Effective Date: August 25, 2026
This Privacy Policy (“Policy”) describes the information collected by or on behalf of Heritage Biologics, LLC, doing business as Heritage Specialty Pharmacy (“Heritage,” “we,” “us,” or “our”) through our website https://heritagebiologics.com/ (the “Site”) and how that information is used and shared. If you have questions or concerns about this Policy, please contact us as set forth below.
We may modify this Policy from time to time. Any changes will be effective upon posting to the Site. If we make material changes to this Policy, we will provide notice by conspicuously posting the updated Policy on the Site or by other appropriate means, consistent with applicable law.
Please note that this Policy does not apply to any information collected through the Site that constitutes protected health information (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations (collectively, “HIPAA”). PHI is defined under HIPAA to include individually identifiable health information relating to your past, present or future physical or mental health or condition, the provision of health care to you, or the past, present or future payment for such care.
It is important to note, however, that HIPAA does not necessarily apply to an entity or person simply because health information involved, and HIPAA may not apply to all of your transactions or communications with us. Any PHI we collect is subject to our Notice of Privacy Practices and not this Policy. If you have questions about which policy applies to the information you have submitted, please do not hesitate to contact us using the contact information listed below.
Information We Collect
We may collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you (“Personal Information”) when you use our Site or otherwise interact with us. The Personal Information we collect falls into two categories: (a) information you provide to us; and (b) information we collect through automated methods when you use our Site.
Certain features of the Site may require Personal Information. If you choose not to provide Personal Information in those circumstances, we may be unable to provide you with certain services or functionality.
Information You Provide to Us
We collect Personal Information that you provide directly to us. If you elect to provide information that personally identifies you, such as your name, email address, mailing address, phone number, or any other similar information, we will collect, use, and share that Personal Information in accordance with this Policy and applicable law. This may occur in the following ways:
The Site. We collect Personal Information that you may submit to us when using our Site and online services.
Communications with Us. If you communicate with us, we will collect any Personal Information that you elect to provide to us during or as a result of those communications, such as your phone number, email address, and message content.
Data Automatically Collected
We may use automated technologies to collect Personal Information from your computer system or mobile device when you use certain portions of our Site. This information may include the following:
Site Activity. We may collect Personal Information about how you use the Site. We may combine Personal Information automatically collected from you with other Personal Information.
Tracking Technologies. Our Site may use cookies, web beacons, pixel tags and other tracking technologies (collectively, “Tracking Technologies”). A cookie is a small text file that our Site saves on your computer or device when you use the Site, which provides us with certain information about your activities. Cookies allow the Site to remember your actions and preferences and to recognize you or your browser, along with some information you provide. Web beacons or pixel tags are small graphics on a webpage that monitor activity when a webpage is viewed.
Most browsers automatically accept Tracking Technologies. You can disable certain Tracking Technologies by adjusting your browser settings; however, disabling Tracking Technologies may impact your use and enjoyment of the Site. Not all features or functions of the Site may work properly if you disable Tracking Technologies. Certain Tracking Technologies are essential to the functioning of the Site and cannot be disabled. In addition to browser settings, you may be able to manage certain Tracking Technologies through any cookie preference or consent tools made available on the Site, if implemented.
The Tracking Technologies on certain portions of our Site may collect information such as:
- IP addresses assigned to the computers and other devices you use;
- your internet service provider;
- device identification numbers;
- approximate geographic location;
- browser type;
- pages of the Site visited;
- websites you access before and after visiting the Site, and
- data related to how and when you use the Site.
California’s “Do-Not-Track” Requirement. We currently do not respond to browser-based “Do Not Track” signals.
Video Content. The Site may contain videos and other embedded content provided by us and third parties, including visible content and scripts embedded in the Site’s code. We and such third parties may collect information about how you interact with this content. For example, YouTube may collect usage data related to videos embedded on the Site. Even if you do not watch videos, YouTube may collect certain information about your interactions with our Site if you are signed into your YouTube or Google account when accessing the Site. YouTube, LLC is owned by Google. Please see Google’s Privacy Policy for more information.
WordPress Website Platform. Our Site is operated using WordPress and related website technologies. When you visit the Site, certain information may be collected automatically, including IP address, browser type, device information, referring page, pages visited, and other technical data necessary for Site operation, security, analytics, and maintenance.
