InfuSystem Privacy Notice

InfuSystem Inc. ("InfuSystem," "we," "our," and "us") is a leading national health care service provider, facilitating outpatient care for durable medical equipment manufacturers and health care providers. InfuSystem is also the USA distributor for Radiaderm™, a skin care product for use during and after radiation therapy.

InfuSystem is committed to safeguarding your privacy in our various interactions with you including your use of our website located at https://infusystem.com, including all pages within the InfuSystem.com domain, such as the Radiaderm section at https://infusystem.com/radiaderm (together, the Site). Please note that InfuSystem does not own or control https://radiadermusa.com. If you navigated to https://radiadermusa.com, you may have been automatically redirected to the Radiaderm portion of the InfuSystem Site, at https://infusystem.com/radiaderm.

This Privacy Notice will provide you with information about what Personal Data we collect, how we use it, and how to exercise your rights related to your Personal Data in the context of your relationship with InfuSystem. Please review this Privacy Notice fully, noting your relationship with us as either a Site Visitor or Customer. Note that who you are in relation to InfuSystem determines what Data we gather and how we use it.

If there is something you do not understand about our privacy practices, please feel free to contact us using the contact information in Section 15 of this Notice.

We may change this Privacy Notice from time to time so please check back often. If we significantly change our collection, use, or disclosure practices, we may send you an updated notice via email if you have provided us with an email address. Please keep in mind that some of the Services mentioned specifically in this notice may not be available on the Site at this time.

2. Scope of this Privacy Notice

Unless otherwise indicated, InfuSystem follows this Notice with respect to Data obtained from or about individuals in the United States.

Our Services include facilitating outpatient care for durable medical equipment manufacturers and health care providers by delivering ambulatory pumps and supplies, along with related clinical, biomedical, billing, and financing (limited to the medical device context) services; provision of the Radiderm product within the United States; and customer service, marketing, providing the Site, and other legitimate business purposes (collectively, our Services).

We require a broad range of data to provide our Services. Some data is classified as protected health information under U.S. law; other data is not. Who you are in relation to InfuSystem determines what data we collect, how we use it, and how you can exercise your rights related to your data in the context of your relationship with InfuSystem.

A. This Notice does not apply to Protected Health Information.

This Notice does not apply to records containing your individually identifiable protected health information that is created, received, maintained, or transmitted by InfuSystem. It does not apply to protected health information transmitted through the Express™ payment system, InstaMed payment system, or InfuBLOCK™ Dashboard. If you are looking for information about how InfuSystem may use or disclose your protected health information, or how you can access such protected health information, please refer to our HIPAA Notice of Privacy Practices which you can view at any time at https://infusystem.com/privacy-hipaa.

If you are a patient, clinician, facility, manufacturer, health care provider, or an employee of an entity doing business with us, this Notice does not apply to interactions with us concerning a person's individually identifiable protected health information. However, this Notice does apply when you browse the publicly accessible areas of our Site, and in other business related interactions with us, including interactions concerning the Radiaderm product.

B. What is Personal Data?

As used in this Notice, the term Personal Data or Data (also known as "personal information") means information relating to an identifiable, living, individual person, except for protected health information as defined by HIPAA or applicable law. For example, a person's cell phone number is considered Personal Data, while their company's phone number is not; and a person's contact information collected via the Radiaderm "Contact Us" webform is Personal Data, while the contact information contained in their medical record is protected health information.

Most data privacy laws distinguish between the entity setting the rules for how Personal Data is used (Controllers) and other entities using Personal Data on behalf of a Controller, which are processors or service providers (Processors). A Controller decides why and how to process Personal Data. A Processor does not make decisions about Personal Data; it merely processes or uses Data for the Controller according to the Controller's instructions. In some states, such as California, these terms may differ but we will treat them the same under this Notice. In California, the term "Business" means a Controller and "Service Provider" means a Processor.

This Notice applies only to InfuSystem Services where we act as the Data Controller. To be clear, this Notice does not cover Data that our Customers collect and share with InfuSystem where we are not the Controller, but rather a Processor. Again, Personal Data does not include protected health information, and this Notice does not apply to records containing your individually identifiable protected health information.

C. How We Process Personal Data.

Different categories of Personal Data are collected and processed differently based on the relationship we have with you. Site Visitors include the individuals who access the publicly accessible portions of the Site. Customers include (i) businesses interacting with us to get information about goods, Services, or financing, or that have entered into an agreement with us for goods, Services, or financing; (ii) individual consumers interacting with us to get information about or purchase Radiaderm for their own personal, household, or family use; and (iii) shareholders or other investors of InfuSystem securities.

If you are a Site Visitor, InfuSystem acts as a Controller when you visit our public-facing Site. However, the Site may contain links to other websites, applications, and services from third parties (like LinkedIn or Facebook, for example). The privacy and data security practices of those third-party sites are governed by the privacy policies of those third parties, and not by InfuSystem.

If you are a Customer, InfuSystem acts as a Controller of your Personal Data where InfuSystem is determining the business purpose for Data use, such as contact information, your email communications about an order, or information related to certain Services related to your account. If you are an employee of an InfuSystem Customer interacting with InfuSystem on behalf of your employer, your employer is the Controller of your Personal Data, not InfuSystem. Your Personal Data may form a part of your employer's Customer account data. You can read about how we process such data in this Notice. If you want to learn about how our Customer, your employer, handles your Personal Data, we encourage you to read their specific privacy policy.

If you are applying for a job with InfuSystem or are completing our employee on-boarding processes, your use of the Site for those purposes is governed by our HR Privacy Policy.

3. What information do we collect from you?

We collect information in several ways. Some of the information we collect is personal to you. Other information is anonymous. We collect the following categories of information:

Identifying Information: We collect this type of information when you create a Customer account, make a purchase, take advantage of offers, apply for or finance medical devices as a business Customer, or otherwise communicate with us. For example, name, email address, telephone number(s), address, and account number. When you contact us via one of the InfuSystem email addresses, we will collect your contact information and any information included in your email. When you use the "Contact Us", "Request a Quote", "Howe Can We Help?", "Learn More About…" or any other webforms on the Site, we collect the information you fill in to the contact fields, in addition to any other information you choose to submit through the form.

Event Information: This information is gathered when an individual signs up for our events or interacts with us at events, and includes information such as contact information, mailing address, and any other information shared with us.

Device Information: We collect device information when you visit the Site, or open our emails. We might collect information about the device used to access our Site, including IP address, or operating system.

Commercial Information: We collect this information when you engage our Services, including details about the products or Services purchased, obtained, or considered, as well as other purchasing, inquiry, or consuming histories or tendencies. We also collect financial and credit information when business Customers apply for or engage our Services to finance medical devices.

