Privacy policy.
Last Updated: 3/25/2024
Welcome! We are One Canopie, an end-of-life focused company providing related services and products. This Privacy Policy explains how One Canopie LLC (“One Canopie”, “Company”, “we”, “us” or “our”) collects, uses, discloses, and otherwise processes personal information (as defined below) in connection with our websites (the “Sites”) and other websites we own and operate that link to this Privacy Policy, and the related content, platform, services, products, apps, and other functionality offered on or through our services (collectively, the “Services”). This Privacy Policy also tells you about your privacy rights and how the law protects you.
We use your personal information to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
I. WHAT IS PERSONAL INFORMATION?
When we use the term “personal information” in this Privacy Policy, we mean any data or information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person or household or any other data or information that constitutes “personal data”, “personal information,” or “personally identifiable information.”
II. OUR COLLECTION AND USE OF PERSONAL INFORMATION
We collect personal information in a variety of ways. For example, you may provide us your personal information when you send us messages, subscribe to our mailing lists, newsletters or other forms of marketing communications, participate in a survey, or use some other feature of our Service.
We may link or combine your activities and information collected from you on our websites and mobile apps with information we receive from third parties, as well as information we collect automatically through tracking technologies (defined below). This allows us to provide you with a personalized experience regardless of how you interact with us.
Personal Information Collected from You
We may collect the following categories personal information submitted to us by individuals through the Services:
Marketplace Application Information. If you apply to join and be listed as part of the One Canopie marketplace, we may collect your first and last name, phone number, state of licensure, license type, referral information, current practice setting, and information regarding how you learned about One Canopie. We use this information to fulfill your request, to communicate with you directly, and to determine whether you are eligible to join the marketplace.
Inquiry and Communications Information, including information provided in custom messages sent through the forms, in chat messages, to one of our email addresses, or via phone. This also includes contact information provided on our Services. We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the services we offer to our users and to manage and grow our organization.
Login Information. In addition to information you provide upon sign-up, such as your email address, we collect your login credentials, including your username and password, when you create an account with us. If you choose to create an account using a third-party service, such as Google, we collect information from the third party. For more information about this, and information we collect when we use other third- party services to provide certain features, please see Personal Information from Third Parties, below.
Internet and Other Electronic Network Information, including IP address, online identifiers, and device identifiers. For more details about this type of information collection, please see “Third-Party Integrations” in How We Use Cookies and Other Tracking Technologies To Collect Information, below.
Newsletters and Marketing Emails, including email address and applicable interests and communication preferences. We use this information to manage our communications with you and send you information about products and services we think may be of interest to you. If you wish to stop receiving email messages from us, simply click the “unsubscribe link” provided at the bottom of the email communication. Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices).
Survey and Testimonial Information, including information included in any questions submitted through surveys or content of any testimonials. We use this information to administer and facilitate the Services, to respond to your submission, to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.
Events and Promotions. If you fill out any forms or participate in One Canopie events or promotional events, we may collect your contact information (such as your name, email, and phone number, postal code) and any other information requested as part of the event or promotion entry, including photos/videos (each, as applicable).
Feedback Information. We may also collect feedback and ratings you provide relating to our services or products. We use this information to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.
Provider or Employment Application Information, including your contact and demographic information, educational and work history, credentialing information, professional history and expertise, employment interests, information obtained during interviews and any other information you choose to provide, if you apply for a position with us. For more information about our information practices in this context, please see “Additional Information for Job or Marketplace Applicants” below.
Personal Information from Third Parties
We also obtain personal information from third parties, which we often combine with personal information we collect either automatically or directly from an individual.
We may receive the same categories of personal information as described above from the following third parties:
One Canopie Entities: We may receive personal information from other companies and brands owned or controlled by One Canopie, and other companies owned by or under common ownership as One Canopie.
Other Users or Individuals who Interact with our Services: We may receive your information from other users or other individuals who interact with our Services. For example, if you engage in one of our communications hosted on third-party platforms, we will be able to see any public communications made within that platform.
