Website Privacy Policy

What this policy covers. This Privacy Policy describes how Symplast, Inc. (“Symplast,” “we,” “us,” or “our”) collects, uses, and discloses personal information through our website at symplast.com and related marketing programs (the “Site”). It does not cover information that Symplast processes on behalf of a healthcare practice through our practice management, EHR, or related software (collectively, the “Platform”). If you are a patient and want to understand how your health information is handled, please consult your healthcare provider’s own Notice of Privacy Practices, that information is governed by HIPAA and by the Business Associate Agreement between Symplast and your provider, not by this Policy.

1. Who We Are

Symplast, Inc. is a Florida corporation headquartered at 6750 N. Andrews Avenue, Suite 200, Fort Lauderdale, FL 33309. For purposes of the EU and UK General Data Protection Regulation (“GDPR”) and similar laws, Symplast acts as a “controller” of personal information it collects through the Site.

2. Scope of This Policy

This Policy applies to personal information we collect when you:

• visit or browse symplast.com or any other Symplast marketing website;
• fill out a form on the Site (for example, to request a demo, contact sales, or download a whitepaper);
• register for or attend a Symplast webinar or event;
• subscribe to a Symplast newsletter, blog, or other communication;
• communicate with our sales or marketing teams through the Site or by responding to a marketing email; or
• apply for a job through the careers area of the Site.

This Policy does not apply to:

• protected health information (“PHI”) or other patient data that Symplast processes on behalf of a healthcare provider through the Platform, that information is governed by the provider’s Notice of Privacy Practices and by the Business Associate Agreement between Symplast and the provider;
• personal information you enter into the Platform as an authorized user of a Symplast customer (governed by the Master Subscription Agreement and applicable customer policies); or
• third-party websites or services that we do not own or control.

3. Information We Collect

3.1 Information you provide to us

• Contact and inquiry information: name, business email, business phone, practice or organization name, job title, and the contents of any message you send us through a Site form.
• Sales and demo information: practice specialty, practice size, software currently used, and any other information you choose to share when requesting a demo or speaking with our sales team.
• Event and content registrations: the information you provide when registering for a webinar, event, eBook, whitepaper, or similar resource.
• Subscription preferences: the email address you use to subscribe to newsletters, marketing emails, or other communications.
• Recruiting information: if you apply for a role at Symplast, the information in your application, resume, cover letter, and any communications during the interview process.

3.2 Information collected automatically

• Device and connection data: IP address, browser type and version, operating system, device identifiers, language preferences, and time zone.
• Usage data: pages viewed, links clicked, referring URL, session length, and similar Site diagnostics.
• Cookies and similar technologies: see Section 6.
• Locally stored preferences: settings you choose on the Site, such as accessibility preferences, are saved in your browser’s local storage on your device. We do not collect or receive these preferences on our servers.
• Approximate location: derived from IP address and used for analytics, fraud prevention, and traffic routing.

3.3 Information from third parties

• Marketing partners and data enrichment vendors that help us identify and qualify prospective customers.
• Public sources such as professional networking sites and medical board registries.
• Referrers, for example, an existing customer who refers a colleague or practice to us.

We do not seek to collect sensitive personal information through the Site. If you choose to send us such information through a free-text field or attachment, we will treat it with the protections required by applicable law and will not use or disclose it for purposes other than those described in Section 4.

4. How We Use Information

We use the information we collect through the Site to:

• respond to your inquiries, demo requests, and other communications;
• operate, secure, and improve the Site;
• send you marketing communications about Symplast products, events, and resources (subject to your preferences and applicable law);
• register and host webinars, events, and content downloads you request;
• evaluate and respond to job applications;
• measure the effectiveness of our marketing and improve targeting and messaging;
• generate aggregated or de-identified analytics about Site usage; and
• comply with applicable laws, respond to lawful requests, and enforce our terms.

Where required by law, we rely on one of the following legal bases for processing personal information: your consent; the performance of a contract with you or your employer; compliance with a legal obligation; or our legitimate interests (such as operating and improving our marketing programs), balanced against your rights.

5. How We Share Information

We do not sell personal information for money. We share personal information collected through the Site only in the circumstances described below.

