey online and how you use our Site, whether and when you open our marketing emails and respond to our advertisements	From you, from our Site technology’s interaction with your browser or devices and cookies tracking the pages you visit	To improve our Site, products and services, customer service, and customer experience	Our third-party vendors and other service providers that perform website analytic services for us
Device information: IP address, internet provider, operating system and browser used, type of device, such as laptop or smart phone, log files, URIs (Uniform Resource Identifiers) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical status code of the server reply (successful, error, etc.) and other parameters concerning the user's operating system and computer environment, and/or device cookie settings and other device details, such as MAC address	From you and from our website’s interaction with your browser or devices	To make sure our Site technology works properly with your device and make sure you can see and use our intended website on the device you are using, and for analytical and demographic purposes and to provide offers that may be of interest to you. We also will use this information to protect the security or integrity of the Site and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users	Our service providers who help us with fraud protection, and third-party vendors and other service providers that perform website analytic services for us
Information automatically collected from your browser: when you use the Services, some data is automatically transferred from your browser to our server, including your browser type, operating system type or mobile device model, viewed webpages, links that are clicked, the keystrokes typed, movement of the mouse or pointer, IP address, mobile device identifier or other unique identifier, sites or apps visited before coming to our Site, the amount of time you spend viewing or using the Site, the number of times you return, or other click-stream or site usage data, emails we send that you open, forward, or click through to our Site	From you and from our website technology’s interaction with your browser or devices	We will use this information in an aggregated non-specific format for analytical and demographic purposes. We also will use this information to protect the security or integrity of the Site and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users, and to create a “session replay” of your visit to our site	Our third-party vendors and other service providers that perform website analytic services for us

Our Site also uses third-party analytics vendors such as Google Analytics where permitted by law. Please click here for more information about how data is collected and processed in connection with the Google Analytics service: http://www.google.com/policies/privacy/partners/. We and our third-party vendors or partners use analytics data for a variety of purposes such as to improve the design and functionality of our website, to help us learn things like what pages are most attractive to our visitors, what promotions visitors like to see and to gauge the success of our advertising campaigns. To prevent your data from being used by Google Analytics, please download the Google Analytics Opt-Out Browser Add-on.

ADDITIONAL INFORMATION USE

Haemonetics may also use information about you to analyze and manage its businesses. Aggregate or combined data is collected from online and offline facilities and may be used to enhance the ability of Haemonetics to communicate with you and to support business functions such as internal business processes, marketing, authentication, customer service, fraud prevention, and public safety and legal functions.

In addition to the sharing of your personal information as described above, we also may disclose personal information we collect as follows:

Service Providers

Service providers are granted access to some or all of your Personal Information as necessary and may use cookies (as defined below) or other automatic collection technology on our behalf. The service providers are contractually restricted in the ways they may use your Personal Information.

In Connection with Business Transfers

In the event that a division or part or all of Haemonetics is bought, sold or otherwise transferred, or is in the process of a potential transaction, customer information may be shared for evaluation purposes and included among the transferred business assets.

To Comply with Laws

Haemonetics may also disclose customer information when such disclosure appears necessary to comply with the law, a subpoena or other litigation process, or to protect the interests or safety of its visitors and customers, Haemonetics employees, or others.

Retention period

We will retain your information for no longer than is reasonably necessary to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. We retain your personal information for [up to 5] years.

Cookies

Please click on the following link to review the terms of our Cookie Policy: Cookie Policy

Opt Out Preference Signals/Tracking

Do Not Track (DNT) and opt out preference signals are privacy preference tools that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. Although we track the activity of visitors to our websites, we do not track them when they cross to third-party websites. Further, we do not use tracking to provide targeted advertising. Because we do not sell or share any personal information, opt-out preference signals sent from a browser are not necessary and are not processed.

Children’s Privacy

The Site does not knowingly solicit or collect personally identifiable information online from children under the age of 13 without prior verifiable parental consent. If Haemonetics learns that a child under the age of 13 has submitted personally identifiable information online without parental consent, it will take all reasonable measures to delete such information from its databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personally identifiable information we have collected from children under 13, please call us at 800-537-2802 or email us at dataprivacy@haemonetics.com

We do not have actual knowledge about selling or sharing personal information of consumers under the age of 16.

Minors under 18 years of age may have the personal information that they provide to us deleted by sending an email to dataprivacy@haemonetics.com requesting deletion. Please note that, while we make reasonable efforts to comply with such requests, deletion of your personal information does not ensure complete and comprehensive removal of that data from all systems.

Third-Party Websites

The Site may contain links to third-party websites, which may have privacy policies that differ from our own. We are not responsible for the activities and practices that take place on these websites. Accordingly, we recommend that you review the privacy policy posted on any external site before disclosing any personal information. Please contact those websites directly if you have any questions about their privacy policies.

