Privacy Policy

Updated March 1, 2026

At Title21 Health Solutions (“Title21,” “we,” “our,” or “us”), we are committed to protecting your privacy and to developing technology that gives you the most powerful and secure online experience. You can travel through most of our site without giving us any information about yourself. But sometimes we do need information to provide services that you request, and this statement of privacy explains data collection and use in those situations. This privacy statement explains data collection and use practices of Title21.com in accordance with:

• The EU General Data Protection Regulation (GDPR)
• The UK GDPR (where applicable)
• Applicable U.S. federal and state privacy laws
• Other applicable data protection laws

This Privacy Policy applies to personal data collected through:

• www.title21.com
• Legacy MyCellHub services
• Online forms and demo requests
• Marketing communications
• Customer and support interactions

This policy applies globally, including individuals located in the European Union (EU) and European Economic Area (EEA).

1. Data Controller

For purposes of GDPR:

Title21 Health Solutions
2325 E. Camelback Rd., Suite 320
Phoenix, AZ 85016
United States
Email: privacy@title21.com

For legacy MyCellHub services originating in the EU:

MyCellHub BV (now part of Title21 Health Solutions)
Kempische Steenweg 303/200
3500 Hasselt
Belgium

Title21 Health Solutions acts as the data controller for website visitors, marketing contacts, and prospective customers.

2. Categories of Personal Data We Collect

We collect only data necessary for defined purposes.

A. Information You Provide

• Name
• Email address
• Phone number
• Company name and role
• Country and preferred language
• Billing information (if applicable)
• Content of communications and support requests

B. Automatically Collected Data

• IP address
• Browser type
• Device information
• Pages visited
• Referring URLs
• Cookies and similar technologies

C. CRM & Form Submissions

Website forms are processed and stored in HubSpot (United States), our CRM provider.

3. Legal Basis for Processing (GDPR)

We process personal data under the following lawful bases:

Purpose	Legal Basis
Responding to inquiries or demo requests	Legitimate interest / Pre-contractual steps
Providing contracted services	Contractual necessity
Customer support	Contractual necessity
Marketing communications	Consent (EU/EEA) or Legitimate interest (where permitted)
Compliance with legal obligations	Legal obligation
Website analytics	Consent (where required)

 

For EU/EEA residents, marketing emails are sent only where:

• You have provided explicit consent, or
• A soft opt-in applies under applicable law.

You may withdraw consent at any time.

4. Marketing Communications

If you submit a form on our website, we may use your information to:

• Send relevant product updates
• Provide educational resources
• Invite you to events
• Share marketing communications

For EU/EEA residents:

• Marketing emails are sent only with explicit opt-in consent.
• You may unsubscribe at any time using the link in any email.
• Withdrawal of consent does not affect prior lawful processing.
• We maintain records of consent where required by law.

5. International Data Transfers

Title21 is headquartered in the United States. Website hosting and CRM systems (including HubSpot) are hosted in the United States.

If you are located in the EU/EEA, your personal data may be transferred outside the EU.

Where such transfers occur, we rely on:

• European Commission Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• Adequacy decisions (where applicable)
• Additional technical and organizational safeguards

6. Data Sharing

We do not sell personal data.

We may share personal data with:

• CRM provider
• Cloud hosting providers
• Payment processors
• IT and security vendors
• Professional advisors
• Government authorities where legally required

All processors are bound by contractual data protection obligations.

7. Data Retention

We retain personal data only as long as necessary:

• Marketing contacts: until consent is withdrawn or after prolonged inactivity
• Customer data: for the duration of the contract and applicable limitation periods
• Legal or regulatory data: as required by law

When no longer needed, data is securely deleted or anonymized.

8. Cookies & Tracking Technologies

We use cookies and similar technologies for:

• Website functionality
• Analytics (e.g., Google Analytics)
• Marketing tracking (where consent is given)

For EU/EEA visitors:

• A cookie consent banner allows you to accept or reject non-essential cookies.
• Non-essential cookies are not activated without consent.

You may manage cookie preferences via your browser settings.

9. Security of Personal Data

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption in transit (TLS)
• Access controls and authentication safeguards
• Secure cloud infrastructure
• Regular security reviews
• Vendor security assessments
• Legacy MyCellHub services maintain ISO 27001-aligned security controls.

10. Your Rights (EU/EEA Residents)

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with a supervisory authority

To exercise your rights:

• Email: privacy@title21.com

We may request identity verification before fulfilling requests.

11. Automated Decision-Making

We do not conduct automated decision-making or profiling that produces legal or similarly significant effects.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be clearly communicated on our website with an updated effective date.