What is – and is not – personal information? What is meant by "de-identified" information and "aggregated" information?
When we use the term "personal information", we are referring to information that can be readily used to identify a specific living person. Examples of personal information that we might wish to collect from you might include your name and your street or e-mail address. All of those items of information can be used to identify you.
Information that relates to you, but cannot be used to identify you, is not "personal information." So, for example, your state of residence is a piece of information about you, but it is not, by itself, "personal information." However, if we collect your street address and your state of residence and we put them together in our systems, we would treat both pieces of information as "personal information" because, when taken together, they can be used to identify you.
Why does Arbor collect personal information?
We collect personal information to improve your experience as a user of our website and also to improve others' experience as well. Sometimes the personal information that we collect enables you to use online resources or obtain communications about topics of interest to you. Personal information collected online also can help us improve our products and services, or design other features and resources that individuals would like to see us offer. We analyze the personal information that we collect so that we can identify and offer new products and services.
How do we collect personal information?
We collect personal information online through websites and other sponsored resources. Sometimes, we work with other companies that collect personal information at our request. When we work with another company, our work together is typically regulated by an agreement that, among other things, requires that company to properly protect the personal information it collects for us.
Direct Collection. In other words, we collect personal information from you by asking you to fill in an online form or participate in an interactive display. Contact details – your name, street address, e-mail address, telephone number, birth date, etc. – are often collected directly. So is health status, so that we can provide you with information that is more likely to be relevant to you.
Clickstream Data. As you use the Internet, a "trail" of electronic information is left at each website you visit. This information is sometimes called "clickstream data", and it can be collected and stored by a website's server. Clickstream data is not "personal information" – it cannot be used to identify you. However, it can provide information about the type of computer and browsing software that you use, and it can identify the address of the website link that you used to reach our website. Clickstream data can be "aggregated" or combined with clickstream data from other people to anonymously determine how much time visitors spend on each page of our website and how visitors navigate through our website. Having this information and sharing it with business partners and advertisers can help us tailor our website to better meet visitors' needs.
Does Arbor collect personal information from children?
In general, our websites are not directed at children and most of the online services that we offer are designed for adults, age 18 or older. Where requests for information about a medication are permitted by law, people requesting information about a medicine that is indicated for use in children must be 18 years old or older.
How does Arbor store and secure personal information?
We strive to protect personal information as it is transmitted from your computer to our online resources and servers. Due to the open nature of the Internet, we cannot guarantee that our interactions with you, and yours with us, will be free from unauthorized access by third parties. We protect our servers and data with a firewall and endeavor to protect personal information in our possession, custody or control from unauthorized access, disclosure, alteration or destruction. Employees and business partners with access to your personal information must have a business-related "need to know" in order to perform their job functions for us. However, we also depend on you to help secure your information by protecting your own copies of passwords and related access codes for our online resources.
Does Arbor share your personal information with third parties?
Can you choose whether and when to share personal information with Arbor?
You do have some choices about whether and when to share personal information with Arbor.
- If you do not want to provide any personal information to Arbor online, you can decline to enter personal information into forms or data fields on websites. You can also refuse to use personalized services offered by online resources. However, you do need to bear in mind that some online resources are only available to people who do choose to provide their personal information.
- If you do provide some personal information online, some Arbor online resources may ask you if we can use and disclose your personal information to add you to contact lists, and to identify other services and promotions of possible interest. You can manage proposed additional uses of personal information about you by giving or withholding permission (e.g., by "checking" or "un-checking" boxes or "radio buttons" on Web forms). Also, you can change your communication preferences.