Stericycle Privacy Policy
Last Updated: December 1, 2020
Stericycle, Inc. (“Stericycle,” “we,” or “us”) is committed to privacy and transparency in connection with our processing of personal information.  In this Privacy Policy, we describe our collection, use, disclosure and other processing of personal information that we collect about you, including online via our websites and in connection with our products and services.
Overview
In this overview, we summarize the personal information we collect and how we use it, which is further explained in our Privacy Policy below.
Categories of Personal Information Collected.
Generally, we collect the following types of personal information:
Name, contact information, and other identifiers:identifiers such as a real name, alias, address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.   
Usage data:internet or other electronic network activity Information including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
Commercial Information:includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.   
Use of Personal Information.In general, we may use and disclose the personal information we collect for the following business and commercial purposes:
Providing support and services 
Analyzing and improving our business
Personalizing content and experiences
Advertising, marketing and promotional purposes
Securing and protecting our business
Defending our legal rights
Auditing, reporting, corporate governance, and internal operations
Complying with legal obligations
California residents:
If you are a California resident, please refer to the Additional Information for Residents of California section below for important information about the categories of personal information we collect and disclose, as well as your rights under California privacy laws, including your right to submit a "Do Not Sell My Personal Information" request (i.e., to opt of the sale of your personal information by us). 
1. Scope 
This privacy notice describes how Stericycle processes personal information related to:
the use of our websites and associated services that link to this privacy notice, including https://www.stericycle.com/ and other websites controlled by Stericycle (the “Websites”)
our former, current and prospective clients
individuals who communicate with us
individuals who use our products and services (“Services”) and individuals whose personal information we receive in providing the Services
Our collection, use, disclosure and other processing of personal information about individuals will vary depending upon the circumstances in which we interact with them.  This Privacy Policy describes our overall privacy and data protection practices.  In some cases, different or additional notices about our personal information processing practices may apply.
Personal information.
In this privacy notice, our use of the term “personal information” generally means any information that identifies, relates to, describes, or is reasonably capable of being associated, linked or linkable with a particular individual.  
Not covered by this notice.
This Privacy Policy does not apply to job applicants and candidates who apply for employment through our 
job application portal
, or to employees and non-employee workers, whose personal information is subject to different privacy notices which are provided to such individuals in the context of their employment or working relationship with Stericycle.
Websites and specific web pages linked from https://www.stericycle.com/ may be subject to separate terms of use (including separate privacy notices). The inclusion of a link to a third-party website does not imply endorsement of the linked site or service by us or our affiliates. These third-party websites will be governed by different terms of use (including privacy notices) and you are solely responsible for viewing and using each such website in accordance with the applicable terms of use. Stericycle is not responsible for how your personal information is handled by such third-party websites.
2. Personal Information Collected
The personal information that we collect will vary depending upon the circumstances.  For example, the personal information we may collect through our Websites and Services includes:
your name, postal address, email address, phone number, date of birth, purchase history, occupation and other contact information
information regarding your interactions with us and related to your use of our Websites and Services, including information related to your use of our social media pages
interests you have in relation to our Services or our practice areas
information you may voluntarily submit to us by completing any form on our Websites information about your usage of our Websites and Services 
information about your usage of our Websites and Services.
Categories of personal information we collect.
The personal information we collect varies.  As explained above, we may collect the following categories of personal information (subject to applicable legal requirements and restrictions):
Name, contact information, and other identifiers:identifiers such as a real name, alias, address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.   
Usage data:internet or other electronic network activity Information including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
Commercial Information:includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.   
Sources of personal information we collect.
We may collect personal information directly from you, from our clients, automatically related to your use of our Websites and Services, and from third parties.  For example, we collect personal information:
from any form you may complete and submit through our Websites, for example, information collected from the "Contact Us" page of our Websites;
from the content of surveys that you may complete;
from ‘cookies’ and other similar tools deployed on parts of our Websites; 
when you provide information in connection with us providing professional services to you on behalf of our clients
from other sources, such as public databases, data brokers, joint marketing partners, social media platforms, and from other third parties.
