Doxy.me Inc.
California Residents Privacy Policy — https://doxy.me/en/calif-policy/
California Residents' Privacy Rights
Effective November 17, 2023
The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the "CCPA") provides California residents with additional rights regarding Our use of their Personal Data.
This Privacy Policy for California residents supplements the information contained in the Company's https://doxy.me/en/privacy-policy and applies solely to all visitors, users, and others who reside in the State of California. We adopt this notice to comply with the CCPA and any terms defined in the CCPA have the same meaning when used in this Policy.
The Personal Data that We collect from You depends on how You interact with Us, the Services, and http://doxy.me (the "Website"). The following table lists the categories of Personal Data and the specific pieces of Personal Data We have collected within the last twelve (12) months that have been disclosed to you in the Company’s Privacy Policy but are further detailed here in accordance with CCPA requirements. The table also lists, for each category, Our business use and whether We sell the information or share it with third parties. Please see each of the "How Do We Collect Your Personal Data?" and "How Do We Use Your Personal Data?" subsections under each Guest, Provider, and Patient section of the Privacy Policy for more detailed information that explains Our use of the data depending on how You interact with Us.
We do not sell the Personal Data We collect, but we share certain Personal Data with third parties for targeted advertising, which is deemed a sale/ sharing under the CCPA for which you may Opt-Out. We will not sell the Sensitive Personal Data We collect. We also will not share it with third parties for targeted advertising. To opt-out of Personal Data sales or sharing, please click the opt-out or unsubscribe link in an email sent by Us or see the Contact Us section below.
Typically, We retain Your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. In many cases, Personal Data collected from Providers do not have a retention period. However, a Provider may delete all Personal Data and any other account data at any time. Please note that in many situations We must retain all, or a portion, of Your Personal Data to comply with Our legal obligations, resolve disputes, enforce Our agreements, to protect against fraudulent, deceptive, or illegal activity, or for another one of Our business purposes.
| Category | Information in Category | Specific Information Collected | Business Use Purpose | Sold or Shared |
|---|---|---|---|---|
| A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. | To provide Our Services and Website; to report and process employment applications; verify employment information; maintain personnel records; advertising; and analytics. | YES, shared with service providers; advertising networks; analytics partners |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history | To provide Our Services and Website; to report and process employment applications; verify employment information; maintain personnel records; advertising; and analytics. | YES, shared with service providers; advertising networks; analytics partners |
| C. Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | Age, race, gender, marital status, citizenship or disability may be on employment related documenation. Other protected information may be disclosed in File Transfer or PhotoCapture modes at the discretion of the Patient | To provide Our Services and Website; to report and process employment applications; to verify employment information; and maintain personnel records. | Providers may view Patient Personal Data shared via File Transfer or photo capture |
| D. Commercial information. | Records of Services purchased, or considered, or other purchasing or consuming histories or tendencies. | Records of Services purchased | To provide Our Services and Website; advertising; and analytics. | YES, shared with service providers; advertising networks; analytics partners |
| E. Internet or other similar network activity. | Browsing history and search history on the Website, information on a consumer's interaction with the Website | Browsing history and search history on the Website, information on a consumer's interaction with the Website. | To facilitate efficient use of Our information systems and Website; advertising; analytics. | YES, shared with service providers; advertising networks; analytics partners. |
| F. Professional or employmentrelated information. | Current or past job history or performance evaluations. | Current or past job history or performance evaluations. | To report and process employment applications; verify employment information; maintain personnel records. | YES, shared with service providers. |
| G. Inferences drawn from other Personal Data. | Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Analytics data | Advertising and analytics | YES, shared with service providers; advertising networks; and analytics partners |
| Sensitive Personal Data | ||||
| H. Racial or ethnic origin | Race, color, ethnicity, ancestry, religion, citizenship, and national origin. | Other Sensitive Personal Data may be disclosed in File Transfer or PhotoCapture modes at the discretion of the Patient | To provide the Services | Not shared or sold. Providers may view Patient Personal Data shared via File Transfer or photo capture |
| I. Genetic data | Data which results from the analysis of a biological sample of an individual, or other source, and concerns genetic material. | Other Sensitive Personal Data may be disclosed in File Transfer or PhotoCapture modes at the discretion of the Patient | To provide the Services | Not shared or sold. Providers may view Patient Personal Data shared via File Transfer or photo capture |
| J. Health, sex life or sexual orientation information | Any information collecting and analyzing an individual's health, health conditions, medical history, sexual health, sexual conditions and history, sexual orientation, or gender identity and/or gender expression. | Other Sensitive Personal Data may be disclosed in File Transfer or PhotoCapture modes at the discretion of the Patient | To provide the Services | Not shared or sold. Providers may view Patient Personal Data shared via File Transfer or photo capture |
Your Rights and Choices
The CCPA provides consumers (California residents) with specific rights regarding their Personal Data. This section describes Your CCPA rights and explains how to exercise those rights.