Third-Party Integrations: Our Services integrate with third parties to offer certain functionalities. This may include logging into the Services through a third-party service like Google or providing scheduling functionality through a third-party calendar feature. When you use third-party sign-on services, we receive your email address, name, and identifiers associated with that third-party service. When you use a third-party scheduling feature, we collect your email address associated with your calendar account and the start and end times of events on your calendar to determine availability. Please note that our use of these third-party integrations may be subject to their terms and privacy policies. For more information about the Google API Services User Data Policy that we must comply with, including the Limited Use requirements, please visit here. We recommend that you review and, if necessary, adjust your privacy settings on third-party websites and services before sharing information and/or linking or connecting them to other platforms, including our Services.
Third-Party Payment Processors: We may provide paid products and/or services within the Service. In that case, we may use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their privacy policies. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.
We use Paypal and Stripe for payment, analytics, and other business services. Paypal and Stripe collect and process personal data, including identifying information about the devices that connect to their services. Paypal and Stripe use this information to operate and improve the services they provide to us. You can learn more about Stripe and its processing activities via its privacy policy at https://stripe.com/privacy. You can learn more about Paypal and its processing activities via its privacy policy at https://www.paypal.com/us/legalhub/privacy-full.
Social Media: When an individual interacts with our Services through various social media networks, such as when someone “Likes” us on Facebook or follows us or shares our content on Facebook, LinkedIn, X (formerly known as Twitter), Pinterest, or other social networks, we may receive some information about individuals that they permit the social network to share with third parties. The data we receive is dependent upon an individual’s privacy settings within the social network. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.
Service Providers: Our service providers that perform services solely on our behalf, such as survey and marketing providers, and tax and payment processors, collect personal information and often share some or all of this information with us. The information may include contact information, demographic information, payment information, information about your communications and related activities, and information about your orders. We may use this information to administer and facilitate our services, your orders, and our marketing activities.
Business Partners: We may receive your information from our business partners, such as companies that offer their products and/or services on our Services. We may use this information to administer and facilitate our services, your orders, and our marketing activities.
Other Sources: We may also collect Personal Information about individuals that we do not otherwise have from, for example, publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions. We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.
Uses of Personal Information
In addition to the information provided above, we may use personal information we collect to:
Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, or to deliver the Services you have requested;
Verify your identity and entitlement to Services when you contact us or access our Services;
Register you for and provide you access to events and webcasts;
Communicate with individuals, including via email, social media, and phone calls;
Request individuals to complete surveys about our organization, organizations we partner with, and/or Services;
Facilitate marketing and advertising purposes, including to market to you or offer you through email, direct mail, phone or text message information and updates on products or services we think that you may be interested in;
Administer, improve, and personalize our Services, including by recognizing an individual and remembering their information when they return to our Services;
Process payment and taxation for our Services;
Facilitate customer support services;
Identify and analyze how individuals use our Services;
Improve and customize our Services to address the needs and interests of our user base and other individuals we interact with;
Test, enhance, update, and monitor the Services, or diagnose or fix technology problems;
Help maintain the safety, security, and integrity of our property and Services, technology assets and business;
Enforce our Terms of Service, to resolve disputes, to carry out our obligations, enforce our rights, and to protect our business interests and the interests and rights of third-parties;
Prevent, investigate, or provide notice of fraud or unlawful or criminal activity;
Comply with contractual and legal obligations and requirements;
To fulfill any other purpose for which you provide personal information; and
For any other lawful purpose, or other purpose that you consent to.
Where you choose to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide you with additional privacy-related information where the scope of the inquiry/request and/or personal information we require falls outside the scope of this Privacy Policy. In that case, the additional privacy notice will govern how we may process the information provided at that time.
Security of Personal Information
We maintain physical, electronic, and procedural safeguards to protect the confidentiality and security of your personal user data and other information transmitted to us. For example, we encrypt your personally identifiable information and most, if not all, requests from you to the server are created over a secure connection (HTTPS). However, no data transmission over the internet or other network can be guaranteed to be 100% secure.