When providing Services to clients, Stericycle may act as a “service provider” under applicable privacy and data protection laws. This means that we may receive or collect additional personal information about you or from our clients or directly from you, on behalf of our clients.  For example, when providing our telephone answering services or automated appointment scheduling services, we may collect information about you as a patient or customer of our clients.  As a service provider, we will only process such personal information on behalf of and subject to the instructions of our clients (who, from a privacy law perspective, are controllers or businesses with respect to the personal information we process on their behalf).  Where we are acting as a “service provider,” our clients’ privacy notices (and not this one) will apply to and control the processing of personal information.  
Generally, we collect your personal information on a voluntary basis. However, if you decline to provide certain personal information that is marked mandatory, you may not be able to access certain parts of our Website or Services or we may be unable to fully respond to your inquiries.
3.  Purposes for Collecting Personal Information
The purposes for which we may process personal information will vary depending upon the circumstances in which we interact with you, but in general, we use personal information for the purposes set forth below.  
Providing support and services:including to provide our Services, operate our Websites, applications and online services; to communicate with you about your access to and use of our Services; to respond to your inquiries; to provide troubleshooting, fulfill your orders and requests, process your payments and provide technical support; and for other customer service and support purposes.   
Analyzing and improving our business:including to better understand how users access and use our Services and Websites, to evaluate and improve our Websites, Services and business operations, and to develop new features, offerings and services; to conduct surveys and other evaluations (such as client satisfaction surveys); and for other research and analytical purposes.   
Personalizing content and experiences:including to tailor content we send or display on our Websites and other Services; to offer location customization and personalized help and instructions; and to otherwise personalize your experiences.  
Advertising, marketing and promotional purposes:including to reach you with more relevant ads and to evaluate, measure and improve the effectiveness of our ad campaigns; to send you newsletters, offers or other information we think may interest you; to contact you about our Services or information we think may interest you; and to administer promotions and contests.   
Securing and protecting our business:including to protect and secure our business operations, assets, Services, network and information and technology resources; to investigate, prevent, detect and take action regarding fraud, unauthorized access, situations involving potential threats to the rights or safety of any person or third party, or other unauthorized activities or misconduct.
Defending our legal rights:including to manage and respond to actual and potential legal disputes and claims, and to otherwise establish, defend or protect our rights or interests, including in the context of anticipated or actual litigation with third parties.  
Auditing, reporting, corporate governance, and internal operations:including relating to financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; our general business, accounting, record keeping and legal functions; and related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy or restructuring of all or part of our business. 
Complying with legal obligations:including to comply with the law, our legal obligations and legal process, such warrants, subpoenas, court orders, and regulatory or law enforcement requests. 
Aggregate and de-identified information.We may de-identify personal information and create anonymous and aggregated data sets and reports in order to assess, improve and develop our business, products and services, prepare benchmarking reports on our industry and for other research, marketing and analytics purposes.
4. Disclosure of Personal Information
We disclose the personal information we collect as set forth in this section.
A. Purposes for which we disclose personal information
Stericycle may disclose your personal information to any Stericycle group company for the purposes set out above, including for marketing the products and services offered by other businesses across the Stericycle group (subject to applicable laws). We may also disclose your personal information for the following reasons:
to third-party service providers such as entities providing customer service, email delivery, auditing, hosting our Websites
to third parties involved with events that you register for, to facilitate your participation in those events
if we are obliged to disclose your personal information under applicable law or regulation, which may include laws outside your country of residence
in order to enforce or apply our Website terms of use, or to protect the rights, privacy, safety or property of Stericycle, our clients, affiliates or other parties
subject to applicable laws, to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence
in connection with the planning, due diligence and implementation of commercial transactions, including a reorganization, merger, sale of all or a portion of our assets, a joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings)—in such cases, your personal information will be transferred to the acquiring entity
in accordance with the separate terms and conditions of use that may apply to you or with your explicit consent.
The processing of your personal information, as outlined above, may involve the transfer and/or storage of your personal information outside your country of residence and, thus, may result in your personal information being accessible to law enforcement and/or regulatory authorities in such foreign jurisdictions, accordingly to the applicable laws of such jurisdictions.
Aggregate and de-identified information.We may share aggregate or de-identified information, which does not identify and is not linked or linkable to a particular individual, with third parties for research, marketing, analytics and other purposes.   