Internet or other Network Activity Information: This type of information is collected when a user visits the Site, opens an email from us, or interacts with our other technologies. This Data is either automatically collected or is customer-initiated. For example, if you use our Cookie Preference Tool to opt out of certain cookies, we will store information about your preference to honor your request. When you visit our Site, we may gather data about the browser you use, files viewed, browsing history, search history, and other information regarding interactions with our Site.

Investor Information: If you are an investor in our securities, we may have information related to your securities ownership and contact information that we use to send you investment disclosures.

Other Information: We may look at how often a user uses the Site and where it was accessed from based on IP address. This information includes things such as pages and files viewed, operating system, searches, system configuration, and date/time stamps associated with usage, referring website, the search engine queries used to get to our Site.

Like most websites and other places on the Internet, our Site and Services may use cookies, web beacons, pixels and/or other technologies (collectively, cookies) to gather information. To read more about if or how we use cookies, please visit our Cookie Notice. You can manage your consent to the Personal Data we collect on our Site by visiting our Cookie Preferences Center, here.

Our Site is not intended to solicit, collect or process Personal Data from any individual under the age of 18. If you are a parent or guardian, please contact us if you believe information regarding a child has been collected by us through our Site.

4. How do we collect information from you and how can you opt-out of information collection?

A. Direct Collection

We collect much of the information listed above directly from you when you submit it to us through email, on our Site, or in other interactions you have with us when you:

Visit and/or shop at our Site;
Receive or send communications from or to us, including but not limited to email, phone calls, texts, and mail;
Use our Services our purchase our products as a Customer;
Register for, attend, and/or take part in our events where we are present;
Report a problem with our Site, Services, or products;
Communicate with us using any of the web forms on the Site;
Interact with the content we post on social media;
Apply to work with us, view, or share job postings;
Download or otherwise engage with our content or publications;
Submit an inquiry about our products, Services, or for support or information;
Participate in online or recorded meetings or events;
Engage with our customer service, sales team, or our other InfuSystem employees;
Work at a partner or supplier of ours and interact with InfuSystem in the course of doing business or contemplating doing business with us;
Finance or apply to finance medical devices as a business Customer; or
Invest in our securities.

The Personal Data that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your Personal Data (unless it is obvious from the context). We provide additional information about the purposes for which we use the Personal Data we collect directly from you, and indirectly from other sources, in Section 5.

i. Opting Out of Direct Collection

If you do not want to share your information, you can choose not to participate in a particular Service or activity.

To ensure that you will not receive recurring marketing or other information from us unless you choose to, we will provide you with simple instructions on each marketing email or subscription service from us for you to let us know that you have chosen to stop receiving such emails or subscriptions from us.

B. Indirect Collection – Cookies and Other Technology for Site Operation and Analytics

We and our third party service providers and partners such as our website hosting, management, and development service providers, our web form and Site content management providers, our Site security service providers, embedded content hosting providers (like Vimeo), and our marketing service providers may collect certain information automatically from your device when you visit our Site or use any Services we provide. In some states and countries, this information may be considered Personal Data under applicable data protection laws.

Specifically, the information automatically collected may include information like your IP address, device type, unique device identification numbers, browser-type, operating system, date and time of visit, referring website, the search engine queries used to get to our Site, broad geographic location (e.g. country or city-level location), and other technical information. It may also include information about how your device has interacted with our Site, including the pages accessed and links clicked. We also collect information related to your use of the Site, such as your Site usage information, transaction information including whether a Know Your Customer check was completed (if applicable), Site communication information and account activity information.

Collecting this information provides a better understanding of the visitors who come to our Site, where they come from, and what content on our Site is of interest to them. This information is used for our internal analytics purposes, to improve the quality and relevance of our Site and Services to our visitors, and to enhance the security and performance of our Site. We also use this information for detection and prevention of fraud, security threats or other illegal or suspicious behavior on our Site.

In addition to collecting Personal Data for the purposes outlined in this Privacy Notice, we may use Personal Data for other compatible purposes including, without limitation, anonymizing or de-identifying data. To the extent we anonymize or de-identify data, we will not attempt to re-identify such data.

As part of offering and providing customizable and personalized Services, many websites use cookies and other online tracking technologies to store and sometimes track information about you. We use these technologies to:

Provide you with personalized content based on your use of our Site;
Enable you to more easily use our Site by remembering and using contact information, purchasing information, and links or menus you have navigated through during a browsing session;
Evaluate, monitor and analyze the use of our Site and its traffic patterns to help improve our Site, products, inventory, third-party vendors, customer service, and Services;
Track activity on our Site, the products you are interested in, how often you visit our Site, etc.; and
Assist us with ad reporting functions such as to learn which ads are bringing users to our Site.

i. The types of technologies we use include:

Like most websites and other places on the Internet, our Site uses cookies, web beacons, pixels and/or other technologies (collectively, cookies) to gather information. To read more about if or how InfuSystem and others use cookies, please visit our Cookie Notice. You can manage your consent to the Personal Data we collect on our Site by visiting our Cookie Preferences Center, here.

ii. Data from third party sources.

Our Site may contain links to third party websites, embedded content that comes from or relates to third party websites and services (like embedded videos), and buttons from third party websites and services (such as social media sharing buttons). These third party sources can collect Personal Data from you when you interact with our Services, and from time to time, we may receive Personal Data about you from third party sources.

These third party sources may include, but are not limited to, suppliers, third party web analytics services, and social media platforms, such as YouTube, Facebook, X (formerly Twitter), LinkedIn, and Instagram. The types of information we may receive from these third parties includes information on your web activity about how you interact with our Site and their services, and aggregated analytics. We use this information to help improve our Site and Services, provide information and advertising, and to be able to analyze aggregate click statistics and trends. We may also obtain aggregated information, including analytical results, about your use of the Site for fraud detection, prevention and reporting purposes.

We provide additional information on third party cookies and your choices with respect to third party cookies on our Site and across the Internet in our Cookie Notice.

iii. Opting Out of Indirect Collection

You may disable browser cookies in your browser or set your browser to warn you when a cookie is being sent. You may lose some features or functionality when you disable cookies. Remember, also, that disabling cookies is browser specific. If you log on using Microsoft Edge, you must also disable cookies in Safari, Google Chrome, Firefox or other browsers if you use those browsers at a different time.

