Bariatric Advantage Privacy Policy

Bariatric Advantage Privacy Policy  

Last Updated: July 29, 2024 

This Privacy Policy (this Privacy Policy or Policy) describes the types of personal information Bariatric Advantage (“BA” or “We”) may collect from or about you or that you may provide when you visit the BA website located at https://www.bariatricadvantage.com/ (the “Website”), or use any related services where we provide a link to this Policy (together with the Website, our Services). This Policy describes our practices for collecting, using, maintaining, protecting, and disclosing that personal information. The information contained in this Privacy Policy is subject to any further information contained in any relevant supplementary privacy notice, including the California Privacy Notice, Colorado Privacy Notice and the Mexico Privacy Notice supplements below.

This Privacy Policy applies to information we collect about you:

• Through the Services; and
• Through your email, text, and other electronic communications with us.

This Privacy Policy does not apply to:

• Information collected by any third party, including through any application or content that may link to or be accessible from or through the Services; and
• Job applicants, employees, contractors, owners, directors, or officers where the personal information we collect about those individuals relates to their current, former, or potential role with us.  For job applicants in California, please see our California Applicant Privacy Notice available where you apply for employment with us. 

Please read this policy carefully to understand our policies and practices regarding your personal information and how we will treat it.

1. Children

The Services are not intended to be used by people under 18 years of age. If you are under 18, do not use or access the Services. If we learn we have collected or received personal information from a person under 18 through such individual’s use of the Services, we will delete that information. If you believe we might have any information from or about a person under 18 that was collected thorough such individual’s use of the Services, please contact us at [email protected].

1. Personal Information We Collect and How We Collect It

The personal information we collect depends on how you interact with us, the Services you use, and the choices you make. We may collect certain types of personal information about you from different sources and in various ways when you use our Services, including information you provide directly, information collected automatically, information from third-party data sources, and data we infer or generate from other data.

1. Information you provide directly. We collect personal information you provide to us. For example: 

• Name and contact information: name, username or alias, and contact details such as email address, your postal or billing address, and telephone number. 
• Demographic data: In some cases, such as when you register or participate in surveys or engage customer support, we request that you provide age, gender, and similar demographic details. 
• Commercial and financial information: If you make a purchase or other financial transaction, we collect information about the products or Services purchased or obtained, as well as credit card numbers, financial account information, and other payment details.  
• Content: If you send us email messages, call customer support, or otherwise communicate with us, we collect and/or record those communications.  

• Professional information: If you are a practitioner who registers with us, we collect your practitioner category, license or certification information, years in business and whether you have ever filed for bankruptcy.  
• Sensitive Personal Information:  In some cases, we collect sensitive personal information you provide including:

• Government identification numbers: As part of the practitioner account registration process, we collect Social Security Numbers and Employer Identification Numbers. 
• Account access information: We collect information such as a username or account number in combination with a password, security or access code, or other credential that allows access to an account. 
• Health data: As part of some of our product or Service offerings, in our surveys, or when you engage customer support, we collect and analyze information concerning your health. 

1. Information we collect automatically. When you use our Services, we collect some information automatically (see Cookies, Mobile IDs, and Similar Technologies). For example: 

• Identifiers and device information: When you visit our Website, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as MAC address); device type; and your device’s operating system, browser, and other software including type, version, language, settings, and configuration. As further described below, our Services and retrieve cookie identifiers, mobile IDs, and other data. 
• Geolocation:  We infer your general geographic location (such as city, state, and country) based on your IP address. 
• Usage data: We automatically log your activity on our Website, apps and connected products, including the URL of the website from which you came to our sites, pages you viewed, how long you spent on a page, access times, and other details about your use of and actions on our website. 

1. Information we create or generate. We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your interests in our products or services based on your browsing activities. 