Online Forms (WPForms). Our Site uses WPForms, to allow visitors to contact us directly through online forms. When you submit a form through the Site, we may collect the information you provide, such as your name, email address, selected reason for inquiry, and any other details included in your submission. Our Site may also collect limited technical information associated with the form submission, such as information about how users access or interact with the form. We use this information to receive and respond to inquiries, manage Site communications, maintain security, prevent spam or misuse, troubleshoot technical issues, and improve the Site and user experience.
Form submissions may be shared with authorized Heritage personnel and stored within our Site or related systems used to manage Site communications. We may also disclose this information to service providers that support our Site, hosting, security, email, analytics, or form functionality, subject to appropriate confidentiality and security obligations. We retain form submission information only as long as reasonably necessary to respond to inquiries, maintain business records, comply with legal obligations, resolve disputes, and protect our rights.
Protected health information, sensitive medical information, or other sensitive personal information should not be submitted through any website contact forms. Any protected health information we collect is handled in accordance with our Notice of Privacy Practices, not this Policy.
How We Use Your Information.
We use the Personal Information we collect for the following purposes:
As Stated or Agreed to at the Point of Collection. We may use Personal Information for the purposes stated or agreed to (or as is otherwise apparent) at the point of collection. For example, we may use Personal Information to respond to your questions, comments, or complaints. We may also use Personal Information as requested or consented to by you.
Administration. We use Personal Information for administrative purposes, such as to inform our business strategies and to understand demographics and user preferences.
Site Management. We use Personal Information for Site management purposes, such as troubleshooting problems, improving content and functionality, performing statistical and other analyses, and customizing the Site for users.
Analytics. We use Personal Information for business analytics purposes, including to assess the effectiveness of our services and advertising and to analyze market trends and consumer demand.
Communications. We may use Personal Information to notify you of new services, products, or programs, to inform you of new features of our Site, to notify you of changes to our terms or this Policy, and for other similar communications.
To Protect Our Rights. We may use Personal Information to protect our legal rights or interests, or those of other parties, including to pursue or defend legal claims involving us, our services, or other users. We may also use Personal Information to seek business, financial, or legal advice and to respond to lawful requests from governmental authorities or other legal processes.
To Create Aggregate Data. We may process Personal Information to create deidentified and aggregated data related to our Site. We may collect, use, disclose, transfer, and otherwise process such aggregated information for any lawful purpose, in compliance with applicable law. To the extent Personal Information is deidentified or aggregated so that it no longer constitutes Personal Information under applicable law, we may use and share such information without restriction.
How We Use Data Collected by Tracking Technologies. We use Tracking Technologies to: (i) make our Site function properly; (ii) enhance and improve user experience; (iii) understand how users interact with the Site; (iv) provide us with data and statistics regarding the usage and effectiveness of the Site; and (v) help us improve our services.
- Google Analytics. We use Google Analytics to collect and process information about your use of the Site. Google may set cookies on your browser or device, and your browser may automatically send information to Google. Google uses this information to provide us with reports that help us understand and measure how users interact with the Site.
To learn more about how Google uses data, please visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use; however this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, please visit Google Analytics Cookie Usage on Websites.
Additional Privacy Rights for Certain United States Residents.
Certain United States state privacy laws, including the California Consumer Privacy Act and California Privacy Rights Act (collectively, “CCPA/CPRA”), the Colorado Privacy Act, the Virginia Consumer Data Protection Act, the Connecticut Data Privacy Act, and the Utah Consumer Privacy Act, provide residents of those states with specific rights regarding their Personal Information.
Subject to applicable law, these rights may include the right to:
- request access to the Personal Information we maintain about you;
- request correction of inaccurate Personal Information;
- request deletion of your Personal Information;
- request a copy of your Personal Information in a portable format; and
- opt out of certain processing of Personal Information, including processing for targeted advertising, the sale of Personal Information, or the sharing of Personal Information, as those terms are defined under applicable law.
We do not discriminate against individuals for exercising any of their privacy rights.
Sale or Sharing of Personal Information. We do not sell Personal Information or share Personal Information for cross‑context behavioral advertising purposes, as those terms are defined under applicable state privacy laws.
Submitting a Privacy Rights Request. You may submit a request to exercise your privacy rights by contacting us using the information below. We may need to verify your identity before processing your request, consistent with applicable law.