Google, Inc., utilizes the data collected to track and examine the use of our Site, to prepare reports on its activities and share them with other Google, Inc. services. Google, Inc. also uses the data collected to contextualize and personalize the ads of its own advertising network to serve ads to you based on your visit to our Site and other sites on the Internet. You can prevent the collection of the data generated by Google Analytics in relation to your use of our Site and the processing of this data by downloading and installing the browser plug-in, with more information regarding how you can opt out of Google Analytics data collection as instructed here: https://tools.google.com/dlpage/gaoptout. This link provides instructions for installing an opt-out cookie on your device. As a result, the collection of data by Google Analytics is prevented in future for the Site and for this browser as long as the opt-out cookie remains installed in your browser.

We provide additional information on how to prevent collection of data generated by Google Analytics and other services (like Facebook) in relation to your use of our Site in our Cookie Notice under the "Service-Specific Information on Cookies and Online Advertising Choices" heading (Section C.iv).

C. Indirect Collection – Social Networking

The Site permits you to use a third party social networking platform such as Facebook, Pinterest, Twitter, and Instagram. This includes use of social media plugins such as Facebook “Like”, X "Tweet", buttons, etc. When you use these social networking platforms and plugins, your username and password for the available service or collected from you on these services may be shared with us. When you use social networking platforms and plugins, you share your information with them and their privacy notice applies disclosure of such information. In addition, they may be able to collect information about you, including your activity on the Site or may notify your connections on the social networking platform about your use of InfuSystem's Site. Such services may allow your activity to be monitored across multiple websites for purposes of delivering more Targeted Advertising to you. Please note that their own privacy polices apply and we encourage you to read them. We may add new social networking plugins and buttons to our Site from time to time.

D. Indirect Collection – Targeted Advertising

We may also use cookies, web beacons, pixel tags, and similar tracking technology to serve and enable targeted advertising, interest-based advertising, and cross-context behavioral advertising (generally referred to as “Targeted Ads” and “Targeted Advertising”). For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice. We may use your Personal Data to facilitate the delivery of Targeted Ads.

i. Opting Out of Indirect Collection for Targeted Advertising

You may Opt-Out of Sale or Sharing of Personal Data for Targeted Advertising, as defined under applicable law, by submitting a request to us using the contact information in Section 15 of this Notice. You may also opt-out using our cookie consent tool in our Cookie Preferences Center, or by configuring your web browser (if compatible) to send an opt-out preference signal, such as Do-Not-Track or the Global Privacy Control. We provide additional information about browser opt-out preference signals in Section 13 and in our Cookie Notice.

We provide additional information on cookies and online advertising choices in our Cookie Notice under the "Industry Programs" heading.

E. Indirect Collection – Financing Medical Devices

When a business Customer applies to finance medical devices, we will ask a designated representative of the business to authorize us and our service provider to obtain credit information about the business. If you do not wish to share this information, you can choose not to engage or apply for our financing Services.

5. How do we use your Personal Data?

Our main goal in collecting Data is to provide you with the products and Services you have requested or purchased from us, including providing the Site as an easy to use and readily available forum for Site Visitors and Customers to access resources and information related to our products and Services, including Radiaderm, which can also be purchased through the Site.

A. InfuSystem also collects Personal Data for a number of purposes, including but not limited to the following:

i. Product and Services fulfillment.

1. 1. Complete, fulfill, manage, and communicate about purchases;
  2. Communicate about the Services, the Site, or any experience and feedback related to the Services, etc.;
  3. Set up and service a Customer account;
  4. Provide customer service and alert Site Visitors or Customers about features and functions in our Services;
  5. Financing medical devices, as requested by our business Customers; and
  6. Enhancing our products and Services.

ii. Internal operations.

1. 1. Improve the effectiveness of our Site, merchandise, inventory, third-party vendors, and customer service;
  2. Compile, analyze and do research on our users' behavior;
  3. Conduct research and analytics for our operations and Services;
  4. Make our products, Services, and Site better; and
  5. Perform other logistics and operation activities as needed.

iii. Payment Processing.

1. 1. Enable you to participate in online transactions;
  2. Processing Customer payments;
  3. Address inquiries or requests about purchases with us.

iv. Security, compliance, legal obligations and fraud prevention.

1. 1. Detect, investigate and prevent activities that may violate our policies or be illegal;
  2. Protect our assets (on and offline) and prevent fraudulent activities;
  3. Protect the security and integrity of our Services and our data;
  4. Comply with our legal duties; and
  5. Assist law enforcement and respond to legal/regulatory inquiries, if necessary.

v. Marketing, promotions and advertising.

1. 1. Notify you of other products and Services available from InfuSystem;
  2. Personalize online content so it applies to you and your interests;
  3. Provide you with advertising targeted on your interests;
  4. Spot customer items and shopping preferences;
  5. Track activity on our Site, the products you are interested in, how often you visit our sites, etc., and
  6. Oversee or conduct surveys.

B. Sometimes Data is Vital.

Where we need to collect and use Personal Data by law, or to complete a transaction or fulfill a contract with you or your company, and you fail to provide the Personal Data required, such deficiency is likely to prevent us from meeting certain obligations of our contract or relationship with you or your company.

C. Other People’s Privacy.

If you provide us with Personal Data relating to another person, you must inform them directly of the sharing of their information with InfuSystem, our identity, why their information is required, and how it will be used, and obtained their consent to use and disclose their information to InfuSystem. The other person must have given consent to you to share their information with us. THEY have to consent. Please know you cannot consent for them.

6. With whom do we share your Data?

We will not disclose any of your personally identifiable Data except when we have your permission or under special circumstances, such as when we believe in good faith that the law requires it, or under the circumstances described below. These are some of the ways that your Data may be disclosed:

A. Service Providers

We occasionally hire other companies to provide limited Services on our behalf, including packaging, delivering, or mailing; Site development and operation including managing form submissions; sending postal mail or email; facilitating medical device financing for business Customers, which may include Personal Data such as employee names on some applications and other documents; providing our Cookie Preferences Center to facilitate your privacy choices; tracking Site Visitor activity to better understand the visitors who come to our Site, where they come from, and what content on our Site is of interest to them; analyzing Site use; providing Site security; fraud detection; facilitating marketing by helping us understand what keywords, ads, and campaigns are most effective; personalizing content for Site Visitors; processing payments; providing investor information; and processing data. We will only provide those companies the information they need to deliver the service, and they are contractually prohibited from using that information for any other reason. We may share your Data with third party suppliers, manufacturers, manufacturer representatives, and referral sources. For example, we may disclose Personal Data to a supplier to support the delivery or shipment of products ordered, for order fulfillment, to secure pricing, and to address other issues concerning products.

