CHMRC Privacy Policy

Introduction

The California Health Medical Reserve Corps (“CHMRC,” “we,” “us” or “our”) respects your privacy and we are committed to protecting it through our compliance with this Privacy Notice. We have created this Privacy Notice to inform you of our policies regarding the collection, use, and disclosure of personal information and the choices you have associated with that information. This policy describes the types of information we may collect from you or that you may provide when you visit the website https://www.chmrccares.org/ and our practices for collecting, using, maintaining, protecting, and disclosing that information. Capitalized terms used but not defined in this Privacy Notice have the meaning given to them in our other policies (e.g., Terms of Use).

Applicability

This Privacy Notice applies to all personal information collected through any written, electronic, or oral communications, and collected online or offline as you: Access the website and all corresponding webpages and websites that link to this Privacy Notice (the “Site”). Use any mobile, web, console, desktop, and other applications you download from this Site, which provide dedicated non-browser-based interaction between you and this Site. In E-mail, text, and other electronic messages between you and this Site. Interact with our advertising and applications on third party websites and services, if those applications or advertising include links to this Privacy Notice; Utilize our Services.

Before using our Site, please carefully read this Privacy Notice. By using this Site, you consent to the collection and use of personal information in accordance with this Privacy Notice. If you do not feel comfortable with any part of this Privacy Notice, you should not use or access our Site or Services. By accessing or using this website, you agree to this privacy policy.

We may modify this Privacy Notice at any time, without prior notice, and changes may apply to any personal information we hold about you, as well as any new personal information collected after the Privacy Notice is modified. If we make changes, a revised Privacy Notice will be posted to our Site. Your continued use or revisitation of the Site following the posting or notice of a revised Privacy Notice means that you accept and agree to the changes. You are expected to check this page from time to time so you are aware of any changes, as they are binding on you.

We also may provide additional “just-in-time” disclosures or additional information about the data collection, use and sharing practices of specific services. Such notices may supplement or clarify our privacy practices or may provide you with additional choices about how we process your personal information. This Site is offered and available to users who are 18 years of age or older. By using the Site, you represent and warrant that you are at least 18 years old and of legal age to form a binding contract with us. If you do not meet all these requirements, you must not access or use our Site.

Information We Collect About You and How We Collect It

We collect personal information when you use our Site and our Services. Personal information is any information that relates to you, identifies you personally or could be used to identify you including, but not limited to your name, mailing address, email address, telephone number, or any other information defined as “Protected Health Information” under HIPAA or other applicable laws and regulations.

The types of personal information that we may collect include but are not limited to the information you provide to us, information collected automatically about your use of our Site, information from third parties, including our business partners.

Information You Voluntarily Provide to Us

The personal information you provide voluntarily to us may include:

  • Information that you provide by filling in forms on our Site. We may also ask you for information when you report a problem with our Site.
  • Records and copies of your correspondence (including email addresses) if you contact us.
  • Your responses to surveys that we might ask you to complete for research purposes.
  • Details of transactions you conduct through our Site.
  • The name and email address of individuals to whom you wish to refer our Services.
  • Your search queries on the Site.
  • You may also provide information to be published or displayed (hereinafter, “posted”) on public areas of the Site or transmitted to other users of the Site or third parties (collectively, “User Content”).

Information from Third Parties

When you interact with any CHMRC page or account on a social media platform, we may collect the personal information that you or the platform make available to us on that page or account, including your social media account ID and/or user name associated with that social media service, your profile picture, email address, friends list or information about the people and groups you are connected to and how you interact with them, and any information you have made public in connection with that social media service. The information we obtain depends on your privacy settings on the applicable social media service; we will comply with the privacy policies of the social media platform, and we will only collect and store such personal information that we are permitted to collect by those social media platforms. When you access our Site through social media services or when you connect the Services to social media services, you are authorizing us to collect, store, and use such information and content in accordance with this Privacy Notice.

Information Collected Automatically

As you navigate through and interact with our Site, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, including:

Details of your visits to our Site, including, but not limited to, traffic data, location data, logs and other communication data and the resources that you access and use on the Site.