Authorized Agents. Where permitted by applicable law, you may designate an authorized agent to submit a privacy rights request on your behalf. We may require verification of your identity and proof that the authorized agent has been authorized to act on your behalf before processing the request.
Appeals. If we decline to take action on your request, you may appeal our decision as permitted under applicable law by contacting us using the information below. We will respond to appeals in accordance with applicable legal requirements.
We will respond to verifiable privacy rights requests within the timeframes required by applicable law.
Retention of Personal Information
We will retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is permitted or required by applicable law.
Disclosure of Personal Information
We may disclose Personal Information to the following categories of parties, in compliance with applicable law:
Employees and Affiliates. We may disclose Personal Information to our employees and affiliates who have a legitimate need to know such information for business purposes consistent with this Policy.
Third Parties and/or Service Providers. We may disclose Personal Information to service providers that perform services on our behalf. For example, we may disclose Personal Information to vendors that help us host and manage the Site, improve the Site’s content and functionality, perform data and statistical analysis, troubleshoot Site issues, and support or maintain the security of the Site.
Government Officials / Law Enforcement. We may cooperate with law enforcement and other governmental authorities and may disclose Personal Information: (i) where we believe in good faith that disclosure is required by law; (ii) where disclosure is advised by our legal counsel; or (iii) where necessary to protect our rights or the rights of others, including to investigate, prevent, or address potential wrongdoing or to pursue or defend legal claims.
Professional Advisors. We may disclose Personal Information to our professional advisors, such as our attorneys, accountants, financial advisors, and business advisors, in their capacity as advisors to Heritage.
Change in Ownership. In the event that Heritage is subject to a change of control, or if the Site change ownership, in whole or in part, or in the event of a bankruptcy, receivership, or similar transaction, we may disclose Personal Information as part of that transaction to the subsequent owner(s).
Other. We may disclose Personal Information to third parties when explicitly requested by or consented to by you, or for the purposes for which you provided the Personal Information to us, as disclosed at the time of collection or as otherwise apparent.
Children's Information
The Site is not directed to children under eighteen (18) years of age. We do not knowingly collect, use, sell, or disclose Personal Information from children under eighteen (18). If we obtain actual knowledge that Personal Information has been provided by a child under eighteen (18), we will promptly delete such information. If a parent or legal guardian believes that their child has provided Personal Information to us without parental consent, please contact us and we will make commercially reasonable efforts to delete the information.
Data Security
We use commercially reasonable technical and organizational measures designed to help secure Personal Information against loss, misuse, and alteration, taking into account the type of Personal Information processed. If a breach of your Personal Information occurs, we will notify you in accordance with applicable law.
You understand that no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. While we strive to protect Personal Information, we do not guarantee its security, and you provide Personal Information at your own risk.
Social Media
We utilize social media platforms, which may include Facebook, X (formerly Twitter), YouTube, Vimeo, LinkedIn, and Instagram (“Social Media”). Information you post on Social Media is public information and will not be treated as confidential. We may post or re-post on the Site or our Social Media pages comments or content that you make available on Social Media platforms. Your use of Social Media is governed by the privacy policies and terms of the third-party providers that own and operate those services, not by this Policy. We encourage you to review those policies and terms.
The Site may include features that allow you to connect or interact with Social Media platforms. These features may require the use of cookies, plug-ins, or application programming interfaces provided by the relevant Social Media platforms. In addition, the Site may display content or features provided by Social Media platforms that use cookies or similar technologies to collect information about your interactions with the Site.
Access from Outside the United States
The Site is intended for use within the United States. If you access the Site from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of Personal Information in the United States to be equivalent to that required in other jurisdictions.
Third-Party Websites
The Site may contain links to websites that are not controlled by us. We are not responsible for the privacy policies or practices of third parties. This Policy does not apply to any third-party websites or to any information you provide to third parties. We encourage you to review the privacy policy of each website you visit.
Contact Us
If you have questions or concerns regarding this Policy, contact us at:
Heritage Biologics, LLC, dba Heritage Specialty Pharmacy
Attn: Privacy Officer
255 NW Victoria Drive, Suite B
Lee’s Summit, MO 64086
Tel: (816) 875-5101
Toll Free: 1-855-937-7273
Fax: (844) 402-3945
Email: privacy@heritagebiologics.com