Privacy Notice

Protecting your privacy is important to NCATS. This website links to other National Institutes of Health (NIH) sites, federal agency sites and private organization sites. Once you leave the primary ncats.nih.gov website, you are subject to the privacy policy for the site(s) you visit. NCATS does not collect any personally identifiable information (PII) about you during your visit to this site unless you choose to provide it. NCATS does, however, collect some data about your visit to better understand how the public uses the site and how to make it more helpful. NCATS collects information from visitors who read, browse and/or download information from this site. NCATS never collects information for commercial marketing or any purpose unrelated to the center’s mission and goals.

When visitors send email messages containing personal information to the Public Information Officer general, NCATS responds to and files the messages. Only designated staff and contractors requiring access to the emails to respond may view or answer them.

Types of Information Collected

When you browse through any website, certain information about your visit can be collected. NCATS automatically collects and temporarily stores the following type of information about your visit:

Domain from which you access the Internet.
IP address (an IP address is a number that is automatically assigned to a computer when surfing the web).
Operating system and information about the browser used when visiting the site.
Date and time of your visit.
Pages you visited.
Address of the website that connected you to NCATS (such as google.com or bing.com).

NCATS uses this information to measure the number of visitors to our site and its various sections and to help make our site more useful to visitors.

How NCATS Collects Information

This website uses Google Analytics measurement software to collect the information in the bulleted list under Types of Information Collected. Google Analytics collect information automatically and continuously. No PII is collected. NCATS staff and contractors conduct analyses and report on the aggregated data from Google Analytics. The reports are only available to the website’s managers and other designated staff who require this information to perform their duties. NCATS retains the data from Google Analytics as long as needed to support the mission of this website.

How NCATS Uses Cookies

The Office of Management and Budget (OMB) memo M-10-22, Guidance for Online Use of Web Measurement and Customization Technologies allows federal agencies to use session and persistent cookies.

When you visit any website, its server may generate a piece of text known as a “cookie” to place on your computer. The cookie allows the server to “remember” specific information about your visit while you are connected.

The cookie makes it easier for you to use the dynamic features of web pages. Cookies from NCATS web pages only collect information about your browser’s visit to the site; they do not collect personal information about you.

There are two types of cookies, single session (temporary) and multi-session (persistent). Session cookies last only as long as your web browser is open. Once you close your browser, the cookie disappears. Persistent cookies are stored on your computer for longer periods.

Session Cookies: We use session cookies for technical purposes, such as to enable better navigation through our site. These cookies let our server know that you are continuing a visit to our site. The OMB memo 10-22 guidance defines use of session cookies as "Usage Tier 1—Single Session.” The policy says, “This tier encompasses any use of single session Web measurement and customization technologies.”

Persistent Cookies: We use persistent cookies to enable Google Analytics to differentiate between new and returning ncats.nih.gov visitors. Persistent cookies remain on your computer between visits to this website until they expire. The OMB memo 10-22 guidance defines use of persistent cookies as "Usage Tier 2—Multi-session without Personally Identifiable Information (PII).” The policy says, “This tier encompasses any use of multi-session Web measurement and customization technologies when no PII is collected.”

Opt Out or Disable Cookies: If you do not wish to have session or persistent cookies placed on your computer, you can disable them using your web browser. If you opt out of cookies, you will still have access to all information and resources at ncats.nih.gov. Find instructions for disabling or opting out of cookies in the most popular browsers. Note: By following the instructions to opt-out of cookies, you will disable cookies from all sources, not just those from ncats.nih.gov.

How Personal Information is Protected

You do not have to give NCATS personal information to visit this website. However, if you choose to receive announcements or e-newsletters, NCATS collects your name and email address to complete the subscription process.

If you choose to provide PII (information that is personal in nature and which may be used to identify you) through an email message, request for information, paper or electronic form, questionnaire, epidemiology research study, etc., NCATS will maintain the information you provide only as long as needed to respond to your question or to fulfill the stated purpose of the communication. If NCATS stores your personal information in a record system designed to retrieve information about you by personal identifier (name, personal email address, home mailing address, personal or mobile phone number, etc.), so that NCATS can contact you, the Center will safeguard the information you provide in accordance with the Privacy Act of 1974, as amended (5 U.S.C. Section 552a).

NCATS operates a record system designed to retrieve information about you in order to accomplish its mission, so a Privacy Act Notification Statement (this policy) is displayed on the public-facing website. The notice addresses the following five criteria:

NCATS legal authorization to collect information about you
Purpose of the information collection
Routine uses for disclosure of information outside of NCATS
Whether the request made of you is voluntary or mandatory under law
Effects of non-disclosure if you choose to not provide the requested information

For further information about privacy at NIH, email the NIH Senior Official for Privacy, call 301-451-3426 or visit the NIH Office of Management Assessment.