• Service providers. Vendors that help us operate the Site, including hosting and content delivery, web analytics, marketing automation, CRM, email delivery, form processing, advertising measurement, and security monitoring, act under written contracts that require them to use personal information only for the purposes we direct.
• Professional advisors. Lawyers, accountants, auditors, and similar advisors, under appropriate confidentiality obligations.
• Corporate transactions. In connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case the recipient will be bound to honor the commitments in this Policy or provide notice of any material change.
• Legal and safety. When we believe disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Symplast, our customers, or others.
• With your direction or consent. Including where you ask us to share information with a third party.
• Advertising and analytics partners. The Cookies described in Section 6 may share limited information (such as IP address, browser identifiers, and pages viewed) with analytics and advertising partners. Depending on the jurisdiction, this may constitute a “sale” or “sharing” under state privacy law; you can opt out as described in Section 9.

6. Cookies & Similar Technologies

We and our service providers use cookies, pixels, web beacons, local storage, and similar technologies (collectively, “Cookies”) on the Site, in four broad categories:

• Strictly necessary Cookies, required to operate the Site (for example, to remember your cookie preferences or to keep you signed in to gated content). These cannot be disabled through our preference center.
• Functional Cookies, remember your preferences and improve your experience. For example, we store your accessibility preferences (such as font size, contrast, or reduced-motion settings) in your browser’s local storage so the Site can apply them on future visits. This information stays on your device and is not transmitted to Symplast. You can clear it at any time through your browser settings.
• Analytics Cookies, help us understand how visitors use the Site so we can improve it.
• Advertising Cookies, used to measure and improve our marketing campaigns and, in some cases, to deliver tailored advertising on other sites.

You can manage Cookies through the “Cookie Preferences” link in our Site footer, through your browser settings, or by using browser-level Global Privacy Control (“GPC”) signals where supported. We honor GPC as a valid opt-out of “sale” and “sharing” for Site visitors in jurisdictions whose laws require us to.

7. Data Retention

We retain personal information collected through the Site for as long as necessary to fulfill the purposes described in this Policy, including to satisfy any legal, accounting, tax, or reporting requirements, to enforce our agreements, and to resolve disputes. Retention periods vary by data type and context. As a general matter:

• Sales and marketing leads are retained for up to 36 months after the most recent interaction, then deleted or de-identified unless a longer period is required by law or contract.
• Webinar, event, and content registrations are retained for up to 36 months after the event or download.
• Communications you send us through the Site are retained for up to 7 years.
• Web analytics data is generally retained in identifiable form for no more than 26 months.
• Recruiting records are retained in accordance with applicable employment law.

8. Information Security

Symplast maintains an information security program designed to protect personal information using administrative, physical, and technical safeguards appropriate to the sensitivity of the information. These include access controls, encryption of data in transit, monitoring and logging, employee training, and incident response. No system is perfectly secure, and we cannot guarantee that unauthorized access, hardware failure, or other events will not occur. If you believe any information you have provided to us through the Site has been compromised, please contact us at webmaster@symplast.com.

9. Your Privacy Rights

Depending on where you live, you may have one or more of the following rights with respect to personal information about you that Symplast controls:

• Right to know / access the personal information we hold about you, including the categories of information, sources, purposes, and recipients.
• Right to correct inaccurate personal information.
• Right to delete personal information, subject to exceptions provided by law.
• Right to data portability, to receive your personal information in a portable format.
• Right to opt out of (i) the sale or sharing of personal information, (ii) targeted or cross-context behavioral advertising, and (iii) certain profiling activities.
• Right to limit the use of sensitive personal information.
• Right to appeal a refusal to act on a request, where state law provides an appeal mechanism.
• Right to non-discrimination, we will not discriminate against you for exercising any of these rights.

To submit a request, please use our data privacy request form at https://na1.hs-data-privacy.com/request/LbscCL2_e0jM7DE_Z7O3Xw, email webmaster@symplast.com, or write to us at the postal address in Section 16. We will verify your identity before fulfilling certain requests, and we may decline requests that we are unable to verify or that are excluded by law. An authorized agent may submit a request on your behalf with appropriate written authorization.

