Privacy Policy
Last updated: November 2026
Your privacy is important to Heartland Healthcare Capital, L.P. and our affiliates (collectively, “we”, “us”, “our” or “Heartland Healthcare”). In certain circumstances we must collect, maintain, and process certain personal information or personal data about you, otherwise we may be unable to provide you with our products and services as well as the full functionality of the website. Please note that “personal information” and “personal data” as used in this website privacy notice (the “Privacy Notice”) shall have the meaning given to such terms (or the equivalent term) under applicable privacy laws. We use these terms interchangeably for simplicity.
To better protect your privacy, we are providing information explaining our data handling practices. This Privacy Notice describes how we gather and use personal information that we collect:
- on or through hlhccap.com and as applicable, our other websites (including, as applicable, any of our portals (i.e. our investor portal) and data rooms) (collectively the “website”);
- when you opt to receive communications from us;
- about representatives of our vendors, business partners or portfolio companies;
- to conduct business with you;
- when you apply for a job with us; and
- through other data collection points where we refer to this Privacy Notice and the Privacy Notice Supplements.
Please read this Privacy Notice carefully and prior to using the website and providing any personal information. This Privacy Notice does not apply to any processing of personal information by or on behalf of Heartland Healthcare that is covered by a more specific privacy notice (such as by our fund limited partners), and this Privacy Notice does not apply to any other websites that may be linked to it. We do not control the privacy notices or practices of other persons or entities, and we encourage you to read the privacy notices applicable to other websites before you disclose any personal information to them.
Categories of Personal Information We Collect and Process and How We Collect It
The personal information we may collect and process about you may include, but is not limited to, the following:
- Basic personal details and identifiers: such as name, email address, postal address, title, job title, and telephone number;
- Sensitive personal information: such as age, social security number, driver’s license number or other government-issued identification card information, passport number, national origin, residency (including tax residency), citizenship and visa status, marital status, client login account credentials, and gender;
- Internet or other electronic network activity information: such as information regarding your website login details, use of our website and geolocation data. We obtain some information about your IP address and web browser that you use to access the website;
- Images: such as photographs taken at Heartland Healthcare events;
- Employment information: professional or employment-related information, such as information relating to your job position (e.g., job title, job description and office location), talent management information (e.g., résumé information, occupation details, education details, certifications, professional association memberships, historical compensation details, previous employment details, and pre-employment screening and background check information (including criminal records information) and emergency contact information;
- Information received through communications with us: such as information provided through meetings, email, telephone calls and other forms of communication; and
- Other information: such as information obtained through publicly available external websites in certain circumstances.
Information you provide to us
We collect your personal information when you decide to interact with us (e.g., via any contact/communication feature we utilize on the website, when you visit our offices, when you communicate with us over email or the telephone, when you apply for a job with us, etc.) including your name, email address, postal address, title, job title, telephone number, passport or other government-issued identification, financial information and/or résumé information, as appropriate.
We may also collect personal information about you, such as your IP address, through automated technology when you access and use our website, such as cookies and similar technology (please see the “Cookies” section below for information about how we use such technologies).
Information provided by third parties or publicly available sources
We collect personal information from third parties, such as a resumé sent to us by a recruiting firm, background information from a background check provider, personal information we viewed on social media (e.g., LinkedIn) or information obtained from publicly available lists of individuals subject to sanctions or trade restrictions.
If you represent one of our vendors, business partners or portfolio companies, we may also collect your personal information (i.e., basic identifying and contact information, including your name, title, work email address, work postal address, job title and/or work telephone number, as appropriate) from the entity that you work for where this is necessary to receive products or services from, or otherwise conduct business with, such third party.
We process information in relation to companies that we are evaluating in connection with a corporate transaction or potential investment. This information may include your personal information including name, title, email address, postal address, job title, telephone number, passport or other government-issued identification, financial information and/or job and benefits information, as appropriate.
