Effective: September 12, 2017
This Policy applies only to information collected on or through the Platform. It does not apply to information collected or obtained through any other means (including, without limitation, information collected through other St. Jude websites or mobile applications, offline, in person, or from third parties outside the Platform).
We may collect and store information about you in various ways. For example, we may collect information that you provide to us, information that we automatically collect through your use of the Platform or the DNAnexus platform, and information from publicly available sources or non-affiliated third parties.
Information You Provide to Us
When you use the Platform, you may be invited to provide or upload information that St. Jude may access. For example, St. Jude may collect the following illustrative (but not exhaustive) types of information when you use the Platform:
In addition, you may upload DNA and RNA sequence data, metadata, other information related to such sequence data, or other information or files held within the user-specific project on the St. Jude Cloud Platform or on DNAnexus (collectively, 'User Project Data'). St. Jude does not intend to access User Project Data unless You explicitly grant access the St Jude. In rare circumstances, St Jude may work with DNAnexus to gain access and/or remove User Project Data. St. Jude reserves the right to access or remove User Project Data if necessary to provide the St. Jude Cloud Platform services as offered, for security and fraud-prevention purposes, for the protection of St. Jude and its agents, and as required by law.
You may also provide certain financial account information to DNAnexus and/or payment processors to make a payment, including bank account and/or credit card information. This information is collected and stored by DNAnexus and/or payment processing partners. We do not access, store or collect your financial account or credit card information.
Information that Is Collected Automatically and/or Passively
In addition to the information you provide to us directly, we may automatically collect information about your use of the Platform as follows:
Information from Third-Party Sources
We may receive information about you from publicly and commercially available sources, as permitted by law, which we may combine with other information we receive from or about you.
In conjunction with the gathering of data through cookies, Web servers may log records such as your device type, operating system type, device advertising identifier, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. The Web server logs also may record the address of the Web page that referred you to the Platform, the IP address (and associated city and state or province for the IP address) of the device you use to connect to the Internet, and data about your interaction with the Platform, such as which pages you visit.
We do not recognize or respond to browser-initiated Do Not Track signals, as the Internet industry is currently still working on Do Not Track standards, implementations, and solutions.
We may use your information for any of the following reasons:
We may combine information that we collect from you through the Platform with information that we obtain from affiliated and non-affiliated third parties, and information derived for any other products or Platforms we provide.
We may aggregate and/or de-identify information collect through the Platform. We may use de-identified or aggregated data for any purpose, including without limited for research and marketing purposes and may also share such data with any third parties.
The following provides information about entities with whom we may share information. Our practices may vary depending on the type of information.
Affiliates and Partners . We may share information with our affiliates. Information may also be available to Platform Partner, DNAnexus, as described in its privacy policies and terms. See https://www.dnanexus.com/terms, https://www.dnanexus.com/privacy.
Service Providers. We may share information with third parties that help us operate our business and provide our services, such as contractors that provide us with technology, services, data or content.
Other Parties When Required by Law or as Necessary to Protect Our Users and the Platform . We may share information when we believe that doing so is necessary to protect, enforce, or defend the legal rights, privacy, safety, or property of St. Jude, our employees or agents or users, or to comply with applicable law or legal process, including responding to requests from public and government authorities.
Business Transfers . We may transfer the information we hold in the event we sell or transfer all or a portion of our business or assets (such as in connection with a merger, acquisition, reorganization, dissolution or liquidation) or in connection with steps we take in anticipation of such a transaction.
Aggregated or De-Identified Information. We may share aggregated or de-identified data without restriction.
Otherwise with Your Consent or at Your Direction . In addition to the sharing described in this Policy, we may share information with third parties whenever you consent to or direct such sharing.
The Platform allows you to upload and share the sequence data, reference genomes, and other information ('User Data') you submit to the Platform with other Users of the Platform. St. Jude is not responsible for such other Users' use of User Data. You understand and acknowledge that, if you choose to share User Data with other Users, such information might be copied or redistributed by those Users. Even after you remove information from your account or delete your account, copies of that User Data may remain viewable elsewhere to the extent it has previously been shared with others.
YOU AGREE THAT YOU MAY NOT UPLOAD ANY PERSONAL HEALTH INFORMATON OR PERSONALLY IDENTIFYING INFORMAITON AS DEFINED BY APPLICABLE LAW IN THE UNITED STATES OR THE YOUR COUNTRY OF RESIDENCE OR THE COUNTRY AND LOCATION FROM WHICH THE DATA IS UPLOADED TO THE ST. JUDE CLOUD PLATFORM.
We do not knowingly collect any personal information on this Platform directly from children under the age of 13 without parental consent, unless permitted by law. If we learn that a child under the age of 13 has provided us with personal information (as defined by the Children's Online Privacy Protection Act), we will delete it in accordance with applicable law.
We employ administrative, technical, and physical security measures to help protect information from unauthorized access. These measures vary depending on the sensitivity of the information we have collected. However, no method of transmission over the Internet or via mobile device, or method of electronic storage, is absolutely secure. Therefore, while we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
The Platform may contain links to third-party websites or services. If you choose to use these sites or services, you may disclose your information not just to those third parties, but also to their users and the public more generally depending on how their services function. Because these third-party websites and services are not operated by St. Jude, St. Jude is not responsible for the content or practices of those websites or services. The collection, use, and disclosure of your personal and other information will be subject to the privacy policies of the third party websites or services, and not this Policy. We urge you to read the privacy and security policies of these third parties.
St. Jude does not disclose your personal information to third parties for the purpose of directly marketing their services to you unless you first agree to such disclosure.
Manage Your Account Information. You may modify your account information by logging into your account through http://platform.dnanexus.com.
Our computer systems are currently based in the United States, so your data will be processed by us in the United States. If you create an account with the Platform as a visitor from outside the United States, by using the Platform, you agree to this Policy and you consent to the transfer of all such information to the United States and to the processing of that information as described in this Policy, and you represent and warrant that you have obtained all appropriate consents from the person who owns the data and the person from whose tissue the data was derived for the processing and storage of the data in the United States.
If you wish to provide feedback to us regarding the Platform, please contact us at https://stjude.cloud/contact.
If you have any questions about St. Jude Children's Research Hospital or our privacy protections, please contact us at firstname.lastname@example.org.