If you are a patient and your request relates to PHI held in a Symplast-hosted practice system, please direct your request to the healthcare provider; Symplast is not authorized to respond on a provider’s behalf.

10. U.S. State-Specific Disclosures

The following disclosures apply in addition to the rest of this Policy for residents of U.S. states with comprehensive privacy laws, including California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Montana, Oregon, Delaware, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, Rhode Island, Kentucky, and others as those laws come into effect.

10.1 Categories of personal information processed

In the 12 months preceding the Last Updated date above, we have collected, used, and disclosed the categories of personal information set forth below through the Site (categories as defined in California Civil Code § 1798.140):

Category	Collected	Disclosed for business purposes	Sold or shared
Identifiers (name, email, IP address, etc.)	Yes	Yes, to service providers	Limited, via analytics/advertising Cookies, unless opted out
Customer records (Cal. Civ. Code § 1798.80)	Yes	Yes, to service providers	No
Commercial information (inquiries, demo requests)	Yes	Yes, to service providers	No
Internet or other electronic network activity	Yes	Yes, to service providers	Limited, via analytics/advertising Cookies, unless opted out
Geolocation (approximate, IP-derived)	Yes	Yes, to service providers	No
Professional or employment-related information	Yes	Yes, to service providers	No
Inferences drawn from the above	Yes	Yes, to service providers	No

We do not knowingly sell or share for cross-context behavioral advertising the personal information of consumers under 16 years of age.

10.2 California “Shine the Light”

California Civil Code § 1798.83 permits California residents to request information about our disclosures of certain personal information to third parties for those third parties’ direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.

10.3 Notice of Right to Opt Out of Sale/Sharing

You can exercise the right to opt out of “sale” or “sharing”, or submit any other privacy request, through our data privacy request form at https://na1.hs-data-privacy.com/request/LbscCL2_e0jM7DE_Z7O3Xw, by using the “Cookie Preferences” link in our Site footer, or by enabling a recognized opt-out preference signal (such as Global Privacy Control) on a supported browser.

10.4 Notice of Financial Incentive

We do not currently offer any financial incentives or price or service differences in exchange for personal information.

10.5 Appeals

If we decline to act on a request you submit, you may appeal by replying to our decision with the word “Appeal” in the subject line, or by emailing webmaster@symplast.com within 30 days. If we deny your appeal, you may contact your state attorney general.

11. European Economic Area, United Kingdom & Swiss Residents

If you are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, you have the rights described in Section 9, as well as the right to lodge a complaint with your local supervisory authority. Where we rely on consent as our legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

Symplast does not currently target or market the Site to individuals in the EEA, United Kingdom, or Switzerland, and has not appointed an Article 27 GDPR representative. If you have questions about your rights or our processing of your personal information, please contact us at webmaster@symplast.com.

12. International Data Transfers

Symplast is headquartered in the United States, and the Site is primarily hosted in the United States. If you access the Site or otherwise provide us with personal information from outside the United States, that information will be transferred to and processed in the United States and in other jurisdictions where we or our service providers operate. Where required, we rely on appropriate transfer mechanisms such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum), supplemented by transfer impact assessments and appropriate technical and organizational measures.

13. Children’s Privacy

The Site is intended for use by healthcare professionals, practice administrators, and other adult business users. We do not knowingly collect personal information directly from children under the age of 13 through the Site. If you believe a child has provided personal information to us through the Site, please contact us at webmaster@symplast.com and we will take appropriate steps to delete it.

14. Third-Party Sites & Services

The Site may contain links to third-party websites and services. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies before providing information to them.

15. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above and, if the changes are material, provide a more prominent notice (for example, by email to subscribers or by a banner on the Site). Continued use of the Site after the effective date of an updated Policy means that you accept the changes, to the extent permitted by law.

16. Contact Us

If you have questions about this Policy or our privacy practices, you can reach us at:

Symplast, Inc.
Attn: Privacy
6750 N. Andrews Avenue, Suite 200
Fort Lauderdale, FL 33309
Email: webmaster@symplast.com
Phone: (954) 798-8520