Your health plan (your “Health Plan”) has determined that you are eligible to participate in a Health Plan sponsored program (the “Program”) that facilitates laboratory testing and related services (collectively, the “Services”). Your Health Plan, directly or indirectly, partners with third parties (“Partners”) to facilitate and provide access to such Services, including the provision of a home sample collection kits (“Kit”) for laboratory test(s) (each, a “Test”), laboratory testing, clinician oversight services by independent clinicians, including ordering of a Test(s), if appropriate, and the provision of results of such Test(s) (“Results”). In connection with its provision of the Program, your Health Plan also partners with Company (as defined below), a service provider which provides the website that provides access to your Results (the “Site”), as well as technology services, integration and facilitation of access to the Services.
When you access the Site or use the Services, we or our Partners may collect the following types of personal information:
Biological Information. You may provide to the Lab a biological sample(s) using the Lab’s sample collection Kit to allow the Lab to perform the Test (“Biological Information”). The Lab collects, processes, and stores biological sample(s) you provide in accordance with its policies provided to you in connection with the Kit.
We may disclose your personal information only in the following circumstances:
We may also disclose your personal information:
As noted in the section titled “How Your Information Is Collected”, you can usually set your browser to reject cookies or to alert you before one is placed if you prefer, but this may mean that you cannot use all features of the Site or the Services. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals. If you choose not to provide us with the information we collect, some of the features of our Service may not work as intended.
If you believe that Company has incorrect information that was provided as part of the Services, you may correct, amend, or delete that information by contacting email@example.com. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. Information that has already been de-identified and/or aggregated may not be retrievable or traced back for correction or removal from any database. Information that has been shared with a Partner with your consent will be subject to such Partner’s privacy policies.
The security of your personal information is important to us. Company employs procedural and technological measures to protect your personally identifiable information. These measures are reasonably designed to help protect your personally identifiable information from loss, unauthorized access, disclosure, alteration or destruction. We may use software, secure socket layer technology (SSL) encryption, password protection, firewalls, internal restrictions and other security measures to help prevent unauthorized access to your personally identifiable information. However, Company cannot guarantee that unauthorized third parties will never be able to defeat these measures or use your personally identifiable information for improper purposes. Therefore, you should be aware that when you voluntarily display or distribute personally identifiable information, that information could be collected and used by others. Company is not responsible for the unauthorized use by third parties of information you post or otherwise make available publicly.
The Services are hosted in the United States and intended for individuals residing and located within the United States.
California Shine the Light: Residents of the State of California have the right to request information from Company regarding other companies to whom the company has disclosed certain categories of information during the preceding year for the other companies’ direct marketing purposes. If you are a California resident and would like to make such a request, please contact firstname.lastname@example.org.
California Consumer Privacy Act: The California Consumer Privacy Act (“CCPA”) provides California residents with the right to receive certain disclosures regarding the collection, use, and sharing of “Personal Information,” as well as the right to know/access, delete, and limit sharing of Personal Information. The CCPA defines “Personal Information” to mean “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Certain information we collect may be exempt from the CCPA because it is considered public information (e.g., it is made available by a government entity) or covered by a specific federal privacy law, such as the Gramm–Leach–Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act. This section does not apply if we do not collect any personal information from you or if all of the information we collect is exempt from the statute.
To the extent that we collect Personal Information that is subject to the CCPA, that information, our practices, and your rights are described below.
We collect the following categories of Personal Information:
Right to know about personal information collected, disclosed, or sold: You have the right to request that we disclose to you the Personal Information we collect, use, disclose, or sell. In order to process your request to know/access your Personal Information or delete your Personal Information we may ask you to take additional steps to verify your request or identity.
Right to know/access information: You have the right to request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. To protect our customers’ Personal Information, we are required to verify your identity before we can act on your request.
Right to request deletion of information: You have the right to request in certain circumstances that we delete any Personal Information that we have collected directly from you. To protect our customers’ Personal Information, we are required to verify your identity before we can act on your request. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.
Right to Non-Discrimination: You have the right to be free from discriminatory treatment by us based on your exercise of your CCPA rights. We may run promotions from time to time wherein we incentivize a consumer to share certain pieces of information with us. Participation in these incentives is voluntary, and you may opt out of the data sharing at any time.
Right to opt out of sale of personal information to third parties: Company does not sell personal information as contemplated by the CCPA.
How to submit a request: You may submit a request to exercise your rights by contacting email@example.com, where you can request and download specific pieces of information we have collected.
Verification procedures: In order to process your request to know about or delete personal information we collect or disclose, we must verify your request. We do this by providing personal identifiers we can match against information we may have collected from you previously.
Authorized agent: You may authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf. We require that you and the individual complete notarized affidavits in order to verify the identity of the authorized agent and confirm that you have authorized them to act on your behalf.