Information about your computer and internet connection, including your IP address, operating system, and browser type.

Information about your preferences to make your use of the Site more productive, via the use of Cookies.

Cookies and Other Tracking Technologies

We may use cookies, embedded scripts, and other similar tracking technologies (“Tracking Technologies”) to collect additional personal information automatically as you interact with the Site and to personalize your experience with our Site. We also may use these technologies to collect information about your online activities over time and across third party websites or other online services (known as “behavioral tracking”).

Cookies are small web files that a site or its provider transfers to your device’s hard drive through your web browser that enables the Site’s or provider’s system to recognize your browser and remember certain information. We use first-party and third-party cookies for the following purposes: to make our Site function properly, to improve our Site and Services, to make login to our Site easier (such as by remembering your User ID), to recognize you when you return to our Site, to track your interaction with the Site, to enhance your experience with the Site and Services, to remember information you have already provided, to collect information about your activities over time and across third party websites or other online services in order to deliver content and advertising tailored to your interests; and to provide a secure browsing experience during your use of our Site. The length of time a cookie will stay on your browsing device depends on whether it is a “persistent” or “session” cookie. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your browsing device until they expire or are deleted (i.e., after you have finished browsing).

We may place cookies from third-party service providers who may use information about your visits to other websites to target advertisements for products and services available from us. We do not control the types of information collected and stored by these third-party cookies. You should check the third-party’s website for more information on how they use cookies. The following types of cookies are used on our Site:

Strictly Necessary Cookies. These cookies are essential because they enable you to use our Site. For example, strictly necessary cookies allow you to access secure areas on our Site. Without these cookies, some elements of our Site cannot be provided. These cookies do not gather information about you for marketing purposes. This category of cookies is essential for our Site to work, and they cannot be disabled.

Functional or Preference Cookies. We use functional cookies to remember your choices so we can tailor our Site to provide you with enhanced features and personalized content. For example, these cookies can be used to remember your name or preferences on our Site. We do not use functional cookies to target you with online marketing. While these cookies can be disabled, this may result in less functionality during your use of our Site.

Performance or Analytic Cookies. These cookies collect passive information about how you use our Site, including webpages you visit and links you click. We use the information collected by such cookies to improve and optimize our Site and Services. We do not use these cookies to target you with online marketing. You may choose to disable these cookies.

Advertising or Targeting Cookies. These cookies are used to make advertising messages more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and in some cases selecting advertisements that are based on your interests. Our third-party advertising partners may use these cookies to build a profile of your interests and deliver relevant advertising on other sites. You may choose to disable the use of these cookies as set forth below.

We may use third-party Service Providers (defined below) to monitor and analyze the use of our Site. We may also use Tracking Technologies to collect “clickstream” data, such as the domain name of the service providing you with Internet access, your device type, IP address used to connect your computer to the Internet, your browser type and version, operating system and platform, the average time spent on our Site, webpages viewed, content searched for, access times and other relevant statistics, and assign unique identifiers to the device or other credentials you use to access the Site for the same purposes.

Pages of our Site and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Your browser may provide you with the option to refuse some or all browser cookies. You may also be able to remove cookies from your browser. You can exercise your preferences in relation to cookies served on our Site by taking the steps outlined below.

You can use the browser with which you are viewing the Site to enable, disable or delete cookies. To do this, follow the instructions provided by your browser (usually located within the “Help,” “Tools” or “Edit” settings). Please note, if you set your browser to disable cookies, you may not be able to access secure areas of the Site. Also, if you disable cookies other parts of the Site may not work properly.

Certain features of our Site may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from and on our Site. If you do not want Flash Cookies stored on your computer, you can adjust the settings of your Flash player to block Flash Cookies storage.

