Privacy Notice for Covered Consumers

This Privacy Notice for Covered Residents (the “Notice”) supplements the information contained in our Privacy Policy and applies only if you reside in the States of Texas or Nebraska (collectively, the “Covered States”) (a resident of any Covered States, a “Covered Consumer”). The Notice applies equally to Covered Consumers unless noted otherwise.

For purposes of this Notice “Sell,” “Selling,” “Sale,” or “Sold,” means the exchange of Personal Information for monetary or other valuable consideration by HealthCentral to a third party. “Sell,” “Selling,” “Sale,” or “Sold,” does not include the following:

Disclosure of Personal Information to a third party that processes data on behalf of HealthCentral;
Disclosure of Personal Information to a third party for purposes of providing a product or service requested by you;
Disclosure or transfer of Personal Information to an affiliate of HealthCentral;
Disclosure or transfer of Personal Information to a third party as an asset that is part of a proposed or actual merger, acquisition, bankruptcy, or other transaction in which the third party assumes control of all or part of HealthCentral’s assets; and
Disclosure of Personal Information that is intentionally made available by you to the general public via a channel of mass media without restricting the Personal Information to a specific audience.

“Sensitive Personal Information” means any of the following: (1) Personal Information revealing racial or ethnic origin, religious beliefs, a mental or physical health condition or diagnosis, sex life or sexual orientation, or citizenship or citizenship status; (2) genetic or biometric data that may be processed for the purpose of uniquely identifying an individual; or (3) Personal Information from a person known to be under 13 years of age.; or (4) precise geolocation data.

“Verifiable Request” means the identifying information provided by a consumer in connection with a request matches the Personal Information of the consumer already maintained by us. Identifying information you can submit in order to permit HealthCentral to verify your Verifiable Request may include your first and last name, and the email address that is associated with your account.

For certain requests — such as those involving sensitive Personal Information or requests made on behalf of another consumer — we may require additional verification before we are able to process your request.

“Targeted Advertising” means displaying to a consumer an advertisement that is selected based on Personal Information obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests. “Targeted Advertising” does not include the following:

Advertising to a consumer in response to a consumer request;
Advertisements based on activities within our own websites or online applications;
Advertisements based on the context of a consumer’s current search query, visit to a website, or online application; or
Processing Personal Information solely for measuring or reporting advertising performance, reach, or frequency.

“Profiling” means any form of automated processing of Personal Information to evaluate, analyze, or predict personal aspects concerning an identified or identifiable individual’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

“Relevant Data Privacy Law” means the specific data privacy law of the state of which a consumer is a resident: (i) the Texas Data Privacy and Security Act (TDPSA) for a Covered Consumer from Texas, and (ii) the Nebraska Data Privacy Act (NEDPA) for a Covered Consumer from Nebraska.

Information We Collect or Process

HealthCentral has collected or processed the following categories of Personal Information from Covered Consumers:

Identifiers, such as your name, email address, postal address, Internet Protocol (IP) address, and phone number;
Information you choose to share to share regarding physical health conditions;
Employment information, such as your profession;
Account information, such as your username and password;
Geolocation information, such as the region in which you are located when you access the Site;
Network activity, such as information collected from cookies and similar tracking technologies (as described below), marketing and communication preferences, browsing history, search history, and information regarding your interactions with a website, application, or advertisement; and
Inferences drawn from the categories of Personal Information identified above to understand general user preferences, content interests, and engagement patterns.

HealthCentral obtains this Personal Information from the following types of sources:

Directly from you. For example, from forms you complete or products and services that you purchase.
Indirectly from you. For example, from information automatically sent by your web browser or from analyzing data about your actions on our website.

The above-listed categories of Personal Information collected from Covered Consumers may include Sensitive Personal Information. By accessing or using the Services, you consent to the collection and processing of Sensitive Personal Information in the categories listed above. If you do not consent to the collection and processing of Sensitive Personal Information within these categories, please do not access or use the Services.

Use of Personal Information

HealthCentral may use or disclose the Personal Information we collect for one or more of the following “Business Purpose(s):”

To fulfill or meet the reason you provided the information;
To provide our website or online services;
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
To respond to your requests under the Relevant Data Privacy Law;
For any other purpose described to you when we collect your Personal Information; and
For any other acceptable purposes as set forth in the Relevant Data Privacy Law.

Unless we notify you otherwise, we will not collect additional categories of Personal Information, nor use the Personal Information we collect or collect for any purpose that is not reasonably necessary to nor compatible with the purposes disclosed in this Privacy Policy.

