Last Updated: 5/12/2025
This Privacy Policy describes how we at HemaSource, Inc. and our subsidiaries process the personal data we collect from or about you when interacting with us. This includes when you use our website or log into or access our HemaSource technology systems. HemaSource, Inc. is the data controller of personal data collected subject to this Privacy Policy.
Our Customer Agreements
If you are an employee or agent of one of our customers, your employer may have entered into a contract or other agreement with HemaSource that governs the services we provide to your employer (“Agreement”). As a customer of HemaSource, your employer has granted you access to our software. If any provision of our Agreement with your employer conflicts with any provision in this Privacy Policy, the provision in the Agreement will control to the extent of such conflict.
How We Collect and Use Your Personal Data
“Personal data” refers to information that can be used to identify you. We may collect personal data directly from you, from your employer, and automatically through our use of cookies and similar technologies. The categories of personal data we collect generally include:
- Identifiers, such as your name, address, email address, phone number, IP address, online identifiers, and other similar identifiers.
- Commercial Information, such as the products and services purchased from us and payment card or financial account numbers and related information required to process payments.
- Internet or other Electronic Activity Information, such as your browsing history, search history, and information regarding your interactions with our digital properties.
- Professional and Employment-Related Information, such as information about your current employment or information you submit when you apply to work at HemaSource.
- Device and Technical Information, such as device type, browser type, operating system, and system settings.
- Communication Records, such as emails, chat transcripts, or call recordings with customer service and sales representatives.
We do not intend to collect any sensitive or special categories of personal data about you.
In general, we collect and use personal data for the following purposes:
| Purpose for Collecting | Categories of Personal Data | Lawful Basis |
|---|---|---|
| To verify your identity and authenticate your credentials |
|
Processing is necessary to perform the contract governing our provision of our services and comply with our legal obligations |
| Manage our relationship with you and your employer, including to onboard you, maintain your account, fulfill your requests, and respond to your questions |
|
Processing is necessary to perform the contract governing our provision of our services |
| Operate and improve our services, including to run analytics, assess the quality of our services, and for other related business purposes |
|
Processing is necessary to perform the contract governing our provision of our services and based on our legitimate interests to offer and tailor our services to you. |
| Sending you messages to promote our products and services |
|
Processing is based on our legitimate interests to offer and tailor our services to you. |
| Complying with our legal, regulatory, and risk management obligations, including establishing, exercising, and/or defending legal claims |
|
Processing is necessary to comply with our legal obligations and our legitimate interests in managing our business and operations. |
| Protecting the health, safety, and rights of our company, personnel, customers, and others |
|
Processing is necessary to comply with our legal obligations and our legitimate interests in managing our business and operations. |
| Evaluating your application for employment. |
|
Processing is necessary to comply with our legal obligations and our legitimate interests in managing our business and operations. |
How We Disclose Your Personal Data
We may disclose each category of personal data described above to the following categories of third parties:
- Service Providers with which we contract to receive services. These services may include, among other things, providing products or services to you, creating or maintaining our databases, payment processing, auditing our financials, and researching and analyzing requests for information. Our policy is to prohibit our Service Providers from processing your personal data for any purpose other than for providing services to us.
- Corporate Family for operational purposes and to protect the health and safety of our personnel, customers, and the general public.
- Your Employer, if you are an agent or employee of one of our customers and to the extent we are required to do so under our Agreements with them.
- Other Third Parties when (i) we need to respond to a court order, subpoena, government investigation, or as otherwise required by law or legal process, (ii) we, in good faith, believe you or others are acting unlawfully, (iii) we believe it is necessary or appropriate to satisfy any law, regulation or other governmental request, (iv) we need to operate our business properly or protect or defend our rights or the rights or well-being of others, or (v) we believe disclosure is necessary to protect the health and safety of our personnel, customers, and the general public.
We may, as a result of a sale, merger, consolidation, change in control, transfer of assets, reorganization or liquidation of our company, transfer or assign your personal data to parties involved in the reorganization event.
Cookies and Similar Technologies
We may use “cookies” on our website and other digital properties. Cookies are small data files that are sent to your browser or related software from a web server and stored on your computer’s hard drive. We use cookies for website performance and functionality. We do not currently use cookies for targeted advertising purposes.
Most web browsers can be set to inform you when a cookie has been sent to you and provide you with the opportunity to refuse that cookie. Refusing a cookie will generally not interfere with your use of our digital properties. However, refusal of a cookie may, in some cases, preclude you from using or negatively impact the display or function of the digital property. Note that you may not be able to refuse a cookie if it is essential to the functioning of the website you are visiting.
