Privacy Policy
Last reviewed: September 2026
This policy explains how HealthSignals collects and processes personal data through healthsignals.news (the “Site”), and the rights available in respect of that data.
1. Controller
1.1 The Site is published by HEALTHSIGNALS LLC, a Florida limited liability company with its principal office in Miami, Florida, United States (“HealthSignals”), which is the controller of personal data collected through the Site.
1.2 All matters arising under this policy: privacy@healthsignals.news
1.3 HealthSignals is established in the United States and processes personal data there. It publishes to readers in the United States, Latin America and Europe, and applies this policy to all of them. Where the law of a reader’s country of residence affords rights beyond those set out in the general text, the corresponding annex applies.
2. Personal data collected
2.1 Newsletter registration. Name and email address, provided by the subscriber on registering for The HealthSignals Brief.
2.2 Report registration. Business email address, job title, organisation and country, provided by the registrant.
2.3 Correspondence. Name, email address and the content of any message sent to HealthSignals.
2.4 Site usage. Pages accessed, approximate location derived from IP address, referring source, device and browser characteristics, and duration of visit.
2.5 Technical records. IP addresses and request data recorded by the hosting infrastructure for security and diagnostic purposes.
2.6 HealthSignals does not collect health data relating to readers and does not request it. HealthSignals reports on the healthcare sector and is not a provider of healthcare services.
2.7 HealthSignals does not acquire personal data from data brokers, and does not purchase or rent subscriber lists.
2.8 Business contacts. Separately from the Site, HealthSignals maintains professional contact details of individuals in the healthcare sector, obtained from publicly available professional sources, for the purpose of business correspondence relating to the publication. Those records are held separately from subscriber data and are never merged with it. Any person contacted on that basis may decline further contact at the first message, and no further contact is made. Requests relating to those records may be addressed to privacy@healthsignals.news on the same terms as any other request under this policy.
2.9 Engagement data. Where a reader has registered for The HealthSignals Brief or for a report, the pages read on the Site and the emails opened may be associated with that registration record, so that HealthSignals can understand which coverage is read by its registered readership.
3. Purposes and legal bases
|
Purpose |
Data used |
Legal basis |
|
Delivery of The HealthSignals Brief |
2.1 |
Consent |
|
Delivery of a registered report to the registrant |
Business email address within 2.2 |
Performance of a contract |
|
Understanding the professional composition of our readership |
2.1, 2.2, 2.4 |
Legitimate interests |
|
Aggregate description of readership to commercial partners |
2.1, 2.2, 2.4 |
Legitimate interests |
|
Response to correspondence |
2.3 |
Legitimate interests |
|
Measurement of readership and security of the Site |
2.4, 2.5 |
Legitimate interests |
|
Business correspondence with professional contacts |
2.8 |
Legitimate interests |
|
Association of site and email activity with a registration record |
2.9 |
Legitimate interests. In the European Economic Area and the United Kingdom, consent, the relevant cookie being set only with consent |
|
Compliance with legal obligations |
as required |
Legal obligation |
3.1 Consent may be withdrawn at any time. Every issue of The HealthSignals Brief contains an unsubscribe facility which takes effect on use.
3.2 Where HealthSignals relies on legitimate interests, it has assessed that those interests are not overridden by the rights of the data subject, and will provide the substance of that assessment on request.
3.3 Readership is described to commercial partners only in aggregate. No commercial partner receives the identity, contact details or individual record of any subscriber or registrant.
4. Recipients
4.1 HealthSignals does not sell personal data and does not disclose subscriber or registrant identities to advertisers, sponsors or commercial partners.
4.2 Personal data is processed on behalf of HealthSignals by service providers in the following categories, each engaged under a written data processing agreement and each permitted to process personal data only on documented instructions:
(a) email delivery and subscriber management;
(b) measurement of site usage;
(c) content delivery and site performance;
(d) website hosting and security.
4.3 A current list of the individual providers in each category is available on request to privacy@healthsignals.news.
4.4 Disclosure may also be made where required by law, or where necessary to establish, exercise or defend a legal claim.