1. Information we obtain from third-party sources. We also obtain the types of information described above from third parties. These third-party sources include, for example: 

• Third-party partners:  Third-party applications and services, including social networks you choose to connect with or interact with through our Services. 
• Co-branding/marketing partners:  Partners with which we offer co-branded services or engage in joint marketing activities. 
• Service providers:  Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address. 

We have collected the same categories of personal information described above in the twelve months prior to the date of this Privacy Policy.

When you are asked to provide personal information in connection with your use of the Services, you may decline. You may use web browser or operating system controls to prevent certain types of automatic data collection, but if you choose not to provide or allow information that is necessary for certain Services or features, those Services or features may not be available or fully functional. 

Please note that we do not engage in the automated processing of personal information to create profiles about individuals used in furtherance of decisions with legal or other similarly significant effects, such as the provision or denial of financial or lending services, housing, insurance, or access to essential goods or services. 

1. Our Use of Personal Information

We use the personal information we collect for the purposes described in this Privacy Policy or as otherwise disclosed to you. For example, we use personal information for the following purposes:

We may combine information we collect from different sources for these purposes and to provide a more seamless, consistent, and personalized experience. 

1. Our Disclosure of Personal Information

If you provide us with the name of your healthcare practitioner, or your healthcare practitioner’s code, we will share your history of purchase transactions as well as your use of your healthcare practitioner’s coupons or other offers.  Your healthcare practitioner’s use of the information we share is subject to their privacy policies and other policies, not this policy.

Third party analytics and advertising companies, some of which may be acting on our behalf as our service providers, also collect personal information through our website and apps including identifiers and device information (such as cookie IDs, device IDs, and IP address), geolocation data, usage data, and inferences based on and associated with that data, as described in the “Cookies” section of this Policy. These third-party vendors may combine this data across multiple sites to improve analytics for their own purpose and others. For example, we use Google Analytics on our website to help us understand how users interact with our website; you can learn how Google collects and uses information at www.google.com/policies/privacy/partners. 

Third-party analytics and advertising providers we use on our Website include, for example:  

Some of the data disclosures to these third parties may be considered a “sale” or “sharing” of personal information as defined under the laws of California and other U.S. states.  Please see the “Choice and Control” and “California Privacy Rights” sections below for more details. 

Please note that some of our Services also include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal information to any of those third parties, or allow us to share personal information with them, that information is governed by their privacy statements. 

We disclose personal information with your consent or as we determine necessary to complete your transactions or provide the Services you have requested or authorized. In addition, we disclose personal information to different types of third parties as described below.  We disclose the information we collect to the following categories of third parties for operational business purposes: 

• Affiliates and subsidiaries 
• third party service providers and contractors, and 

• trusted business partners that support our provision of Services. 

We disclose the categories of personal information to the categories of third parties identified above for the following purposes: to manage customer, supplier and vendor accounts and relationships; process payments; verify customers’ identities; fulfill orders and transactions; engage in advertising and marketing; operate our IT systems and secure our systems; prevent fraud and other illegal activities; and to obtain professional advice about legal and accounting matters.

We may also disclose your personal information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property, or safety of others, including to law enforcement agencies, and judicial and regulatory authorities. We may also disclose your personal information to third parties to help detect and protect against fraud or data security vulnerabilities. We may also disclose or transfer your personal information to a third party in the event of an actual or potential sale, merger, reorganization of our entity or other restructuring. 

We may disclose aggregated information about our users, and de-identified information in accordance with applicable law. 

1. Retention of Personal Information

We retain personal information for as long as necessary to provide the Services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different Services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, and our legal or contractual obligations. For example, this may result in retention of certain data:  

• For as long as you have an account with us or keep using our Services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise; 
• Subject to a legal obligation to which we are bound, for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them; or 
• As is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations. 

1. Cookies, Mobile IDs, and Similar Technologies

We use cookies, web beacons, mobile analytics and advertising IDs, and similar technologies to operate our Website and online Services and to help collect data, including usage data, identifiers, and device information. 