III. HOW WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES TO COLLECT INFORMATION
We, and our third-party providers, automatically collect information you provide to us and information about how you access and use the Services when you visit our services, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies, and logging technologies (collectively, “tracking technologies”) and we may use third-party providers or technologies to collect this information. Information we collect automatically about you may be combined with other personal information we collect directly from you or receive from other sources.
We, and our third-party providers, use tracking technologies to automatically collect usage and device information, such as:
Information about the computer, tablet, smartphone, or other device you use, such as your IP address, browser type, Internet service provider, device type/model/manufacturer, operating system, date and time stamp, and a unique ID that allows us to uniquely identify your browser, mobile device, or your account (including, for example, a persistent device identifier or an Ad ID), and other such information. We may also work with third-party providers to employ technologies, including the application of statistical modeling tools, which permit us to recognize and contact you across multiple devices.
Information about the way you access and use our Services, for example, the site from which you came and the site to which you are going when you leave our Services, how frequently you access the Services, whether you open emails or click the links contained in emails, whether you access the Services from multiple devices, and other browsing behavior and actions you take on the Services.
Information about how you use the Service, such as the pages you visit, the links you click, the ads you view and click on, videos you watch, and other similar actions. We may also use third-party tools to collect information you provide to us or information about how you use the Services and may record your mouse movements, scrolling, clicks, and keystroke activity on the Services and other browsing, search, or purchasing behavior. These tools may also record information you enter when you interact with our Services or engage in chat features through our Services.
Information about your location, such as general geographic location that we or our third-party providers may derive from your IP address.
Analytics information. We may collect analytics data or use third-party analytics tools such as Google Analytics to help us measure traffic and usage trends for the services and to understand more about the demographics of our users.
All of the information collected automatically through these tools allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our Sites and Services, and to improve the effectiveness of our Services, offers, advertising, communications, and customer service. We may also use this information the data collected through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our Services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (f) diagnose or fix technology problems; and (g) otherwise plan for and enhance our Services.
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies; however, doing so may negatively impact your experience using the Services, as some features may not work properly. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.
We and our third-party providers may also use cookies and tracking technologies for advertising purposes. For more information about tracking technologies, please see Third-Party Data Collection and Online Advertising below.
IV. OUR DISCLOSURE OF PERSONAL INFORMATION
We may also share, transmit, disclose, grant access to, make available, and provide personal information with and to third parties, as follows:
One Canopie Entities: We may share personal information with other companies owned or controlled by One Canopie, and other companies owned by or under common ownership as One Canopie, which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns, particularly when we collaborate in providing the Services.
Marketing Providers: We coordinate and share personal information with our marketing providers to communicate with individuals about the Services we make available.
Customer Service and Shipping Providers: We share personal information with third parties who assist us in providing customer service and facilitating our shipments to individuals that request Services.
Third-Party Providers: In addition to the third parties identified above, we engage other third-party service providers that perform business or operational services for us or on our behalf, such as website hosting, infrastructure provisioning, IT services, analytics services, employment application-related services, payment processing services, and administrative services. This also includes third parties that help us provide certain features on the Services, like third-party sign-in or scheduling features.
Survey Providers: We share personal information with third parties who assist us in delivering our survey offerings and processing the responses.
Ad Networks and Advertising Providers: We work with third-party ad networks and advertising providers to deliver advertising and personalized content on our Services, on other websites and services, and across other devices. These parties may collect information directly from a browser or device when an individual visits our Services through cookies or other data collection technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research. For more information, please see the Third-Party Data Collection and Online Advertising section.
Business Partners: From time to time, we may share personal information with our business partners, or we may allow our business partners to collect your personal information. Our business partners may use your information for their own business and commercial purposes, including to send you any information about their products or services that may be of interest to you.
