Privacy Policy
Last Updated: 12/31/2025
1. Introduction
Phreesia, Inc. (“Phreesia,” “we,” “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and protect personal information, including of visitors to this website (www.phreesia.com), business contacts, and health care professionals.
It is important to note that this Policy does NOT apply to the data of patients/consumers who use the Phreesia platform. The data of patients/consumers is protected by HIPAA, our Platform Privacy Policy, and/or our Consumer Health Data Privacy Policy.
2. Information We Collect
We collect personal information in several ways:
- Through this Site, for example when visitors fill out a contact form, request a demo, or subscribe to marketing communications.
- Automatically from your device or browser when you visit this Site.
- From other sources, such as third-party services and organizations.
- From client staff users through use of our products and when they participate in calls with us regarding the products and services.
This information may include name and other identifiers, business contact information, and call recordings. It may also include IP address and cookies and similar technologies, including device and browser information, other digital identifiers, pages viewed and interactions with our site. More information about your choices regarding cookies is contained below.
3. How We Use Information
We use your information for various purposes such as:
- To provide products and services.
- To improve our products and services.
- To respond to inquiries.
- To market our products and services.
- To provide relevant advertisements and measure their performance.
- To provide this Site to visitors.
- To analyze and improve our Site performance and engagement.
4. How We Share Information
We may share personal information in certain circumstances, including the below:
- Vendors and Service Providers. We use processors to provide us with various services. We execute appropriate contracts with service providers that require them to use personal information for the purpose of providing us services, and which do not allow them to further disclose such information.
- Affiliates. We may share information with our affiliates for internal business purposes and to provide services.
- Business Organizations. We may disclose personal information in connection with any merger, sale, securities offering, bankruptcy, reorganization, dissolution or other similar transaction. In such case, personal information would remain subject to the provisions of this Policy, unless amended as described below.
- Marketing. We may disclose personal information for marketing and internet-based advertising purposes so that you can receive relevant advertisements when you visit other sites. This site uses cookies and other similar tracking technologies. Some advertising/retargeting disclosures constitute “selling” or “sharing” under certain states’ laws.
- Legal Requirements / Public Safety. We may also disclose information when required by law, to protect us or others, or to protect our legal rights.
5. Cookies & Advertising Technologies
We use cookies, tags, pixels, and similar technologies on this Site for various purposes, including site functionality, analytics, and advertising. Users in states with privacy legislation may manage their cookie preferences through their browser or through our Cookie Preferences link.
6. Data Retention
We retain personal information as needed to fulfill the purposes described in this Policy, comply with legal obligations, and resolve disputes.
7. Children’s Privacy
The Site is not intended for children under 16, and we do not knowingly collect their personal information.
8. State Law Privacy Rights
We take your privacy seriously, no matter where you live. However, if you live in certain states, particular rights may be available to you under your state’s laws. This section describes those rights as well.
Certain State Privacy Laws
Residents of Certain U.S. states, such as California, Colorado, Connecticut and Virginia may have personal data rights under the laws of their state. Below, we describe those rights, how to exercise those rights and provide additional information about your personal data.
To exercise your rights under an applicable state law, contact us as described below in Section 11. We will adhere to the state law timeframes to respond to your request, which is generally 45 calendar days upon receiving your request, which period may generally be extended by an additional 45 days when reasonably necessary, provided that we give you notice of this extension. Before we can implement you request, we may request information to verify your identity.
- Right to Know and Access the Personal Data We Collect and Share: You have a right to request that we disclose the personal data we have collected about you, the categories of personal data we have collected, the sources of the personal data, and the purposes of the collection. Much of that information is set forth in this Privacy Policy, for example, in Section 2 above. You may make this request twice a year, free of charge.
- Right of Deletion: You may request that we delete the personal data we have collected about you, subject to certain legal exemptions.
- Right of Correction: You have a right to correct any inaccurate personal data we maintain about you.
- Right to Non-Discrimination: You have a right not to receive discriminatory treatment for the exercise of privacy rights conferred to you under state privacy laws.
- Right to Opt-Out of Sale or Sharing. Residents of certain states have the right to opt out of the “sale” or “sharing” of personal information as those terms are defined in state laws. We may sell/share personal information as defined under state laws, including through the use of cookies/trackers on this Site and for cross-context behavioral advertising. Please note, as described in our Platform Privacy Policy, we do not sell patient/consumer personal information.
- Retention: As described above, we retain your information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Please note that we do not provide Phreesia services in the United Kingdom or European Economic Area. Phreesia has wholly owned subsidiaries that provide limited services to entities outside the United States, including in the UK and EEA. This Privacy Policy does not cover data handled by those subsidiaries.
9. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. However, no method of transmission or storage is completely secure.
10. Changes to this Policy
We may update this Policy from time to time. We will post updated versions to this Site.
11. Contact Us
If you have questions about this Policy, or to exercise your rights, you may contact our Privacy Officer at:
Phreesia, Inc.
1521 Concord Pike, Suite 301, PMB 221
Wilmington, DE 19803