Data Safeguarding and Privacy

NCATS uses web measurement and customization technologies to help sites function better for visitors and to better understand how the public uses NCATS’ online resources. All uses of web-based technologies comply with existing policies with respect to privacy and data safeguarding standards. Information Technology (IT) systems owned and operated by NCATS are assessed using Privacy Impact Assessments (PIAs) posted for public view on the Department of Health and Human Services (DHHS) Privacy Impact Assessments web page. NCATS conducts and publishes a PIA for each use of a third-party website and application (TPWA) as they may have a different functionality or practice. TPWA PIAs are posted for public view on the DHHS website.

When web measurement and customization technologies are used, a Privacy Notice displayed on the website must provide:

Purpose of the web measurement and/or customization technology.
Usage tier, session type, and technology used.
Nature of the information collected.
Purpose and use of the information.
Whether and to whom the information will be disclosed.
Privacy safeguards applied to the information.
Data retention policy for the information.
Whether the technology is enabled by default or not and why.
How to opt-out of the Web measurement/customization technology.
Statement that opting-out still permits users to access comparable information or services.
Identities of all third-party vendors involved in the measurement and customization process.

Data Retention and Access Limits

NCATS will retain collected data long enough to achieve the specified objective for which they were collected. The data generated from these activities falls under the National Archives and Records Administration (NARA) General Records Schedule (GRS) and will be handled per the requirements of that schedule.

How NCATS Uses Third-Party Websites and Applications

As part of OMB memo M-10-06, Open Government Directive, NCATS uses a variety of new technologies and social media options to communicate and interact with citizens. These sites and applications include popular social networking and media sites, open source software communities and more. TPWAs are web-based technologies that are not exclusively operated or controlled by NCATS, such as applications not hosted on a.gov domain or those that are embedded on NCATS web pages. Users of TPWAs often share information with the general public, user community, and/or the third-party operating the website. These actors may use this information in a variety of ways. TPWAs could cause PII to become available or accessible to NCATS and the public, regardless of whether the information is explicitly solicited or collected by NCATS.

The following list includes some of the TPWAs that NCATS uses and their purposes. NCATS sometimes collects and uses PII made available through third-party websites. However, we do not share PII made available through third-party websites. Your activity on the third-party websites NCATS uses is governed by the security and privacy policy of those sites (linked below). Review the third-party privacy policies before using the sites and ensure that you understand how your information may be used. If you have an account with a third-party website and choose to follow, like, friend, or comment, certain PII associated with your account may be made available to NCATS based on the privacy policy of the third-party website and your privacy settings within that third-party website. Therefore, you should also adjust privacy settings on your account to match your preferences.

For any NCATS TPWA that collects PII, the list below also includes details on the information NCATS collects and how the center protects your private information.

Third-Party Websites and Applications

Bit.ly: NCATS uses Bit.ly to shorten long URLs for use in email messages, in X feeds, on Facebook pages, and in linking to media stories and funding opportunities. Bit.ly collects and provides data on how often you, as an email recipient or Facebook/X user, click on the shortened URLs distributed by NCATS. Bit.ly analytics show how many people clicked on the URLs, compared to the total number of clicks on the shortened URLs. Bit.ly analytics do not provide any PII about the visitors who open the shortened links. Review the Bit.ly Privacy Policy.

Facebook: NCATS has one Facebook page: National Center for Advancing Translational Sciences. NCATS Facebook pages are managed by NCATS staff and contractors, who post news and other items of interest to be consumed by the public. If you have a Facebook account, you can log in to your account to post comments and “like” the NCATS Facebook page and individual entries. If, after you click on the NCATS Facebook page, you comment or click the “like” button, your PII will be visible to NCATS staff and other Facebook site visitors. The amount of visible personal information displayed will depend on your own Facebook privacy settings. You can completely avoid displaying any PII by not creating a Facebook account, not posting comments, not clicking on the “like” options, or not interacting with the NCATS Facebook account in any way (i.e., private messaging, sharing posts, etc.). NCATS staff and contractors do not collect, use or disclose any information about visitors who comment or “like” the NCATS Facebook page. However, as a practice, the NCATS Comment Policy requires the removal from the NCATS Facebook page of any comments that contain spam or are improper, inflammatory, off-topic or offensive. Repeat offenders may be subject to banning. The information is then saved on a password-protected shared drive accessible to designated staff who require this information to perform their duties. Review the Facebook Privacy Policy.