Business Transaction or Reorganization: We may evaluate, take part in, or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third-party during negotiation of, in connection with, or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement (i) in connection with the establishment, exercise, or defense of legal claims; (ii) to comply with laws; (iii) to respond to lawful requests and legal process; (iv) to protect our rights and property and the rights and property of others, including to enforce our agreements and policies; (v) to detect, suppress, or prevent fraud; (vi) to protect the health and safety of us and others; or (vii) as otherwise required by applicable law.
With Your Consent: We may disclose personal information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual’s consent or direction we may post their testimonial on our Sites or service-related publications.
V. THIRD-PARTY DATA COLLECTION AND ONLINE ADVERTISING
We may participate in interest-based advertising and use third-party advertising companies to serve you targeted advertisements based on your browsing history. We may permit third-party online advertising networks, social media companies, and other third-party services, to collect information about your use of our online services over time so that they may play or display ads on our Services, on other websites or services you may use, and on other devices you may use. Typically, though not always, the information used for interest-based advertising is collected through tracking technologies, such as cookies, web beacons, embedded scripts, location-identifying technologies, and similar technology, which recognize the device you are using and collect information, including click stream information, browser type, time and date you visited the Sites, AdID, precise geolocation, and other information. We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising providers to help identify you across devices. We and our third-party providers use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research. We may also use services provided by third parties (such as social media platforms) to serve targeted ads to you and others on such platforms. We may do this by providing a hashed version of your email address or other information to the platform provider.
We may engage in the following activities:
Social Media Platforms. We may display targeted advertising to you through social media platforms, such as Facebook, X (formerly known as Twitter), Instagram, LinkedIn, Pinterest, and other social media forums. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our services while those users are on the social media platform, or to groups of other users who share similar traits, such as likely commercial interests and demographics. We may share a unique identifier, such as a user ID, with these platform providers or they may collect information from our website visitors through a first-party pixel, in order to direct targeted advertising to you or to a custom audience on the social media platform. These advertisements are governed by the privacy policies of those social media companies that provide them. If you do not want to receive targeted ads on your social networks, you may be able to adjust your advertising preferences through your settings on those networks.
Third-Party Providers. We work with a variety of third-party providers to provide advertising services. For example, we use Google Analytics to recognize you and link the devices you use when you visit our Services on your browser or mobile device, log in to your account on our Services, or otherwise engage with us. We share a unique identifier, like a user ID, with Google to facilitate the service. Google Analytics allows us to better understand how our users interact with our Services and to tailor our advertisements and content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google's website, “How Google uses data when you use our partners’ sites or apps” located here. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Ad-On here.
We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Services. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently accessible here.
Our Services do not currently respond to Do Not Track (“DNT”) signals. To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Digital Advertising Alliance’s (DAA) resources and/or the Network Advertising Initiative’s (NAI) online resources, at www.aboutads.info/choices or http://www.networkadvertising.org/choices/. You may also be able to limit interest-based advertising through the settings menu on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest-based ads” (Android). You may also be able to opt-out of some — but not all — interest-based advertising served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app. Please note that any opt out is specific to the browser you use. You may need to opt out on every browser that you use.
Please also note that when you opt out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online services. It means that the online ads that you do see from DAA program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our online services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA’s Principles.
VI. CONTROL OVER YOUR INFORMATION
You may control your information in the following ways:
Access to Your Device Information. You may control the Services’ access to your device information through your “Settings” app on your device. For instance, you can withdraw permission for the Services to access your network devices and geolocation and to integrate with your other applications.
Email Communications Preferences. You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in such communications. You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Services, technical and security notices).
Push Notifications. You can stop receiving push notifications from us by changing your preferences in the iOS or Android notifications settings menu.
SMS Text Messaging. You may opt-out of receiving promotional SMS text messages at any time. Please note that unsubscribing from promotional text messages will not prevent you from SMS texts from One Canopie directly relating to your use of the Services, such as for account login (e.g., we may send you a security verification code). To unsubscribe from promotional SMS texts, you can reply STOP to any one of our promotional text messages. For more information, see our Terms of Service.
Modifying or Deleting Your Information. If you have any questions about reviewing, modifying, or deleting your information, you can contact us directly at support@onecanopie.com. We may not be able to modify or delete your information in all circumstances.