5. Cookies and Tracking  
Our Websites may use first party and third-party cookies, pixel tags, plugins and other tools to gather device, usage and browsing information when users visit our Websites or use our online Services.  For instance, when you visit our Websites, our server may record your IP address (and associated location information) and other information such as the type of your internet browser, your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, and the pages you view and links you click on our Websites, as well as date and time stamps associates with your activities on our Websites. 
We use the information for security purposes, to facilitate navigation, to personalize and improve your experience while using the Websites, to improve and measure our advertising campaigns and to better reach users with relevant advertising both on our Websites and on third-party websites. We also gather statistical information about use of the Websites in order to continually improve their design and functionality, understand how they are used and assist us with resolving questions regarding them. 
Cookies.
Cookies are small text files that a website transfers to your hard drive to store and sometimes collect information about your usage of websites, such as time spent on the websites, pages visited, language preferences, and other anonymous traffic data.  You can control the way in which cookies are used by altering your browser settings. You may refuse to accept cookies by activating the setting on your browser that allows you to reject cookies. However, if you select such a setting, this may affect the functioning of our Websites. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you access or log on to our Websites. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org
Pixel tags and other similar technologies.
Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some Websites to, among other things, track the actions of users of the Websites (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Websites and response rates.  We and our service providers also use pixel tags in HTML emails to our clients, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.
Log files.
Most browsers collect certain information, such as your IP address, device type, screen resolution, operating system version and internet browser type and version. This information is gathered automatically and stored in log files.
Third-Party Analytics Tools.
Our Websites use automated devices and applications operated by third parties, such as Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Websites and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google's practices by going to www.google.com/policies/privacy/partners/, and you can opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
Do-Not-Track signals.
Please note that our Websites do not recognize or respond to any signal which your browser might transmit through the so-called 'Do Not Track' feature your browser might have. If you wish to disable cookies on our Websites, you should not rely on any 'Do Not Track' feature your browser might have. For more information about do-not-track signals, please click here.
6. Security
Stericycle has implemented technical and organizational security measures to protect the personal information we collect. Despite this, the security of the transmission of information via the Internet cannot always be guaranteed and you acknowledge this in your access and use of our Websites. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us in accordance with the Contact Us section below. 
7. Individual Rights and Choices
You may opt out from receiving marketing-related communications from us on a going-forward basis by contacting us at 
DataProtection@Stericycle.com
 or by using the unsubscribe mechanism contained in each email. We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing-related emails from us, we may still send you important administrative messages, from which you cannot opt out.
You may request access to, or correction of, the personal information we hold about you, subject to limited exceptions delineated under applicable law.  If you wish to exercise this right, please contact us at 
DataProtection@Stericycle.com
.
8. Retention Period
We will retain your personal information for the period necessary to fulfill the purposes outlined in this privacy notice unless a longer retention period is required or permitted by law.  
9. Children and Minors
The Websites and Services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal information from minors under the age of 16. 
10. Changes to our Privacy Notice
From time to time, we may change our Privacy Policy. The effective date set forth at the indicates the last time this Privacy Policy was revised. Checking this effective date allows you to determine whether there have been changes since the last time you reviewed the notice. We will notify you of changes to this privacy notice by posting the revised privacy notice on our Websites. 
11. Contact Us
If you have any questions or comments regarding this privacy notice, please contact us at 
DataProtection@Stericycle.com
.
12. Additional Information for Residents of California
In this section, we describe generally how we have collected and disclosed personal information about California consumers in the prior 12 months (from the Last Updated date above), as required under California privacy laws, including the California Consumer Privacy Act (“CCPA”). This section does not address or apply to our handling of:
publicly available information made lawfully available by state or federal governments
personal information that is subject to an exemption under the CCPA
personal information we collect about job applicants, independent contractors, or current or former full-time, part-time and temporary employees and staff, officers, directors or owners of Stericycle 
personal information about individuals acting for or on behalf of another company, to the extent the information relates to our transactions with such company, products or services that we receive from or provide to such company, or associated communications or transactions (except that such individuals have the right to opt-out of any sale of their personal information and to not be subject to any discrimination for exercising such right)
Categories of personal information that we collect and disclose.Our collection, use, and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident.  We describe the categories of personal information and their sources in the Personal Information Collected section above, and the purposes for collection are described in the Purposes for Collecting Personal Information section above. section above, and for the purposes described in the  section above.  We disclose the categories of personal information as described in the  section above.