B. Data in the Aggregate

We may disclose “blinded” aggregated data and user statistics to prospective partners, investors, and other third parties. Blinded data is data that does not identify an individual person.

C. Other

We also may disclose your Data in special cases. For example, when we believe that we must disclose Data to identify, contact or bring legal action against someone who may be violating our Terms of Use, or may be causing injury to or interference with our rights or property, other Site users or customers and their Data, or anyone else who may be harmed by such activities. InfuSystem and our service providers may disclose, access or monitor your Personal Data when we believe in good faith that the law requires it and for administrative and other purposes that we deem necessary to maintain, service and improve our products and Services and our information security. This includes third party partners and service providers we use to enable the detection of devices connected with fraud and other types of information security vulnerabilities, to prevent fraud, security threats and illegal or malicious behavior, and to enhance security on our Site and other pages on the internet.

As we continue to develop our business, we may buy or sell businesses or assets. In such transactions, confidential customer Data generally is one of the transferred business assets. In the event of a transaction involving the sale of some or all of InfuSystem’s businesses, customer and Site Visitor Data may be one of the transferred assets and may be disclosed in connection with negotiations relating to a proposed transaction. In such case, the transferred Data may become subject to a different privacy notice.

D. Third Parties

We allow certain third-party advertising companies to collect Personal Data through your use of the Site. These companies use tracking cookies to record your visits to the Site, the pages you view, the materials download, and the links you follow. They use this information for Targeted Advertising purposes, showing you ads that are more relevant to your interests. Additionally, we use this data to improve our Site and provide useful information to our sales and marketing teams.

7. How can I control my Personal Data?

We offer our customers choices for the collection, use and sharing of Personal Data. You may contact us using the contact information in Section 15 of this Notice if you wish to view, edit, or delete your Personal Data from our database, and we will use commercially reasonable efforts to accommodate your request.

If you believe that any inaccurate or inappropriate information has been obtained or provided to others through your use of this Site, you should contact a representative of InfuSystem using the contact information in Section 15 of this Notice.

You can manage your consent options about the Personal Data collected on our Site by visiting our Cookie Preferences Center, here.

8. How does InfuSystem protect financial-related information?

Keeping your personal financial information private is very important to us. As a matter of policy and long-time business practice, we do not sell financial Data provided by our Customers. Any user statistics that we may provide to prospective partners or suppliers regarding financial matters are provided in the aggregate only and do not include any personally identifiable Data about any individual user. We use a third party payment processor to process your payments and do we do not collect or retain your credit card or bank account information. Our payment processor uses your credit card or bank account information only for the transaction and does not store it.

9. What security precautions are in place to protect against the loss, misuse, or alteration of your information?

Any InfuSystem Customer account or profile information is password-protected so you have access to this Personal Data. We use encryption technology for passwords, and account information. Remember to sign out of your InfuSystem Customer Account and close your browser window when you have finished your work. This is to ensure that others cannot access your account by using your computer when you are away from it.

Because information sent through the Internet travels from computer to computer throughout the world, when you give us information, that information may be sent electronically to servers outside of the country where you originally entered the information. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. Our Site uses Transport Layer Security (TLS) which uses encryption to protect transfers of Personal Data. You will know that a webpage within our Site uses TLS when you see the padlock symbol 🔒 or "https" in the URL.

Information that you disclose by use of the publicly accessible portions of the Site (as with any site that is non-secure) potentially could be collected and used by others. This may result in unsolicited messages from third parties or use of such information by third parties for their own purposes, legal or illegal. As a result, while we strive to protect your Personal Data, we cannot ensure or warrant the security of any information you transmit to us or from our Services, and you do so at your own risk. Once we receive your transmission, we use commercially reasonable efforts to ensure its security on our systems.

10. How long do we keep your Personal Data?

The length of time we retain Personal Data will be determined based upon criteria such as: the length of time your Personal Data remains relevant; the length of time it is reasonable to keep records to demonstrate that we have fulfilled our duties and obligations; any limitation periods within which claims might be made; any retention periods prescribed by law or recommended by regulators; or the type of contract we have with you, the existence of your consent, and our legitimate interest or business need in keeping such information (for example, to provide you with a service you have requested or to comply with applicable legal, tax, compliance, or accounting requirements).

When we have no ongoing legitimate business need to process your Personal Data in accordance with our data retention policies, we will either delete or anonymize it or, if this is not possible (for example, because your Personal Data has been stored in backup archives), then we will securely store your Personal Data and isolate it from any further processing until deletion is possible.

11. What else should you know about your privacy?

Please keep in mind that whenever you voluntarily disclose information online, that information is accessible to others. Ultimately, you are solely responsible for maintaining the secrecy of your passwords and/or any account information. Please be careful and responsible whenever you are online.

When you or we end your Customer relationship with us, we will treat the Data we have about you as if you were still our Customer.

12. International data transfers.

Your Personal Data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country and, in some cases, may not be as protective. Specifically, our Site servers are located in USA, and our third party service providers and partners operate around the world. This means that when we collect your Personal Data we may process it in any of these countries.

However, we have taken appropriate safeguards to require that your Personal Data will remain protected in accordance with this Privacy Notice. These include implementing the European Commission's or the UK Standard Contractual Clauses where appropriate, which can be provided on request. We have implemented similar appropriate safeguards with our third party service providers and partners and further details can also be provided upon request.

13. Do Not Track Codes or Global Privacy Control.

Do Not Track (DNT) is a privacy preference that users can set in their web browsers. DNT is a simple way for users to inform web services that have been integrated across the Internet (such as buttons, widgets, and other embedded features or content) that they do not want certain information about their webpage visits collected and shared across websites. The DNT browser setting is only supported by recent versions of major browsers. The Global Privacy Control (GPC) signal is a browser setting that allows consumers to opt-out of targeted advertisements and/or the sale of Personal Data through a pre-determined signal. Our Site also adheres to GPC codes and responds to universal opt-out signals that a Site Visitor has enabled on their browser.

When you turn on GPC, we treat that code as a request to Opt-Out of the Sale or Sharing for Targeted Advertising. When you turn on DNT or GPC in your browser, we stop collecting the Data that allows us to tailor suggestions based on your recent visits to websites that we interact with. We also stop collecting the Data that allows us tailor ads on your visits to our ad partners’ websites. Specifically, we stop collecting the unique browser cookie that links your browser to visits to these websites for tailoring suggestions or ads. DNT and GPC also intercept any third party cookies on our Site that collect Data for Targeted Advertising purposes.

Web browsers that enable DNT and/or GPC provide instructions on how to enable DNT and/or GPC. Search for instructions in their help section. We provide additional information on enabling GPC in the "Browser Settings"section of our Cookie Notice.