How We Use Your Information

We will only use your personal information as described in this Privacy Notice or as disclosed to you prior to such processing taking place. The purposes for which we may use your personal information include:

  • Providing any Services or Products.
  • Contacting you regarding the administration of any features or functions of the Site or Services you have registered to use.
  • Conducting our obligations and enforcing our rights arising from any contracts entered between you and us, including for billing and collection.
  • Notifying you about changes to our Site, our policies, terms or any products or Services we offer or provide though it.
  • Sending you marketing and promotional emails.
  • Responding to your questions or other requests.
  • Allowing you to participate in the interactive features of the Site and Services.
  • Tailoring your experience on the Site and/or otherwise customizing what you see when you visit and use the Site.
  • Saving your user account, registration and profile data or other personal information (so you do not have to re-enter it each time you visit or use the Site).
  • Tracking your return visits to and use of the Site.
  • For research purposes, for marketing/promotional purposes and to provide anonymous reporting for internal and external clients and business partners;
  • Accumulating and reporting aggregate, statistical information in connection with the Site and the Services and user activity.
  • Determining which features and services users like best to help us operate the Site, enhance, and improve our Site and display advertising and marketing information.
  • Keeping you secure and safe while using our Site, which requires us to process your Personal Information to combat spam, malware, malicious activities, or security risks.
  • Improving and enforcing our security measures.
  • Maintaining legal and regulatory compliance.
  • Enforcing compliance with our terms and conditions and policies.
  • Protecting you, others, and our business, including, without limitation, using information for fraud prevention.

For any other purpose disclosed to you prior to you providing us your Personal Information or which are reasonably necessary to provide the Services or other related products and/or services requested.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your personal information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

Sharing and Disclosure of Personal Information

We may share or disclose your personal information in the following circumstances:

  • Website / e-commerce Service Providers. We may employ other companies and individuals to facilitate our Site and Services (“Service Providers”), provide the Services on our behalf, perform Service-related services, or assist us in analyzing how our Site and Services are used. The Service Providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. The Service Providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
  • Research and Development. We may use your de-identified information and test results in our research. We may engage in research with third parties like universities, hospitals, health systems, government institutions, or private companies to develop new tests, validate technologies, or improve existing technologies or processes. You can opt out of such third-party research by contacting us directly. However, if you have consented in the past and later opt out, we cannot retract your de-identified information, and/or results from research already performed. We may author publications using de-identified information, either on our own or in collaboration with academic or commercial third parties.
  • Within Our Corporate Organization. We may share your personal information with our subsidiaries and affiliates to provide you with the Services and take actions based on your requests.
  • Corporate Transactions. To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by us about our Site users and Members is among the assets transferred, and you agree to and do hereby consent to our assignment or transfer of rights to your personal information.
  • Analytics. We may share aggregated, de-identified information (for example, aggregated trends about the general use of our Services) publicly and with our affiliates, subsidiaries, and partners. This information will not include medical information.
  • Third Party Advertisers. In certain circumstances we may share your personal information with third parties to market their products or services to you if you have not opted out of these disclosures. We contractually require these third parties to keep personal information confidential and use it only for the purposes for which we disclose it to them.
  • Consent. We may disclose your personal information for any purpose with your consent.
  • As Required by Law. Under certain circumstances your personal information may be subject to processing pursuant to laws, regulations, judicial or other government subpoenas, warrants, or orders. We may be required to disclose personal information in coordination with regulatory authorities in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We will preserve and disclose any and all information to law enforcement agencies or others if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) comply with legal or regulatory process (such as a judicial proceeding, court order, or government inquiry) or obligations that we may owe pursuant to ethical and other professional rules, laws, and regulations; (b) enforce our Terms of Service and other policies; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of CHMRC, its employees, its users, its clients, and the public.

Please note that we may disclose, without restriction, aggregated or anonymized information about our users, which is information that does not identify any specific individual.

Marketing Communications

We strive to provide you with choices regarding the personal information you provide to us. You can update your personal information or stop receiving email communications in the following ways:

  1. Update email presences
  2. Use the “unsubscribe” link included in emails to opt out of receiving any future email communications

Keeping Your Personal Information Accurate and Deletion

We are committed to ensuring that your personal information is kept accurate and up to date. However, it is up to you to update it with any changes.