We do not knowingly collect personal information from children under the age of 16. If we are made aware that we have collected personal information from a child under the age of 16, we will delete it as soon as practicable.
If you log into the website, while we obtain your login credentials, your personal information is otherwise collected by the third party that operates the portal and is subject to that third party’s privacy notices.
Purposes for Collecting Personal Information
We may collect or disclose the personal information we collect about you for one or more of the following purposes:
| Purpose | Legal Basis to Process personal data under the EU & UK Privacy Laws |
|---|---|
| To conduct business with you or to provide you with the services or products you have requested, including responding to your enquiries and requests and providing you with support | Contractual necessity and/or our legitimate interest in operating our business and providing investment services |
| To keep a record of and manage your relationship with us | Our legitimate interest in operating our business and providing investment services and/or consent |
| To communicate with you, to operate, schedule and facilitate meetings and in relation to your participation in any of our events | Our legitimate interest in operating our business and providing investment services and/or consent |
| To verify your identity (including to conduct anti-money laundering or KYC checks and to enable you to access our offices or events) and to conduct conflicts checks | Our legitimate interest in operating our business and providing investment services, contractual necessity, legal requirement, and/or consent |
| To conduct due diligence and other business activities in connection with an actual or prospective corporate transaction or investment which we are party to | Our legitimate interest in operating our business and providing investment services, contractual necessity, and/or legal requirement |
| To protect against, identify and prevent, fraud, money-laundering, cyber-attacks, theft of our property, other threats to the safety, security and integrity of our website, assets, our business, and other malicious or unlawful activity | Our legitimate interest in operating our business and providing investment services and/or legal requirement |
| To monitor and manage our portfolio companies | Our legitimate interest in operating our business, and/or contractual necessity |
| Litigation management and conducting internal audits and investigations | Our legitimate interest in operating our business and/or legal requirement |
| To comply with our legal obligations and corporate governance practices, which may require recording or monitoring telephone calls or other communications with you | Legal requirement, our legitimate interest in operating our business, and/or consent |
| To obtain advice from our professional advisors, including lawyers and accountants | Our legitimate interest in operating our business |
| To administer and protect our business and our website | Our legitimate interest in operating our business and/or consent |
| To make suggestions and recommendations to you about goods or services that may be of interest to you | Our legitimate interest in operating our business and/or consent |
| For statistical analysis and market research, including to understand how our service may be improved for you (including through our use of cookies) and to improve our services | Our legitimate interest in operating our business |
| For performance of our IT systems | Our legitimate interest in operating our business |
| For any other purpose that has been notified, or has been agreed, in writing | Consent |
We monitor communications where the law requires us to do so. We also monitor communications, where required to do so, to comply with regulatory rules and practices and, where permitted to do so, to protect our respective businesses and the security of our respective systems.
Where required by applicable law, we will obtain your consent to send you marketing communications about our products, services, offers and promotions, and to invite you to events and to participate in surveys. You may request that we stop sending you marketing communications by emailing shannon@hlhccap.com.
Disclosure of Personal Information
Unfortunately, the transmission of information and data via the internet or by other means is not completely secure. Although we try to protect your personal information, we cannot guarantee the security of any information or data transmitted to or through the website or by other means and any transmission of information or data by you or on your behalf to or through the website or by other means is at your sole risk.
We may disclose any of the categories of personal information we obtain about you as described in the “Categories of Personal Information We Collect and Process and How We Collect It” section above amongst Heartland Healthcare and to service providers and persons employed and/or retained by Heartland Healthcare to fulfill the purposes set out in this Privacy Notice. We use a number of service providers to perform certain services including legal and financial professional advisors, our auditors, recruitment firms, consultants, IT and data security providers, data hosting providers and in some instances, placement agents, administration agents, depositories, investment managers and other fund administrators.
We may also disclose personal information: (1) if we are required or permitted to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government or regulatory agencies, such as law enforcement, tax, and data protection supervisory authorities; (3) to establish, exercise or defend legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; or (6) otherwise with your consent.