14. Your Privacy Rights as a Resident of a U.S. State with Applicable Privacy Laws

A. U.S. States with Applicable Privacy Laws.

Residents of certain U.S. states may have rights under privacy laws in effect in their state, such as under the California Consumer Privacy Act (CCPA), Virginia Consumer Data Privacy Act, Colorado Privacy Act, Utah Consumer Privacy Act, Connecticut Data Privacy Act, Montana's Consumer Data Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, and any other U.S. privacy law and implementing regulations (collectively, State Privacy Laws).

In the future, you may have rights under state privacy laws that become effective. Please check back for updates as we may update this Privacy Notice to address those laws. When these new laws become effective, we will adhere to the privacy rights below to the extent they apply to the specific law and will otherwise work to update our practices.

California Civil Code Section 1798.83 permits our visitors who are California residents to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please send an email to or write us using the contact information in Section 15 of this Notice. Make sure to state that you are a California Resident.

Nevada Rev. Stat. § 603A.340, permits customers in Nevada to opt-out of the sale of certain kinds of Personal Data. A sale under Nevada law is the transfer of this Personal Data to third parties for monetary consideration so these third parties can then re-sell or license the sold Data. We do not sell your Personal Data to third parties as defined in Nevada law.

B. Information for Employees of our Business Customers.

The U.S. Privacy Laws apply to “consumers” in the US, which generally means natural persons acting in their individual, household, or family capacities. Some state laws do not apply to Personal Data collected in the business to business context (B2B) or in the Human Resources (HR) context. We may not process privacy requests where these exceptions apply.

If you interact with InfuSystem as an employee of an InfuSystem business Customer, your Data included in your employer's Customer account is subject to your organization's policies, and not InfuSystem's. You should direct your privacy inquiries, including any requests to exercise your Data rights, to your organization's administrator.

Generally, we collect, retain, and use your Personal Data for our business purposes and limited, if any, commercial purposes. What that means is we typically collect Personal Data from you when you are acting as a business representative of a Customer. Business purposes are purposes which are generally not tied to an opt-out right under US Privacy Laws, as they do not implicate a sale, sharing or Targeted Advertising of a consumer's Data as defined under those laws.

Commercial purposes, on the other hand, are generally associated with an opt-out right for consumers under US Privacy Laws, particularly where they involve sales, sharing, or Targeted Advertising of a consumer's Personal Data as defined by those laws. An example is where a third-party business collects a consumer's Personal Data via third-party cookies, and when the website operator or that third-party business uses that Data for certain advertising purposes. You can direct inquiries regarding other interactions with us, such as your visits to the Site, directly to InfuSystem using the contact information in Section 15 of this Notice.

C. Our Collection, Use, and Disclosure of Personal Data.

As noted above in Section 2, we collect Data that identifies, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular consumer (Personal Data or Data, also known as 'personal information').

Personal Data, however, does not include:

Publicly available information.
De-identified or aggregated consumer information.
Information excluded from most State Privacy Laws' scope, such as:
1. health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data;
2. personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994;
3. data collected in the business-to-business (B2B) context (except for California consumers, as defined under the California Consumer Privacy Act); and
4. data collected in the human resources (HR) context.

Various State Privacy Laws require us to provide you with more detailed descriptions of the Personal Data we collect. Below is a table that details our Data practices over the last twelve (12) months.

Identifiers (such as name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or similar identifiers)
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We collect identifiers such as those listed above. We typically do not collect social security numbers, driver’s license numbers, and passport numbers from Site Visitors or consumer Customers.	Directly from individuals submitting Data to us; certain Data is automatically collected from Site Visitors; business report providers; advertising and marketing partners and list brokers	Performing Services and fulfilling orders; maintaining account information; providing customer service; verifying customer information; processing payments; providing advertising and marketing services; providing analytics; programmatic advertising; Targeted Advertising; conversion tracking; auditing related to customer interactions and transactions; security detection and enhancement; enhancing products and Services	Marketing and advertising service providers and vendors; security services; payment and chargeback processors; suppliers; mailing and shipping services; third-party advertising companies; advertising analytics providers; government entities and law enforcement, if necessary
Financial, medical, or health information (such as insurance policy number, bank account number, credit card number, debit card number, or other financial information, medical information, or health insurance information)
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We collect certain financial information for purchases and financing. We do not solicit or intentionally collect medical or health information from consumer Customers, however it may be revealed to us through our interactions with you including by the nature of products you purchase.	Directly from individuals submitting Data to us; business report providers;	Performing Services and fulfilling orders; accounting purposes	Technology service providers such as payment and charge back processors, financial reporting companies, or address verification providers; government entities and law enforcement, if necessary
Characteristics of protected classifications under California or federal law (such as such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, genetic information, disability, citizenship status, and military and veteran status)
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We do not collect characteristics of protected classifications from consumer Customers or site Visitors.	N/A	N/A	N/A
Commercial information (such as transaction history, products or services purchased, obtained, or considered, records of personal property, or other purchasing or consuming histories or tendencies)
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We collect commercial information relating to Radiaderm inquiries and purchases	Directly from individuals submitting Data engaging in orders; InfuSystem internal processes; advertising and marketing partners.	Performing Services and fulfilling orders; maintaining account information; providing customer service; verifying customer information; providing advertising and marketing services; providing analytics; auditing related to customer interactions and transactions; security detection and enhancement; enhancing products and Services	Supplier sales and marketing representatives, marketing and advertising service providers and vendors; government entities and law enforcement, if necessary
Biometric information (physiological, biological or behavioral characteristics, including images, voice recordings, keystroke patterns)
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
InfuSystem allows product inquires using voice requests; telephone calls to the InfuSystem 800 number may be recorded	Directly from individuals submitting Data to us; technology service providers	Providing customer service; training purposes	Technology service providers; government entities and law enforcement, if necessary
Internet or other electronic network activity information (such as browsing history, search history, and information regarding an interaction with a website, application, or advertisement.
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We collect electronic identifiers such as IP address; cookies; Site browsing and interaction activity such as how often you visit the site and which pages you view, materials you download, videos you interact with, and links you follow; browsing and search history such as the links, ads, or search queries that led you to the Site; advertisement interaction information such as whether you made a purchase after interacting with an ad; and other device or browser identifiers	Web browsers and devices; advertising and marketing partners; analytics providers; social media partners; technology vendors	Performing Services and fulfilling orders; maintaining account information; providing customer service; verifying customer information; providing advertising and marketing services; analytics; conversion tracking; Targeted Advertising; auditing related to customer interactions and transactions; security detection and enhancement; enhancing products and Services	Marketing and advertising service providers and vendors; security services; suppliers; third-party advertising companies; advertising analytics providers; government entities and law enforcement, if necessary
Geolocation
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We do not collect geolocation, and we do not knowingly allow our service providers, partners, or third parties to collect Geolocation Data.	N/A	N/A	Not Disclosed.
Audio, electronic, visual, thermal, olfactory, or similar information
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We allow product inquires using voice requests; telephone calls to the InfuSystem 800 number may be recorded;	Directly from individuals submitting Data to us, technology vendors	Performing Services; providing customer service; providing advertising and marketing services; analytics; auditing related to customer interactions and transactions; security detection and enhancement; enhancing products and Services	Marketing and advertising service providers and vendors; security services; government entities and law enforcement, if necessary
Professional and employment-related information
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
Not collected from consumer Customers or Site Visitors.	N/A	N/A	N/A
Educational information
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
We do not collect educational Data from consumer Customers or site Visitors.	N/A	N/A	N/A
Inferences drawn from any information identified above (such as to create a profile about preferences, characteristics, rends, predispositions, behavior, or attitudes)
Information Collected	Categories of Sources	Business or commercial purpose for which it will be used	Categories of third parties with whom Personal Data is shared
InfuSystem collects preferences and derives behavior and trends to create a Customer profile; however, we do not create records of any medical or health information that could be revealed by your commercial interactions with us, such as purchases or product inquiries, and such information is not included or used to create a Customer profile.	Web browsers and devices; advertising and marketing partners; social media partners; technology vendors; analytics providers	Performing Services to improve the customer experience; maintaining account information; providing customer service; verifying customer information; Targeted Advertising; auditing related customer and employee interactions and transactions; security detection and enhancement; product and service enhancement	Marketing and advertising service providers and vendors; security services; suppliers; government entities and law enforcement, if necessary

