Ovia Health by Labcorp Non-App Privacy Policy
Ovia Health by Labcorp Non-App Privacy Policy
Introduction and scope
This Privacy Policy (“Policy”) describes how Ovuline, Inc., doing business as Ovia Health by Labcorp (“Ovia”) collects, uses and shares personal data collected by Ovia from business contacts, prospective business contacts, and other individuals who may come into contact with Ovia as part of Ovia’s internal operations, management and administration or through Ovia’s corporate website (“Ovia Operations”). Ovia Health by Labcorp is a subsidiary of Labcorp, a global life-sciences leader.
- This Policy governs Ovia's business contacts and corporate website operations Data Access & Collection
This Policy does not apply to personal data collected from job applicants and employees, which is governed by privacy notices provided as part of the recruitment, application and employment process. This Policy does not apply to personal data collected from users of the Ovia and Ovia Parenting apps and health coaching services. If you are a user of the Ovia or Ovia Parenting apps, you should review the Ovia Health App Privacy Policy here.
- Policy excludes employee/applicant data and app users, who are directed to other notices Data Access & Collection
In this Policy, the term “personal data” refers to information relating to an identified or identifiable individual. The term “you” refers to individuals who come into contact with Ovia.
- Definitions: "personal data" and "you" Data Access & Collection
- Ovia commits that it does not sell or share collected personal data for advertising Sharing & Disclosure
- Ovia reserves the right to retain personal data as permitted by law even if rights are exercised Retention & Deletion
Personal Data We Collect
We collect the following categories of personal data in connection with Ovia Operations:
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
Category Examples of Data We Collect In this Category
Identifiers Name, email address, postal address Device identifiers such as IP address, AdID, IDFA
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
General personal information including employment, education, health information Employer, job title
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
Legally protected classifications such as race or gender Gender
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
Purchase histories or interests Interest in Ovia products based on your browsing history
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
Internet and app activity information Ovia website and white paper browsing history, Ovia email opens and views Device type, operating system, other device parameters
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
Professional and employment related Name of employer, title, job type, industry
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
Inferences Ovia product interest
- Ovia collects seven listed categories of personal data for Ovia Operations Data Access & Collection
Where Do We Get Personal Data?
Categories of Data Sources Examples of Our Use of These Sources
Direct collection from your interaction with Ovia’s sales and marketing activities We collect personal data when you attend an Ovia event or webinar, meet Ovia representatives at a trade show or other public event, respond to an Ovia survey, or subscribe to an Ovia email list.
- Personal data is collected directly through sales and marketing interactions Data Access & Collection
Third party directories, including LinkedInLinkedIn, social networks, business directories, list providers. We build our contact lists through use of third party sources and list rentals and purchases
- Contact lists are built from third-party directories and list rentals and purchases Data Access & Collection
Technical and device information through tags, pixels, cookies, IP addresses, AdID, IDFA and similar tracking technologies (“tracking technologies”) We use technical device information and tracking technologies to identify your interactions with Ovia’s website and content and to gauge your interest in our products.
- Technical and device information is gathered via tracking technologies to gauge interest Data Access & Collection
- Marketing materials and ads may let Ovia and vendors track interaction via tracking technologies Sharing & Disclosure
How and Why Do We Use Personal Data?
We collect and use your personal data, in all of the categories discussed above, for Ovia Operations, including:
- Personal data is used for Ovia Operations including products, security and legal compliance Use & Processing
- Developing, advertising, marketing and providing Ovia’s products and services and conducting surveys
- Operating and maintaining the security of Ovia’s products, services, equipment and networks
- To comply with law and law enforcement requests
- To conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ovia’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ovia about employees is among the assets transferred
- Personal information may transfer in a merger, sale or bankruptcy of Ovia's assets Sharing & Disclosure
Lawful Processing. We collect, use and otherwise process personal data as allowed under applicable law, including where based on one or more of the following:
- Processing relies on consent, contract, legal obligation or legitimate interests Legal Rights & Agreement Rules
– The consent you provide to us at the point of collection of your personal information;
- Processing relies on consent, contract, legal obligation or legitimate interests Legal Rights & Agreement Rules
– The performance of the contract we have with you;
- Processing relies on consent, contract, legal obligation or legitimate interests Legal Rights & Agreement Rules
– The compliance of a legal obligation to which we are subject;
- Processing relies on consent, contract, legal obligation or legitimate interests Legal Rights & Agreement Rules
– The legitimate interests of Ovia, you or a third party, where not overridden by your interests, fundamental rights or freedoms. Ovia’s legitimate interests include the lawful conduct of its business.
- Processing relies on consent, contract, legal obligation or legitimate interests Legal Rights & Agreement Rules
When We Share Personal Data, What Categories of Recipients Do We Share With?
Categories of Recipients Examples of Recipients We Share With
Service Providers Ovia’s B2B customer data is processed and stored by service providers working on Ovia’s behalf, including our cloud services provider AmazonAmazon Web Services, our marketing automation solution Eloqua, and Salesforce, which provides us with customer relationship management systems.