We do not sell any of the personal information we collect about you to third parties. However, we reserve the right to transfer any personal information we have about you in the event of an actual or proposed sale or transfer of all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation).
Retention of Personal Information
We retain your personal information for as long as reasonably necessary and proportionate to achieve the purposes and uses set out in this Privacy Notice, as authorized by law, and to meet legal, taxation, accounting, risk management or business requirements. We may retain personal information for longer where required by our regulatory obligations, or where we believe it is necessary to establish, defend or protect our legal rights and interests or those of others.
How We Protect Your Information
We maintain physical, electronic, and procedural safeguards to prevent unauthorized access to data and to protect the integrity of our systems. We take reasonable steps to protect any personal information that you provide us online by employing appropriate technical and organizational measures. We permit access only by authorized persons who need access to that information to provide services to us and you and who are required to abide by applicable confidentiality and information security practices. Despite the security procedures we employ, you should be aware that it is impossible to guarantee the security of information that you transmit to us via the internet or by other means.
Cookies
Information regarding how you access the website (e.g., browser type, access times, and Internet Protocol (IP) address) and your hardware and software may be automatically collected through the use of cookies (a small text file placed on your hard drive) or other technologies or tools. This information is used to improve website performance and for our business or commercial purposes. Where cookies are not necessary for us to provide the products or services you have requested or for the functioning of the website, we will ask you to consent to their use. You may opt-in to accept cookies automatically by changing the settings on your browser. If you opt-out of certain cookies, you may not be able to access certain parts of the website. You may wish to visit www.aboutcookies.org, which contains comprehensive information about types of cookies, how they are used, and how you can manage your cookie preferences.
California Shine the Light Law
California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Website and/or the Services that are California residents and who provide personal information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of personal information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of personal information and the names and addresses of those businesses with which we shared your personal information with for the immediately prior calendar year (e.g. requests made in 2021 will receive information regarding such activities in 2020). You may request this information once per calendar year. To make such a request, please contact us using the information provided below.
Further Information
Heartland Healthcare reserves the right to update this Privacy Notice at any time. In the event that we do so, we will make an updated version of this Privacy Notice available to you via the website. The examples contained within this Privacy Notice are illustrations only and are not intended to be exclusive. This Privacy Notice complies with the privacy provisions of Regulation S-P under the Gramm-Leach-Bliley Act and certain privacy provisions of other laws. You may have additional rights under other foreign or domestic laws that apply to you.
Contact Us
If you have questions about this Privacy Notice, wish to contact Heartland Healthcare, wish to exercise opt-out rights or submit verified requests, wish to appeal decisions, wish to view this Privacy Notice in an alternate format, or wish to make any changes to the personal information you have provided to us, including removing it from a particular subscription list or removing it from our databases, please contact us at +1 763 607 4877 or shannon@hlhccap.com.
Please note that, unless expressly advised otherwise, our website and communication facilities do not provide a means for completely secure and private communications and use. Although we will attempt to keep personal information confidential, from a technical standpoint, there is still a risk. For that reason, we suggest that you use caution when using the website, e-mail and other communication methods to communicate information to Heartland Healthcare that is considered to be sensitive and/or confidential.
Our goal is to respond to any verifiable consumer request within the timeframes mandated by applicable law, and we will notify you in writing if we cannot meet any such timelines.
No Discrimination: We will not discriminate against you for exercising your rights under the applicable privacy laws in your jurisdiction.
EU & UK Privacy Notice Supplement
This EU and UK Privacy Notice Supplement supplements the information contained in the Privacy Notice above and applies solely to the processing of personal data which is subject to EU & UK Privacy Laws. For the purposes of this EU & UK Privacy Notice Supplement, the “EU & UK Privacy Laws” mean all applicable laws and regulations relating to privacy, protection and/or processing of personal data in the EEA, EU and UK, including (without limitation): the General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”), the EU GDPR as it forms part of the laws of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union Withdrawal Act 2018 (“UK GDPR”), and including in respect of the foregoing any implementing or successor legislation and any amendments or re-enactments. The terms “controller”, “data subject”, “personal data”, “process” and “processing” or other applicable or analogous terms shall be interpreted in accordance with the applicable EU & UK Privacy Laws.