• Cookies (or browser cookies). A cookie is a small text file placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server. 
• Web Beacons. Web beacons are electronic images (also referred to as clear gifs, pixel tags, and single-pixel gifs) that are contained within a website or email. When your browser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our Website (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our email messages or newsletters to tell us if you open and act on them. 
• Mobile Analytics and Advertising IDs. Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies. Our Services contain software that enables us and our third-party analytics and advertising partners to access these mobile IDs.

We, and our analytics and advertising partners, use these technologies in our Website, apps, and online Services to collect personal information (such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information) when you use our Services, including personal information about your online activities over time and across different websites or online services.  This information is used to store your preferences and settings, enable you to sign-in, analyze how our Website and apps perform, track your interaction with the site or app, develop inferences, deliver, and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. We and/or our partners also share the information we collect or infer with third parties for these purposes. For more information about the third-party analytics and advertising partners that collect personal information on our Services, please see the “Our Disclosure of Personal Information” section of this Policy.  

1. Choice and Control of Personal Information

We provide a variety of ways for you to control the personal information we hold about you, including choices about how we use that information. In some jurisdictions, these controls and choices may be enforceable as rights under applicable law.  

1. Access, portability, correction, and deletion. If you wish to access, copy, correct, or delete personal information about you that we hold, please contact us using the methods described in the “Contact Us” section of this Policy or as described in the “California Privacy Rights”, “Colorado Privacy Rights”, or “Mexico Privacy Rights” sections, if applicable.  

1. Communications preferences. You can choose whether to receive promotional communications from us by email, SMS, and telephone. If you receive promotional email or SMS messages from us and would like to stop, you can do so by following the directions in that message or by contacting us as described in the “Contact Us” section below. If you receive a sales call from us, you can ask to be placed on our do-not-call list. These choices do not apply to certain informational communications including surveys and mandatory Service communications.  

1. Targeted advertising. To opt-out from or otherwise control targeted advertising, you have options.  You can use the Global Privacy Control setting in a web browser or browser extension as described below. You can also use the opt-out controls offered by the organizations our advertising partners may participate in, which you can access at: 

• United States: NAI (http://optout.networkadvertising.org) and DAA (http://optout.aboutads.info/)  
• Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/) 
• Europe: European Digital Advertising Alliance (http://www.youronlinechoices.com/)

1. Data sales. Some privacy laws define “sale” broadly to include some of the disclosures described in the “Our Disclosure of Personal Information” section above. If you do not want us to share your personal information with unaffiliated or non-agent third, you can opt-out from such data “sales” by contacting us using the methods described in the “Contact Us” section of this Policy or as described in the “California Privacy Rights”, “Colorado Privacy Rights”, or “Mexico Privacy Rights” sections, if applicable.
2. Browser or platform controls.  You can also use the other cookie or mobile ID controls described below.  These choices are specific to the device or browser you are using. If you access our Services from other devices or browsers, take these actions from those systems to ensure your choices apply to the data collected when you use those systems. 

• Cookie controls.  Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features of our Website or other Services. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated. 
• Global Privacy Control.  Some browsers and browser extensions support the “Global Privacy Control” (GPC) or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal. Please note the GPC does not work to opt you out for personal information that is associated solely with non-device identifier data such as your name or email address. If you would like more information about opt-out preference signals, including how to use them, the GPC website has additional information (https://globalprivacycontrol.org/).  
• Do Not Track.  Some browsers include a “Do Not Track” (DNT) setting that can send a signal to the websites you visit indicating you do not wish to be tracked. Unlike the GPC described above, there is not a common understanding of how to interpret the DNT signal; therefore, we do not respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the GPC, cookie controls, and advertising controls described above. 

• Mobile advertising ID controls. iOS and Android operating systems provide options to limit tracking and/or reset the advertising IDs. 
• Email web beacons. Most email clients have settings that allow you to prevent the automatic downloading of images, including web beacons, which prevents the automatic connection to the web servers that host those images. 