- B2B customer data is processed and stored by named service providers Sharing & Disclosure
Marketing technology vendors Our marketing materials and ads may contain tracking technologies which allow Ovia and the vendors we work with to collect technical information from your mobile device (such as IP address, AdID) to track your interaction with our content and ads.
- Marketing materials and ads may let Ovia and vendors track interaction via tracking technologies Sharing & Disclosure
Analytics providers We share technical information from your device with analytics companies to understand the performance of our marketing and website.
- Device technical information is shared with analytics companies Sharing & Disclosure
Social media platforms and networks We may share device data with social media networks to measure the effectiveness of advertising on those networks. This device data is configured to exclude key device identifiers unless you have elected, via your on-device controls, to share data with the social media network.
- Device data may be shared with social media networks to measure advertising, excluding key identifiers by default Sharing & Disclosure
Affiliates and Successors We may share data with our parent company Labcorp and with companies under common control, and with any successors in the event of merger, acquisition, or similar transaction.
- Data may be shared with parent Labcorp, commonly controlled companies and successors Sharing & Disclosure
Government Authorities and Recipients of Compelled Disclosures Ovia may provide personal data to courts, law enforcement, and governmental authorities and other third parties if required by law, subpoena, directive from a regulatory authority or as otherwise necessary to comply with legal requirements or to protect the rights or property of Ovia or third parties.
- Personal data may be provided to courts, law enforcement and authorities when required Sharing & Disclosure
Please also see How Does Ovia Respond to Data Requests
- Personal data may be provided to courts, law enforcement and authorities when required Sharing & Disclosure
What Categories of Personal Information Do We Sell or Share for Advertising?
Ovia does not sell or share for advertising the personal data we collect. Our marketing technology vendors act as processors and service providers to Ovia when they process personal data about your interaction with Ovia websites and communications.
- Ovia commits that it does not sell or share collected personal data for advertising Sharing & Disclosure
- Ovia respects browser 'do not sell' signals but says GPC controls are not applicable to its activities Account & Service Control
When Ovia purchases advertising from third parties, we may share device data with social media networks to measure the effectiveness of advertising on those networks. This device data is configured to exclude key device identifiers unless you have elected, via your on-device controls, to share data with the social media network. Personal data collected through your interaction with our advertising will be governed by the privacy policies of the third party advertising platform, not by Ovia’s privacy policies.
- Purchased advertising may share device data with social networks, under third-party ad platform policies Sharing & Disclosure
No Selling or Sharing of Personal Information of Consumers under 16
To its knowledge, Ovia does not sell or share any personal data of consumers under 16.
- To its knowledge, Ovia does not sell or share personal data of consumers under 16 Sharing & Disclosure
Categories of Personal Information Disclosed for Business Purposes
Category Categories of Recipients Business Purpose for Sharing
Identifiers Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers. For internal operations (hosting, marketing, analytics) and to purchase ads.
- Identifiers and internet/app activity are disclosed for business purposes including to ad platforms and to purchase ads Sharing & Disclosure
General personal information Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. For internal operations (hosting, marketing, analytics).
- Five other categories are disclosed for internal operations (hosting, marketing, analytics) Sharing & Disclosure
Legally protected classifications such as race, gender Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. For internal operations (hosting, marketing, analytics).
- Five other categories are disclosed for internal operations (hosting, marketing, analytics) Sharing & Disclosure
Purchase histories or interests Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems,. For internal operations (hosting, marketing, analytics).
- Five other categories are disclosed for internal operations (hosting, marketing, analytics) Sharing & Disclosure
Internet and app activity information Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers. For internal operations (hosting, marketing, analytics) and to purchase ads.
- Identifiers and internet/app activity are disclosed for business purposes including to ad platforms and to purchase ads Sharing & Disclosure
Professional and employment related Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. For internal operations (hosting, marketing, analytics).
- Five other categories are disclosed for internal operations (hosting, marketing, analytics) Sharing & Disclosure
Inferences Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems. For internal operations (hosting, marketing, analytics).
- Five other categories are disclosed for internal operations (hosting, marketing, analytics) Sharing & Disclosure
Data Retention
We retain your personal information for a period of five years after last activity. After this retention period ends, we delete your data.
- Personal information is retained five years after last activity, then deleted Retention & Deletion
While these are our standard retention periods, you can delete your data at any time as described in the next section.
- You can delete your data at any time despite the standard retention periods Retention & Deletion
What Are Your Choices?
You may opt-out of Ovia marketing emails at any time by using the ‘unsubscribe’ link at the bottom of any Ovia marketing email or by contacting us at support@oviahealth.com.
- You may opt out of Ovia marketing emails at any time Account & Service Control
Access, Deletion and Correction
- You may access, correct and delete your personal data at any time, subject to identity verification Account & Service Control
You may access, correct and delete the personal data Ovia holds about you at any time. Ovia honors any consumer data rights provided by applicable law. Ovia does not discriminate or retaliate for the exercise of data subject rights. You can email Ovia at support@oviahealth.com to exercise these rights. Ovia may require you to verify your identity in order to exercise these rights. Any authorized agents seeking to exercise data subject rights on behalf of any Ovia users should contact support@oviahealth.com with their request.
