Click to download a copy of Union Health's Website Privacy Statement.

Last Updated: November 2026

Union Health System, Inc. and its affiliated entities (collectively, “Union Health”, “we”, “us”, or “our”) are committed to protecting the privacy and security of information received or collected from you and your representatives (“you” or “your”). In this Website Privacy Statement, we explain how we collect, use, share, and protect information when you access or use our website, mobile applications, and other digital services and electronic communications (collectively, the “Site” or “Sites”).

This Website Privacy Statement applies to all Sites that present or link to it. Patient portals, employment application systems, payment services, mobile applications, and other digital services may provide separate privacy statements or notices explaining their specific practices. A service-specific privacy statement or notice governs the practices specifically addressed by that statement or notice.  

By accessing or using any Site(s), you acknowledge that you have received this Website Privacy Statement and understand that information collected through the Site will be handled as described in this statement and as otherwise required by applicable law. Where consent, authorization, or another form of permission is required by law, we will obtain it separately as required.

Links to websites, applications, or platforms operated by independent third parties do not make their privacy practices subject to this statement. We are not responsible for the privacy policies of independent third parties that operate any other website, application, or platform, even if they are linked from our Site. We recommend you review any third party’s privacy policies and Cookie notices, if any, before using any third-party website, application, or platform.

HIPAA and Protected Health Information

This Website Privacy Statement does not replace Union Health’s Notice of Privacy Practices, which explains how we collect, use, and disclose “protected health information” (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”) and other applicable laws. If information collected through the Site is PHI, we use and disclose it only as permitted or required by HIPAA and other applicable laws, as described in our Notice of Privacy Practices. We encourage you to read this Website Privacy Notice together with our Notice of Privacy Practices. If this Website Privacy Statement conflicts with our Notice of Privacy Practices regarding PHI, the Notice of Privacy Practices controls.

Information We Collect

We may collect information you provide, and information collected automatically through your access and/or use of the Site, as described below. Whether information is personal information or PHI depends on the information, its context, and applicable law.

As used in this Website Privacy Statement, “personal information” means any information that may be used, either alone or in combination with other information, to personally identify an individual as defined by applicable law. Personal information may include PHI, IP addresses, device identifiers, and information associated with a code or other identifier. The categories of information we collect depends on the service you use and may include the following:

Information You Provide to Us

We may collect information that you provide directly to us, such as when you contact us, submit information through an online form, register for an account, submit a job application, respond to a survey, or otherwise communicate with us. The categories of information we may collect will depend on the service being used and may include:

• Contact information and identifiers, such as your name, address, telephone number, email address, date of birth;
• Usernames and passwords;
• Payment information, such as your credit card number;
• Information related to a healthcare request, such as information about your diagnosis, previous treatments, general health, and health insurance;
• Survey responses, reviews, and other user content stored or entered into forms found the Site; and
• Any other information you provide to us while using the Site.

Information Collected Automatically

When you visit the Site, certain information may be collected automatically, including:

• IP address;
• Browser and device type;
• Operating system;
• Device identifiers;
• Approximate location derived from an IP address;
• Referring and exit pages;
• Date and time of access;
• Pages viewed;
• Links or features selected;
• Search terms;
• Time spent on the Site; and
• Website performance and diagnostic information.

Cookies, Analytics, and Other Tracking Technologies

We and our third-party service providers may use cookies, pixels, tags, web beacons, embedded scripts, local storage, and similar technologies (collectively, “tracking technologies”) when you interact with the Site. These technologies may be used to:

• Provide essential Site functionality;
• Maintain the security and integrity of the Site;
• Remember your settings and preferences;
• Understand how visitors use and navigate the Site;
• Measure and improve Site performance;
• Identify and troubleshoot technical issues; and
• Evaluate and improve the effectiveness and usability of our digital services.

Analytics. We may use analytics tools, including tools provided by third-party service providers, to help us understand how visitors interact with the Site. These tools may collect information as described above in the provision called “Information Collected Automatically”.

Health Care Context and PHI. Because we are a health care organization, information collected through tracking technologies may, depending on the circumstances, be PHI or other sensitive information. We evaluate the use of tracking technologies based on the information collected or disclosed, where and how the technology is used, its purpose, applicable privacy requirements, and the role of any third-party provider. We do not intend to use tracking technologies in a manner that impermissibly discloses PHI. When PHI is involved, we apply HIPAA and other applicable privacy requirements, including appropriate contractual, privacy, and security safeguards where required.

Your Choices. Some of the technologies described in this Website Privacy Statement are necessary for the Site to function properly. Where applicable, you may manage nonessential cookies and similar technologies through our cookie preference tools, your browser, or device settings. Disabling certain technologies may affect the availability or functionality of some Site features. Browser-based choices may apply only to the browser or device on which they are selected.  

Some browsers offer privacy signals, including Global Privacy Control (“GPC”) and Do Not Track (“DNT”). We honor legally recognized opt-out preference signals, including GPC, to the extent required by applicable law. DNT is different from GPC, and the Site may not respond to DNT signals.

How We Use Your Information

Subject to applicable law, we may collect, retain, and use your personal information for the following purposes:

• To provide you with the services and information you request;
• To operate and improve the Site;
• To respond to an inquiry from you;
• To create aggregated or de-identified information in accordance with applicable law;
• To comply with applicable laws, regulations, or legal process;
• To respond to regulatory, law enforcement, or other governmental requests only as permitted or required by applicable law;
• To enforce the Website Terms of Use or other terms and conditions applicable to the Site and/or to protect the rights, property, or safety of us and other users of the Site; and
• To contact you using information you provide through the Site, subject to applicable communication preferences and any consent or authorization required by law.
• We may use non-personal information, including information that has been aggregated, de-identified, or otherwise maintained in a form that does not identify you, as permitted by applicable law.

