CCPA

Last updated: October 2023

This Privacy Notice applies to Consumers residing in the State of California (hereinafter the “Notice”), who are entitled to certain rights and protections with respect to their Personal Information under the California Consumer Privacy Act of 2018 (the “CCPA,” as amended by the California Privacy Rights Act of 2020, or “CPRA”). The terms “personal information,” “business purpose,” “commercial purpose,” “sale,” and “service provider” as used in this Notice have the meanings ascribed to them in the CCPA. Capitalized terms used but not defined in this Notice will have the meanings set out in the Tyto Services Website Privacy Policy (the “Privacy Policy”). If there is any conflict or inconsistency between the terms of this Notice and the Privacy Policy, the terms of this Notice will govern. This Notice supplements the information contained in the Privacy Policy, and solely applies to information “sold” or “shared” in the last 12 months.

1. CATEGORIES OF PERSONAL INFORMATION WE COLLECT FROM CALIFORNIA CONSUMERS

In the preceding 12 months, we have collected the following categories and types of personal information from California consumers, and intend to continue doing so subject to the requirements under the CCPA:

For more information about the types of personal information we collect, please see the “Types of information we may collect on our Users?” section in our Privacy Policy. Please note that not all types of information will be collected or received for every individual.

2. HOW WE COLLECT YOUR INFORMATION

We may obtain and combine personal information from the sources listed below, which are further described in our Privacy Policy.

• Personal Information you provide to us when you use our Services (i.e., registration information)
• Information which we automatically collect when you use or access the Site (i.e., device information, automatically generated information, usage data, and information derived from tracking technologies such as cookies)
• Non-Personal Information is collected through your use of the Site (i.e., analysis aggregation, anonymized information)

3. BUSINESS OR COMMERCIAL PURPOSE FOR COLLECTING, SHARING AND SELLING INFORMATION

We collect and share your personal information for the following business and commercial purposes: to authenticate your identity when you use our Site to provide you with the Site, to provide customer support, where you chose to exercise rights entitlements you may have vis a vis your healthcare network and benefit plan administrators – to report to such providers and administrators regarding the exercise of insurance plans or benefits they administer, to adhere to your instructions and transmit your information accordingly, to give you a better browsing experience, to detect security incidents, to debug and fix errors associated with our Site, improve our Site and offerings, to encourage and enable purchases and delivery of our products and services, such as through our various promotions, to comply with any applicable rule or regulation and/or respond to or defend against legal proceedings versus us or our affiliates, or to enroll you in our newsletter subscription program.

We do not make your data publicly available, we do not act as data brokers and we do not trade in your data. However, certain standard generally accepted business practices may be deemed as “Sale” of data under the CCPA, such as when we utilize third party service providers that provide us with services, while they retain certain rights to use your data for their own business needs (e.g. Google Analytics, fraud detection services, etc.).

If you are a California customer, you have a right to request to opt-out of certain data transfers and sharing of personal activities which we operate. Please refer to section 3 – “Your California Consumer Rights” below, for information on how you can exercise your rights. For more details on how and to whom we share your data please refer to “Sharing Information with Third Parties, “DIRECT MARKETING” and “COOKIE POLICY” in our Website Privacy Policy

4. YOUR CALIFORNIA CONSUMER RIGHTS

Right to Access

California consumers have the right to request access to the specific pieces of personal information we have collected about them in the last 12 months. You may make this request up to two times in a 12-month period.

You may also request additional details about our information practices, including the categories of personal information we have collected about you, the categories of sources of such collection, the business or commercial purpose for collecting or selling personal information, the categories of third parties with whom we share and sell your personal information, the categories of personal information we have disclosed and “sold” about you in the preceding 12 months, and the categories of third parties to whom we sold personal information in the preceding 12 months.

Right to Correct

You have the right to request the correction of inaccurate personal information if that information is inaccurate. We reserve the right to request identifying documentation from you in certain circumstances, as permitted by law.

Right to Delete

You have the right to request deletion of your personal information (subject to certain exceptions). Once we receive and confirm a consumer request, we will delete (and direct our Service Providers to delete) your personal information from our records, unless an exception applies.

Right to Non-Discrimination

You have the right to receive equal service and price and not be discriminated against even if you exercise any of your CCPA rights. Unless otherwise permitted by applicable law (such as if the differences are reasonably related to your information), we will not:

• Deny you goods or services;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits, or imposition of penalties.
• Provide a different level or quality of goods or service; or
• Suggest that you will receive a different price or rate for goods or services, or a different level or quality of goods or services.

Right to Limit or Opt-Out of the Sale or Sharing of Your Information

Our Services do not sell (as “sell” is traditionally defined) your personal information. That is, we don’t provide your name, phone number, address, email address or other personally identifiable information to third parties in exchange for money. However, under California law, certain cases of sharing information, such as for advertising purposes, may be considered a “sale” of personal information. If you’ve visited our digital properties within the past 12 months, personal information about you may have been “sold” under the CCPA to our advertising or other partners for their own use.

Under the CCPA, California residents now have the right to opt out of both the “sale” and “sharing” of personal information. We’ve made it easy for anyone to stop the information transfers that might be considered such a “sale” from our website. And just for clarification, sharing your personal information with our service providers that may send you an email communication on our behalf isn’t considered a “sale” under the CCPA.

Finally, we may collect certain categories of personal information from you and third parties as described in the “COLLECTION” section above that may be considered “Sensitive Personal Information” under California law. Our use of your Sensitive Personal Information is generally limited to performing services or providing goods you requested. You have the right to limit the use and disclosure of your personal information to whatever use is necessary for us to make the Services available to you.

Request Process

California consumers may make a rights request by sending us an email at support@tytocare.com. or calling customer service at 866-971-8986. Your request must include sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, which may include your email address, name and account ID (which is required only if you already have an account with us). If you have an account with us, you can find your account ID on your main account page after you log in. Additionally, users may opt-out of the “sale” of information as described above, by clicking the “Do Not Sell My Personal Information” link at the bottom of this page.