Flickr: NCATS uses Flickr to share photos and images related to the center’s mission and culture. NCATS is responsible for the uploaded images on NCATS-sponsored Flickr pages and must ensure the posted images meet quality standards and comply with all NIH, DHHS and federal policies. Images posted are produced by NCATS and may include medical illustrations and other scientific images. Photos posted may also include photos of NCATS employees at events or in labs for the purpose of promoting the center’s mission and culture. You do not need to register with Flickr to view the images on NCATS Flickr pages because all NCATS images posted on Flickr are visible in the public domain. However, if you choose to register, you will not provide PII directly to NCATS. The center has disabled the commenting feature on its Flickr pages. Therefore, PII cannot be collected or unintentionally received by NCATS via the Flickr site. Review the Flickr Privacy Policy.

LinkedIn: NCATS has one LinkedIn page: National Center for Advancing Translational Sciences. NCATS uses LinkedIn to post news and other items of interest and to respond to comments and inquiries sent to NCATS via LinkedIn. You may read the NCATS LinkedIn feeds without subscribing to them. If you want to subscribe to (or follow) NCATS LinkedIn feeds, you must create a LinkedIn account at www.linkedin.com. To create an account, you must provide some personal information, such as your name, username, password and email address. You have the option to provide additional personal information, including a short work history, a location and a picture. Most information you provide for a LinkedIn account is available to the public, but you can modify how much of your information is visible by changing your privacy settings on LinkedIn.com. NCATS staff and contractors monitor the number of subscribers and respond to comments and queries via LinkedIn, but these individuals never take possession of the personal information belonging to you as a LinkedIn follower. However, as a practice, the NCATS Comment Policy requires the removal from the NCATS LinkedIn page of any comments that contain spam or are improper, inflammatory or offensive. The information is then saved on a password-protected shared drive accessible to designated staff who require this information to perform their duties. Review the LinkedIn Privacy Policy.

MailChimp Subscription Management: NCATS uses MailChimp to send e-newsletters, announcements and other messages to users who subscribe to receive them. To subscribe to receive an NCATS product, you must provide your name and email address and indicate your subscription preferences, including the items you want to receive. The email subscriber lists are password protected by MailChimp. Only the NCATS managers who send newsletters, announcements or other communications via MailChimp and the staff and contractors who monitor the results of email initiatives have access to the subscriber lists. MailChimp never allows access to the subscriber lists to anyone outside of NCATS for any purpose. MailChimp collects and provides non-identifying information about the number of messages sent, clicks and open rates. This information is password-protected and only available to designated staff who require this information to perform their duties. Review the MailChimp Privacy Policy.

X: NCATS has one X account: National Center for Advancing Translational Sciences. NCATS uses X to send short messages or “posts” (up to 240 characters) to share information about NCATS and respond to comments and inquiries sent via X to NCATS. You may read the NCATS X feed without subscribing to them. If you want to subscribe to (or follow) NCATS X feeds, you must create an X account at www.x.com. To create an account, you must provide some personal information, such as your name, user name, password and email address. You have the option to provide additional personal information, including a short biography, location or a picture. Most information you provide for an X account is available to the public, but you can modify how much of your information is visible by changing your privacy settings on X.com. NCATS staff and contractors monitor the number of subscribers and respond to comments and queries via X, but these individuals never take possession of the personal information belonging to you as an X follower. However, as a practice, the NCATS Comment Policy requires the removal from the NCATS X page of any comments that contain spam or are improper, inflammatory or offensive. The information is then saved on a password-protected shared drive accessible to designated staff who require this information to perform their duties. Review the X Privacy Policy.

YouTube: NCATS has one YouTube channel: National Center for Advancing Translational Sciences. NCATS posts videos on YouTube to make them available to the public. You do not need to register with either YouTube or Google (which owns YouTube) to watch NCATS YouTube videos. When you watch videos, YouTube may record non-personally identifiable information about their site usage, such as channels used, videos watched, and data transfer details to improve its services. If you login to the YouTube site before watching NCATS videos, YouTube may associate information about your site usage with your YouTube account. If you login to YouTube and comment on an NCATS video, any personal information you included on your YouTube profile page will be visible to visitors who click on the comment field. If you do not log in before watching NCATS videos posted on YouTube, you cannot comment on NCATS videos, and your site usage will not be associated with you or a YouTube account. Review the YouTube Privacy Policy.

For more information on the uses of social and new media for which the General Services Administration has negotiated a federally friendly Terms of Service agreement, visit the DHHS Center for New Media.