Categories of personal information disclosed for a business purpose or soldWe describe our disclosure of personal information, including the business/commercial purposes for which we may disclose and sell (as that term is defined under applicable law) personal information, in the Disclosure of Personal Information section above.  The CCPA requires that we disclose the categories of personal information that we have disclosed for a business purpose and the categories of personal information that we have “sold” (as that term is defined under applicable laws) along with the categories of third parties to whom we have disclosed for a business purpose or sold such categories of personal information.  Please review the descriptions of the categories of personal information under the Personal Information Collected section above, for further descriptions of each category of personal information.
Categories of 
Personal Information
Do We Disclose 
for a Business Purpose?
Categories of Third Parties to Whom Information is 
Disclosed for Business or Commercial Purposes
Identifiers
YES
service providers
advisors and agents
government entities and law enforcement
affiliates and subsidiaries 
advertising networks
data analytics providers
social networks
internet service providers
operating systems and platforms
our marketing partners
business customer/client
Usage Data
YES
service providers
advisors and agents
government entities and law enforcement
affiliates and subsidiaries 
advertising networks
data analytics providers
social networks
internet service providers
operating systems and platforms
our marketing partners
business customer/client
Commercial Information
YES
service providers
advisors and agents
government entities and law enforcement
affiliates and subsidiaries 
advertising networks
data analytics providers
social networks
internet service providers
operating systems and platforms
data brokers
business customer/client
Please note that while we do not disclose personal information to third parties in exchange for monetary compensation from such third parties, we do disclose or make available personal information to third parties in order to receive certain services or benefits from them.  For example, this occurs when we allow third-party tags to collect information and make browsing information available to third-party ad companies (through third-party tags on our Websites) to improve and measure our ad campaigns and reach users with more relevant ads and content.  The CCPA defines a “sale” as disclosing or making available personal information to a third party in exchange for monetary or other valuable consideration.  As defined by the CCPA, we may “sell” certain categories of personal information as follows: 
Name, contact information and other identifiers to third party advertising networks and data analytics providers
Usage data to third party advertising networks and data analytics providers.
Rights of California residents.California law gives consumers the following rights:
Right to know: with respect to the personal information we have collected about them in the prior 12 months, to require that we disclose the following to them (up to twice per year and subject to certain exemptions):
ocategories of personal information collected
ocategories of sources of personal information
ocategories of personal information about them we have disclosed for a business purpose or sold
ocategories of third parties to whom we have sold or disclosed for a business purpose their personal information
othe business or commercial purposes for collecting or selling personal information; and
oa copy of the specific pieces of personal information we have collected about them.
Right to deletion:the right to request deletion (without charge) of the personal information that we have collected about you, subject to certain exemptions.
Right to opt-out:the right to opt-out of the sale of your personal information. While we may “sell” personal information as defined by the CCPA, we do not sell personal information about California residents who we know are younger than 16 years old.  California residents may opt out of our sales of their personal information by visiting our Do Not Sell My Personal Information or contacting us at 1-866-783-7422 (toll free).
The CCPA prohibits discrimination against California consumers for exercising their rights under the CCPA and imposes requirements on any financial incentives offered to California consumers related to their personal information, unless the different prices, rates, or quality of goods or services are reasonably related to the value of the consumer’s data. We do not discriminate against consumers when they exercise their CCPA rights or offer financial incentives to California consumers related to their personal information.
Submitting CCPA Requests.California residents may submit CCPA requests to opt out of sales, requests to know (access) and requests to delete their personal information through one of the following methods: 
California residents may exercise their opt-out rights by visiting our Do Not Sell My Personal Information or contacting us at 1-866-783-7422 (toll free).
When you submit a request to know or a request to delete, we will take steps to verify your request by matching the information provided by you with the information we have in our records.  You must complete all required fields on our webform (or otherwise provide us with this information via the above toll-free number).  In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor.  Authorized agents may initiate a request on behalf of another individual by contacting us via the above link or by contacting us at DataProtection@Stericycle.com or at our toll free number (1-866-783-7422); authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.
Your Privacy Rights Under California Shine the Light Law.Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use.  Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, 
DataProtection@Stericycle.com
, and include in your request a current California address and your attestation that you are a California resident.