Privacy Policy

Altru Health System and the Altru entities identified below (collectively, "Altru," "we," "us," or "our") respect your privacy. This Website Privacy Policy explains how we collect, use, disclose, and protect information when you use the websites, and other digital services that link to this policy (collectively, the "Services").

This policy does not apply to a third-party website, application, or service that has its own privacy policy, even if Altru links to or integrates with that service. Additional privacy notices or terms may apply to a particular Altru service. If an additional notice conflicts with this policy, the additional notice controls for that service.

Health Information and the HIPAA Notice

This Website Privacy Policy is different from Altru's Notice of Privacy Practices under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, as amended (HIPAA). Altru's Notice of Privacy Practices describes how Altru may use and disclose protected health information, the rights individuals have concerning that information, and Altru's legal duties.

When information Altru creates, receives, maintains, or transmits is protected health information governed by HIPAA, Altru will use and disclose that information as permitted by HIPAA and the Notice of Privacy Practices. This policy does not expand Altru's rights to use or disclose protected health information. If this policy conflicts with the Notice of Privacy Practices concerning protected health information, the Notice of Privacy Practices controls.

The Altru patient portal and related patient services may have separate terms and privacy notices. Please use the patient portal, rather than ordinary email or a general website form, to communicate sensitive medical information when that option is available.

Information We Collect

Information You Provide

We may collect information that you choose to provide through the Services, including:

Identifiers and contact information, such as your name, mailing address, email address, telephone number, date of birth, account username, or other identifying information.
Information included in appointment requests, contact forms, registrations, applications, surveys, event sign-ups, donations, billing or payment interactions, customer service requests, and other communications.
Health, insurance, demographic, accessibility, and other sensitive information when you choose to submit it through a service designed to receive that information.
Transaction information, such as billing details, payment status, and records of products, services, donations, or event registrations. Payment card information may be collected directly by a payment processor rather than Altru.

Information Collected Automatically

When you use the Services, Altru and the vendors that support the Services may automatically collect information about your device and activity. Depending on the Service and the technology in use, this information may include:

Internet or network information, including your Internet Protocol address, browser type, operating system, device identifiers, internet service provider, and referring or exit pages.
Usage information, including pages or content viewed, links selected, search activity, dates and times of access, approximate location derived from an Internet Protocol address, and interactions with website features.
Diagnostic and performance information, including error logs, load times, security events, and information used to prevent fraud or misuse.
Cookie and similar technology identifiers, preference information, analytics data, and, if used, advertising or campaign attribution information.
Precise device location, but only if a Service requests it, you permit access through your device settings, and Altru discloses the purpose at the point of collection.
Information collected automatically may identify or be associated with a person or device. Altru does not treat an Internet Protocol address or cookie identifier as categorically anonymous.

Information From Other Sources

We may receive information from vendors that help us provide the Services, healthcare and insurance partners, referral sources, publicly available sources, social media platforms when you interact with Altru, and other persons or organizations as permitted by law. We may combine this information with information collected through the Services.

Cookies Analytics and Similar Technologies

Altru and vendors working on our behalf may use cookies, tags, local storage, software development kits, and similar technologies to operate and secure the Services, remember settings, measure use, diagnose problems, and understand whether communications or campaigns are effective.

These technologies may be grouped as follows:

Essential technologies support functions such as security, network management, authentication, accessibility, and user-requested features.
Functional technologies remember preferences and support enhanced features.
Analytics technologies help us understand how the Services are used and how they perform.
Advertising or campaign technologies, if used, measure outreach or help deliver content based on interactions with Altru or other services.

You can manage some technologies through your browser or device settings. If Altru provides a cookie preference tool, you can use that tool to make available choices. Blocking certain technologies may cause parts of the Services to work differently or become unavailable. Altru will recognize opt-out preference signals when required by applicable law and technically supported.

How We Use Information

Altru may use information collected through the Services to:

Provide, administer, personalize, support, and improve the Services and respond to requests.
Facilitate appointment requests, patient services, account functions, payments, donations, registrations, applications, and other transactions initiated by you.
Communicate with you about your requests, accounts, services, events, benefits, surveys, operational notices, and other matters related to your relationship with Altru.
Send promotional or fundraising communications when permitted by law and provide available opt-out choices.
Measure performance, understand use, conduct research and analysis, troubleshoot problems, and develop or improve services.
Protect patients, workforce members, users, Altru, and others; secure accounts and systems; detect or prevent fraud, abuse, or unlawful activity; and enforce applicable terms.
Comply with legal obligations, respond to lawful process, establish or defend legal claims, and support audits, investigations, and regulatory requirements.
Create aggregated or de-identified information and use it for lawful purposes. Altru will not attempt to reidentify information that applicable law requires us to maintain as de-identified.

