Overview

At BioHorizons, Inc., your privacy is important to us. We process personal data in different contexts and we do so by fully respecting your privacy and your other rights and freedoms, as part of our unwavering commitment to ethical and responsible practices.

This Data Privacy Policy (“Policy”) sets forth the principles that govern our treatment of personal data across BioHorizons, Inc. and its subsidiaries and affiliates worldwide (hereafter, BioHorizons). All employees and those with whom we share personal data must adhere to this Policy. BioHorizons is committed to protecting the information that our employees, clients, prospects, suppliers, and vendors have entrusted to us. We collect and use personal data in order to perform our business functions and provide quality health care products and services to our customers. Consistent with our values, we treat any personal data that we obtain in accordance with the data privacy principles of transparency, purpose limitation, data minimization, data quality, integrity and confidentiality, accountability, and privacy by design. This Policy applies to all personal data in any format or medium, relating to all employees, clients, vendors and others who do business with BioHorizons.

Categories of personal information we collect and use

We recognize personal information as any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Depending on the context of your interactions with BioHorizons, we may collect and use different types of personal information from current and prospective employees, contractors, current and prospective customers and vendors.

Categories of Personal Information Collected Examples Collected
A. Personal Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. Yes
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. Yes
C. Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). Yes
D. Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. No
E. Biometric information Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. No
F. Internet or other similar network activity Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. No
G. Geolocation data Physical location or movements. No
H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. No
I. Professional or employment related information. Current or past job history or performance evaluations. Yes
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. No
K. Inferences drawn from other personal information. Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. No


Categories of sources of personal information

BioHorizons receives and uses various types of personal information in order to conduct our day-to-day business activities. We apply the data minimization principle in the collection and use of personal information with the aim to only collect information that is necessary and by fair means and providing notice and requiring consent when necessary.

We may collect categories of personal information listed above from the following categories of sources: Some of this data is collected in the following situations when:

Business uses and purposes for which personal information was collected

The purposes for which we collect and use your personal information may vary depending on the type of relationship you have with us, such as if you are one of our employees, customers, or a website user. The use of personal information for new purposes should be consistent with and meet privacy expectations described in this policy, otherwise we will request your authorization.

Generally, we collect, use and disclose your personal information to provide you products and services and as otherwise related to the operation of our business. For more specific detail on our disclosures of personal information, see the next section “Sharing and Disclosures to Third Parties.” Subject to restrictions and obligations of applicable laws, BioHorizons and our vendors may use your personal information for some or all the following business purposes:

In addition, we may collect, use and disclose your personal information for the following additional operational business purposes for which we are providing you notice as permitted by applicable law:

BioHorizons shall use personal information for purposes disclosed above. To the extent required by law, BioHorizons shall inform the individual if their personal information will be used for an additional purpose, and this disclosure shall occur prior to the data being so used, and the individual shall be given a mechanism to provide their consent.

As permitted by applicable law, we do not treat deidentified data or aggregate customer information as personal information and we reserve the right to convert, or permit others to convert, your personal information into deidentified data or aggregate consumer information. We have no obligation to re-identify such information to respond to your requests.

Our customers may engage service providers or subcontractors to enable them to perform services on our behalf. This sub-processing is, for purposes of clarity, an additional business purpose for which we are providing you notice.

In addition, we may collect, use and disclose your personal information as required or permitted by applicable law.

Sharing and Disclosures to Third Parties

At times, BioHorizons engages third party contractors, service providers, and other vendors to help us accomplish our business objectives. When BioHorizons discloses personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. There are other circumstances where we are required by law to disclose personal information to third parties such as public authorities.

Disclosures for Business Purposes:

In the preceding twelve (12) months, BioHorizons may have disclosed the following categories of personal information for a business purpose :

  1. Personal Identifiers;
  2. Personal Information Records;
  3. Protected Classifications;
  4. Commercial Information;
  5. Professional or Employment Information;
  6. Non-public Education Information; and
  7. Inferences from Personal Information Collected.

Notwithstanding anything to the contrary in our other privacy notices, we restrict use of your personal information shared with our vendors to business purposes.

We may disclose your personal information for a business purpose to the following categories of third parties :

In the preceding twelve (12) months BioHorizons may have disclosed personal information for the following business purposes:

We engage with third party contractors, service providers and other vendors for certain services. If the engagement involves the transmission of personal information, BioHorizons in directs the service provider to treat that data consistent with legal requirements. A contract to protect the personal information should be executed before any data is disclosed.