To the extent that EU & UK Privacy Laws apply to our processing of your personal data, one or more of us are a “controller” of your personal data. In simple terms, when applicable, this means we: (i) “control” the personal data that we collect from you or other sources; and (ii) make certain decisions on how to use and protect such personal data.
What type of personal data do we collect?
The types of personal data that we collect are set forth in the “Categories of Personal Information We Collect and Process and How We Collect It” section of the Privacy Notice.
Purposes and Legal Bases for Collecting and Using Personal Data
We rely on various legal bases under the EU & UK Privacy Laws in order to process your personal data, as we have set forth in the “Purposes for Collecting Personal Information” section of the Privacy Notice. Note that we may process your personal data on more than one legal basis depending on the specific purpose for which we are using your personal data. These purposes are also set out in the “Purposes for Collecting Personal Information” section of the Privacy Notice, which in general are to operate our business, conduct business with you, perform essential or legitimate business operations and perform a contract with you.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.
If we require your personal data due to a legal requirement or obligation or in order to perform a contract with you, we will make you aware of this at the time we collect your personal data, and the possible consequences of you failing to provide this personal data (e.g., we may require your passport details to verify your identity for the purposes of anti-money laundering regulations).
No solely automated decision making, including profiling, is used when processing your personal data.
Disclosure of Personal Data
Heartland Healthcare may disclose and transfer your personal data to third parties as set forth in the “Disclosure of Personal Information” section of the Privacy Notice above, which may involve the transfer of your personal data outside of the UK or EEA. Heartland Healthcare will only transfer your personal data in accordance with applicable laws. Furthermore, we may transfer personal data to a Non-Equivalent Country (as defined below), in order to fulfill the purposes described in the Privacy Notice and in accordance with applicable laws. For information on the safeguards applied to such transfers, please contact us at shannon@hlhccap.com.
For the purposes of this Privacy Notice, “Non-Equivalent Country” means a country or territory other than: (i) a member state of the EU or EEA; (ii) the United Kingdom; or (iii) a country or territory which has at the relevant time been decided by the European Commission or the Government of the United Kingdom (as applicable) in accordance with the applicable EU & UK Privacy Laws to ensure an adequate level of protection for personal data.
Data Subject Rights
To the extent set forth in EU & UK Privacy Laws, you may have certain rights relating to the collection and use of your personal data, including, as applicable, the right to (i) request a copy of the personal data retained by Heartland Healthcare (ii) to correct any inaccurate information contained within the personal data retained by Heartland Healthcare; (iii) delete any personal data retained by Heartland Healthcare; (iv) restrict the processing of personal data retained by Heartland Healthcare, including the purposes for which personal data is processed by or on behalf of Heartland Healthcare; (v) object to the processing of personal data undertaken by Heartland Healthcare; (vi) direct the transfer of your personal data to a third party designated by you; (vii) withdraw your consent to our processing of your personal data at any time; and (viii) not be subject to solely automated decision making. Individuals located in the UK or EU may also “opt out” or unsubscribe from any marketing communications from Heartland Healthcare. An individual may contact Heartland Healthcare at shannon@hlhccap.com if they wish to exercise any of the rights set forth herein. Furthermore, you have a right to lodge a complaint with the local supervisory authority. These rights are not absolute and in certain circumstances their exercise may not be possible including when personal data must be maintained to comply with applicable laws.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
To the extent EU & UK Privacy Laws apply, should you have any questions or wish to contact us in relation to this EU & UK Privacy Notice Supplement and the Privacy Notice, please contact us at shannon@hlhccap.com.