5. International transfers
5.1 HealthSignals processes personal data in the United States. All service providers engaged by HealthSignals process personal data in the United States.
5.2 Personal data relating to readers outside the United States is therefore transferred to the United States. Where such a transfer requires a safeguard under the law applicable to the reader — including transfers from the European Economic Area, the United Kingdom and Brazil — it is made under Standard Contractual Clauses or an equivalent mechanism recognised by that law, with supplementary measures applied where required.
5.3 A copy of the relevant transfer mechanism is available on request.
6. Retention
|
Data |
Retained |
|
Newsletter registrations |
For the duration of the subscription, and twelve months thereafter |
|
Report registrations |
Thirty-six months from the last interaction |
|
Correspondence |
Twenty-four months |
|
Business contact records |
Thirty-six months from the last interaction |
|
Usage data |
Fourteen months, in aggregate form |
|
Technical records |
Ninety days |
Personal data retained beyond these periods is retained only where a legal obligation requires it, or where it is necessary to establish, exercise or defend a legal claim.
7. Rights
7.1 Subject to the annex applicable to your jurisdiction, you may request:
(a) confirmation of whether HealthSignals processes personal data relating to you, and access to that data;
(b) rectification of inaccurate or incomplete data;
(c) erasure of your data;
(d) transmission of your data in a structured, machine-readable format, to you or to another controller;
(e) restriction of processing;
(f) objection to processing carried out on the basis of legitimate interests;
(g) withdrawal of consent previously given.
7.2 HealthSignals does not carry out automated decision-making producing legal or similarly significant effects, and does not profile readers for that purpose.
8. Erasure
You may request the deletion of your personal data at any time by writing to privacy@healthsignals.news. No reason need be given.
Requests are actioned within thirty days. Identity will be verified before a request is actioned, so that the rights of a data subject cannot be exercised by another person. Where data must be retained to meet a legal obligation, you will be told which data and on what basis.
9. Children
The Site is directed at a professional readership and is not intended for persons under the age of sixteen. HealthSignals does not knowingly collect personal data from children. Any such data identified will be deleted. Notice may be given to privacy@healthsignals.news.
10. Security
Transport layer encryption is applied across the Site. Access to subscriber and registrant data is restricted to those who require it. Service providers are engaged on the basis of recognised security standards. No system affords absolute security, and HealthSignals does not represent otherwise. Where a personal data breach presents a risk to data subjects, notification will be made to those affected and to the competent authority within the periods prescribed by the applicable law.
11. Amendment
Amendments to this policy are published on this page and the date above revised. Where an amendment materially affects the rights of subscribers, notice is given by email before it takes effect. Previous versions are available on request. The terms on which the Site is made available are published separately at Terms of Use.
Anexes
Each annex applies exclusively to readers resident in the jurisdictions named. Where an annex conflicts with the general text above, the annex prevails for readers resident in those jurisdictions. HealthSignals is established in the United States and maintains no establishment elsewhere; the controller identified at clause 1 is the controller in every case.
Annex A — European Economic Area and United Kingdom
HealthSignals is established in the United States, has no establishment in the European Economic Area or the United Kingdom, and does not direct its publication at either territory. It publishes in English only, charges nothing for access to the Site, and conducts no marketing addressed to those territories.
As a matter of policy, and irrespective of whether the General Data Protection Regulation or the UK GDPR applies to a given reader, HealthSignals extends to readers resident in the European Economic Area and the United Kingdom the following:
The rights set out at clause 7 in full, including the right to data portability and the right to object to processing carried out on the basis of legitimate interests.
Measurement and marketing attribution cookies are set only with your consent, obtained before any such cookie is placed. Consent may be withdrawn at any time through the cookie preferences control.
Personal data transferred to the United States is transferred under the mechanism described at clause 5.
Where either regime does apply to you, nothing in this policy limits the rights it confers, including any right to lodge a complaint with the supervisory authority of the Member State of your residence or place of work, or, in the United Kingdom, with the Information Commissioner’s Office. You are not required to contact HealthSignals first, although we would prefer the opportunity to resolve the matter.
