Magnus Health Website Privacy Policy

Last Updated: January 2026

We at Magnus Health are committed to protecting the information we have about you.  We are committed to being transparent about our practices surrounding how we manage and store your information.

Our Website Privacy Policy below describes how we collect personal information, how we protect that information, and what we do with it.

1. What This Privacy Policy Covers

This Privacy Policy describes how we, Magnus Health, LLC, collect, use and disclose personal information that we collect and receive through our public website (located at www.magnushealth.com) (the “Website”), and our Magnus Health Community website accessible at https://community.magnushealth.com/ (the “Community Site”).

This Privacy Policy does not apply to any personal information processed in connection with our main Magnus Health service (located at https://secure.magnushealthportal.com), our apps for smartphones and tablets, or our website www.magnus911.com, all of which are for the use of our onboarded customers.

In our processing of personal information in connection with services, we provide to our school or camp customers (our “Customers”), we act as a data processor under applicable data privacy laws, and in that context our Customers act as data controllers on behalf of which we process data for purposes of our services. When we act as data processor our processing of personal information isn’t governed by this Privacy Policy but by our Data Processor Agreement or other data processing terms in place between Magnus Health and each Customer. For more information on our processing as a data processor, please contact the school or camp that collected your personal information in connection with our services.

This Privacy Policy uses the term “Personal Information” to refer to any information about a person which can be used to identify them or to distinguish them from other people. Personal Information includes information like a person’s name, address, or phone number.

By accessing and using our Website and Community Site, you agree that you have read and understand this Privacy Policy and you consent to the privacy practices (and any uses and disclosures of information about you) that are described in this Privacy Policy. Please read carefully this Privacy Policy together with any other privacy notice we may provide on specific occasions when we are collecting or processing Personal Information about you so that you understand how we collect, share, and protect your information. This Privacy Policy supplements other notices and privacy policies and is not intended to override them.

2. Personal Information We Collect

We collect the following Personal Information from or about you:

Name, email and contact information when you visit our Website and request information regarding our Services on the Request a demo page, when you visit our Community Site, when you download Magnus Health resources on our Resource Center, or when you send us email or connect with us through our social media company pages;
Internet or other electronic network activity information, including, but not limited to, information about your browser, software, equipment, IP address, domain names, access times, browsing history, search history, and information regarding your interaction with an internet website, application, cookie, or advertisement.

We also collect statistics or aggregated information. Statistical or aggregated data does not directly identify you, but we may derive non-personal statistical or aggregated data from your Personal Information. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Website or Community Site feature.

If we combine or connect non-personal statistical or technical data with Personal Information so that it directly or indirectly identifies an individual, we treat the combined information as Personal Information.

We may receive Personal Information about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as recruitment services providers.

Please note that our Community Site is not designed for Sensitive Information. We do not intend to collect or process Sensitive Information through the Community Site services. Please do not submit Sensitive Information in any part of the services accessible through the Community Site, including free-text fields, uploads, attachments, custom properties, tags, tickets, logs, screenshots, or screen recordings.

For this Privacy Policy, “Sensitive Information” means information that law treats as requiring extra protection, including:

U.S. Users: “Sensitive Information” under the CPRA and “Sensitive Data” under other state privacy laws (e.g., government IDs such as SSN, driver’s license/passport; financial account numbers with passwords/access codes; precise geolocation as defined by law; health information/genetic/biometric identifiers; race/ethnicity, religion, union membership; sexual orientation/sex life; citizenship/immigration status; contents of communications where we’re not the intended recipient; and children’s data).
Canadian Users: information treated as sensitive under federal and provincial law—PIPEDA (sensitivity is context-dependent, with categories like Medical/income deemed typically sensitive) and Québec’s Law 25 (personal information is “sensitive” where, due to its nature — e.g., medical/biometric — or the context, it entails a high expectation of privacy). It also includes government identifiers such as SIN and provincial health numbers and comparable identifiers.
All Users: this also includes government-issued identifiers; full financial account numbers with access credentials, and any other information that applicable law classifies as sensitive, or that a reasonable person would consider highly confidential.

Please avoid including Sensitive Information in emails to us, support tickets or chat. If you need help that might involve Sensitive Information, contact us at privacy@magnushealth.com so we can suggest alternatives.

If we learn that Sensitive Information was submitted in violation of this section, we may take reasonable steps to delete, redact, or restrict that data and contact the submitter to help remediate. Where deletion is not technically feasible, we will minimize further processing and apply appropriate safeguards. These actions are without prejudice to any rights you may have under applicable law (e.g., access, deletion, or restriction requests).

