Last Updated: January 9, 2023
The UserWeb is a virtual home where the Epic community can share information and ideas across organizational borders. Epic also uses the UserWeb as a communication platform for announcements, such as new company initiatives and software features. The UserWeb also serves as a hub that links to other Epic-created resources, such as: Galaxy, Nova, Sherlock, WeLearning, ideas.epic.com, the Data Handbook, the Community Library, Vendor Services Developer Forums, and others ("UserWeb-Connected Sites").
This Privacy Policy provides information about how Epic collects and uses information you share when you visit the UserWeb or the UserWeb-Connected Sites. Epic may update this Privacy Policy, or other privacy notices for other Epic websites at any time, and future updates to the Privacy Policy will be effective as soon as they are posted on this page. If you are interested, you should check back from time to time to review the most current version of this Privacy Policy.
If you are a Vendor Services vendor without a UserWeb account, please review the Vendor Services Privacy Policy for details related to use of Vendor Services web resources. The information in this UserWeb Privacy Policy applies to your use of the Vendor Services Developer Forums, Sherlock, or other UserWeb-Connected Sites you may access with your Vendor Services account.
We collect certain personal information to set up a user account with the UserWeb (Note: if you are a Vendor Services vendor without a UserWeb account, please review the Vendor Services Privacy Policy for details related to your account). This information is collected from your employer (if a UserWeb account is set up on your behalf as part of your role supporting an Epic system) or from the UserWeb registration form if you create a UserWeb account with Epic directly. For Epic customer staff, the information collected may include:
For others, the information collected may include:
You can also provide information directly to the UserWeb or UserWeb-Connected Sites by posting on forums, creating or updating a support log in Sherlock, posting a question in the Data Handbook, or other mechanisms. Epic collects and maintains this data in the course of making the UserWeb and UserWeb-Connected Sites available to you and other users of the UserWeb and UserWeb-Connected Sites. Epic's use of the information you share through the UserWeb or UserWeb-Connected Sites may also be subject to terms and policies specific to particular UserWeb-Connected Sites, such as Sherlock.
Additionally, you may contact us through our UserWeb points of contact or reach out to an Epic representative directly, and we may keep a record of the communication. You can decide how much information you want to share with us in those cases.
When you communicate with us or access the UserWeb or UserWeb-Connected Site through a browser, application, or other client, our servers automatically collect and record information. In most cases, this information is generated by various tracking technologies, such as "cookies," "flash LSOs," "web beacons" or "clear GIFs." You can read more about how we use cookies below.
Your browser or device may tell us:
Your browser may also tell us information such as:
We use cookies to collect information about access to and use of the UserWeb and UserWeb-Connected Sites. These cookies are used to:
The cookies on the UserWeb and UserWeb-Connected Sites may collect the following types of data to facilitate the types of use listed above:
You may adjust cookie usage in your browser settings.
Some web browsers and operating systems include a Do-Not-Track (DNT) setting that you can activate to signal your preference not to have information about your online activities monitored. There is currently no uniform standard for recognizing and implementing DNT signals. As a result, the UserWeb and UserWeb-Connected Sites do not respond to DNT signals. If a standard for recognizing DNT signals is adopted in the future and we follow that standard, we will inform you about our approach in an update to this Privacy Policy.
The information that you provide us when you use the UserWeb and UserWeb-Connected Sites is retained and processed by Epic. We may use the information you provide for purposes such as:
Epic has a legitimate interest in processing your data in order to allow you to use the UserWeb and UserWeb-Connected Sites.
All Epic staff have access to the UserWeb. All individuals with access to the UserWeb or Vendor Services may see some of your personal information if you have a UserWeb account or if you access any UserWeb-Connected Sites with a Vendor Services account. Certain other information (such as how you use the UserWeb and UserWeb-Connected Sites) is collected by Epic and may be accessible by certain Epic staff to provide technical support or development for the UserWeb and UserWeb-Connected sites.
Some individuals may access ideas.epic.com without a UserWeb account. Those individuals have access to ideas.epic.com via Epic Earth, via a Hyperspace session at a healthcare organization that uses Epic, or via a read-only link to a specific idea on ideas.epic.com. In these cases, these individuals may view your name, role, organization, and ideas or comments you have posted on ideas.epic.com.
Epic will retain your information for as long as it makes use of such information. By creating your UserWeb account, you agree to allow us to keep your information on file in accordance with this Privacy Policy. If you have a Vendor Services account and access the Vendor Services Developer Forums or Sherlock without a UserWeb account, view the Vendor Services Privacy Policy for information related to your use of Vendor Services.
If you are a data subject as defined by the General Data Protection Regulation, (EU) 2016/679, you have a number of rights and can do any of the following by contacting Epic at EUPrivacyInquiries@epic.com:
Please note that if you contact us to assist you, for your safety and ours we may need to authenticate your identity before fulfilling your request.
We use a combination of process, technology, and physical security controls to help protect your information from unauthorized access, use, or disclosure, but remember that no method of transmission over the Internet, or method of storage, is 100% secure.
When you create a user account with the UserWeb and submit your information through the UserWeb or UserWeb-Connected Sites, that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a closed lock icon at the top or bottom of your web browser, or looking for "https" at the beginning of the URL address of the web page. We have internal policies and processes directed toward limiting access to your information to those employees, contractors, and agents of Epic who need to know such data to perform their jobs and develop or improve our websites, products, and services.
The UserWeb and UserWeb-Connected Sites may contain links to other websites. Please be aware that Epic is not responsible for the content or privacy practices of other websites. We encourage you to be aware when you leave the UserWeb or a UserWeb-Connected Site and to read the privacy statements of any other website that collects your information.
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit our CCPA privacy notice for California residents.
If you have questions or concerns about the UserWeb, please contact us at userwebsupport@epic.com. If you have any questions about this Privacy Policy or other privacy concerns, you may contact Epic at 608-271-9000 or at PrivacyInquiries@epic.com. In any correspondence, please include the website or reason that led you to contact us. If you need to contact Epic's Data Protection Officer or EU Representative as defined by the General Data Protection Regulation, (EU) 2016/679, please email EUPrivacyInquiries@epic.com or call +1 608-271-9000.