In certain circumstances, BioHorizons may be required to disclose personal information when required by law, when required to protect our legal rights, or in an emergency situation where the health or security of an individual is endangered. We may also disclose personal information in the context of any sale or transaction involving all or a portion of the business.

Our Policy Towards Children

Our services are not directed to children. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, please contact us. If we become aware that a child has registered for a service and has provided us with personal information, we will delete such information from our files.

Security

BioHorizons is committed to the security, confidentiality and integrity principle. We take commercially reasonable precautions to keep all information obtained from our online visitors secure against unauthorized access and use and we periodically review our security measures. We are committed to processing your data in a secure manner and have put in place specific technical and organizational measures to prevent the personal data we hold from being accidentally or deliberately compromised. Our employees participate in a training and compliance program and are required to safeguard your information.

BioHorizons uses GoDaddy for its sites security certificates. Please be aware that these protection tools do not protect information that is not collected through our Web site, such as information provided to us by e-mail.

We also conduct information risk assessments, we ensure that our staff understands the importance of protecting personal data, and we are responsibly managing access rights within the company. We include both physical security and IT security in our overall data security approach. We are diligent in selecting vendors that process personal data on our behalf so that they also ensure appropriate technical and organizational measures to protect the data.

BioHorizons makes reasonable efforts to notify individuals and regulatory authorities, as required by law, if we reasonably believe that personal information has been stolen, disclosed, altered or infringed by an unauthorized person. We create and maintain a breach notification and reporting protocol.

We also endorse the concept of privacy by design which is an approach to projects that promotes privacy and data protection compliance from the outset. This means considering the privacy and security implications for any new project or process throughout its lifecycle.

Your data protection rights and choices

If you reside or otherwise find yourself in jurisdictions with data protection laws, BioHorizons is committed to supporting your rights granted by such applicable data protection laws. Otherwise you can contact us at any time to discuss your privacy concerns.

Under certain circumstances, you may have the privacy rights described in this section. Any request you submit to us is subject to an identification and verification process. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected personal information.

If you require this notice to be provided in a different format (e.g audio and Braille ), please submit the request to BioHorizons by either:

If we cannot comply with a request, we will explain the reasons in our response. We will use personal information provided in a verifiable request only to verify your identity or authority to make the request and to track and document request responses.

We will make commercially reasonable efforts to identify personal information that we collect, process, store, disclose and otherwise use and to respond to your applicable privacy rights requests. In some cases, we may suggest that you receive the most recent or a summary of your personal information and give you the opportunity to elect whether you want the rest. We will typically not charge a fee to fully respond to your requests; provided, however, that we may charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded or overly burdensome. If we determine that the request warrants a fee, or that we may refuse it, we will give you notice explaining why we made that decision. You will be provided a cost estimate and the opportunity to accept such fees before we will charge you for responding to your request.

Pursuant to applicable data protection laws, your privacy rights may include the following:

Information Rights: You may have the right to send us a request, no more than twice in a twelve-month period, for any of the following for the period that is 12 months prior to the request date:

To make a request, please visit ccpa.intra-lock.com.

Obtaining Copies of Personal Information:

You may have the right to obtain a copy, no more than twice in a twelve-month period, of your personal information that we have collected and are maintaining. To make a request, please visit ccpa.intra-lock.com.

Do Not Sell:

We do not sell personal information.

Delete:

Except to the extent we have a basis for retention under applicable law, you may request pursuant to applicable law that we delete your personal information that we have collected and are maintaining. Our retention rights include, without limitation, complete transactions and service you have requested or that are reasonably anticipated, for security purposes, for legitimate internal business purposes, including maintaining business records, to comply with law, to exercise or defend legal claims, and to cooperate with law enforcement. To make a request, please visit ccpa.intra-lock.com.

We will not discriminate against you in a manner prohibited by applicable law because you exercise your privacy rights. You may have the right to exercise these rights via an authorized agent who meets the agency requirements of the applicable law.

Changes to this notice

We reserve the right to modify this Privacy Statement and related business practices at any time. We will duly inform you of any changes.

Contact information

If you have any privacy concerns or questions about how your personal information is used, please feel free to contact us.

If you have any concerns or questions about how your personal data is used, please contact us at:

BioHorizons, Inc.
2300 Riverchase Center
Birmingham, AL 35244
Attn: Regulatory Affairs

Or calling BioHorizons toll-free at 1-888-246-8338

You can also contact our Data Protection Officer at ejenkins@biohorizons.com. We will promptly respond and do everything possible to address your concern.