1. Other Methods of Choice and Control. Except for the automated controls described above, if you send us a request to exercise these choices (including where they are enforceable as rights), to the extent permitted by applicable law, we may charge a fee or decline requests in certain cases. For example, we may decline requests where granting the request would be prohibited by law, could adversely affect the privacy or other rights of another person, would reveal a trade secret or other confidential information, or would interfere with a legal or business obligation that requires retention or use of the data. Further, we may decline a request where we are unable to authenticate you as the person to whom the data relates, the request is unreasonable or excessive, or where otherwise permitted by applicable law. In some jurisdictions, you may have a right to appeal our denial of a request, as described in the “California Privacy Rights”, “Colorado Privacy Rights”, or “Mexico Privacy Rights” sections. If you have questions about making an appeal, please contact us via the methods in the “Contact Us” section.  

1. Data Security

We take reasonable and appropriate steps intended to help protect personal information from unauthorized access, use, alteration, disclosure, and destruction.  To help us protect personal information, we ask you to use a strong password and never share your password with anyone or use the same password with other sites or accounts.  

1. Location of Personal Information

The personal information we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or service providers process data. Currently, we primarily use data centers in the United States. The storage location(s) are chosen to operate efficiently and improve performance. We process and protect personal information, and require that our affiliates, subsidiaries and service providers process and protect personal information, in compliance with this Privacy Policy wherever the data is located. 

1. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at our discretion when necessary to reflect changes in our Services, how we use personal information, or the applicable law. When we post changes to this Privacy Policy, we will revise the “Last Updated” date at the top of the Policy. If we make material changes to the statement, we will provide notice or obtain consent regarding such changes as may be required by law.  

1. Accessibility of this Privacy Policy

We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact us at +1 800-692-9400. 

1. Contact Us

If you have any questions or comments about this Privacy Policy or wish to exercise any rights, submit requests, or appeal any of our decisions in connection with this Privacy Policy, please do not hesitate to contact us at: 

Phone: +1 800-692-9400 

Website: bariatricadvantage.com 

Email: [email protected]

Postal Address: 

Metagenics LLC. 

Attn: Privacy Office 

25 Enterprise, Suite 200, Aliso Viejo, CA, U.S.A., 92656 

If you need to access this Policy in an alternative format due to having a disability, please contact us at [email protected] or +1 800-692-9400. 

1. California Privacy Notice

This notice supplements the Privacy Policy set forth above with respect to specific rights granted under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively the “CCPA”) to natural person California residents and provides information regarding how such California residents can exercise their rights under the CCPA.  This supplement is only relevant to you if you are a resident of California as determined in accordance with the CCPA.

1. Categories of Personal Information We Collect

We have collected some or all of the following categories of personal information from individuals within the last twelve (12) months:

1. Purposes and Sources

We collect personal information for the business or commercial purposes and from the sources set forth in “Our Use of Personal Information” and “Personal Information We Collect and How We Collect It” respectively, in the Privacy Policy above. We retain the categories of personal information set forth above in the Categories of Personal Information We Collect section of this California Privacy Notice only as long as is reasonably necessary for those business or commercial purposes set forth in “Our Use of Personal Information” in the Privacy Policy above, except as may be required under applicable law, court order or government regulations.

1. Disclosures

Within the last twelve (12) months, we have disclosed personal information collected in connection with this Website for a business purpose to the categories of third parties indicated in the chart below. We may also disclose your information to other parties as may be required by law or regulation, or in response to regulatory inquiries.

1. Rights Under the CCPA and other California Laws

The CCPA and other California laws provide certain rights with respect to the processing of your personal information, which are described below. 

1. Notice at Collection

At or before the time of collection, you have a right to receive notice of our practices, including the categories of personal information and sensitive personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared, and how long such information is retained. You can find those details in this California Privacy Notice and in the Sections “Personal Information We Collect,” “Our Use of Personal Information”, “Our Disclosure of Personal Information”, and “Retention of Personal Information” in the Privacy Policy above. 