- You may access, correct and delete your personal data at any time, subject to identity verification Account & Service Control
- Ovia commits not to discriminate or retaliate for exercising data subject rights Account & Service Control
Global Privacy Control
- Ovia respects browser 'do not sell' signals but says GPC controls are not applicable to its activities Account & Service Control
Ovia respects ‘do not sell’ signals sent by your browser. However, as Ovia does not sell your personal data, these controls are not applicable to Ovia’s activities.
- Ovia respects browser 'do not sell' signals but says GPC controls are not applicable to its activities Account & Service Control
Appeal Rights
- Refused rights requests may be appealed to Ovia's Legal Department, resolved within 30 days Account & Service Control
If your request to exercise your rights is refused, you may send your notice of appeal by email to legal@oviahealth.com, for review by Ovia’s Legal Department. We will resolve your appeal within 30 days of the date of receipt of your email.
- Refused rights requests may be appealed to Ovia's Legal Department, resolved within 30 days Account & Service Control
Other Relevant Information
- Ovia reserves the right to retain personal data as permitted by law even if rights are exercised Retention & Deletion
Even if you exercise your rights described above, Ovia reserves the right to retain personal data as permitted by applicable law.
- Ovia reserves the right to retain personal data as permitted by law even if rights are exercised Retention & Deletion
Data Security
Ovia protects personal data with security measures that are consistent with industry standards, including background checks on all employees and data encryption in transit and at rest. We will notify you of security incidents as required by law.
- Industry-standard security measures including background checks and encryption; incident notice as required by law Security & Safeguards
Data Retention
We store personal data for the period that your relationship with Ovia is active and then for a further retention period that reflects the period during which we reasonably anticipate you may remain interested in information about Ovia. After this retention period ends, we delete your data.
- Second Data Retention section: storage during the relationship plus an anticipated-interest period, then deletion Retention & Deletion
How to Contact Ovia?
To contact Ovia to exercise your privacy choices, please see “What Are Your Choices?” above.
- Privacy-choice contacts are routed to the What Are Your Choices? section Account & Service Control
Ovia has designated a Data Protection Officer. To contact our Data Protection Officer or for questions or complaints about Ovia’s processing of personal data, contact us at:
- Ovia designates a Data Protection Officer with a Westborough, MA contact address Account & Service Control
Data Protection Officer
- Ovia designates a Data Protection Officer with a Westborough, MA contact address Account & Service Control
Ovuline, Inc., dba Ovia Health by Labcorp
- Ovia designates a Data Protection Officer with a Westborough, MA contact address Account & Service Control
3400 Computer Drive
- Ovia designates a Data Protection Officer with a Westborough, MA contact address Account & Service Control
Westborough, MA 01581
- Ovia designates a Data Protection Officer with a Westborough, MA contact address Account & Service Control
legal@oviahealth.com
- Ovia designates a Data Protection Officer with a Westborough, MA contact address Account & Service Control
Data subjects located in the EEA or UK may contact the Data Protection Officer at the address above or Ovia’s EU and UK representative at dpo@labcorp.com.
- EEA/UK data subjects may contact the DPO or Ovia's EU and UK representative Account & Service Control
You may also have the legal right to lodge a complaint about Ovia’s data processing with your local consumer protection or data protection authority.
- You may have the legal right to lodge a complaint with your local authority Account & Service Control
Other Issues
Children: Ovia does not knowingly collect personal data under Ovia Operations from children under 13 (for the US) or from individuals for whom parental consent is required for collection or processing of personal data.
- Ovia does not knowingly collect children's data under Ovia Operations Data Access & Collection
Third Party Websites or Apps: Some Ovia properties may take you to websites or apps that are operated by other companies. Ovia is not responsible for the privacy practices of its advertisers, sponsors or others. You should review the privacy policies of those sites and apps.
- Ovia is not responsible for privacy practices of third-party sites, apps, advertisers or sponsors Legal Rights & Agreement Rules
Legal requirements: Ovia may provide personal data to courts, law enforcement and governmental authorities if required by law or to protect the rights or property of Ovia or third parties. Ovia may access, use and preserve data to comply with law, in anticipation of litigation, or to protect the rights or property of Ovia or third parties, even if the data is subject to a deletion request from you. We may also provide information to law enforcement or authorities to protect the safety of users of the apps or others.
- Data may be provided to authorities and preserved even against a deletion request Sharing & Disclosure
Sale, merger, or change of ownership, transfer to affiliates: If Ovia Health merges with another company, or its equity securities or all or a part of its assets are sold to a third party, your personal data may be transferred to the buyer or successor entity. Your personal data may also be shared with affiliated companies under common ownership or control with Ovia.
- Personal data may transfer to a buyer or successor and be shared with affiliated companies Sharing & Disclosure
Changes to this Policy
Ovia may modify this Policy from time to time by posting an updated version of the Policy.
- Ovia may modify the Policy from time to time by posting an updated version Legal Rights & Agreement Rules
Last updated: January 9, 2026
- This Policy version is dated January 9, 2026 Legal Rights & Agreement Rules