3. What we do with Your Personal Information

We use information that we collect about you or that you provide to us, including any Personal Information:

To provide you with a demo of our Services, at your request.
To provide our Community Site services.
To fulfill any other purpose for which you provide it.
In any other way we may describe when you provide the information.
For any other purpose with your consent.

The usage information we collect, whether connected to your Personal Information or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to:

Estimate our audience sizes and usage patterns.
Speed up your searches.
Recognize you when you return to our Website and/or Community Site.

4. Who We Disclose Your Information To

We may provide Personal Information to our affiliates, and to companies that assist us in providing services, such as a hosting provider, a marketing services provider (e.g. Demandbase), an analytics services provider, or an online customer service provider.

These companies are authorized to use Personal Information only as necessary to provide these services. If any of these providers receive Personal Information, we will ensure that they are bound to restrictions at least as protective of Personal Information as set out in this Privacy Policy.

We may also disclose your Personal Information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us is among the assets transferred. In such event we will ensure that the acquirer adheres to substantially equivalent privacy principles as those contained in this Privacy Policy.

5. Disclosures for Legal Reasons

In certain situations, we may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose Personal Information in response to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims.

In addition, we may share Personal Information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our terms of use, or as otherwise required by law.

When we make any disclosure of Personal Information described by this section, we will limit the disclosure to only the minimum amount of information which is necessary, and will attempt to ensure that any information we do disclose is kept protected by, for example, submitting it under seal, obtaining a protective order or by requiring the party to whom it is disclosed to agree to keep the information confidential.

6. When we delete Personal Information

We generally keep Personal Information for the duration required to comply with legal requirements. We will, however, hold it longer if we have a legal obligation to keep it for longer, if we require it to resolve a legal dispute, and for safety, security and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain Personal Information.

We will delete your Personal Information when we determine that it is no longer useful to us, when required by law, or in accordance with our internal data retention practices and policies.

7. Children

Our Website and Community Site are not intended for visitors under 18 of age. No one under 18 may provide any personal information to or on the Website or Community Site. We do not knowingly collect personal information from children. If you are under 18, do not use or provide any information on this Website or on our Community Site, or through any of their respective features, or provide any information about yourself to us, including your name, address, telephone number, or email address. If we learn we have collected or received personal information from a child through the Website or the Community Site, we will delete that information. If you believe we might have any information from or about a child, please contact us at privacy@magnushealth.com.

8. International Transfers (Canadian residents)

We largely operate in the United States (“U.S.”), and therefore, if you reside in Canada you understand and agree that your Personal Information may be transferred to, stored or processed in, the U.S. by us and our third-party hosting providers. Furthermore, you understand that U.S. law may not afford the same level of protection to personal information as those afforded in Canada. Personal Information may be transferred for the performance of a contract or as required for the implementation of pre-contractual measures taken at your request or to establish or exercise our legal rights. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of the United States may be able to obtain access to your Personal Information through the laws of the United States.

Whenever we engage a service provider, we require that its privacy and security standards adhere to this policy and applicable Canadian privacy legislation.

If you want further information on the specific mechanism used by us when transferring your Personal Information out of Canada, please contact us.

9. Access and Changes to Your Data

U.S. Residents: Your State Privacy Rights

Depending on your state of residency, you may have certain rights related to your Personal Information, including:

Access and Data Portability. You may confirm whether we process your Personal Information and access a copy of the Personal Information we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information and it will be included in the response to your access request.
Correction. You may request that we correct inaccuracies in your Personal Information that we maintain, taking into account the information’s nature and processing purpose.
Deletion. You may request that we delete Personal Information about you that we maintain, subject to certain exception under applicable law.
Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. You may request that we do not use your Personal Information for these purposes.

Important: The exact scope of these rights varies by state. There are also several exceptions where we may not have an obligation to fulfill your request.

If you are a California resident, additional information applies to you. You can access our supplemental California privacy statement and learn more about California residents’ privacy rights here.

To appeal a decision regarding a request to exercise your rights with respect to your Personal Information please send an email to privacy@magnushealth.com, specifying the nature of your rights affected by the decision and your arguments in support of the appeal, and include a copy of the decision, along with any supporting documentation, and the best phone number and email address to reach you back on. We’ll review your appeal and revert to you with our decision as soon as possible.

Canadian residents

Rights of users located in Canada are governed by the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, the Personal Information Protection Act, R.S.A. 2003, c. P-6.5, the Personal Information Protection Act, R.S.B.C. 2003, c. 63 and an Act respecting the protection of personal information in the private sector, CQLR, c. P-39.1, as amended by Law 25, An Act to modernize legislative provisions as regards the protection of personal information (as applicable based on the location of the user in Canada).

