Privacy Policy

1. About This Policy

This Privacy Policy describes how OrthoStream LLC ("OrthoStream," "we," "us," or "our"), a California limited liability company, collects, uses, stores, and shares information in connection with OrthoLink (the "Platform"). By using the Platform, you agree to the practices described in this Policy.

OrthoStream LLC is an independent company and is not affiliated with, endorsed by, or connected to Stryker Corporation, Zimmer Biomet, DePuy Synthes, Smith+Nephew, Wright Medical, or any other medical device manufacturer. This Policy governs only information collected by OrthoStream LLC through OrthoLink.

2. Information We Collect

We collect the following categories of information:

3. How We Use Your Information

We use collected information to:

• Provide, operate, maintain, and improve the Platform;
• Authenticate your identity and manage your account;
• Personalize your experience based on your role, territory, and preferences;
• Respond to your inquiries and provide customer support;
• Send administrative communications, including updates to these Terms;
• Monitor and analyze usage patterns to improve Platform functionality;
• Detect, prevent, and address security incidents, fraud, and abuse;
• Comply with applicable legal obligations;
• Maintain records of terms acceptance for legal compliance.

We do not sell your personal information to third parties. We do not use your personal information for third-party direct marketing purposes.

4. Information Sharing

We may share your information in the following limited circumstances:

• Service Providers: We share information with trusted third-party vendors who assist in operating the Platform (e.g., cloud hosting, authentication, analytics). These providers are contractually obligated to protect your information and use it only for the services they provide to us.
• Within Your Organization: Certain content (e.g., territory updates, user profiles) may be visible to other authorized users within your organization on the Platform.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of OrthoStream LLC, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of OrthoStream LLC's assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share information for other purposes with your explicit consent.

5. Data Security

We implement reasonable technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS/TLS), access controls, and secure authentication.

However, no method of transmission over the internet or electronic storage is 100% secure. OrthoStream LLC cannot guarantee absolute security and disclaims liability for unauthorized access resulting from circumstances beyond our reasonable control.

6. Data Breach Notification

In the event of a data breach that is reasonably likely to result in harm to affected users, OrthoStream LLC will notify affected users in accordance with applicable California law (California Civil Code § 1798.82). Notification will be provided via email to the address associated with your account within the timeframe required by law. We will also notify the appropriate California regulatory authorities as required.

7. Cookies and Tracking Technologies

OrthoLink uses session cookies and similar technologies to authenticate users and maintain session state. These are strictly necessary for the Platform to function. We do not use third-party advertising cookies or cross-site tracking technologies.

You may configure your browser to refuse cookies; however, doing so may prevent you from accessing the Platform, as authentication requires session cookies.

8. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. OrthoLink does not currently respond to DNT signals because there is no industry-standard protocol for how to respond to them. We do not track users across third-party websites for advertising purposes.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform services. We retain terms acceptance records indefinitely for legal compliance purposes. We may retain certain information for longer periods as required by law or for legitimate business purposes such as resolving disputes and enforcing agreements.

Upon account deletion, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

10. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, and how it is used and shared.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale: We do not sell personal information. You do not need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA beyond what is necessary for Platform operation.

To exercise any of these rights, please contact us at [email protected]. We will respond within 45 days as required by law.

11. Shine the Light (California Civil Code § 1798.83)

California residents may request information about whether OrthoStream LLC has disclosed personal information to third parties for their direct marketing purposes during the preceding calendar year. OrthoStream LLC does not share personal information with third parties for their direct marketing purposes. Therefore, no disclosure report is required. For questions, contact us at [email protected].

12. Children's Privacy

OrthoLink is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

13. Third-Party Services

OrthoLink uses third-party services for authentication, cloud infrastructure, and AI capabilities. These services have their own privacy policies, and OrthoStream LLC is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you interact with.

14. No Affiliation with Third-Party Companies

OrthoStream LLC is an independent company. The Platform may reference or discuss third-party companies including medical device manufacturers. OrthoStream LLC does not share your personal information with any medical device manufacturer or employer unless you explicitly authorize such sharing. Your use of OrthoLink and your personal information are governed solely by this Privacy Policy and are not subject to the privacy policies of any employer or third-party company.

15. Changes to This Policy

OrthoStream LLC reserves the right to update this Privacy Policy at any time. We will notify users of material changes by updating the effective date and requiring re-acceptance within the Platform. Your continued use of OrthoLink after any changes constitutes your acceptance of the revised Policy.

16. Contact Us

For privacy-related inquiries, requests to exercise your California privacy rights, or questions about this Policy, please contact: