Privacy policy
Effective Date: November 1st, 20261. Introduction
Claren Analytics (“Claren,” “we,” “our,” or “us”) is committed to protecting the privacy and security of information entrusted to us. This Privacy Policy describes how we collect, use, disclose, and protect information obtained through our website, software platform, and related services.
Claren provides healthcare intelligence and data analytics solutions designed to help private equity firms, their portfolio companies, and other authorized clients better understand healthcare and pharmacy benefit costs, evaluate plan performance, identify potential savings opportunities, and mitigate risk.
The information we collect depends on how you interact with Claren, the services you use, and the permissions and authorizations applicable to those services.
Important distinction regarding healthcare data: Healthcare claims data, pharmacy claims data, and other information that constitutes Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) may be subject to separate legal requirements and contractual obligations. Such information is not governed solely by the general website privacy practices described in this Policy. Its collection, use, processing, disclosure, and protection are governed by applicable law and, where applicable, the agreements and HIPAA Business Associate Agreements (“BAAs”) between Claren and its clients.
By using our website or platform, you acknowledge the applicable terms and privacy practices described in this Policy.
2. Information We Collect
Claren may collect the following categories of information, depending on the nature of your relationship with us and the services provided.
A. Website and Business Contact Information
When you visit our website, contact us, request a demonstration, or communicate with our team, we may collect information such as:
Name, business email address, telephone number, and business mailing address.
Employer, job title, and professional affiliation.
Information submitted through contact forms, inquiries, or other communications.
Website usage information, including pages visited, referring websites, browser type, device information, and approximate location derived from technical data.
We use this information to respond to inquiries, communicate with prospective and existing clients, administer our website, and improve our services.
B. Client and Account Information
When providing services to clients, we may collect and process information necessary to establish and administer client accounts, authenticate authorized users, provide customer support, and deliver contracted services. This may include user credentials, account permissions, platform activity, and information relating to client organizations and their portfolio companies.
C. Healthcare and Pharmacy Claims Data
As part of our healthcare intelligence services, Claren may receive or access healthcare and pharmacy claims data and related information provided by or on behalf of authorized clients, group health plans, plan administrators, third-party administrators, pharmacy benefit managers, or other authorized data sources.
Depending on the data provided and the applicable agreements, this information may include:
Medical and pharmacy claims and associated cost information.
Healthcare utilization, prescription utilization, and plan performance data.
Healthcare plan design, eligibility, enrollment, and benefit information.
Provider, service, prescription, and claims payment information.
Other data reasonably necessary to perform contracted analytics and reporting services.
Healthcare and pharmacy claims data may contain PHI or other sensitive information. Claren processes such data only as permitted by applicable law, client instructions, and contractual obligations.
Where appropriate and authorized, Claren may use aggregated, de-identified, or statistical information to evaluate healthcare spending, identify cost trends, benchmark plan performance, and develop analytical insights. Information will be treated as de-identified only when the applicable legal requirements for de-identification have been satisfied.
3. How We Use Information
Claren uses information for legitimate business purposes and to provide, maintain, and improve its services. Depending on the information and applicable permissions, these purposes may include:
Providing healthcare cost transparency, analytics, reporting, and intelligence.
Analyzing medical and pharmacy claims data to identify spending patterns, utilization trends, potential inefficiencies, and cost-saving opportunities.
Helping authorized private equity sponsors and portfolio companies evaluate healthcare benefit plan performance and financial exposure.
Supporting due diligence, post-acquisition analysis, portfolio monitoring, and ongoing healthcare cost management, where authorized.
Identifying potential financial, operational, and compliance risks within healthcare benefit programs.
Providing dashboards, benchmarking, reports, and actionable insights to authorized users.
Administering user accounts, verifying access permissions, and maintaining platform security.
Responding to client requests, providing technical support, and fulfilling contractual obligations.
Monitoring platform performance, troubleshooting issues, and improving our software and analytical capabilities.
Meeting legal, regulatory, security, and contractual requirements.
Claren does not use PHI for marketing, advertising, or other purposes unrelated to authorized services unless expressly permitted by applicable law and the relevant agreements.
4. Cookies, Analytics, and Similar Technologies
Claren may use cookies, pixels, web beacons, and similar technologies on its website to support website functionality, understand visitor engagement, measure marketing effectiveness, and improve the user experience.
These technologies may collect information such as browser type, device characteristics, pages viewed, time spent on the website, and referring sources.
Where applicable, we may use third-party website analytics providers to help us understand website traffic and usage patterns. Such providers may process information in accordance with their own privacy policies and the configuration of the services we use.
You may be able to manage cookies through your browser settings or available consent tools. Disabling certain cookies may affect website functionality. Where required by applicable law, Claren will provide appropriate notice and consent or opt-out mechanisms for relevant tracking technologies.
Website analytics and advertising technologies are separate from the processing of healthcare claims data through our client services.