VII. DATA RETENTION
We store the personal information we collect about you for no longer than necessary to fulfill the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. We may retain personal information for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax, and accounting requirements set by industry or government authorities.
To determine the appropriate duration of the retention of personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.
Once retention of the personal information is no longer necessary for the purposes outlined above, we will either delete or de-identify the personal information or, if this is not possible (for example, because personal information has been stored in backup archives), then we will securely store the personal information and isolate it from further processing until deletion or deidentification is possible.
VIII. CHILDREN’S PERSONAL INFORMATION
We do not knowingly collect personal information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with any personal information, please contact Us. If we become aware that we have collected personal information from anyone under the age of 18, or equivalent minimum age depending on jurisdiction, without verification of parental consent, we will take steps to delete the information as soon as possible.
IX. LINKS TO THIRD-PARTY WEBSITES OR SERVICES
Our Services may include links to third-party websites, plug-ins, and applications. Except where we post, link to or expressly adopt or refer to this Privacy Policy, this Privacy Policy does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy policies.
X. UPDATES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the date at the beginning of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify individuals by email to their registered email address, by prominent posting on our Services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
XI. GENERAL DATA PROTECTION REGULATION (GDPR) PRIVACY POLICY
Legal Basis for Processing Personal Data under GDPR
For the purposes of GDPR, “Personal Data” means any information relating to you such as a name, an identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
We may process Personal Data under the following conditions:
Consent: You have given your consent for processing Personal Data for one or more specific purposes.
Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof.
Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
Vital interests: Processing Personal Data is necessary in order to protect your vital interests or those of another natural person.
Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.
In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular, whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Your Rights under the GDPR
The Company undertakes to respect the confidentiality of your Personal Data and to guarantee you can exercise your rights.
You have the right under this Privacy Policy, and by law if you are within the European Union, to:
Request access to Your Personal Data. The right to access, update or delete the information we have on you.
Request correction of the Personal Data that we hold about you. You have the right to have any incomplete or inaccurate information we hold about you corrected.
Object to processing of Your Personal Data. This right exists where we are relying on a legitimate interest as the legal basis for our processing and there is something about your particular situation, which makes you want to object to our processing of your Personal Data on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
Request erasure of your Personal Data. You have the right to ask us to delete or remove Personal Data when there is no good reason for us to continue processing it.
Request the transfer of your Personal Data. We will provide to you, or to a third-party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw your consent. You have the right to withdraw your consent on using your Personal Data. If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of the Service.
Exercising of Your GDPR Data Protection Rights
You may exercise your rights of access, rectification, cancellation and opposition by contacting us at support@onecanopie.com. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will try our best to respond to you as soon as possible.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, if you are in the European Economic Area (EEA), please contact your local data protection authority in the EEA.
XII. ADDITIONAL U.S. STATE PRIVACY DISCLOSURES
For residents of the States of California, Colorado, Connecticut, Nevada, Utah, and Virginia: These Additional U.S. State Privacy Disclosures (“U.S. Disclosures”) supplement the information contained in our Privacy Policy by providing additional information about our personal data processing practices relating to individual residents of these States. For a detailed description of how we collect, use, disclose, and otherwise process personal data in connection with our services, please visit our Privacy Policy. Unless otherwise expressly stated, all terms defined in our Privacy Policy retain the same meaning in these U.S. Disclosures.
For the purposes of these U.S. Disclosures, personal information does not include publicly available information or deidentified, aggregated, or anonymized information that is maintained in a form that is not capable of being associated with or linked to you.
Your Privacy Choices
In accordance with applicable privacy law, and depending upon the jurisdiction in which you reside, you may have some or all of the following rights in respect of your personal information:
Right of access. You may have the right to obtain:
confirmation of whether, and where, we are processing your personal information;
information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods;
information about the categories of recipients with whom we may share your personal information; and
a copy of the personal information we hold about you.
Right of portability. You may have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
Right to rectification or correction. You may have the right to request the rectification or correction of any inaccurate or incomplete personal information we hold about you.
