Boston Scientific Consumer Health Data Privacy Policy

We may collect Consumer Health Data in connection with our products and services, such as when you visit our websites, participate in quizzes, make use of our mobile applications, sign up for our communications, or interact with BSC team members (collectively, the “Services”).

The type of Consumer Health Data depends on the Service and your interactions with us. Examples may include:

• Individual health conditions, status, diseases, or diagnoses;
• Social, psychological, behavioral, and medical interventions;
• Health-related surgeries or procedures;
• Use or purchase of medication;
• Bodily functions, vital signs, symptoms, or measurements;
• Diagnoses or diagnostic testing, treatment, or medication;
• Precise geolocation information that may indicate a consumer’s attempt to receive health services or supplies;
• Biometric data, including photographs;
• Genetic data;
• Reproductive health care services;
• Gender-affirming care services;
• Other data that may reasonably indicate your attempt to acquire or receive certain health services or products; or
• Information that we may use to associate or identify a consumer based on their health status that is derived or extrapolated from non-health information. 

We may collect Consumer Health Data from the following sources:  

• Directly from you, such as when you interact with our websites or applications, request information about our products and services, sign up to receive our communications, or participate in our programs.
• Third parties, including health care providers, research partners, and affiliated entities, such as those with whom you have a relationship or that provide information to us via online forms.
• Service providers and business partners who assist us in operating our Services, other products, services, websites, and mobile applications that provide us with data analytics or market research, or who verify information that you provide.
• Publicly available sources, which we may combine with other information that we collect about you to enhance the products or services that we offer to you.

We may collect, use and share Consumer Health Data to provide Services that you request or sign up for, for any purpose for which you provide consent, and as permitted or required by applicable law. This may include the following:  

• Providing you with the Services, such as providing you with educational information about our products and services, provide those products and services to you, or administer your account.   
• Communicating with you and providing support, such as responding to your questions and requests, sending you product updates or service information, and facilitating your journey with BSC;
• Advertising or marketing communications, including cross-context behavioral and targeted advertising.  
• Operating and improving our business, such as accounting, auditing, record keeping, and other internal functions; conducting surveys, other research, and analysis; developing new products and services; measuring and improving our products and services; and optimizing and personalizing your experience.  
• Research and development to improve, enhance, or maintain the quality and safety of our products or services.
• Complying with the law, such as our regulatory and contractual obligations.
• To protect the rights and safety of us, our affiliates, you, or others, such as to preserve the integrity or security of our systems, prevent, detect, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or address any activity that is illegal under applicable state law or federal law.   
• To comply with law or cooperate with lawful requests, such as to law enforcement agencies, courts, other government authorities or other third parties where necessary to comply with a legal or regulatory obligation, or as we deem reasonably necessary to support lawful investigations. 
• In connection with a corporate transaction or business transfer, such as if we acquire assets of another business or sell or transfer all or a portion of our business or assets.   
• Any other lawful purpose for which we obtain your consent.

We also may deidentify Consumer Health Data so that it cannot reasonably be reidentified by us or by another person, and we may use this deidentified data for any reason permitted by applicable law. If we deidentify information that was originally based on Consumer Health Data, we maintain and use that information in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law.

We may share Consumer Health Data with others for the purposes described above, such as: 

• BSC affiliates and core businesses described here;
• Business partners;
• Healthcare providers involved in your care;
• Research partners;
• Third parties that perform services for or on behalf of BSC;
• Government agencies;
• Parties in a business transaction; and
• As permitted by any consent you may provide to us, such as our use of third-party cookies that may collect Consumer Health Data over time and across different websites or online services.    

You may have certain rights regarding your Consumer Health Data, with some exceptions:

• Right to Request Access. You have the right to confirm whether we process your Consumer Health Data and to obtain information about how we process that data.
• Right to Delete.  You have the right to request that we delete your Consumer Health Data.
• Right to Withdraw Consent.  If you provide consent for our processing of your Consumer Health Data, you may have the right to withdraw that consent.
• Right to Change.  You have the right to ask that we change the Consumer Health Data that we collect.

You may exercise your rights related to Consumer Health Data by: 

• Completing this Consumer Data Request Form
• Emailing globalprivacy@bsci.com

We will use information that you provide in your request to verify your identity, and we may request additional information if necessary to complete the verification process.

If you are a Washington resident and your request to exercise a right under the Washington My Health My Data Act is denied, you may appeal that decision by contacting us as described above.  If your appeal is unsuccessful, you may lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

We may modify or update this Consumer Health Data Privacy Policy in our discretion.  We encourage you to visit this Policy regularly to learn about any changes to the way we collect, use, or share your Consumer Health Data. If we make a material change to this Policy, we will take reasonable steps to notify you as required by applicable law.

Please direct privacy-related issues, questions, comments or complaints to one of the following:

Email: GlobalPrivacy@bsci.com

Postal Mail:

Boston Scientific Corporation
Global Privacy Office/Legal
300 Boston Scientific Way
Marlborough, MA 01752 (USA)