California Resident Privacy Notice
Effective Date: September 23, 2023
This California Resident Privacy Notice (“California Policy”) provided by Found Health, Inc. ("Found," "we," or “us) supplements the information contained in Website Privacy Policy (“Privacy Policy” or “Policy”) and the State Privacy Law Addendum (“Addendum”) and applies solely to individual residents of the State of California ("consumers" or "you").
If you are a California resident, the California Consumer Privacy Act, Cal. Civ. Code §§ 1798.100 et seq., as amended by the California Consumer Privacy Rights Act of 2020 and may be amended from time to time (“CCPA/CPRA”), provide you with certain rights with respect to your Personal Information, as that term is defined under and subject to the CCPA/CPRA.
This California Policy describes your CCPA/CPRA rights with respect to your Personal Information and explains how to exercise those rights, subject to CCPA/CPRA exceptions.
Any terms defined in the CCPA/CPRA have the same meaning when used in this California Policy.
Collection, Use and Disclosure of Personal Information in Preceding Twelve (12) Months
The Privacy Policy sets forth the categories of Personal Information that we have collected in the preceding twelve (12) months, the sources from which it was collected, the purpose for which it was collected, and the categories of third-parties to whom it was disclosed. Found does not sell your personal information for money, but we use cookies and similar technologies.
The Right to Know / Specific Information
You have the right to know and request the following information relating to the Personal Information we may have collected and disclosed:
- The categories of Personal Information we have collected about you;
- The categories of sources of the Personal Information;
- The purposes for collecting the Personal Information; and
- If we sold, shared or disclosed your Personal Information for a business purpose, two separate lists disclosing:some text
- the categories of Personal Information that was disclosed for a business purpose and the categories of recipients of such information; and
- the categories of Personal Information that we sold to or shared with third parties and the categories of recipients of such information.
We are not required to provide you with this information more than twice in a twelve (12) month period.
The Right to Access
You have the right to access and obtain a copy of the specific pieces of Personal Information we have collected about you, upon verification of your identity. If you maintain an account with us, we will verify your identity through existing authentication practices for the account (e.g., login and password). If you are not a registered member, we will verify your identity by matching two or three data points that you provide with data points that we maintain and have determined to be reliable for the purposes of verification (e.g., browser or device ID).
The Right to Correct
You have the right to request that we correct the inaccurate Personal Information that we collected and maintain about you.
The Right to Request Deletion
You have the right to request that we delete the Personal Information that we collected from you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.
Note that we may need to retain certain personal information as permitted by law, such as to complete the transaction for which the personal information was collected, maintain an electronic medical record for a Medical Group or Provider, provide a requested good or service, detect security incidents, protect against malicious, deceptive, fraudulent or illegal activities, comply with legal obligations or to enable solely internal uses that are reasonably aligned with your expectations or lawful within the context in which you provided the information. We reserve the right to charge a fee where permitted by law, for instance, if your request is manifestly unfounded or excessive. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
To Submit a Request to Exercise Your Right to Access, Correct and Deletion
Contact us by email at [email protected] or by mail at:
Found Health, Inc.,
Attn: Privacy Officer
1023 Springdale Road, Suite 13A,
Austin, TX 78721
We may ask you to provide additional Personal Information so that we can properly identify you in our dataset to track compliance with a request. We will only use Personal Information provided in a request to review and comply with the request. If you chose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems. In certain circumstances, we may decline a request to exercise the rights described above. Please note that if you are submitting a request regarding information you provided to a Medical Group, a Providers, or a Pharmacy, your request should be directed to that entity.
Response Timing and Format
We will endeavor to respond to a verifiable consumer request within forty-five (45) days of receipt. If we are unable to process your request in such time, we will inform you of the delay in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically.
Information provided in response to a consumer request will be provided free of charge, up to twice. We reserve the right to charge a fee to process or respond to your verifiable consumer request if we determine that such request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Right to Appeal
If we are unable to comply with all or a portion of your request, we will explain the reasons we cannot comply. You may appeal our decision by resubmitting a request and we will inform you of any action taken or not taken in response to the request and explain the reasons for our decision within sixty (60) days of receiving the request.
The Right to Opt-Out of Targeted Advertising, Sale or Sharing of Personal Information
You have the right to direct us not to process your Personal Information for the purposes of (i) targeted advertising; or (ii) sell or share Personal Information we have collected about you. You have the right to limit the use and disclosure of Sensitive Personal Information we have collected about you.
To opt out of the potential sale or sharing of your Personal Information or to limit the use and disclosure of your Sensitive Personal Information, please email us at [email protected].
“DO NOT SELL OR SHARE MY PERSONAL INFORMATION”
“LIMIT THE USE AND DISCLOSURE OF MY SENSITIVE PERSONAL INFORMATION”
You may designate an authorized agent to exercise an opt-out right on your behalf.
Minor Children Between Ages 13-16
We do not sell the Personal Information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “right to opt-in”) from a consumer who is between 13 and 16 years of age. As set forth in the Privacy Policy, we do not knowingly collect Personal Information from children under 13. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information.
