Privacy Policy

Last Updated: July 16, 2026

This Privacy Policy describes how Suburban Health Organization, Inc. collects, uses, discloses, and protects personal information through the Site. It is intended to provide a clear and meaningful notice about the categories of personal data processed, the purposes for processing, how information may be shared, and the choices and rights available to users.

1. Scope

This Privacy Policy applies to information collected through the Site, including through the contact form and through automatic technologies used to operate, secure, and analyze Site activity. It does not apply to information collected offline or through third-party websites or services that are not controlled by Suburban Health Organization, Inc..

2. Information Collected

A. Information You Provide Voluntarily

When you submit a contact form or otherwise contact Suburban Health Organization, Inc. through the Site, Suburban Health Organization, Inc. may collect:

  • Name.
  • Email address.
  • Company or organization name, if provided.
  • Telephone number, if provided.
  • Any information you include in your message.

This information is collected only when voluntarily submitted by the user.

B. Information Collected Automatically

When you browse the Site, Suburban Health Organization, Inc. may automatically collect certain technical and usage information, sometimes called usage data or log data, such as:

  • IP address.
  • Browser type and browser version.
  • Device type and device identifiers.
  • Operating system.
  • Referring pages or URLs.
  • Pages viewed and features used.
  • Date and time of visits.
  • Approximate geographic location derived from IP address.
  • Diagnostic and performance data.

Information linked or reasonably linkable to an identifiable individual may qualify as personal data under the Indiana Consumer Data Protection Act. The Act defines personal data broadly as information linked or reasonably linkable to an identified or identifiable individual.

C. Information Not Intentionally Collected

The Site is not intended to collect sensitive personal information. Users should not submit protected health information, financial account information, Social Security numbers, government-issued identification numbers, biometric information, precise geolocation information, or other sensitive data through the Site unless specifically requested through a secure method.

Indiana law treats certain categories, including health diagnoses, biometric data used to uniquely identify an individual, precise geolocation data, and certain child data, as sensitive data and generally requires consent before processing by covered controllers.

3. How Information Is Used

Suburban Health Organization, Inc. may use information collected through the Site for legitimate business and operational purposes, including to:

  • Respond to inquiries and requests.
  • Communicate with individuals who contact Suburban Health Organization, Inc..
  • Operate, maintain, troubleshoot, and secure the Site.
  • Monitor performance, usage, and trends.
  • Improve Site design, content, and functionality.
  • Detect, prevent, and investigate fraud, abuse, unauthorized access, or other misuse.
  • Comply with legal obligations and enforce applicable terms.

Indiana law requires covered controllers to limit collection to data that is adequate, relevant, and reasonably necessary for disclosed purposes, and not to process personal data for incompatible undisclosed purposes without consent.

4. Cookies and Similar Technologies

The Site may use cookies, pixels, log files, analytics tags, and similar technologies to support basic website functions and understand how users interact with the Site. These technologies may remember browser preferences, measure traffic, identify returning visits, and help diagnose technical issues.

Most web browsers permit users to adjust cookie settings or reject cookies altogether. If cookies are disabled, some Site features may not function properly.

5. Third-Party Analytics and Tracking Technologies

The Site may use third-party analytics or technology providers, including Google Analytics, to collect information about Site usage and performance. These providers may use cookies or similar technologies to collect information such as browser information, device information, pages visited, time spent on pages, and traffic patterns.

This information is used to evaluate and improve the Site. Indiana law requires clear privacy notices to disclose categories of personal data processed, the purposes of processing, and categories of third parties receiving shared data where applicable.

If Google Analytics or similar technologies are used, the Site should also provide a method for users to learn about available opt-out tools or browser controls. Indiana’s law generally follows an opt-out model for most processing, while requiring consent for sensitive data by covered controllers.

6. Web Traffic Collection

Suburban Health Organization, Inc. collects web traffic and usage information to understand how visitors navigate the Site, identify the most-visited pages, monitor response times, improve performance, maintain security, and detect malicious or unauthorized activity. Traffic information may be aggregated or de-identified for reporting and operational analysis, where feasible.

Indiana law separately recognizes aggregate data and de-identified data and excludes them from the statutory definition of personal data when maintained in the manner required by the Act.

7. How Information Is Shared

Suburban Health Organization, Inc. does not sell personal information and does not share personal information for third-party advertising purposes unless specifically disclosed in an updated policy. Under Indiana law, “sale of personal data” means an exchange of personal data for monetary consideration.