Since the adoption of Law 25, Quebec residents have enhanced rights with respect to their personal information, including:

Access Rights: the right to receive confirmation of the processing of their personal information, of the nature of the information being processed, and to receive a copy of it.
Data Portability Right: the right, subject to certain exceptions, to ask that the processing organization communicate to them computerized personal information in a written, intelligible transcript, and any collected personal information in a structured, commonly used, technological format.
Rectification Right: subject to certain requirements and exceptions, the right to ask to correct the information in the processing organization’s possession is inaccurate, incomplete, or ambiguous, or if collecting, communicating, or keeping it is not authorized by law.
De-indexation Right or “Right to be Forgotten”: the right to ask organizations to stop disseminating their personal information or to de-index any hyperlink attached to their name giving access to information if this dissemination causes them harm or contravenes the law or a court order.
Automated Decision Making: the right to be informed when they are the subject of a decision based exclusively on automated processing of their personal information. Organizations must also, on request, inform them about the personal information used to make the decision, the reasons and main factors leading to the decision, and the right to request correction of the personal information used to make the decision. They must also be given the opportunity to present their observations to a member of their staff for review of this decision.

We will process your request within the time provided by applicable law.

We will not discriminate against you for exercising your data subject rights.

You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

Exercising Your Data Subject Rights

The following section only applies to you if we collect and process your Personal Information directly and for our own purposes, not on behalf of our Customers for purposes of the Services we provide to you on their behalf. If we collect and/or otherwise process your information this section does not apply to you and we ask that you please direct any request to exercise your data subject rights to the data owner / controller on behalf of which we process your Personal Information for purposes of our Services.

If we collect and process your Personal Information directly and for our own purposes, you may submit a request to exercise your data subject rights by visiting our Privacy Center and submitting a request.

Individuals who submit requests to exercise data subject rights will be required to verify their identity by answering certain questions. We cannot process data subject rights requests until your identity is verified. This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

If you are making a request for access, we may not be able to provide specific pieces of Personal Information if the disclosure creates a substantial, articulable, and unreasonable risk to the security of your Personal Information, your account with us, or our systems or networks.

If you are making a request for erasure of Personal Information, we will ask that you confirm that you would like us to delete the Personal Information again before your request is processed.

You may designate an authorized agent to submit a request on your behalf by providing that agent with your written permission. If an agent makes a request on your behalf, we may still ask that you verify your identity directly with us before we can honor the request.

Agents who make requests on behalf of individuals will be required to verify the request by submitting written authorization from the individual. We will not honor any requests from agents until authorization is verified.

If you are seeking to access, correct, or delete information on our Services, we may refer your request to the Customer (your educational or other institution).

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

We will not discriminate against you for exercising your data subject rights.

10. Data Security

We maintain a comprehensive security program designed to protect Personal Information in our possession, which includes commercially reasonable organizational, physical and technical safeguards. Certain of these measures are described on our Trust Center.

However, no website, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your Personal Information transmitted to, through, using, or in connection with the use of our Website and/or Community Site. In particular, email, texts, and chats sent to or from the Website or Community Site may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of Personal Information is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your Personal Information against unauthorized use, disclosure, and access.

11. Social Media Share Buttons and Widgets.

Our Website includes social media features, such as the Facebook Like button and widgets, as well as the ShareThis button and other interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Website. Your interactions with these features are governed by the privacy policy of the company providing them.

12. Your Rights and Choices About Your Information

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under U.S. state or Canadian provincial law, depending on where you live.

Email Preferences / Unsubscribe

If you no longer wish to receive email from us on a going-forward basis, you may opt-out of receiving these emails by clicking “Unsubscribe” at the bottom of any email you receive from us.

Advertising Choices and Control

Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some Website and/or Community Site features may be inaccessible or not function properly.

13. Third-party links

We may provide links within our Website and/or Community Site to the sites or services of third parties. We are not responsible for the collection, use, monitoring, storage or sharing of any personal information by such third parties, and we encourage you to review those third parties’ privacy policies and to ask them questions about their privacy practices as they relate to you.

14. Questions about Data Privacy

If you have questions or suggestions regarding our Privacy Policy or our privacy practices, please contact us at privacy@magnushealth.com.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time by posting a new version on our Website as well as our Community Site.

It is important that the Personal Information we hold about you is accurate and current. Please update it or keep us informed if your Personal Information changes during your relationship with us.