Right to Know and Data Portability
You have the right to request that We disclose certain information to You about Our collection and use of Your Personal Data over the past twelve (12) months (the "right to know"). Once We receive Your request and confirm Your identity (see Exercising Your Rights to Know, Delete, or Correct), We will disclose to You:
- The categories of Personal Data We collected about You.
- The categories of sources for the Personal Data We collected about You.
- Our business or commercial purpose for collecting that Personal Data.
- The categories of third parties with whom We share that Personal Data.
The specific pieces of Personal Data We collected about You (also called a data portability request).
Right to Correct
You can review and change Your Personal Data by sending Us an email at support@doxy.me to request access to or correct any Personal Data that You have provided to us. Once We receive Your request and confirm Your identity (see Exercising Your Rights to Know, Delete, or Correct), We may not accommodate a request to change information if We believe the change would violate any law or legal requirement or cause the information to be incorrect.
Right to Delete
You have the right to request that We delete any of Your Personal Data that We collected from You and retained, subject to certain exceptions (the "right to delete"). Once We receive Your request and confirm Your identity (see Exercising Your Rights to Know, Delete, or Correct), We will review Your request to see if an exception allowing Us to retain the information applies. We may deny Your deletion request if retaining the information is necessary for Us or Our service provider(s) to:
1. Complete the transaction for which We collected the Personal Data, provide a good or service that You requested, take actions reasonably anticipated within the context of Our ongoing business relationship with You, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform Our contract with You.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if You previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on Your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which You provided it.
We will delete or de-identify Personal Data not subject to one of these exceptions from Our records and will direct Our service providers to take similar action.
Exercising Your Rights to Know, Delete, or Correct
To exercise Your rights as described above, please submit a request by either email or visiting the website as listed in the Contact Us section below.
Only You, or someone legally authorized to act on Your behalf, may make a request to know, delete, or correct Your Personal Data.
You may only submit a request to know twice within a 12-month period. Your request to know, delete, or correct must:
- Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected Personal Data or an authorized representative, which may include:
o Matching at least two (2) data points You provide to Us with other reliable data points We already maintain about You.
o Verifying a parent or guardian's identity by checking a form of government-issued identification against databases of such information or by calling Us at the number listed below in the Contact Us section. - Describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it.
We cannot respond to Your request or provide You with Personal Data if We cannot verify Your identity or authority to make the request and confirm the Personal Data relates to You.
We will only use Personal Data provided in the request to verify the requestor's identity or authority to make it.
Response Timing and Format
We will confirm receipt of Your request within ten (10) business days. If You do not receive confirmation within the 10-day timeframe, please contact us (see Contact Us below).
We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If We require more time (up to another forty-five (45) days), We will inform You of the reason and extension period in writing.
If You have an account with us, We will deliver Our written response to that account. If You do not have an account with us, We will deliver Our written response by mail or electronically, at Your option.
Any disclosures We provide will only cover the 12-month period preceding Our receipt of Your request. The response We provide will also explain the reasons We cannot comply with a request, if applicable. For data portability requests, We will select a format to provide Your Personal Data that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to Your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If We determine that the request warrants a fee, We will tell You why We made that decision and provide You with a cost estimate before completing Your request.
Sale of Personal Data and Sensitive Personal Data Opt-Out and Opt-In Rights
Notice of Right to Opt Out of Sale/Sharing
To exercise the right to opt-out, You (or your authorized representative) may submit a request to Us contacting us. Please see “Contact Us” below.
Once You make an opt-out request, We will wait at least twelve (12) months before asking You to reauthorize Personal Data sales. However, You may change your mind and opt back in to Personal Data sales at any time by emailing Us at the email address below.
You do not need to create an account with Us to exercise Your opt-out rights. We will only use Personal Data provided in an opt-out request to review and comply with the request.
Non-Discrimination
We will not discriminate against You for exercising any of Your CCPA rights. Unless permitted by the CCPA, We will not:
- Deny You goods or services.
- Charge You different prices or rates for goods or services, including through granting
discounts or other benefits, or imposing penalties. - Provide You a different level or quality of goods or services.
- Suggest that You may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, We may offer You certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive We offer will reasonably relate to Your Personal Data's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires Your prior opt-in consent, which You may revoke at any time.
Other California Privacy Rights
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of Our Website that are California residents to request certain information regarding Our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please contact us.
Contact Us
Certain inquiries are required to be in written format.
If You have any questions about this policy, You may contact us at this link: https://doxy.me/en/about/contact/