Right to deletion or erasure. You may have the right, in some circumstances, to request that we delete or erase your personal information.
Right to restriction. You may have the right, in some circumstances, to request to limit the purposes for which we process your personal information, for example if we use or disclose certain “sensitive” personal information for purposes other than those provided by law, or if the accuracy of certain of the personal information is contested by you.
Right to opt-out. You may have the right to opt-out of certain processing activities. For example, you may have the right to opt-out of the use of your personal information for targeted advertising purposes, or to opt out of the “selling” or “sharing” of your personal information with third parties in certain contexts.
Right to control over automated decision-making/profiling. You may have the right to request that we not use automated decision-making or profiling for certain purposes.
Right to withdraw consent. If you have provided consent for the processing of your personal information, you may have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal.
Right to appeal. In the event that we decline to take action on a request exercising one of your rights set forth above, you have the right to appeal our decision.
Colorado Residents: If your appeal is denied, you may contact the Colorado Attorney General to address your concerns.
Connecticut Residents: If your appeal is denied, you may contact the Connecticut Attorney General to submit a complaint.
Virginia Residents: If your appeal is denied, you may contact the Virginia Attorney General to submit a complaint.
Right to Nondiscrimination. You have the right not to receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights.
How to Exercise Your Privacy Rights
To submit a request to exercise one of the privacy rights identified above, please submit a request by emailing support@onecanopie.com with the subject line “Data Subject Rights Request.”
We may need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account, if you have one. We will only use personal information provided in connection with a consumer rights request to process the request.
In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
Exercise Your Right to Opt-Out of Personal Information Sales or Sharing for Targeted Advertising
Unless you have exercised your right to opt-out, we may disclose or “sell” your personal information to third parties for monetary or other valuable consideration, or “share” your personal information to third parties for cross-context behavioral advertising purposes. The third parties to whom we sell or share personal information may use such information for their own purposes in accordance with their own privacy policies.
You do not need to create an account with us to exercise your right to opt-out. However, we may ask you to provide additional personal information so that we can properly identify you to track compliance with your opt-out request. We will only use personal information provided in an opt-out request to review and comply with the request. If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems.
To exercise the right to opt-out, you may submit a request by emailing us at support@onecanopie.com.
CALIFORNIA-SPECIFIC DISCLOSURES
The following disclosures are made in compliance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively “CCPA”).
Collection and Use of Personal Information
We collect personal information from and about consumers for a variety of purposes. To learn more about the types of personal information we collect, the sources from which we collect or receive personal information, and the purposes for which we use this information, please refer to the “Our Collection of Personal Information” and “Our Use of Personal Information” sections of our Privacy Policy.
In the last 12 months, we have collected the following categories of personal information:
Identifiers, such as your name, postal address, and email address;
California Customer Records (Cal. Civ. Code § 1798.80(e)), such as your phone number;
Characteristics of protected classifications under state or federal law, such as your age, religion, citizenship, national origin, veteran or military status, and sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions);
Commercial Information, such as products and services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
Internet/Network Information, such as device information, logs and analytics data;
Geolocation Data, such as your approximate location based upon your IP address;
Inferences, such as information generated from your use of the Services reflecting your interests and preferences
Other Personal Information, including any communications between you and One Canopie, as well as information we receive from social networking sites; and
Sensitive Personal Information: login credentials to access your account with the Services. We do not use or disclose sensitive personal information for purposes beyond those permitted by the CCPA.
We collect this information from a variety of sources, including directly from you, from your employer or organization, from our customers and other users, from our business partners and affiliates, from your browser or device when you use our Services, or from third parties that you permit to share information with us. Please see the Our Collection of Personal Information section of the Privacy Policy for more information about the sources of personal information we collect.
