California Privacy Notice

Last Updated and Effective: January 1, 2020

This California Privacy Notice (“Notice”) describes how Allscripts uses and discloses the Personal Information we collect from or about California residents.

This Notice applies to visitors, users, and others who reside in California and who use our websites, portals, and software, or otherwise interact with us online or offline (our “Services”). Before sharing your Personal Information with us or using our Services, please review this Notice carefully.

This Notice supplements the information contained in the privacy policies that we post on our Services (our “Privacy Policies”). Please review these Privacy Policies for general information about how we use and share the Personal Information we collect from or about you when you use the Services.

What is Allscripts?

Throughout this Notice, “Allscripts” refers to Allscripts Healthcare, LLC, including its affiliated companies and subsidiaries (also referred to as “we” and “us”). Allscripts primarily provides services to businesses, and we may collect Personal Information in the context of providing these services. As between Allscripts and our business customers, our business customers are primarily responsible for how we use and disclose the Personal Information we collect in our role as a service provider. If Allscripts maintains your Personal Information on behalf of one of our business customers, and you have questions about how we process your Personal Information, we may direct any inquiries about our use of your Personal Information to that customer.

Personal Information We Collect

We may collect information that identifies, relates to, describes, is capable of being associated with,or could reasonably be linked, directly or indirectly, with you or your household (“Personal Information”). Our Privacy Policies contain a general description of the types of Personal Information we collect. Specifically, within the last twelve (12) months, we have collected the following categories of Personal Information:

• Direct Identifiers, such as your name, email address, mailing address, IP address, online identifiers, and account information. We typically collect this information directly from you in order to provide you access to certain information on our websites.
• Internet Activity Information, such as your browsing history, search history, and browser information. We typically collect this information from our use of cookies and other data collection technologies to help us design our website, to identify popular features, and for other managerial purposes.
• Commercial Information, such as products and services purchased from us. We typically collect this information directly from you in order to fulfill your transactions and provide you customer service.
• Profile Information, such as information about your preferences and characteristics. We typically collect this information directly from you in order to tailor our services and communications to you.

In addition to the purposes for collection described above, we have collected each of the above categories of Personal Information for the purpose of performing services for you and managing our relationship with you, which typically includes:

• Maintaining and servicing your account, including managing your preferences.
• Administering and improving our Services, including to run analytics, assess the quality of our Services, and for other related internal business purposes.
• Communicating with you and responding to inquiries you send to us.
• Sending you messages promoting our products and services.
• Complying with our legal, regulatory and risk management obligations, including establishing, exercising and/or defending legal claims.

How We May Share and Sell Your Personal Information

We may share the categories of Personal Information we collect with third parties as described in our Privacy Policies. Specifically, in the preceding twelve (12) months, we have disclosed the following categories of Personal Information to third parties: Direct Identifiers; Internet Activity Information; Commercial Information; and Profile Information.

We do not sell your Personal Information. If we change our practices, we will update this Notice in accordance with Section 6.

Privacy Rights

You may be entitled to the following privacy rights under California law:

• The right to know. You have the right to request: (i) the specific pieces of Personal Information we have about you; (ii) the categories of Personal Information we have collected about you in the last 12 months; (iii) the categories of sources from which that Personal Information was collected; (iv) the categories of your Personal Information that we sold or disclosed in the last 12 months; (v) the categories of third parties to whom your Personal Information was sold or disclosed in the last 12 months; and (vi) the purpose for collecting and selling Personal Information.
• The right to deletion. You have the right to request that we delete the Personal Information that we have collected or maintain about you. We may deny your request under certain circumstances, such as if we need to comply with our legal obligations or complete a transaction for which your Personal Information was collected. Certain exceptions under the California law may allow Allscripts to retain and use certain Personal Information notwithstanding your deletion request. If we deny your request for deletion, we will let you know the reason why.
• The right to opt out of the sale of your Personal Information. You have the right to opt out of the sale of your Personal Information. Allscripts does not sell your Personal Information.
• The right to equal service. If you choose to exercise any of these rights, Allscripts will not discriminate against you in anyway. If you exercise certain rights, understand that you may be unable to use or access certain features of Allscripts’ Services.

You may exercise your right to know and your right to deletion twice a year free of charge. To exercise your right to know or your right to deletion, contact us at 1-800-334-8534 or 1-844-903-7567 (for Practice Fusion customers) or email us at privacy@Allscripts.com.

We will take steps to verify your identity before processing your request to know or request to delete. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected Personal Information. If you have an account with us, we will use our existing account authentication practices to verify your identity. If you do not have an account with us, we may request additional information about you to verify your identity. We will only use the Personal Information provided in the verification process to verify your identity or authority to make a request and to track and document request responses, unless you initially provided the information for another purpose.

You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your Personal Information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.

• Shine the Light – Third Party Marketing. You may request and obtain from Allscripts once per calendar year information about any of your Personal Information shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us at privacy@Allscripts.com

Contact Information

We hope this Notice has been helpful in explaining how we handle your Personal Information. If you have any questions that we have not answered, please contact our Data Protection Officer who will be pleased to help you:

Allscripts
Attn: Privacy Officer
222 Merchandise Mart Plaza
Suite 2024
Chicago, Illinois 60654
privacy@Allscripts.com

Update

We may update this Notice from time to time. When we update this Notice, we will post the changes on our Services and update the “Last Updated” date at the top of this page. We encourage you to check this Notice regularly for changes. If we make any material changes to this Notice, we will notify you before they take effect either through the Services or by sending you a notification. Unless otherwise noted, any changes we make to this Notice will become effective immediately once posted on this page. Your continued use of the Services following any changes to this Notice indicates that you have read and understood the practices described in the revised Notice.