Effective Date: January 1st, 2023
Last Updated on: December 22nd, 2022
Information We Collect and Disclose
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“personal information “).
The following chart details which categories of personal information we collect, as well as which categories of personal information we have collected and disclosed for our operational business purposes within the last twelve (12) months:
Categories of personal information
Disclosed to which categories of third parties for operational business purposes
|A. Identifiers, such as name, contact information including postal and email addresses, account name, unique personal identifier, Internet Protocol address and other online identifiers.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, contact information, physical characteristics or description, address, telephone number, credit card number, debit card number, or any other financial information, and medical information.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|C. Protected classification characteristics under California or federal law, such as age, gender, and medical condition||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|D. Commercial information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|E. Biometric information, such as sleep, health, or exercise data.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|F. Internet or other similar network activity, such as such as browsing history, search history, and interactions with our online services.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|G. Geolocation data, such as device location and approximate location derived from IP address.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|H. Sensory data, including audio, electronic, visual and similar information, such as call recordings.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|I. Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services.|
|J. Sensitive Personal Information: Personal information collected and analyzed concerning an individual’s health||Our affiliates and subsidiaries; third-party service providers and contractors; trusted business partners that support our provision of services|
Sources of Personal Information
We obtain the categories of personal information listed above from the following categories of sources:
Purposes for the Collection, Use, and Disclosure of Personal Information
We may use or disclose the personal information we collect for one or more of the following purposes:
Under the CCPA, if a business “sells” personal information or “shares” personal information for purposes of cross-context behavioral advertising, it must allow California residents to opt out of the sale or sharing of their personal information. However, we do not sell or share and have not sold or shared personal information, including sensitive personal information, in the preceding twelve (12) months, as these terms are defined in the CCPA. For example, and without limiting the foregoing, we do not sell or share personal information, including sensitive personal information, of minors under 16 years of age.
Purposes for the Collection and Use of Sensitive Personal Information
Subject to your consent where required by applicable law, we may use sensitive personal information for purposes of performing services for our business, providing goods or services as requested by you, ensuring security and integrity, short term transient use such as displaying first party, non-personalized advertising, order processing and fulfillment, servicing accounts, providing customer service, verifying customer information, processing payments, providing financing, and activities relating to quality and safety control or product improvement.
We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include:
• The length of time we have an ongoing relationship with you and provide services to you, for example, for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
• Whether there is a legal obligation to which we are subject, for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them; or
• Whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations.
Rights and Requests
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Exercising Your Rights
To exercise your rights to know or delete described above, please submit a request by either:
We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may need to request additional personal information from you, such as your email address or Metagenics Customer Account number, in order to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your personal information. If you make a deletion request, we may ask you to verify your request before we delete your personal information.
We may also verify your identity via steps including:
You have the right to be free from unlawful discrimination for exercising any of your CCPA rights.
If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Rights and Requests.” As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent. In addition, we may require that you verify your identity as described in the section entitled “Rights and Requests” or confirm that you provided the agent permission to submit the request.
Changes to this Policy
If you have any questions or comments about this Policy, please do not hesitate to contact us at:
Attn: CCPA/Privacy Office
25 Enterprise, Suite 200, Aliso Viejo, CA 92656
If you need to access this Policy in an alternative format due to having a disability, please contact PrivacyOffice@metagenics.com and 800-692-9400.