Suburban Health Organization, Inc. may share information in the following limited circumstances:

  • With service providers or vendors that support Site hosting, analytics, security, IT support, or communications.
  • With professional advisers, auditors, insurers, or legal counsel where reasonably necessary.
  • To comply with legal obligations, lawful process, court orders, or government requests.
  • To investigate or address fraud, security issues, or violations of law or contract.
  • In connection with a merger, acquisition, restructuring, asset sale, or other business transfer.

Indiana law requires covered controllers to disclose categories of personal data shared with third parties and the categories of third parties receiving that data.

8. Categories of Data Shared and Third Parties

Depending on Site operations, Suburban Health Organization, Inc. may share the following categories of information:

  • Contact information submitted through the contact form, with web hosting, email, or IT service providers.
  • Usage data and device/browser data, with analytics, hosting, security, or performance-monitoring providers.

Categories of third parties may include:

  • Website hosting providers.
  • Analytics providers.
  • Cloud storage or email service providers.
  • IT and cybersecurity providers.
  • Professional advisers assisting with legal, compliance, audit, or business operations.

9. Third-Party Links and Embedded Content

The Site may contain links to third-party websites or may use embedded tools, maps, videos, fonts, reCAPTCHA tools, or social-media features supplied by third parties. Those third parties may independently collect information through their own technologies, subject to their own terms and privacy practices.

Suburban Health Organization, Inc. is not responsible for third-party privacy practices or content. Users should review third-party notices before interacting with those services.

10. Data Retention

Suburban Health Organization, Inc. retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including responding to inquiries, maintaining business records, improving Site operations, enforcing agreements, and complying with legal obligations.

Retention periods may vary depending on the type of information, how it is used, whether an inquiry leads to an ongoing business relationship, and whether retention is necessary for legal, regulatory, tax, security, or dispute-resolution purposes.

11. Security

Suburban Health Organization, Inc. uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. Indiana law requires covered controllers to establish, implement, and maintain reasonable administrative, technical, and physical data security practices appropriate to the volume and nature of the personal data at issue.

Even so, no website, system, or electronic transmission can be guaranteed to be completely secure. Submission of information through the internet is at the user’s own risk.

12. User Rights and Choices

Depending on the user’s location and applicable law, an individual may have the right to:

  • Confirm whether personal data is being processed.
  • Access personal data.
  • Correct inaccuracies in certain personal data.
  • Request deletion of personal data.
  • Obtain a portable copy or representative summary of certain personal data previously provided.
  • Opt out of certain processing, such as targeted advertising, sale of personal data, or certain profiling activities, where applicable.

For covered controllers, Indiana law requires a response to authenticated consumer requests within 45 days, permits one 45-day extension when reasonably necessary, requires instructions for appeal when a request is denied, and requires an appeal response within 60 days.

Requests may be submitted through mail. Suburban Health Organization, Inc. may need to verify identity before acting on a request and may deny a request where permitted or required by law.

13. Appeals Process

If Suburban Health Organization, Inc. denies a privacy request, the requester may appeal that decision by submitting a written appeal within 30 days of the denial notice.

For covered controllers, Indiana law requires the appeal process to be conspicuously available and similar to the process for submitting rights requests, with a written decision on appeal within 60 days.

14. Children

The Site is not directed to children and does not knowingly collect personal information from children through the Site. Indiana’s Act defines a child as an individual under 13 and provides that compliance with COPPA satisfies the obligation to obtain parental consent under the Act.

If Suburban Health Organization, Inc. learns that personal information has been collected from a child in a manner inconsistent with applicable law, Suburban Health Organization, Inc. will take reasonable steps to delete that information.

15. International Visitors

The Site is intended for users in the United States. If a user accesses the Site from another jurisdiction, that user does so at the user’s own initiative and is responsible for compliance with local laws to the extent they apply.

16. Changes to this Privacy Policy

Suburban Health Organization, Inc. may revise this Privacy Policy from time to time to reflect changes in legal requirements, Site functionality, vendor relationships, or data practices. When updates are made, the “Last Updated” date will be revised.

17. Contact Information

Questions, requests, or concerns regarding this Privacy Policy or the Site’s data practices may be directed to:

Suburban Health Organization, Inc.
Attn: Compliance Department
6510 Telecom Drive, Suite 350

Indianapolis, Indiana 46278
[email protected]
317-692-5222