To exercise rights: privacy@healthsignals.news
Annex B — Latin America
Brazil, Mexico, Colombia, Argentina, Chile and Peru.
Processing is carried out in accordance with the data protection law of your country of residence.
You hold rights of access to your personal data, its rectification, its updating, its deletion, opposition to its processing, and withdrawal of consent previously given. You may request confirmation of the existence of processing, and information as to the parties with whom your data has been shared. Where processing is unnecessary, excessive or carried out in breach of the applicable law, you may request that the data be anonymised, blocked or deleted.
HealthSignals carries out no decision-making based solely on automated processing, and readers accordingly have nothing to seek review of on that basis.
A request should identify you, describe the data concerned and the right you wish to exercise, and be accompanied by evidence of identity. Requests are answered within thirty days, or within any shorter period prescribed by the law of your country.
Where a request is not resolved to your satisfaction, you may apply to the supervisory authority of your country: the Autoridade Nacional de Proteção de Dados in Brazil, the Secretaría Anticorrupción y Buen Gobierno in Mexico, which has exercised the personal data protection functions of the former Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales since March 2025, the Superintendencia de Industria y Comercio in Colombia, the Agencia de Acceso a la Información Pública in Argentina, and the competent authority in Chile and Peru respectively.
To exercise rights: privacy@healthsignals.news
Annex C — United States
Several United States states have enacted comprehensive consumer privacy legislation. HealthSignals does not meet the applicability thresholds of most of those statutes, including the Florida Digital Bill of Rights, which applies only to controllers with global revenues above one billion dollars. As a matter of policy, and regardless of whether a statute obliges it to do so, HealthSignals extends to residents of every such state the rights to know what personal information is collected and for what purpose; to access it; to correct it; to delete it; to obtain it in a portable form; and to opt out of its sale or sharing and of targeted advertising.
HealthSignals does not sell personal information and does not share it for cross-context behavioural advertising. No opt-out is therefore required, although one may be exercised at any time by writing to us.
You may not be treated differently for exercising these rights.
If HealthSignals declines to act on a request, you will be told why, and you may appeal that decision by writing to privacy@healthsignals.news with the word “appeal” in the subject line. An appeal is answered within sixty days, with a written explanation of the decision reached.
To exercise rights: privacy@healthsignals.news
Cookie Policy
C1. Consent
Readers in the European Economic Area and the United Kingdom are asked for consent before any cookie other than a strictly necessary one is set, and may change that choice at any time through the cookie preferences control. Elsewhere, measurement and marketing attribution cookies are set on the basis of legitimate interests and may be blocked through browser settings or through the same control.
C2. What cookies are used
Strictly necessary. Enable the Site to function: routing requests, maintaining a session, load balancing, and protecting against fraudulent or abusive traffic. The Site cannot operate without them.
Measurement. Record which articles are read, for how long, from what source and on what type of device, so that HealthSignals can understand which coverage is worth producing.
Marketing attribution. Set by our email platform. They record the campaign or source through which a reader arrived and, where a reader has registered, associate site activity with that subscriber record. They are used to understand which coverage brings readers to us. They are not shared with advertisers or commercial partners.
Preference. Retain choices made by the reader, including the cookie choice itself. Set only once a choice has been made.
C3. Advertising
HealthSignals sells advertising space on the Site. Advertising creative is hosted by HealthSignals and served from its own infrastructure. Advertisers do not place their own code on the Site, do not set cookies on it, and receive no information identifying individual readers. Advertising performance is reported to advertisers in aggregate only.
HealthSignals does not participate in any advertising network, does not conduct behavioural or interest-based advertising, and does not permit third parties to build advertising profiles of its readers.
C4. Managing cookies
Cookies may be blocked or deleted at any time through browser settings, and every major browser publishes instructions for doing so. The Site remains functional if measurement, attribution and preference cookies are blocked; blocking strictly necessary cookies may prevent parts of it from working. Readers who have given consent may withdraw it at any time through Cookie preferences in the footer.
C5. Duration
Session cookies are deleted when the browser is closed. Persistent cookies expire no later than twelve months after they are set, or on deletion by the reader.