5. How We Share Information
Claren does not sell personal information or PHI in exchange for monetary consideration. We may disclose information in the following circumstances, subject to applicable law and contractual restrictions.
A. Clients and Authorized Users
We may make information and analytical results available to the client that provided the data or is otherwise authorized to receive them. Access to healthcare and pharmacy claims information is subject to applicable permissions, agreements, and legal requirements.
B. Service Providers
We may engage trusted third-party service providers to support hosting, cloud infrastructure, cybersecurity, data processing, analytics, technical support, and other business operations. These providers may access information only as necessary to perform their contracted services and are subject to appropriate confidentiality, security, and contractual obligations.
Where PHI is involved, applicable HIPAA requirements and BAAs will govern the service provider's role when required by law.
C. Legal and Regulatory Requirements
We may disclose information when reasonably necessary to comply with applicable laws, regulations, court orders, or lawful governmental requests; enforce our agreements; protect our rights or property; or address security threats, fraud, or other unlawful activity.
Any disclosure of PHI will be subject to applicable law and the permissions and restrictions governing that information.
D. Business Transactions
Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, or sale of all or part of our business, subject to applicable confidentiality, privacy, and legal requirements.
E. With Authorization or Direction
We may disclose information when authorized by the relevant client, individual, or other party with appropriate authority, or as otherwise permitted by applicable law.
6. Data Security and Retention
Claren uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, disclosure, alteration, or destruction.
Depending on the services and applicable contractual requirements, safeguards may include access controls, authentication, encryption, monitoring, personnel confidentiality obligations, and security procedures.
No method of electronic storage or transmission can be guaranteed to be completely secure. Accordingly, Claren cannot guarantee absolute security.
We retain information for as long as reasonably necessary to fulfill the purposes described in this Policy, provide contracted services, comply with legal obligations, resolve disputes, and enforce agreements. Healthcare data retention and deletion are also governed by applicable law and our agreements with clients.
7. HIPAA Privacy and Security
When Claren creates, receives, maintains, or transmits PHI on behalf of a HIPAA-regulated covered entity or another business associate, Claren may act as a Business Associate under HIPAA, as applicable.
In such circumstances, Claren's use and disclosure of PHI are governed by HIPAA, applicable regulations, and the relevant client agreements and BAAs.
Claren will use and disclose PHI only as permitted or required by applicable law and the applicable BAA. Claren will implement safeguards appropriate to the information and services provided and will comply with applicable obligations relating to security, permitted disclosures, reporting of certain incidents, and cooperation with its covered entity clients.
Individuals' HIPAA rights concerning PHI maintained by or on behalf of a group health plan generally should be directed to the applicable health plan or its designated privacy contact. Claren will assist its covered entity clients with applicable obligations as required by law and the relevant BAA.
This Policy does not replace a group health plan's Notice of Privacy Practices or any other notice that a covered entity is legally required to provide.
8. De-Identified and Aggregated Information
Claren may use or disclose aggregated or de-identified information for purposes permitted by law and applicable client agreements, including benchmarking, statistical analysis, evaluating healthcare cost trends, improving analytical methodologies, and developing or enhancing its services.
Where HIPAA applies, information will be considered de-identified only when it satisfies the applicable HIPAA de-identification standard. Claren will not represent information as HIPAA-de-identified merely because direct identifiers have been removed.
Claren will not attempt to re-identify de-identified PHI except as permitted by applicable law.
9. Third-Party Websites
Our website or platform may contain links to third-party websites, applications, or services. Claren does not control the privacy practices of those third parties and is not responsible for their content or policies.
We encourage users to review the privacy policies of third-party websites and services before providing personal information.
10. Your Privacy Rights and Choices
Depending on your state or jurisdiction of residence, you may have certain rights regarding personal information, subject to applicable legal exceptions. These rights may include the right to request access to, correction of, or deletion of certain personal information, or to opt out of certain types of processing.
To submit a privacy request, please contact Claren using the contact information provided below. We may need to verify your identity and authority before processing a request.
Requests relating to PHI maintained by a group health plan should generally be directed to that health plan or its designated privacy contact. Rights and procedures concerning PHI are governed by HIPAA and other applicable laws.
11. Children's Privacy
Claren's website and business services are intended for business users and are not directed to children under 13. Claren does not knowingly collect personal information directly from children under 13 through its website. If we become aware that we have collected such information in circumstances where consent or other action is required by law, we will take appropriate steps.
12. Changes to This Privacy Policy
Claren may update this Privacy Policy periodically to reflect changes in our business practices, technology, services, or legal obligations. We will post the updated Policy on our website and revise the effective date as appropriate.
Where required by applicable law, we will provide additional notice of material changes.
13. Contact Us
For questions about this Privacy Policy or to submit a privacy-related request, please contact:
Claren Analytics
Attention: Privacy Officer