D. Privacy Rights and Choices.

Certain consumers may have various rights under State Privacy Laws and are entitled to the various disclosures, which may include:

i. Right to Know and Data Portability

If you are protected by applicable law, you have the right to request access and disclosure of certain information about our collection and use of your Personal Data over the past twelve (12) months as well as to have a copy of that Data (collectively referred to here as the right to know). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will disclose the following information to you:

1. The categories of Personal Data we collected about you.
2. The categories of sources for the Personal Data we collected about you.
3. Our business or commercial purpose for collecting the Personal Data.
4. The categories of third parties with whom we share the Personal Data.
5. If we disclosed your Personal Data for a business purpose, in separate lists disclosing:
  1. sales, identifying the Data categories each category of recipient purchased; and
  2. disclosures for a business purpose, identifying the Data categories each category of recipient obtained.
6. The specific pieces of Personal Data we collected about you.
7. A copy (if requested) of the Personal Data collected and maintained in a commonly used electronic format.

ii. Right to Delete and Correct

If you are protected by applicable law, you have the right to request that we delete or correct the Personal Data collected or maintained about you, subject to certain exceptions (collectively referred to here as the right to delete). Once we receive a request and confirm the identity of the requestor (see Exercising Your Rights to Know or Delete), we will review the request to see if an exception allowing us to retain the Data applies. We may deny a deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the Data, provide a good or Service requested, take actions reasonably anticipated within the context of our ongoing business relationship with the consumer, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with any consumer.
2. Detect security incidents; protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with applicable state law, including the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if informed consent was previously provided.
7. Comply with a legal obligation.

Upon receipt of your verifiable request, we will delete or de-identify and/or correct Personal Data not subject to one of these exceptions from our records and will direct our service providers to take similar action.

iii. Exercising Your Rights to Know or Delete

To exercise the rights to know or delete described above, please submit a request by either:

1. Calling us at 1-800-962-9656;
2. Emailing us at This email address is being protected from spambots. You need JavaScript enabled to view it.;
3. Submitting a request through the TLS encrypted web form available at https://infusystem.com/data-subject-access-request-form.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your Personal Data. You may only submit a request to know twice within a twelve (12) month period. Your request to know or delete must:

1. 1. Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Data or an authorized representative; and
  2. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Verifying Requests. We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. To help protect your privacy and maintain security, we will take steps to verify your identity before complying with your requests. For example, for requests to know and delete, we will attempt to match your identity to the Data stored in our files. If we cannot, we will ask you to provide additional identifying information. We will use Data you provide in your request for the purpose of verifying your identity or authority to make the request.

Authorized Agents. You may designate an authorized agent to make a request on your behalf. To be able to act, authorized agents must submit proof that they are authorized to act on your behalf. We may deny requests from claimed authorized agents who do not submit adequate proof that they are authorized to act on your behalf. We do not process privacy requests sent to us using third party services that have not complied with our verification process. This is because such services often request that we click on hyperlinks which we will not do for data security reasons. These services are also susceptible to spoofing and other phishing attacks. One of our highest priorities is to treat your Data safely and securely. If you live in a state that permits you to make a privacy request using a third party agent, please have them contact us using the information above and we will take steps to identify them and ensure that they are your agent.

iv. Responses to Requests.

We will try to respond to your request within 45 days of when we receive it. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding our receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Data that is readily usable and should allow you to transmit the Data from one entity to another without hindrance, specifically by electronic mail communication.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee; we will tell you why we made that decision and provide you with a cost estimate before completing your request.

v. Do Not Sell or Share My Personal Data - Opt-Out Rights

InfuSystem Does Not Outright “Sell” Personal Data.

We do not sell Personal Data of consumers in the traditional sense of the word "sell." InfuSystem does, however, share (see below) Data in a way that is considered a "sale" under certain State Privacy Laws.

InfuSystem Does Engage in the “Sharing” of Personal Data for Targeted Advertising

InfuSystem does utilize third parties to conduct cross-contextual behavioral advertising (Targeted Advertising) on our behalf. Your State Privacy Law may provide you with the right to Opt-Out of the Sale or Sharing of your Personal Data, including any for Targeted Advertising. The CCPA, for instance, defines “sharing” to include certain sharing of your Personal Data for purposes of serving you advertisements that are relevant to you based on your activity across our Services and other sites. Like many companies, we use services to help deliver interest-based ads to you, and our Site may use cookies or similar technologies which allow advertising companies to collect your Personal Data for our or their benefit. On our Site, we provide you with the right to Opt-Out of the Sale or Sharing of your Personal Data via our Cookie Preferences Center, which provides you the notice and the opportunity to opt-out of our use of those cookies which would follow your use and behavior across our Site and the Internet.