Disclosure of Personal Information
In the last 12 months, we may have disclosed all of the categories of information we collect with third parties for a business purpose, as described in the Sharing of Your Personal Information section of the Privacy Policy. The categories of third parties to whom we sell or disclose your personal information for a business purpose include:
Service providers and advisors that perform services for us, on our behalf, which may include providing marketing and advertising services; mailing or email services; financial services; tax and accounting services; data enhancement services; fraud prevention; web hosting, or other administrative services;
Select marketing and strategic providers who use this information to market to you, to perform analytics and conduct research, or for other purposes;
Ad networks and advertising providers, including social networks, to deliver advertising and personalized content to you on our services, on other sites and services you may use, and across other devices you may use, as well as provide advertising-related services such as reporting, attribution, analytics, and market research;
Social networks for advertising or personalization purposes, or to engage with you;
Analytics providers to better understand the demographics of our users and visitors, and to personalize, enhance and improve our Services;
We may also disclose personal information to other third parties at your direction or upon your request, or to comply with legal process or contractual obligations, as described in our Privacy Policy.
The above list of categories in this subsection does not mean that all examples of that category of personal information were in fact disclosed, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been disclosed.
Minors
California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.
If you are under the age of 18 and you want to remove your name or comments from our website or publicly displayed content, please contact us directly at support@onecanopie.com.
Be aware that Your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.
Shine the Light Disclosure
Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes.
If you'd like to request more information under the California Shine the Light law, and if you are a California resident, you can contact us at support@onecanopie.com.
Exercising Your CCPA Data Protection Rights
In order to exercise any of your rights under the CCPA, and if you are a California resident, you can contact us at support@onecanopie.com.
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information.
Your request to us must: (1) Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; (2) Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with the required information if we cannot: (1) Verify your identity or authority to make the request; and (2) confirm that the personal information relates to you.
We will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.
Any disclosures we provide will only cover the 12-month period preceding the verifiable request's receipt.
For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
Sale of Personal Information of Minors
We do not knowingly collect personal information from minors under the age of 18 through our Service, although certain third-party websites that we link to may do so. These third-party websites have their own terms of use and privacy policies and we encourage parents and legal guardians to monitor their children's Internet usage and instruct their children to never provide information on other websites without their permission.
We do not sell the personal information of consumers we actually know are less than 18 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is between 13 and 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to the sale of personal information may opt-out of future sales at any time. To exercise the right to opt-out, you (or Your authorized representative) may submit a request to us by contacting us at support@onecanopie.com.
If you have reason to believe that a child under the age of 13 has provided us with personal information, please contact us with sufficient detail to enable us to delete that information.
Additional Information for Job or Marketplace Applicants
This section supplements the information provided above and describes the additional personal information we collect when you apply for a position with us or join our Company as an employee. We may collect the personal information in the below list in the following ways: directly from you; from publicly available sources, such as government entities, public records systems, and social media networks; data analytics providers and data brokers; or as you may otherwise authorize, such as a former employers or references.
Please note if you use our Services in the application process, additional information is collected, as described above. We may collect the personal information categories listed in Cal. Civ. Code § 1798.80(e) (the California Customer Records Statute) in addition to the categories of personal information listed below. Items with an asterisk (*) may be considered “sensitive” personal information according to the CCPA.
Identifiers*: Government-issued identification numbers, including your Social Security, driver’s license, passport, state identification card, or military identification card numbers;
Demographics and Protected Classifications*: citizenship, gender, data of birth, age, and other traditionally protected classifications that you chose to disclose, such as race and ethnicity, marital status, sexual orientation, veteran or military status, disability, and medical status;
Professional or Employment Related Information: credentialing information, professional associations and employment history, including the name of past employers, prior positions, past employer contact information, and past employment records; and
Educational Information: educational institutions attended, degrees and certifications attained, and other educational or student records, which may include details about attendance, grades, and academic and disciplinary history.
We generally collect this personal information in order to evaluate your application for employment. For more details about how we use and disclose the personal information listed here, please refer to “Our Collection of Personal Information” and “Our Use of Personal Information” above.
XIII. CONTACT US
If you have any questions or requests in connection with this Privacy Policy or other privacy-related matters, please send an email to support@onecanopie.com.