Legal

Privacy Notice

Last Updated: July 2026

This Privacy Notice describes how Dataplex Consulting & Data Products ("Dataplex," "we," "us," or "our") collects, uses, stores, and shares personal information when you visit our website, purchase or use our Data Products, or interact with us in any related way.

This policy does not apply to the public, governmental datasets we distribute (for example, CMS, NPPES, FDA, CDC, HRSA, Census). These datasets are publicly available and do not contain personal information as defined under applicable privacy laws.

If you have any questions, please contact us at contact@dataplex-consulting.com.

Summary of Key Points

We collect limited personal information from customers and website visitors (for example, business contact information), not from the public datasets we deliver.
We do not sell personal information.
We do not collect sensitive personal information.
We process personal information only to operate and improve our services, communicate with customers, provide support, ensure security, and comply with law.
Our Snowflake Native Apps run inside your own account — data they process stays in your environment.
Customers may request access, deletion, or correction of their personal information.
This notice applies to our website, sales interactions, enterprise data delivery systems, and support channels.

1. Information We Collect

1.1 Information You Provide to Us

We may collect personal information you voluntarily provide when you:

Request information about our Data Products
Create or manage an account
Integrate your environment with our delivery systems (Snowflake, Databricks, Google Cloud, SAP Datasphere, AWS S3, etc.)
Participate in support, onboarding, or sales interactions
Subscribe to our services or complete a contract
Communicate with us via email, phone, or support channels

This may include, for example:

Name, job title, and company name
Business email address
Business phone number
Billing contact information
Account identifiers for data delivery (for example, Snowflake account ID, AWS IAM role ARN)

We do not collect consumer level personal data or dataset content on behalf of customers unless expressly required in a contract.

1.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage, such as:

IP address
Browser type and version
Device identifiers
Usage analytics (pages visited, referral source, timestamps)

We use this information only for website performance, security, and analytics.

1.3 Public Datasets

Our commercial data products include large scale public datasets published by government agencies (for example, CMS, NPPES). These datasets:

Are publicly available
Do not include protected health information (PHI)
Are not collected from you
Are processed solely for the purpose of ingestion, transformation, quality checks, enrichment, and delivery to our customers

1.4 Native Apps

Certain Dataplex products (for example, FacilityGuard and RosterGuard) are delivered as Snowflake Native Apps that install from the Marketplace and execute inside your own Snowflake account. Data that these apps process — such as provider rosters or facility lists — remains in your environment and is not transmitted to, collected by, or accessible to Dataplex.

2. How We Process Personal Information

We process personal information in order to:

Provide, deliver, and maintain our Data Products and services
Verify customer identities and provision access to data delivery environments
Support customer onboarding, training, and technical assistance
Communicate with you about products, updates, and support
Process billing, invoicing, and payment related activities
Monitor and improve system performance and reliability
Detect, prevent, and respond to security incidents or fraudulent activity
Comply with applicable legal and regulatory obligations
Improve our systems, documentation, and user experience

We do not use your personal information to train generalized AI or machine learning models, and we do not use it for profiling or automated decision making that produces legal or similarly significant effects.

3. Legal Basis for Processing

We process personal information only when we have a valid legal basis to do so. Depending on your location, this may include:

Consent: When you have given us permission to process personal information for a specific purpose.
Contract: When processing is necessary to enter into or fulfill a contract with you or your organization.
Legal obligation: When processing is required to comply with applicable laws or regulations.
Legitimate interests: When processing is necessary for our legitimate business interests and not overridden by your rights and interests.

For individuals in the European Union, United Kingdom, or European Economic Area, processing is carried out in accordance with the General Data Protection Regulation (GDPR) and related laws. For individuals in United States states with comprehensive privacy laws (for example, California, Colorado, Connecticut, Virginia, Utah), processing is carried out in accordance with the applicable state privacy statute.

4. When We Share Personal Information

We only share personal information in the situations described below:

4.1 Service Providers

We may share personal information with third party service providers that support our operations, such as:

Cloud hosting providers
Email and communications platforms
Payment processors and billing systems
Authentication and security tools
Contract management and e signature platforms

These service providers are authorized to use personal information only as necessary to provide services to us and are bound by confidentiality and data protection obligations.

4.2 Legal and Compliance

We may disclose personal information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government demands, or to:

Protect our rights, property, and safety
Protect the rights, property, and safety of our customers or the public
Detect, investigate, or prevent security or fraud issues

4.3 Business Transactions

In the event of a merger, acquisition, financing, or sale of all or a portion of our business, personal information may be transferred as part of the transaction, subject to the same protections described in this Privacy Notice.

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or similar state privacy laws.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Notice, including:

Maintaining and supporting your account or subscription
Providing our products and services
Complying with legal, tax, accounting, or reporting requirements
Resolving disputes and enforcing our agreements

When we no longer have a legitimate business need to process personal information, we will delete, anonymize, or securely store it and isolate it from further processing until deletion is possible.

Public dataset content is not subject to personal data retention limits because it does not contain personal information as defined by applicable privacy laws.

6. Minors

Our services are intended for enterprise, professional, and commercial users. We do not knowingly collect personal information from individuals under 18 years of age. If we learn that we have collected personal information from an individual under 18, we will take reasonable steps to delete it.

7. Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights with respect to your personal information:

Right to access the personal information we hold about you
Right to request correction of inaccurate or incomplete personal information
Right to request deletion of personal information
Right to restrict or object to certain processing
Right to data portability in certain circumstances
Right to withdraw consent where processing is based on consent
Right to lodge a complaint with a data protection authority

To exercise these rights, please contact us at contact@dataplex-consulting.com. We will respond to your request in accordance with applicable data protection laws.

8. Security

We implement technical and organizational measures designed to protect personal information, including:

Encryption in transit and at rest where appropriate
Role based access controls and least privilege principles
Secure handling of access credentials and environment identifiers
Logging and monitoring for unauthorized access attempts
Regular review of security practices and configurations

While we take reasonable steps to protect your information, no system or transmission is completely secure. You are responsible for maintaining the confidentiality of any credentials used to access our systems or data products.

9. International Transfers

If you access our services from outside the United States, your personal information may be transferred to and processed in the United States or other countries where we or our service providers operate.

Where required, we implement appropriate safeguards for international transfers, such as Standard Contractual Clauses or equivalent mechanisms under applicable law.

10. Updates to This Notice

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this page and will be effective as soon as it is posted.

We encourage you to review this Privacy Notice periodically to stay informed about how we handle personal information.

11. Contact Us

If you have questions, requests, or concerns about this Privacy Notice, you can contact us at:

Email: contact@dataplex-consulting.com

Mail: Dataplex Consulting & Data Products, 13284 Pond Springs Rd S301, Austin, TX 78729, United States