To Opt-Out of the Sale or Sharing (or to change your mind after opting-out), you may limit or adjust your Data collection preferences by accessing our Cookie Preferences Center, here.

Please note certain cookies and other technologies are used to allow our Site to securely operate, provide you a better site navigation experience, and facilitate purchases you may choose to make from InfuSystem. Those essential, functional, and analytic technologies provide you with a more efficient and functional experience, and help us to understand how you navigate and use our Site. When you refuse those supporting technologies, it will affect how our Site functions and whether our Site recognizes you as a prior user or not.

Also, some transfers of your Personal Data may not be considered “sharing,” and certain exemptions may apply under State Privacy Law. Your choices do not affect other disclosures of your Personal Data, as outlined in this Privacy Notice, such as when we process payments, provide services to you, or prevent fraud.

vi. Right to Opt-Out of Automated Decision-Making and Profiling.

Certain consumers have the right to opt-out of automated decision-making, including profiling, in furtherance of decisions that produce legal or similarly significant effects on the consumer. InfuSystem does not use or process Personal Data that would subject a person to a decision based solely on automated processing, including profiling, that produces legal effects. Automated Decision-Making currently does not take place on our Site or as part of our Services.

vii. Right to Restriction.

Certain State Privacy Laws provide their state residents the right to request to limit the use and disclosure of their sensitive Personal Data. Sensitive Data includes information like your social security number, sexual orientation, religious beliefs, private health matters, union membership and other such Data depending on the applicable privacy law.

InfuSystem does not intentionally or directly collect "sensitive" Personal Data from consumers. However, your purchases or interactions with us may reveal medical information or health diagnoses. For example, purchasing Radiaderm—a skin care product for radiation patients—may reveal that you or another person has received or is planning to receive radiation therapy. This category of sensitive Personal Data collected by us is collected or processed to provide Services requested by the consumer Customer, not for the purpose of inferring characteristics about the consumer and is thus not subject to requests to limit under applicable law. We may nonetheless ask for consent or provide notice and choice about how the Data is processed depending on the relevant context.

viii. Right to Non-Discrimination and No Retaliation.

Residents of certain states have the right not to receive discriminatory treatment by us for opting out of sharing your Personal Data or exercising your privacy rights conferred by applicable State Privacy Laws. Unless permitted by applicable State Privacy Laws, we will not:

- Deny you goods or Services;
- Charge you different prices or rates for goods or Services, including through granting discounts or other benefits, or imposing penalties;
- Provide you a different level or quality of goods or Services;
- Suggest that you may receive a different price or rate for goods or Services or a different level or quality of goods or Services.

However, we may offer you certain financial incentives permitted by applicable privacy laws that can result in different prices, rates, or quality levels. Any legally permitted financial incentive we offer will reasonably relate to your Personal Data's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

ix. Right to Appeal a Privacy Rights Request Decision.

Residents of certain states have the right appeal our denial or limitation of your privacy rights request. If you wish to appeal a denial or limitation of your privacy rights request, you may email us at This email address is being protected from spambots. You need JavaScript enabled to view it..

15. Submit a Request - Who do you contact with questions or concerns about our Privacy Notice or to exercise your privacy rights?

If you need further assistance, please send an e-mail with your questions or comments to This email address is being protected from spambots. You need JavaScript enabled to view it., call our toll free number at 1-800-962-9656, submit a request using our TLS encrypted web form available here or write us at:

InfuSystem Inc.
Attn: Privacy
3851 W. Hamlin Rd.
Rochester Hills, MI 48309

16. InfuSystem Cookie Notice.

A. The Cookie Notice

InfuSystem respects the privacy of our Site Visitors. This Cookie Notice is part of our Privacy Notice and provides you with detailed information about the cookies and other technologies we use and our purposes for using them.

Like most other sites, our Site uses cookies in combination with other code such as pixels, scripts, tags, and beacons (collectively referred to herein as cookies) to distinguish you from other users of our Site. You can find out more about the different types of cookies used on our Site below. You should be aware that refusing certain types of cookies may impact your experience of our Site. You can change your preferences at any time by visiting our Cookie Preferences Center, here.

B. What is a Cookie?

We use the term "cookies" to refer to a variety of technologies including "web beacons" and "log files" in this Cookie Notice and throughout the InfuSystem Privacy Notice. Just to provide clarity, here is some specific information about these technologies and how we use them:

Cookies. A cookie is a small file of letters and numbers a website asks your browser to store on your device hard drive. Cookies enable us to identify your browser as a unique user. Cookies may involve transmission of information from us to you and from you to us. Cookies set by InfuSystem are called “first-party cookies” (e.g. cookies placed by https://infusystem.com). We also use third-party cookies, which are cookies set by a domain other than the current site you are visiting. You can use www.whoishostingthis.com to find out additional information about the cookies running on a particular site.

Web Beacons. We also employ a software technology called a clear GIF (Graphics Interchange Format), also known as a pixel tag or Web beacon. A clear GIF is a line of code that we place on our Site or in e-mails which allows us to analyze our advertising and the general usage patterns of visitors to our Site. These help us better manage content on our Site by informing us what content or promotions are effective.

Log Files. Like most standard website servers, we use log files. Log files track Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. We utilize this information to analyze trends, administer the Site, prevent fraud, track Site navigation in the aggregate, and gather broad demographic information for aggregate use.

C. Your Choices Regarding Cookies

i. Cookie Preferences Selection

You have the option of changing Cookie Preferences when you first visit InfuSystem's Site through our Cookie Preferences Center, found here, or by clicking on the Cookie Preferences Center link at the bottom of this Notice. When you visit our Site, strictly necessary cookies will be placed on your device so our Site is able to function. You will be asked to consent or agree to other cookies via the Cookie Preference Center. You can give consent by clicking on the appropriate button, or by setting your preferences when prompted. Session cookie files may load but our Site blocks usage until you opt-in. InfuSystem does not assume consent and does not use cookies other than strictly necessary cookies if consent is not expressly given.

ii. Browser Settings

Some browsers allow a "do not track" (DNT) setting to request that a web application disable its tracking of a user. When you choose to turn on the DNT setting in your browser, your browser will send a signal to websites, analytics companies, ad networks, and other web services to stop tracking your activity.

Internet browser cookie settings are usually found in the “settings,” “preferences,” or “options” menu of your browser. In order to understand more about these settings, the following links may be helpful. You can also use the “Help” option in your browser for more details.

Our Site recognizes DNT and Global Privacy Control (GPC) opt-out preference signals. We also offer Site Visitors choices to manage their cookie preferences as described in our Cookie Preferences Center, here.

