Privacy Policy

Peony PRO, LLC ("Peony," "we," "us," or "our") operates peonypro.com, the Peony App, and related services (together, the "Services"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and the choices and rights you have.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Who this policy applies to

This policy applies to:

• Website visitors
• Applicants and members — practitioners who apply for or hold Peony PRO membership
• Students — learners enrolled in the Peony Cancer Companion Certificate Program
• Contributors — experts who contribute educational content
• Partners — clinical and brand partner contacts
• Peony App users — including women who create a Peony Care Plan™
• Event registrants and subscribers

Where Peony processes information on behalf of a clinical partner under a written agreement, that agreement governs the processing, and the partner's own privacy notice applies to the underlying relationship.

2. Information we collect

Information you provide directly

• Identity and contact information — name, email address, postal address, telephone number
• Professional information — credentials, degrees, certifications, license number and status, discipline, areas of focus, practice name and location, biography, headshot, professional links
• Application information — your statement of approach, and other responses submitted with your application
• Educational information — enrollment records, coursework, assessments, reflections, documentation, entrustment evidence, and certificate decisions
• Contributor information — conflict-of-interest disclosures, institutional approvals, agreement records, and permissions for use of name, image, title, and affiliation
• Payment information — processed by our payment providers; we do not store full payment card numbers
• Communications — messages you send us, forum posts, and support requests
• Care Plan content — anything a user chooses to record in a Peony Care Plan™

Information collected automatically

• Device type, operating system, browser type and version
• IP address and approximate location derived from it
• Pages viewed, links clicked, session duration, referring pages
• Cookie and similar technology identifiers

Information from third parties

• Credential and license verification obtained from issuing bodies, licensing boards, and public registries
• Payment confirmation from payment processors
• Referral information where a colleague introduces you to us

We do not purchase personal information from data brokers.

3. Sensitive and health-related information

The Peony Care Plan™ belongs to the person who creates it. Anything recorded in it — priorities, questions, symptoms noticed, appointments, notes about care, or personal reflections — is hers.

• She decides what to record, what to leave blank, and what to share, and with whom.
• We do not sell health-related information and we do not use it for advertising or targeted marketing.
• The Care Plan is not a medical record. Peony does not transmit it to any clinical system unless the user chooses to share it.
• We do not use Care Plan content to train models for third parties.
• Where Peony provides services to a covered entity under a written agreement, additional contractual terms govern that processing.

Where we collect professional license information, we use it only to verify standing and to maintain your listing.

4. Why we use information, and our legal bases

5. Information we publish

If you hold a Directory listing, the information in that listing is public by design and may be indexed by search engines. This may include your name, credentials, discipline, areas of focus, services, practice information, location, links you provide, contributions you have made, and your current standing.

Certificate holders in Active Standing are listed with the certificate held, the specialization, the year of conferral, and current standing.

You control what appears in your listing. You may edit it, limit it, or withdraw it at any time by contacting us or through your account.

6. How we share information

We share personal information only as described here:

• Service providers — hosting, payment processing, email delivery, analytics, customer support, and video production, under contract and only for the purposes we specify
• Credential-issuing bodies, licensing boards, and registries — to verify information you have provided
• Clinical partners — only where you have entered into a relationship with them, and only as agreed
• Other members — where you participate in forums, case discussion, or peer connection
• Publicly — through your Directory listing and any contribution published with your permission
• Professional accountability — where a finding results in a change to your public standing
• Legal and safety — where required by law, legal process, or to protect the rights, property, or safety of any person
• Business transfer — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

7. Cookies and similar technologies

We use cookies and similar technologies to operate the Services, remember your preferences, understand usage, and measure the effectiveness of our communications.

Categories we use:

• Strictly necessary — required for the Services to function, including authentication and security. These cannot be disabled.
• Preferences — remember settings and choices you have made.
• Analytics — help us understand how the Services are used so we can improve them.
• Marketing — measure the performance of campaigns and communications.

Where required by law, we obtain consent before setting non-essential cookies, and you can change your choices at any time through the cookie preferences link in our footer. You can also control cookies through your browser settings, though disabling some may affect how the Services work.

We honor Global Privacy Control signals where required.

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information, subject to our legal and record-retention obligations
• Port your information to another provider
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of the sale or sharing of personal information and of targeted advertising — noting that we do not engage in these
• Be free from discrimination for exercising your rights

To exercise any right, contact privacy@peonypro.com. We will verify your identity before acting on a request and will respond within the period required by applicable law. You may use an authorized agent where the law permits.

Marketing communications. You may unsubscribe at any time using the link in any marketing email, or by contacting us. Service messages about your membership, enrollment, contribution, or account will continue.

Your Care Plan. You may export or delete your Care Plan content at any time through the Peony App.

If you are in the UK or EEA and believe we have not handled your information properly, you have the right to lodge a complaint with your local supervisory authority.

9. How long we keep information

We keep personal information for as long as necessary for the purposes described in this policy, and as long as required by law.

• Account and membership records — for the duration of membership and for a defined period afterward
• Educational and assessment records, and certificate decisions — retained on a defined schedule so that a credential can be verified over time
• Financial records — as required by tax and accounting law
• Care Plan content — until the user deletes it or closes their account
• Marketing contacts — until you unsubscribe or ask us to delete your information

10. International transfers

Peony is based in the United States and serves practitioners in other countries. Where we transfer personal information out of the UK, the EEA, or another jurisdiction with transfer restrictions, we use an appropriate safeguard recognized by that jurisdiction, such as Standard Contractual Clauses, and take steps to ensure the information continues to be protected.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and contractual obligations on our service providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and notify us promptly at privacy@peonypro.com if you believe your account has been compromised.

12. Third-party sites and services

The Services contain links to third-party websites, tools, and resources that we do not control. This policy does not apply to them. We encourage you to read the privacy policy of any third party before providing information to it.

13. Children

The Services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact privacy@peonypro.com and we will delete it.

14. Changes to this policy

We may update this policy. We will post the updated version here with a revised date, and where changes are material, we will notify you directly.

15. Contact us

privacy@peonypro.com

Peony PRO, LLC

1224 Upland Ave, Unit A

Boulder, CO 80304