1. Disclosure and Access Rights

You have the right to ask us for the following information regarding our collection, use, disclosure and sale of personal information specific to you. Such information includes: 

• Specific pieces of personal information we have collected about you;  
• Categories of personal information we have collected about you;   
• Categories of sources from which such personal information was collected;  
• Whether we sold or disclosed your personal information to a third party, and if so, the categories of personal information each recipient obtained; 
• Categories of third parties to whom we sold or disclosed personal information for a business purpose; and  
• The business or commercial purpose for collecting or selling personal information. 

1. Right to Deletion of Personal Information

You have the right to request that we delete any of your personal information that we retain, subject to certain exceptions including, but not limited to, our compliance with U.S., state, local and non-U.S. laws, rules and regulations. We will notify you in writing if we cannot comply with a specific request and provide an explanation of the reasons. 

1. Right to Correction of Personal Information

You have the right to request that we correct any inaccuracies in the personal information that we retain, subject to certain statutory exceptions, including, but not limited to, our compliance with U.S., state, local and non-U.S. laws, rules and regulations. We will notify you in writing if we cannot comply with a specific request and provide an explanation of the reasons.

1. Right to Opt-Out of Selling or Sharing Personal Information About You

You have a right to opt-out from future “sales” or “sharing” of personal information as those terms are defined by the CCPA. Note that the CCPA defines “sell,” “share,” and “personal information” very broadly, and some of our disclosure of personal information described in this Policy may be considered a “sale” or “sharing” under those definitions. In particular, we let advertising and analytics providers collect identifiers (such as cookie IDs), email addresses, activity data (such as browsing or purchasing), device data, and geolocation data through our sites when you use our online services, but we do not “sell” or “share” any other types of personal information.   

If you do not wish for us or our partners to “sell” or “share” personal information relating to your visits to our sites for advertising purposes, you have the right to opt-out of such “sales” and “sharing.” If you opt-out, we will not share or make available such personal information in ways that are considered a “sale” or “sharing” under the CCPA.  However, we will continue to make available to our service providers some personal information to help us perform services that you request and/or on behalf of our business in accordance with this California Privacy Notice, the Privacy Policy and applicable law. Further, the opt-out applies to future “sales” and “sharing”, so it will not opt you out of the use of previously “sold” or “shared” personal information or stop all interest-based advertising. 

1. Right to Limit Use and Disclosure of Sensitive Personal Information

You have the right to limit our use of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law.  

1. Rights Under California’s “Shine the Light” Law

California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes to annually request, free of charge, information about the personal information (if any) disclosed to third parties for their direct marketing purposes in the preceding calendar year.  To make such a request, please contact us at +1 800-692-9400. Please note that businesses are required to respond to one request per resident per year and may not be required to respond to requests made by means other than through the designated phone number. 

1. How to Exercise Your CCPA Rights

To exercise your CCPA rights, contact us at +1 800-692-9400 or by clicking here. For such requests, we will first acknowledge receipt of your request within 10 business days of receipt of your request.  We will then provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances.  If we expect your request is going to take us longer than normal to fulfill, we will let you know. 

To request that we limit our use of sensitive information, or to opt out of the sale or sharing of your personal information, click either “Your Privacy Choices” in the footer of our Website, or the green cookie icon in the bottom left of the website (whichever may be available).  

In some cases, the law may allow us to refuse to act on certain requests.  If this is the case, we will endeavor to provide you with an explanation as to why. 

1. Additional Information About California Privacy Rights

You may designate an agent to submit requests on your behalf under the CCPA. The agent can be a natural person or a business entity. If you would like to designate an agent to act on your behalf, and you designate the agent in writing, you and the agent will need to comply with our verification process:  

• Requests to Know, Delete or Correct Personal Information: If the agent submits a request, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf.  We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request.  
• Requests to Opt-Out or Limit: If the agent submits a request to opt-out of the sale or sharing of personal information or limit use of sensitive personal information, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out or limit request on your behalf.   