You can prevent the collection of the data generated by Google Analytics in relation to your use of our Site and the processing of this data by downloading and installing the browser plug-in, with more information regarding how you can opt out of Google Analytics data collection as instructed here: https://tools.google.com/dlpage/gaoptout. This link provides instructions for installing an opt-out cookie on your device. As a result, the collection of data by Google Analytics is prevented in future for the Site and for this browser as long as the opt-out cookie remains installed in your browser.

iii. Industry Programs

You can also take advantage of industry-sponsored programs allowing you to better manage how some companies advertise to you, including but not limited to the following resources:

- The Global Privacy Control: https://globalprivacycontrol.org
- The Network Advertising Initiative’s Opt-Out page: https://thenai.org/opt-out
- The Digital Advertising Alliance’s WebChoices tool: https://optout.aboutads.info

iv. Service-Specific Information on Cookies and Online Advertising Choices

- Adobe Marketing Cloud: If you would like more information on how to remove yourself from the tracking and reporting functions performed by Adobe Marketing Cloud, please visit the Opt-Out page at https://www.adobe.com/privacy/marketing-cloud.html.
- Google and Google Analytics: For information on how Google Analytics uses data, please visit “How Google uses information from sites or apps that use our services,” located at https://policies.google.com/technologies/partner-sites. You may view Google's privacy policy here: https://policies.google.com/privacy?hl=en, More information is located here: https://www.google.com/policies/privacy/partners/(including information regarding how to control how information is shared through your Ads Settings) and here: https://support.google.com/analytics/answer/6004245?hl=en.
- Facebook: Facebook provides information regarding the information it collects and how it is used in relation to advertising here: https://www.facebook.com/policy.php. You may opt-out of Facebook's collection and sharing of information here: https://www.facebook.com/settings?tab=ads.
- You may also opt-out of information sharing from other third party websites to using the information provided in their privacy policies.

D. How Long Do Cookies Last?

Except for Strictly Necessary cookies, the cookies we run on our Site will expire as follows:

Session cookies: They allow site operators to follow a user’s actions through a browser session. A browser session begins when a user opens the browser window and ends when the browser window is closed. Session cookies are temporary. Once the browser is closed, all session cookies are deleted. We may use a session cookie, for example, to remember that you have already navigated through a particular menu, or that you have entered in age information for a portion of a site that is restricted by age.
Persistent cookies: These remain on a visitor’s device for a time period set by the cookie. They are activated each time a user visits the site that created that cookie. We may also use "analytics cookies" that allow web analytics services to recognize your browser or device and, for example, identify whether you have visited our Site before, what you have previously viewed or clicked on, and how you found us. This information is provided anonymously for statistical analysis only. Analytics cookies are usually persistent cookies.

E. What Cookies Does InfuSystem Use & Why?

The cookies used on our Site are categorized as follows:

Strictly Necessary
Functional
Analytics
Targeting

i. Strictly Necessary Cookies

These cookies are necessary for the Site to function and cannot be switched off in our systems. They allow you to move around the Site and use essential features. Without these cookies, we cannot provide the requested Services.

We use Strictly Necessary Cookies to:

- Distinguish humans from bots;
- To store your cookie consent preference for the Site;
- To present Site content;
- Identify and/or authenticate a user as being logged into the Site;
- Ensure a user connects to the right service if a change is made; and
- Security purposes.

You can set your browser to block or alert you about these cookies. However, if they are blocked, InfuSystem cannot guarantee performance of the Site or security during a visit.

ii. Functional Cookies

Functional cookies are used to enable enhanced functionality and personalization. Such cookies may be set by third-party providers whose services are added to our Site, such as embedded videos on our site. Although important, these cookies are not required for your use of the Site. Without these cookies, certain functionality may become unavailable.

iii. Analytics Cookies

Analytics cookies collect information about how you use our Site including pages visited and any errors experienced during your visit. Analytics cookies typically do not collect information that could specifically identify you and are only used to improve the Site, understand the interests of our users, and measure the effectiveness of content.

Analytics cookies are used for:

- Web analytics: to provide anonymous statistics on how the Site is used; and
- Error management: Improves the Site by measuring errors.

If you do not allow these cookies, we will not know when you have visited our Site nor be able to monitor their performance. Some analytics cookies are managed by third parties, such as Google Analytics.

iv. Targeting Cookies

Targeting cookies are used to help attract customers with targeted ads and can be shared with other advertisers so the performance of the ads themselves can be monitored and measured. Targeting cookies can be used to build user profiles and for offering our customers the best suited ads for their needs. These cookies follow users across websites (for example, from Amazon to here, and back to Amazon) to show ads in banners or other sites online even after you have left this Site and moved to another.

- Social media cookies and tags are used by us and social media platforms to enable users of the platforms to share content across our Site and theirs. We also work with social media platforms to deliver ads to you when you use these platforms. This targeting is done by the platform under its own terms of use.
- Advertising cookies and tags are used by us, our service providers, and third parties to personalize the ads delivered to you on our Site and on other sites. These cookies collect data about online activity and allow ads to be displayed that may be of relevant interest to the user. These cookies also record which ads a user sees and whether a user engaged with the ad. These cookies help make sure that the ads you see are valuable to you and not repetitive.

If you do not add these cookies, then some of these services may not function properly.

Note: InfuSystem does not request, require, or knowingly allow such third parties to use cookies for purposes other than those identified above.

Applicable State Privacy Laws may provide you with the right to Opt-Out of the Sale or Sharing of your Personal Data, including any for Targeted Advertising. The CCPA, for instance, defines “sharing” to include certain sharing of your Personal Data for purposes of serving you advertisements relevant to a user based on their activity across our Services and other sites. As noted above, we use cookies to help deliver interest-based ads to you, and our Site may them or similar technologies to allow advertising partners to collect your Personal Data for our or their benefit. On our Site, we provide you with the right to Opt-Out of the Sale or Sharing of your Personal Data via our Cookie Preferences Center, which provides you the notice and the opportunity to opt-out of our use of those cookies which would follow your use and behavior across our Site and the internet.

To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you can visit the following resources at:

http://www.networkadvertising.org/choices

http://www.aboutads.info/choices

http://www.youronlinechoices.com

These tools will only opt you out from receiving interest-based ads on that specific browser or device, but you may still receive interest-based ads on your other devices. You must perform the opt-out on each browser or device you use. These tools will not opt you out of non-Targeted Advertising.

To Opt-Out of the Sale or Sharing of Personal Data in relation to your use of our Site (or to change your mind after opting-out), you may limit or adjust your Data collection preferences by accessing our Cookie Preferences Center, here.