Your California Privacy Rights

This section applies only to California residents.

California Consumer Privacy Act (“CCPA”). Pursuant to the California Consumer Privacy Act and California Privacy Rights Act (collectively “CCPA”) below is a summary of the “Personal Information” categories, as identified and defined by the CCPA (see inter alia California Civil Code section 1798.140 (o)), that we collect, the reason we collect your Personal Information, where we obtain the personal information, and the third parties with whom we may share your personal information. We do not sell information as the term “sell” is traditionally understood. However, if and to the extent “sale” under the CCPA is interpreted to include advertising technology activities such as those implemented specifically for interest-based advertising, we will comply with applicable law as to such activity.

Our collection, use and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident. In general, we may (i) collect and (ii) disclose for a business purpose, the following categories of personal information (as defined by the CCPA) about California residents: (a) identifiers: such as a real name, alias, address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers; paper and electronic customer records containing personal information, including without limitation, name, signature, physical characteristics or description, address, telephone number, education, current employment, employment history, social security number, passport number, driver’s license or state identification card number, insurance policy number, bank account number, credit card number, debit card number, or any other financial or payment information, medical information, or health insurance information; characteristics of protected classifications under applicable state or federal law such as race, color, sex, age, religion, national origin, disability, citizenship status, and genetic information; commercial information, including records of real property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies; internet or other electronic network activity Information: including without limitation browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement; geolocation data; employment history: professional or employment-related information; education information that is not publicly available personal information as defined in the federal Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99); profiles and inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

We collect these categories of personal information from the sources described in the

Information We Collect section above, and for the purposes described in the Sharing and Disclosure of Personal Information section above.

The CCPA defines a “sale” as disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration. We may make certain categories of personal information available through third party cookies and tags to collect browsing history and other information on our Sites to improve and measure our ad campaigns, including (a) identifiers such as a real name, alias, address, unique personal identifier, online identifier, IP address; and (b) internet or other electronic network activity Information: including without limitation browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.

California Residents’ Rights. Subject to certain exceptions, California law grants California residents certain rights and imposes restrictions on particular business practices as set forth below.

We collect your personal information solely for legitimate business purposes. We will not disclose specific pieces of personal information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of the personal information or the security of our network systems. You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your right to know, delete or opt-out of sales.

We will respond to requests from California residents to the extent required by the CCPA:

  • Do-not-sell: California residents have the right to opt-out of our sale of their personal information. We do not sell personal information about residents who we know are younger than 16 years old without opt-in consent.
  • Notice before collection: We are required to notify California residents, at or before the point of collection of their personal information, the categories of personal information collected and the purposes for which such information is used.
  • Request to delete: California residents have the right to request, at no charge, deletion of their personal information that we have collected about them and to have such personal information deleted, except where an exemption applies. We will respond to verifiable requests received from California residents as required by law.
  • Request to know: California residents have the right to request and, subject to certain exemptions, receive a copy of the specific pieces of personal information that we have collected about them in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the individual to transmit this information to another entity without hindrance. California residents also have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months, including:
    • categories of personal information collected;
    • categories of sources of personal information;
    • business and/or commercial purposes for collecting and selling their personal information;
    • categories of third parties/with whom we have disclosed or shared their personal information;
    • categories of personal information that we have disclosed or shared with a third party for a business purpose; and
    • categories of third parties to whom the residents’ personal information has been sold and the specific categories of personal information sold to each category of third party.

California residents may make a Request to Know up to twice every 12 months, at no charge. We will respond to verifiable requests received from California residents as required by law.

For requests under CCPA, you may submit requests to privacy@chmrccares.org.

To verify your identity, we may ask you to verify personal information we already have on file for you. If we cannot verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes. If you would like us to no longer share your personal information, please contact us below. If you opt-out, we may be unable to offer you some of our Services which require sharing of personal information.

We will respond to verifiable requests received from California residents as required by law. The CCPA prohibits discrimination against California residents for exercising their rights under the CCPA.