If you designate an agent through a power of attorney, requests through an agent will be processed in accordance with California law pertaining to powers of attorney. Further, to provide, correct, or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. We will verify your request by asking you for two pieces of personal information and attempting to match those to information we maintain about you.  

1. No Discrimination

We will not discriminate against you for exercising your rights under the CCPA, including by denying service, suggesting that you will receive, or charging, different rates for services or suggesting that you will receive, or providing, a different level or quality of service to you. Finally, we will not discriminate against you for exercising your rights set out in the CCPA, including by denying service, suggesting that you will receive, or charging, different rates for services or suggesting that you will receive, or providing, a different level or quality of service to you.

1. Colorado Privacy Notice

1. Colorado Privacy Rights

If you are a Colorado resident and the processing of personal information about you is subject to the Colorado Privacy Act (“CPA”), you have certain rights with respect to that personal information. 

• Right to Know: The right to confirm whether or not we are processing your personal information and to access such data; 
• Right to a Copy:  The right to a portable copy of the personal information we have collected from you; 
• Right to Delete: The right to request deletion of personal information about you, subject to certain exceptions;   
• Right to Correct: The right to request correction of inaccurate personal information about you, taking into account the nature of personal information and purposes of processing such information; 
• Right to Opt-Out of Targeted Advertising: The right to request we stop future processing of personal information about you for such purposes; and 
• Right to Opt-Out of the Sale of Personal Information: The right to request we stop future processing of personal information about you for such purposes.  

1. How to Exercise Your CPA Rights

To exercise your CPA rights, contact us at +1 800-692-9400 or by clicking here.  We will respond to such requests within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances.  If we expect your request is going to take us longer than normal to fulfill, we will let you know. 

You can opt out of the sale of your personal information or the use of your personal information for targeted advertising by clicking either “Your Privacy Choices” in the footer of our Website, or the green cookie icon in the bottom left of the website (whichever may be available).

In some cases, the law may allow us to refuse to act on certain requests.  When this is the case, we will endeavor to provide you with an explanation as to why. 

1. Appealing Our Decisions Made in Response to Your Requests

In some cases, we may not act on your requests (for example, if another law applies that prevents us from deleting a piece of personal information). When this is the case, we will explain our reasons for not providing you with the information or taking the action you requested.     

Additionally, you have the right to appeal our decision by contacting us at +1 800-692-9400 or clicking here within 30 days after your receipt of our decision.  As part of your appeal, we request you provide us with information that we need (e.g., reference number) to identify denial of request.  We will respond to your appeal within 45 days of our receipt of the request, unless we need additional time to do so (up to 60 additional days), in which case we will notify you.   

1. Additional Information About Colorado Privacy Rights

You may designate an agent to submit opt-out requests on your behalf under the CPA.  

If you use an agent to submit such requests on your behalf, we will need to verify your identity and the agent will need to provide us with your signed permission indicating they have been authorized to submit the request on your behalf.   

Further, to provide, correct, or delete specific pieces of personal information we will need to verify your identity to a reasonable degree of certainty. We will verify your request by asking you for two pieces of personal information and attempting to match those to information we maintain about you.  

Finally, you have a right to not be discriminated against for exercising these rights set out in the CPA. 

1. Mexico Privacy Rights

If you are a Mexico resident and the processing of personal information about you is subject to Mexican data protection law, you have certain rights with respect to that information.  

You have the right to access, delete, and correct personal information about you. You also have the right to object to the processing of personal information about you. Under Mexican data protection law, we may process personal information about you after this Privacy Policy has been made available to you (unless you exercise your right to object to such processing). To exercise one or more of these rights, please send a detailed description of the rights you wish to exercise to the contact information listed above.