Changes to this Privacy Policy

Haemonetics has the discretion to update this Privacy Policy at any time. When we change this Policy, we will post the current version on the Site. Please refer to the “Last Updated” date on the top of this Policy to understand the latest time the Policy was updated. Continued use of the Site constitutes acceptance of the revised Privacy Policy.

Visitors from outside the United States—Cross-Border Transfer

The Site is hosted in the United States. If you are visiting the Site from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries in accordance with this Privacy Policy. The data protection and other applicable laws of the United States or other countries may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. Your information may be available to government authorities under lawful orders and law applicable in such jurisdictions. By using the Site and/or providing personal information to us, you consent to transfer of your information to our facilities as described in this Privacy Policy.

Your California and Other State Privacy Rights

If you are a resident of California or Virginia (starting Jan. 1, 2023), Colorado or Connecticut (starting July 1, 2023), or Utah (starting Dec. 31, 2023), the law in those states provides you with the following rights with respect to your Personal Information:

Your California Privacy Rights

The right to know what personal information we have collected, used, disclosed, and sold about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom Haemonetics discloses personal information, and the specific pieces of personal information Haemonetics has collected about you.
The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing.
The right to request that we delete any personal information we have collected about you.

To submit any of the above requests, you may contact us at 800-537-2802 or use the contact form available on our website. You may also designate an authorized agent to make a request for correction on your behalf on our website through our contact form. When you exercise these rights and submit a request to us, we will verify your identity by asking you to provide us with additional information such us your email address, order numbers of previous orders of our products and services, or the last four digits of a credit or debit card used to make a purchase. We also may use a third-party verification provider to verify your identity. We will endeavor to honor such requests unless such a request conflicts with certain lawful exemptions under California’s consumer privacy law. Please note that we are only required to honor requests to know twice in a 12-month period.

We do not discriminate against California residents who exercise any of their rights described in our Privacy Policy. Your exercise of these rights will have no adverse effect on the price and quality of our goods or services.

In addition, and as set forth below, California law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information we may have “sold” or “shared” about you. For the 12-month period prior to the date of this Privacy Policy, Haemonetics has not sold any personal information about its customers. For the 12-month period prior to the date of this Privacy Policy, Haemonetics has only shared personal information about its customers as described above. Haemonetics does not collect sensitive personal information, as defined in applicable laws.

This Privacy Policy describes how we may share your information for marketing purposes, as described above. If you are a California resident, the Shine the Light law permits you to request and obtain from us once per calendar year information about any of your personal information shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us through our website: Contact us.

Your Virginia (starting Jan. 1, 2023), Colorado (starting July 1, 2023), and Connecticut (starting July 1, 2023) Privacy Rights

The right to confirm whether we process your personal information and access your personal information.
The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing.
The right to delete personal information we have obtained about you.
The right to obtain a copy of personal information we have obtained about you in a portable and, to the extent technically feasible, readily usable format.
If we deny your request, the right to appeal our decision.

To submit any of the above requests, you may call us at 800-537-2802 or use the contact form available on our website. When you exercise these rights and submit a request to us, we will verify your identity by asking you to log in to your account if you have one with us. Or if you do not, we may ask for your email address. We may also use a third-party verification provider to verify your identity. We will endeavor to honor such requests unless such a request conflicts with certain lawful exemptions under your state’s consumer privacy law.

The fact that you have elected to exercise these rights will have no adverse effect on the price and quality of our products or services.

To appeal a decision we have made regarding your request, you may call us at 800-537-2802 or use the contact form available on our website. We will respond to appeals from Virginia and Connecticut residents within 60 days. We will respond to appeals from Colorado residents within 45 days.

Your Utah Privacy Rights (starting Dec. 31, 2023)

The right to confirm whether we process your personal information and access your personal information.
The right to delete personal information we have obtained about you.
The right to obtain a copy of the personal information you have previously provided to us in a portable and, to the extent technically feasible, readily usable format.

The fact that you have elected to exercise these rights will have no adverse effect on the price and quality of our products or services.

Biometric Data (United States only)

Some Haemonetics customers in the United States may use certain equipment (e.g., finger scanners) made by other companies that may obtain information from a scan of an individual’s finger in connection with software services provided by Haemonetics. The scan reads certain characteristics of the user’s finger, and a binary data string is generated and retained by Haemonetics on behalf of its customer for purposes dictated by Haemonetics’ customers. Haemonetics does not collect or retain any fingerprints or the physical characteristics of the individual’s finger. Haemonetics’ customers determine how long this binary data string is retained and when it is deleted based on the customer’s purpose. When Haemonetics’ customer provides notice to Haemonetics that this data should be deleted, Haemonetics’ policy is to delete the information associated with that customer’s request within 30 days after receipt of that notice.

Questions or Comments Regarding this Privacy Policy

If you have any questions, concerns, or comments regarding this Privacy Policy or to request this Privacy Policy in another form, please email dataprivacy@haemonetics.com, call 800-537-2802, or contact the Data Privacy Officer at Haemonetics attn: Data Privacy Officer, 125 Summer Street, Boston, MA 02110 USA.