Tiny Apricot Privacy Policy
Last Updated: September 30, 2021
This Privacy Policy describes how Tiny Apricot, Inc. (“Company,” “we,” “us” or “our”) collects, stores, uses, discloses, and transfers your Personal Information (as defined below) through your use of the Tiny Apricot services, including the website, telehealth visits, in-office visits, and home visits (collectively, the “Services”). By accessing and using our Services, you acknowledge you have read and understood our privacy practices as described in this Privacy Policy.
The term “Personal Information” as used herein includes any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, and includes any information that is subject to applicable data protection laws. Unless otherwise communicated in writing by the Company to you, the Services, and how we may collect, use, or disclose your health information, are not subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). This Privacy Policy applies to Personal Information collected via the Services, including online and offline interactions.
PLEASE NOTE THAT GROUP SESSIONS THROUGH THE SERVICES ARE NOT PRIVATE. YOU SHOULD SCHEDULE AN INDIVIDUAL VISIT IF YOU HAVE PRIVACY CONCERNS.
Information We Collect
Depending on how you interact with the Services, we may collect the following information:
· Personal and contact information, such as your name, age, government issued ID, photo, username, password, e-mail address, and phone number that you provide to us when you use the Services.
· Health information, such as mental and physical state of health, symptoms, blood, genetic and other key medical information, medical history, medical treatment or diagnosis, medications, test results and laboratory data, question and survey responses, health care provider information, and other health information that you may provide to us.
· Communications between you and Company. When you communicate with us, such as through e-mail or text message, we may collect and save a record of your communication and any personal information provided during the communication.
· Any information you submit, post, publish, upload, display, or transmit on or via the Services (e.g., photos, comments, and other information and materials).
· Some of the Services provide the ability to interact with third party services (e.g., third-party social media sites, health care providers or other health care professionals). When you choose to permit such interaction, we may receive additional information about you from the third party (e.g., your registration or profile information with the third party service).
How We Use Information Collected
We use the Personal Information we collect from you for the following purposes:
· To provide our Services.
· To send you marketing materials.
· To perform actions at your direction and to respond to inquiries.
· To improve user experiences by making our Services easier to use and navigate.
· To develop and test new services and features.
· For other legitimate business purposes.
How We Share and/or Disclose Information
We may share or disclose your Personal Information to the following categories of third parties and for the following reasons:
· With entities that are affiliated with Company to help provide, understand and improve our Services and the affiliates’ services.
· To third party service providers, agents or independent contractors who help us maintain our Services and provide other administrative services to us.
· To health care providers, pharmacies, or other persons or entities working on your behalf, including without limitation, for arranging appointments or communications, providing health care services as part of the Services, obtaining medication, or for payment or health care operations purposes.
· In the course of any reorganization process including, but not limited to, mergers, acquisitions, and sales of all or substantially all of our assets.
· To law enforcement, government agencies, and other related third parties, in order to comply with the law, enforce our policies, or protect our or others’ rights, property or safety.
We may remove identifying data from your Personal Information and share such de-identified data with other parties for any lawful purpose. We may also combine your Personal Information with other information so that it is no longer associated personally with you, and share that aggregated data (such as for public health statistics or reporting purposes).
Cookies and other Similar Technologies
We, and third parties we allow, use cookies and other similar technologies. Cookies are small text files placed on your device that uniquely identify your device and which a website can transfer to a consumer’s hard drive to keep records of his or her visit to a website.
There are several ways to manage cookies. You can control the use of cookies at the browser level, by instructing your browser to accept cookies, disable cookies or notify you when receiving a new cookie. Please note that if you reject cookies, you may still use our Services, but your ability to use some features of our Services may be limited.
Data Transfers
Your Personal Information collected through the Services may be stored and processed in the United States and any other country in which Company, its affiliates, or service providers operate. Please note that different countries may have different data protection laws, and as such, we may transfer your Personal Information, to a country or jurisdiction that does not have the same data protection laws as your jurisdiction. By using the Services, you consent to this transfer of information and the use and disclosure of your Personal Information as described in this Privacy Policy.