When HIPAA applies to information, Altru's uses of that information are governed by HIPAA and the Notice of Privacy Practices, as described above.

How We Disclose Information

Altru may disclose information collected through the Services in the following circumstances:

Service providers. We may disclose information to vendors that perform services for Altru, such as website hosting, cloud storage, cybersecurity, analytics, communications, scheduling, payment processing, customer support, recruiting, and other operational services. We require vendors to protect information as appropriate to the service, the information, and applicable law.
Altru entities and partners. We may disclose information among covered Altru entities and to partners when needed to provide a requested service or operate a joint or co-branded program.
At your direction or with your consent. We may disclose information to a person or organization you direct us to involve or when you otherwise consent.
Legal and safety purposes. We may disclose information when we reasonably believe disclosure is required by law or legal process, is necessary to protect rights or safety, supports an investigation, or helps prevent fraud, misuse, or unlawful activity.
Organizational transactions. Information may be transferred as part of a merger, affiliation, reorganization, financing, sale or transfer of assets, or similar organizational transaction, subject to applicable law.
Aggregated or de-identified information. We may disclose information that does not identify a person when permitted by law.

Altru does not sell protected health information. Altru also does not disclose protected health information for marketing except as permitted by HIPAA and the Notice of Privacy Practices or with a valid authorization when one is required.

Email Text Messages and Telephone Communications

If you provide contact information, Altru may use it to respond to you and to send administrative, service-related, patient-related, fundraising, or promotional communications as permitted by law. Email and text messages may not be encrypted. Do not send sensitive medical or financial information through ordinary email or text unless Altru specifically instructs you to use that method.

You may unsubscribe from promotional emails by using the unsubscribe link in the message. You may opt out of a recurring text-message program by following the instructions provided in that program, which may include replying STOP. Opting out of promotional communications does not prevent Altru from sending non-promotional communications permitted by law, such as messages about your care, transactions, security, account, or relationship with Altru.

Your Privacy Choices and Requests

Depending on where you live and the law that applies, you may have rights concerning personal information, such as rights to request access, correction, deletion, or a copy of information, or to opt out of certain uses or disclosures. These rights may be subject to exceptions, verification requirements, and limits under applicable law.

To submit a request concerning information governed by this Website Privacy Policy, contact the Altru Privacy Officer using the information below. Altru may ask for information reasonably necessary to verify your identity and authority. Altru will not discriminate against you for exercising a privacy right protected by law.

Requests concerning medical records or other protected health information should be made through the process described in Altru's Notice of Privacy Practices or through Altru Health Information Management. Rights concerning protected health information may differ from rights concerning general website information.

Data Retention

Altru retains information for as long as reasonably necessary for the purpose for which it was collected, to provide the Services, to maintain business and clinical records, to comply with legal and contractual obligations, to resolve disputes, to protect security, and to enforce agreements. Retention periods vary based on the type of information, the Service, legal requirements, and operational needs. When retention is no longer required, Altru will delete, de-identify, or otherwise dispose of information in accordance with applicable policy and law.

Information Security

Altru uses reasonable administrative, technical, and physical safeguards designed to protect information under its control. Access is limited based on role and business need. No website, network, storage system, or transmission over the internet can be guaranteed to be completely secure. You should use care when sending information electronically and protect your account credentials.

Third Party Services and Links

The Services may link to, embed, or integrate content or functions provided by third parties. Those third parties may collect information under their own privacy policies and terms. Altru does not control a third party's privacy practices merely because the third party's content or service appears through an Altru page. Review the privacy notice for the service you choose to use.

Changes to This Policy

Altru may update this policy from time to time. The Last Updated date shows when the policy was most recently revised. If Altru makes a material change, it will provide notice as required by law, which may include posting a notice through the Services or using another appropriate method. Changes become effective when stated in the updated policy.

Last Updated: October 2026