Some web browsers incorporate a “Do Not Track” signal. Not all browsers offer a “Do Not Track” option and these signals are not yet uniform. For this reason, we do not recognize or respond to “Do Not Track” signals.
Notice to California Residents
If you are a resident of California, the following disclosures apply to you:
- We collect the categories of information described in the How We Collect and Use your Personal Data section of this Policy.
- We use the personal data we collect for the purposes described in the How We Collect and Use your Personal Data section of this Policy.
- We do not sell personal data or share personal data for targeted advertising purposes, nor do we have actual knowledge that we sell or share personal data about children under 16.
- We maintain your personal data for the periods described in the Data Security and Retention section of this Policy.
We have disclosed your personal information to the following categories of third parties for a business or commercial purpose:
| Categories of Personal Data | Categories of Third Parties |
|---|---|
| Identifiers |
|
| Commercial Information |
|
| Internet or other Electronic Activity Information |
|
| Professional and Employment-Related Information |
|
In addition, as a resident of California, you have certain rights with respect to your Personal Information:
- Right to Know. You may request information about the categories of personal data we have collected about you, the categories of sources from which we collect the personal data, the purposes for collecting the personal data, and to whom we disclosed the personal data and why. You may also request the specific pieces of personal data we have collected from you.
- Right to Delete. You may request that we delete personal data that we have collected from you.
- Right to Correct. You may request that we correct inaccurate personal data that we maintain about you.
You may exercise your rights by contacting us at support@hemasource.com. We may take steps to verify your identity (or the identity or authority of any authorized agent) before processing certain requests. This may involve requesting additional information from you or your agent to match against the information that we maintain. If we cannot verify your identity, we may not be able to honor your request.
If you choose to exercise any of these rights, HemaSource will not discriminate against you in any way.
Notice to Individuals Outside of the United States
If you are located outside of the United States and interact with us, your personal data will be transferred to, stored, and processed in the United States and other countries where we or our vendors operate. Please note that data protection laws of the United States and such other countries may differ from the data protection laws in your country. Your personal data may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions. Where applicable, we have implemented appropriate safeguards to transfer your personal data to a country outside of your home jurisdiction.
Rights for UK and EU Individuals
If we process your personal data subject to the GDPR or UK GDPR, you may contact us at support@hemasource.com to exercise the following rights:
- The right to know and access your personal data, such as the categories of personal data we have collected, the sources of personal data, the purposes of collection, and how we used, disclosed, sold, or shared personal data;
- The right to correct inaccurate personal data that we maintain about you;
- The right to delete your personal data under specific circumstances;
- The right to object or opt out of certain types of processing, such as direct marketing and certain types of profiling and automated decision-making;
- The right to request the restriction of processing of your personal data;
- The right to data portability, which means requesting a copy of your personal data in an accessible format; and
- The right to withdraw your consent under certain circumstances.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. Where applicable, you can find contact information for your data protection supervisory authority on the European Data Protection Board’s website, https://edpb.europa.eu/about-edpb/about-edpb/members_en, or through other publicly available sources.
We may take steps to verify your identity (or the identity of any authorized agent) before processing certain requests.
Data Security and Retention
We retain your personal data as reasonably required to serve you, run our business, and comply with our legal obligations. In determining the retention period, we may consider the nature and sensitivity of your personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and applicable legal requirements.
We have implemented reasonable safeguards designed to protect your personal data from loss, misuse, alteration or destruction. We also take reasonable steps designed to ensure that third parties who work with us agree to protect the personal data. We cannot guarantee that your personal data will be private or secure.
Third Parties
Our digital properties may contain references and/or links to third-party websites and services that we do not own or control. Any access to and use of such third-party websites and services is not governed by this Privacy Policy but instead is governed by the privacy policies of those third parties. We are not responsible for the privacy practices of such third parties.
Changes to Our Privacy Policy
We may occasionally update this Privacy Policy to reflect changes in our practices. When we post modifications to this Privacy Policy, we will revise the “Last Updated” date at the top of this web page. If the changes are material, we will endeavor to notify you in advance of such changes taking place. If you object to any modification, your sole recourse is to notify us that you do not agree and to stop using the Sites and providing us with your personal data.
Questions about Our Privacy Policy
If you have questions about this Privacy Policy, please contact us at support@hemasource.com.