In addition to the disclosures and rights set forth elsewhere in this Policy, you and other users may have certain rights based on applicable state law, e.g., for California residents, the California Privacy Rights Act (CPRA). Other states have passed consumer privacy laws that may be applicable to Enzo Health and your use of this Site. These supplemental disclosures and rights apply to you and your use of our Platform to the extent applicable state law applies to Enzo Health and your use of our Platform. Please contact us using the Contact Information at the end of this Policy if you have any questions regarding your rights under applicable state law.
Categories of Personal Information Collected
As described in more detail in other areas of our Privacy Policy, we collect and/or disclose Personal Information about you when you visit use our Platform, including information about you that you provide to us, and information that we automatically collect from you or your computer or device as you use our Platform.
Personal Information does not include information that is: (a) publicly available information from government records; (b) de-identified or aggregated consumer information; or (c) certain information excluded from the scope of applicable state law (e.g., PHI covered under HIPAA and medical information that may be covered under HIPAA and other state laws).
Categories of Sources From Which We Have Collected Personal Information
We collect Personal Information directly from you, for example when you provide it to us and when you contact us through our Platform; and indirectly from you automatically through your computer or device as you use our Platform. We may also collect Personal Information about you from our advertising partners and service providers.
Use of Personal Information
We do not sell your Personal Information and have not done so in the prior 12 months from the last modified date of this Policy. We may use or disclose the Personal Information we collect for our business purposes as described elsewhere in this Privacy Policy.
Sharing Personal Information
Enzo Health may disclose your Personal Information to a third party for one or more business purposes. When we disclose Personal Information for a business purpose, such as to service providers, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.
Disclosures of Personal Information for Business Purposes
We may disclose your Personal Information for our business purposes, such as your contact information, other information you have provided to us, and unique identifiers that identify you to us or to our service providers. We disclose your Personal Information to certain third parties such as our vendors, business partners, and service providers.
Access Request Rights
You may have the right to request that Enzo Health disclose certain information to you about our collection and use of your Personal Information over the past 12 months for the above business and commercial purposes. To submit an access request, see Exercising Access and Deletion Rights, below. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of Personal Information we collected about you.
- The categories of sources for the Personal Information we collected about you.
- Our business or commercial purpose for collecting that Personal Information.
- The categories of third parties with whom we share that Personal Information.
- The specific pieces of Personal Information we collected about you.
- If we disclosed your Personal Information for a business purpose, a list disclosing such disclosures, identifying the Personal Information categories that each category of recipient obtained.
Deletion Request Rights
You may have the right to request that Enzo Health delete your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless certain exceptions apply.
Exercising Access and Deletion Rights
To exercise the access and deletion rights described above, please submit a verifiable consumer request to us by either:
Only you or your legal representative authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify whether you are the person about whom we collected Personal Information or an authorized representative of such person.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
Non-Discrimination
We will not discriminate against you for exercising any of your rights under applicable state law. Unless permitted by applicable law, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you with a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.