In addition, California Civil Code Section § 1798.83 permits users of our Site that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes (if applicable).

Fair Information Practices

The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information. There are five (5) core principles of Fair Information Practice: (i) consumers should be provided notice of whom the information is going to and what it will be used for; (ii) choices should be offered and consent required; (iii) consumers should be able to access and alter data; (iv) data should be accurate and secure; and (v) mechanisms in place for enforcement and redress are necessary. In order to be compliant with Fair Information Practices we will take the following responsive action, should a data breach occur:

  • We will notify you via email within seven (7) business days.
  • We will notify users via in-site notification within seven (7) business days.

We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

Notice for International Users

The Site is designed for and targeted to United States audiences, and are governed by and operated in accordance with the laws of the United States. We make no representation that the Site is operated in accordance with the laws or regulations of any other nations. Information collected through the Site may be stored and processed in the United States or any other country in which we or our service providers maintain facilities. Our service providers may transfer information that we collect about you, including Personally Identifiable Information, across borders and from your country or jurisdiction to other countries or jurisdictions, some of which may not have the same data protection laws as your jurisdiction. By using the Site and providing us with information directly or indirectly, you consent to the transfer of information to the U.S. or to any other country in which our service providers maintain facilities for processing by us in accordance with this Privacy Policy.

Changes to This Privacy Policy

This Privacy Policy is effective as of the date stated at the top of this Privacy Policy. We may change this Privacy Policy from time to time and will post any changes on the Site as soon as they go into effect. By accessing the Site after we make any such changes to this Privacy Policy, you are deemed to have accepted such changes. Please refer back to this Privacy Policy on a regular basis.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All personal information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL or other encryption technology or will use our third-party payment processors, who will use appropriate security procedures.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. You should not share your password with anyone. We urge you to be careful about giving out information in public areas of the Site like message boards. The information you share in public areas may be viewed by any user of the Site.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

Integration of Third-Party Platforms and Services

The Site may be linked to, rely on, and be integrated with websites, applications, interfaces, services, and platforms operated by other companies, including Third-Party Services. The Site may also feature advertisements from these companies. We are not responsible for the privacy practices of such websites, applications, interfaces, services, and platforms operated by third parties that are linked to, rely on and/or integrated with the Site or for the privacy practices of third-party advertising companies. Once you leave this Site via a link, access a third-party service, or click on an advertisement, you should check applicable privacy policies to determine, among other things, how related companies process Personal Information they may collect about you. This Privacy Notice applies solely to information collected by us.

Information and Sample Retention

We are subject to multiple laws on the retention of information and will retain your information for as long as is reasonably necessary to comply with our business and legal obligations and to meet regulatory and compliance requirements.

Geographic Restriction

Our Site is intended for individuals who are 18 years of age or older and reside in the United States of America. We make no representations that our Site or Services are appropriate or available for use outside of the United States. If you are a resident of another country or are accessing the website from outside of the United States, please note that you are transferring data to the United States of America which does not have the same data protection laws as the European Union and other regions.

“Children’s Data”

While we are committed to protecting the privacy of children, we specifically disclaim any use of this website, or its products and services, by anyone under the age of 18.

No one under the age of 13 may provide any personal information to, or on, the Site. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Site, or on or through any of its features/functionality, or engages in services provided through the Site, use any of the interactive or public comment features that may be available on this Site, or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name or user name you may use.

If we learn that we have collected or received personal information from a child under 13

without verification of parental consent, we will delete that information.

Governing Law

All disputes arising out of or relating to the Privacy Notice or the purchase, registration, or use of any CHMRC Services shall be governed by California law regardless of where you access the Site or the Services, and notwithstanding of any conflicts of law principles. For avoidance of doubt, and notwithstanding any other provision of this Privacy Notice including but not limited to the clarifying sections below, the arbitration provisions of the website Terms of Use apply to this Privacy Notice.

Contact Us

For any other questions or concerns regarding this Privacy Notice, or to exercise any of your privacy rights, you can contact via email at privacy@chmrccares.org