Disclosures of Personal Information

HealthCentral has disclosed your Personal Information as described in this Notice, including the following categories of Personal Information:

HealthCentral discloses Personal Information to third parties for a Business Purpose that is reasonably necessary or compatible with the purposes disclosed in this Privacy Policy. When we disclose Personal Information for a Business Purpose, we enter into an agreement with the receiving party that describes the purpose for sharing the Personal Information, and that requires the receiving party to keep that Personal Information confidential.

We may disclose your Personal Information with the following categories of third parties: service providers, and business partners.

In the past twelve (12) months, HealthCentral has not Sold or processed Personal Information about its Covered Consumers for Targeted Advertising.

Your Rights and Choices

If you are a Covered Consumer, you may request information about our collection and processing of your Personal Information, whether or not it was collected electronically. If you submit a Verifiable Request, we will disclose whether we have collected or processed your Personal Information and allow you to access the Personal Information we have collected, to the extent we continue to retain the Personal Information. To the extent technically feasible, we will disclose this information to you in a readily usable format that allows you to transmit the data to another entity without hindrance. In the case of individuals located in Nebraska, in the event that you make more than (2) requests in any twelve (12) month period, we reserve the right to charge a fee prior to processing any such request(s).

You also have the right to request that we delete any of your Personal Information that we collect or maintain by submitting a Verifiable Request. We may deny your deletion request if retaining your Personal Information is necessary for us or our Service Providers to:

Complete the transaction for which we collected your Personal Information, provide goods or services that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
Prevent or detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or investigate, report, or prosecute those responsible for such activity;
Debug products to identify and repair errors that impair existing intended functionality;
Engage in public or peer-reviewed scientific or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the achievement of such research, if you previously provided informed consent;
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
Cooperate with law enforcement agencies concerning conduct or activities that we reasonably and in good faith believe may violate the law;
Comply with a legal obligation; or
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

If you are a Covered Consumer, you further have the right to request that we correct any of your Personal Information that is inaccurate by submitting a Verifiable Request. We will correct any inaccurate Personal Information pursuant to your request, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information. We may deny your correction request if the Personal Information is accurate.

If you choose to exercise a privacy right under the Relevant Data Privacy Law, you have the right not to receive unlawful discriminatory treatment.

You may submit a Verifiable Request for the information listed above, or exercise any of your rights enumerated under this Notice, by calling us at 888-356-0150, or by completing a form on our website, available here. You may also submit a Verifiable Request on behalf of your minor child who is under 13 years of age.

After we receive your Verifiable Request, we will provide to you, in writing, the requested information. You can choose to have this information delivered to you by postal mail, or electronically. We will try to respond to your verified request within forty-five (45) days of receipt, but if we require more time (up to another forty-five (45) days) we will inform you of the reason and extension period in writing. If we decline to act on your request for any reason permitted under the Relevant Data Privacy Law, we will notify you of our decision within forty-five (45) days of receiving your request. If applicable, our response will explain the reasons why we cannot comply with your request.

If we deny your request or fail to act on it within the required time period, you may have the right to appeal this decision by submitting a new Verifiable Request in which you conspicuously note that you are appealing a previous decision. If you are a Covered Consumer from Texas or Nebraska, we will respond to your Verifiable Request to appeal within sixty (60) days of receipt. If applicable, our response will explain the reasons why we are denying your appeal, and any further steps that may be available to you.

HealthCentral does not and will not, without first obtaining your consent, Sell or process your Personal Information for Targeted Advertising, and/or Profiling.

Should you choose to exercise any of the rights enumerated under this Notice we will not:

Deny you goods or services;
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
Provide you a different level or quality of goods or services; or
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, please be aware that it may be a functional necessity for our Services to have Personal Information about you in order to operate, and we may not be able to provide some or all of our Services to you if you direct us to delete your Personal Information.

Retention of Your Information

We retain each category of your Personal Information for no longer than is reasonably necessary for one or more of the above lawful bases for processing, subject to your right to request we delete your Personal Information. Due to the nature of the services, it is not possible to predict the length of time that we intend to retain your Personal Information. Instead, we use the following criteria to determine whether it remains reasonably necessary to retain your Personal Information for one or more disclosed lawful bases for processing:

When we determine that it is no longer reasonably necessary to retain your Personal Information for one or more disclosed lawful bases for processing based on the above criteria, we will delete your Personal Information.