Data Retention
Except to the extent prohibited by law, and subject to this Privacy Policy, we will retain and use your Personal Information for as long as it is needed to provide you with the Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding our collection, use, and sharing of your Personal Information. If you have any questions regarding these rights, please contact us at office@tinyapricot.com. Please note that we may request additional information to respond to or fulfill any requests regarding your rights under applicable laws or regulations.
California Residents
Right to Know – California residents have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you the categories and specific pieces of Personal Information we have collected about you, as well as the categories of sources from which such information is collected, the purpose for collecting such information, the categories of third parties with whom we share such information, and information about our sale or disclosure for business purposes of your Personal Information to third parties.
Right to Delete – California residents have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers, as applicable, to delete) your Personal Information from our records, unless an exception applies.
Right to Opt-Out of Sale – California residents have the right to opt-out of the sale of your Personal Information to third parties. Please note we do not “sell” your Personal Information, as that term is defined in the CCPA. We do not sell the Personal Information of consumers under 16 years of age without affirmative authorization.
Right to Non-Discrimination – California residents have the right to not be discriminated against for exercising any of these rights.
Additionally, California Civil Code Section 1798.83 permits users who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. We do not share Personal Information with third parties for their direct marketing purposes.
Information Exempt from the CCPA
Please note that certain information governed by other laws, such as the California Confidentiality of Medical Information Act or HIPAA, is exempt from the CCPA. However, additional rights might be available under those laws and standards. Please contact office@tinyapricot.com or (310) 431-9614 for more information.
Nevada Residents
Although we do not sell Personal Information (as defined in Chapter 603A of the Nevada Revised Statutes), Nevada residents have the right to submit a verified request directing us not to sell your Personal Information. To submit such a request, please contact us using the information in the Contact Us section below.
Unsubscribe Requests
You may also unsubscribe from marketing e-mail communications from us by clicking the “Unsubscribe” link provided in such communications. If you have subscribed to text messages and wish to opt out of receiving such text messages from us, you may reply “STOP” from the mobile device receiving the messages. You understand and agree that you may continue to receive communications from us while we process your opt-out requests, and you may also receive a communication confirming the receipt of your opt-out requests.
Do Not Track
We do not currently recognize automated browser signals regarding tracking mechanisms, which may include “Do Not Track” (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Per industry standards, third parties may be able to collect information, including Personal Information, about your online activities over time and across different websites or online services when you use the Services. You may opt out of online behavioral ads at http://www.aboutads.info/choices/. You also may limit certain tracking by disabling cookies in your web browser.
Security
We implement reasonable security measures to ensure the security of your Personal Information. Please understand, however, that no data transmissions over the Internet can be guaranteed to be 100% secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us and you understand that any information that you transfer to us is done at your own risk.
Third Party Links and Services
Our Services may include links to third party websites or services. This Privacy Policy does not apply to the information (including Personal Information) collected on any third party website or service over which we have no influence or control. We are not responsible for the privacy practices of these third party websites or services. Accordingly, we recommend that you review the privacy policies on any such third-party website or services.
Assignment
In the event that all or part of our assets are sold or acquired by another party, or in the event of a merger, you grant us the right to assign the personal information collected via the Services.
Changes to this Privacy Policy
We reserve the right to change this Privacy Policy from time to time. When we do, we will also revise the “Last Updated” date at the top of this Privacy Policy. If we make material changes to the Privacy Policy, we will notify you more directly, such as by placing a prominent notice on our websites or via email at the email address we have on file for you. We encourage you to periodically review this Privacy Policy to keep up to date on how we are handling your Personal Information.
Contact Us
If you have any questions, comments or concerns about our privacy practices or this Privacy Policy, or to submit a request to exercise your privacy rights, please contact us at: office@tinyapricot.com or (310) 431-9614.