Health Management Systems, Inc. (HMS) Privacy Policy

This Privacy Statement applies to all websites, domains and services operated and provided by Health Management Systems, Inc. (a Gainwell Technologies company). except that a privacy policy or statement specific to a particular HMS service or program may supersede or supplement this Privacy Statement.

This Privacy Statement explains how HMS websites collect, use, disclose, or otherwise process personal information collected from users of its websites.

In most cases, HMS acts as a data processor or “service provider” with respect to the personal data collected on its websites. This Statement does not cover the activities that we undertake on behalf of our business customers and in which we act as data processor, or service provider. However, we note that where we are acting in the capacity of a data processor or service provider on behalf of our business customers we only process your personal data to the extent, and in such a manner, as is necessary for the business purposes in accordance with our business customer’s written instructions (including any applicable privacy notices provided by our business customers). We will not process your personal data for any other purpose or in a way that does not comply with our business customer’s written instructions or the applicable data protection laws and regulations.

This Privacy Statement covers your use of this website to the extent such use is to read and consume information about HMS and its services. Should you wish to inquire about the data processing we undertake for any of our business customers, or wish to assert your data protection rights regarding that processing, please contact our business customers directly or review the privacy notices available on their websites.

Collection of Personal Information

Personal information is any information that personally identifies an individual or from which an individual could be identified. This may include a name, address, telephone number, email address and other private personal attributes. It may also include information such as your IP address, which is logged by our systems in order to monitor the health and performance of our services as well as the privacy and security of our systems.

HMS may collect, use, store, and transfer (collectively “process”) personal information to manage its relationship with its customers, business partners and other third parties (“covered individuals”) and better serve covered individuals by personalizing their experience and interaction with HMS. Such processing is done in compliance with applicable laws, including appropriate notice and consent, along with required filings with data protection authorities, where required.

Use of Personal Information

Fulfilling your Transaction Request

If we receive any requests related to, for example, a product or service, a callback, or specific marketing materials, we will use your personal information to fulfill your request. In this context, we may share information with others, for instance, HMS and its affiliates and business partners, involved in fulfillment. In connection with a transaction, we may also contact you as part of our customer satisfaction surveys or for market research purposes subject to applicable laws and regulations.

Personalizing your Experience on our Websites

We may use information we collect about you to provide you with a personalized experience on our websites, such as providing you with content in which you may be interested and making navigation on our sites easier. We may use “cookies” to help us improve this website and to track and store some of your preferences. A cookie is a small file created by a website or application to store information on your computer. We may work with third party service providers who may place third party persistent cookies or similar technologies to collect anonymous information about the use of our websites. This information will be solely used for web usage analysis for a better understanding of how you use our website and/or to customize our content.

HMS websites do not use pixels or other methods to track your web activity elsewhere or target advertising to users. Because HMS websites do not track users’ third-party web activity, our site does not respond to browser do-not-track signals.

Providing Customer Support

We may use your personal information to support HMS products or services our business customers have purchased from us, including technical support, where we may sometimes have incidental access to data that our business customers have provided to us or data that is located on HMS systems. This data may contain information about our business customers, and those organizations’ employees, customers, partners, or suppliers (collectively “customer data”).

This Privacy Statement does not apply to our access to or handling of business customer data; the conditions regarding the handling and processing of business customer data is covered by the applicable terms of use, privacy notices or Notices of Privacy Practices, or other agreements between HMS and its business customers.

Monitoring or Recording of Calls, Chats and Other Interactions

Certain online transactions may involve you calling us or us calling you. They may also involve online chats. Please be aware that it is HMS’s general practice to monitor, and in some cases record, such interactions for staff training or quality assurance purposes or to retain evidence of a particular transaction or interaction.

Use of Your Data to Comply with the Law and Protect Rights and Property

We may also use or share your information to protect the rights or property of Gainwell, our business partners, suppliers, clients, or others when we have reasonable grounds to believe that such rights or property have been or could be affected. In addition, we reserve the right to disclose your personal information as required by law and when we believe that disclosure is necessary to protect our rights, or the rights of others, or to comply with a judicial proceeding, court order, law enforcement or legal process.

Sharing of Personal Data

HMS will not sell, rent or lease your personal information to others.

As a global organization with business processes, management structures and technical systems that cross borders, HMS may share information about you within HMS (including with our subsidiaries and affiliates). Our Privacy Statement and our internal policies and practices are designed to provide a globally consistent level of protection for personal information all over the world. Even in countries whose laws provide for less protection for your information, HMS will still handle and protect your information in the manner described in this Privacy Statement.

California Consumer Privacy Act – CCPA

HMS is committed to the lawful treatment and confidential handling of sensitive information, including personal information about California residents, and has adopted a set of global information management policies including privacy and data protection, security, system access, information classification, and other relevant policies governing the collection, use, disclosure, transfer, retention, and deletion of information.

To the extent HMS is a “Service Provider” (as defined in the CCPA), HMS confirms that it will process personal information which it retains, uses, or discloses in connection with its performance under any contract: (1) only on behalf of and for the benefit of the “Business” (as defined in the CCPA) from which it has received the personal information; (2) only in accordance with the contract and Business’s prior written instructions, if any; unless (3) as otherwise required by the CCPA. HMS confirms that it will not process personal information for any purpose other than for the specific purpose of performing the services specified in the contract.

Information Security, Accuracy and Retention

Security is a high priority for HMS and to protect personal data and other confidential information and maintain its accuracy and integrity, we have implemented appropriate administrative, technical and physical safeguards to prevent unauthorized access, use or disclosure. We require the same high standard of information security and information management of any third parties we share your data with.

We will retain personal information only for as long as legally required or permitted and in accordance with HMS records and information management policies. We respect your right to privacy and upon your request HMS will no longer use your personal information unless required to provide you services or as necessary to comply with HMS’s legal obligations, resolve complaints and disputes and enforce our agreements.

Updating Your Information

We will rely on the personal information that you give us, so it is important that all of the details that you to give us are accurate and up-to-date. If your personal information changes, please notify us by writing to us at info@gainwelltechnologies.com or, where available, you can update your own information using the application.

Children’s Privacy

Our websites are not intended for or designed to attract children under the age of 18, and we will not knowingly solicit or collect personal information from children we actually know are under 18.

Grievance and Reprisal Protection Clause

We are committed to protecting your privacy rights and encourage you to express any concerns regarding the handling of your personal information. In certain jurisdictions, such as India, you may have the legal right to raise a grievance if you believe that your privacy rights under this Privacy Statement have been violated or mishandled. We are dedicated to addressing such grievances fairly and promptly.

Grievance Process: If you wish to file a grievance, please submit your concern in writing to our Grievance Officer, Marshall Preddy at compliance@gainwelltechnologies.com. Your submission should include details about the specific issue, including dates and any relevant information, to help us conduct a thorough investigation.

Response Timeline: Once a grievance is received, we will acknowledge receipt and aim to resolve your concern within 30 days. If additional time is required, we will notify you with an expected resolution timeframe.

Updates to this Policy

From time to time, we may update this Privacy Policy. We will prominently post a notice on this site when we do so. We encourage you to periodically check back and review this policy so that you always will know what information we collect, how we use it, and with whom we share it.

Updated: March 2, 2026

« Participant Login | Administrative System Login