When We Share Your Personal Information

Subject to applicable law, we may share your personal information in the following circumstances:

• Third-Party Service Providers. We may disclose personal information to vendors, contractors, and other service providers that perform services on our behalf, such as website hosting, information technology, security, analytics, payment processing, communications, and other operational support.
• Legal, Safety, and Security Disclosures. We may disclose information to comply with law, valid legal process, or a governmental request; enforce applicable Site terms; address fraud or security issues; or protect rights and safety of you and other users.
• Business Transfers. Information may be disclosed in connection with a proposed or completed merger, acquisition, reorganization, bankruptcy, or transfer of assets only as permitted by applicable law and subject to applicable confidentiality and security protections.
• Health Care Providers. We may share information with healthcare providers involved in your care for treatment purposes.

We do not sell personal information collected through the Site or share personal information with third parties for their own direct marketing purposes. We do not use information collected through the Site to create profiles of individuals for targeted advertising based on their activity across unrelated websites or online services.

We may share or disclose non-personal information, including information that has been aggregated, de-identified, or otherwise maintained in a form that does not identify you, as permitted by applicable law.

How We Protect Your Personal Information

We take precautions to protect your personal information by establishing, implementing, and maintaining reasonable administrative, technical, and physical security safeguards to protect the information appropriate to the volume and nature of the information we collect. Nevertheless, you should keep in mind that no website or internet transmission is ever completely secure or error-free, so we cannot guarantee the security of your information collected through the Site.
 

Online Forms and Electronic Communications

Information you submit through the Site may be used to respond to your request or provide the services or information you request. Unless a form specifically requests health information or indicates that it provides a secure method for submitting sensitive information, please do not include sensitive medical or health information in general website forms. Ordinary email may not be encrypted or otherwise secure. Please do not use ordinary email to send sensitive health information unless specifically directed to do so using an approved secure method. Users who need to communicate with us about their care or other sensitive health information should use MyChart or another secure communication method made available by us whenever appropriate. You may contact us to request a reasonable alternative method or location for confidential communications.

Data Retention

We retain personal information for as long as necessary for the purpose for which it was collected and as required or permitted by law and our records retention requirements. When information is no longer required, it will be disposed of or de-identified in accordance with applicable law and our policies.

State Privacy Rights

Depending on your state of residence and the law applicable to the information, you may have rights to confirm whether we process your personal information; access, correct, delete, or obtain a portable copy of certain information; and opt out of a sale, certain advertising-related sharing, targeted advertising, or certain profiling. Additional rights may apply to sensitive information, including withdrawal of consent where processing relies on consent. These rights apply only to the extent provided by applicable law.

These rights are subject to exceptions and limitations under applicable law. Certain information may be exempt because it is regulated by HIPAA or another federal or state law. Some laws may also exempt particular organizations, employment information, or information processed for specific purposes. We will evaluate each request under the law that applies.

To submit a request or withdraw consent where applicable, email, call or write to the HIPAA Compliance & Privacy Officer at the email address, telephone number, or mailing address provided below. Describe your request, the relevant Site or service, and your state of residence. Do not include medical records, passwords, or government identification documents in an initial ordinary email. We will explain any additional information needed to process your request securely.

We may take reasonable steps to verify your identity before responding to a request. If an authorized agent submits a request on your behalf, we may require proof of the agent’s authority and may ask you to verify your identity directly with us, unless applicable law provides otherwise.

We will respond within the period required by the law applicable to your request and provide any required notice of an extension and its reason. If we deny a request, we will explain the basis to the extent required by law. Where you have a right to appeal, submit an appeal using the contact methods above, identify the request being appealed, and explain why you believe the decision should be reconsidered. Our decision notice will provide any applicable appeal deadline. We will respond within the legally required appeal period and provide any required information about contacting the relevant state attorney general or other regulator. We will not unlawfully discriminate against you for exercising privacy rights.

Users From Outside the United States

If you access the Site from outside the United States, your information may be transferred to, stored in, or processed in the United States or another country where we or our service providers operate. Privacy and data protection laws in those locations may differ from the laws in your country. Where applicable law requires a specific transfer mechanism or safeguard, we will use an appropriate lawful basis for the transfer.

Information collected through the Site may be stored in secure hosting facilities provided by us or our service providers. We require our service providers to maintain contractual protections consistent with applicable privacy and data security laws.

Children's Privacy

The Site is not directed to children under 13 years of age, and we do not knowingly collect personal information online directly from children under the age of 13 without appropriate parental consent or another lawful basis. Any information we receive through the Site from users we believe to be under the age of 13 will be purged from our database. If you think we have collected information from a child under the age of 13 through the Site, please contact us.

Updates

We may update this Website Privacy Statement from time to time to reflect changes in our practices, technologies, services, or legal requirements. When we update this Statement, we will revise the “Last Updated” date and post the revised statement on the Site. Where applicable law requires additional notice, consent, or authorization before a change may apply, we will provide or obtain it as required.

Contact Us

If you would like to receive this Website Privacy Statement in an alternative format or need assistance submitting a privacy request, please contact us using the information below. Questions or concerns about this Website Privacy Statement or our privacy practices may be directed to:

HIPAA Compliance & Privacy Officer
Union Health
1606 N. 7th Street
Terre Haute, IN 47804
Phone: (812) 238-7533
Email: privacy@union.health