PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

 

Last updated [08/12/2024]

 

This Privacy Notice for California Residents (this “Privacy Notice”) is intended to supplement our Privacy Policy and applies only to California residents. Any terms defined in the MJH Privacy Policy have the same meaning when used in this Privacy Notice.

 

Application

 

Pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, (collectively, the “CPRA”), California residents have the right to be informed about the data we collect about them. This Privacy Notice applies solely to natural persons who are California residents, as defined in the CPRA. Please note that this notice does not apply to residents of California who are acting as employees or job applicants (please see separate notices applicable to   and  ). Any terms defined in the CPRA have the same meaning when used in this Privacy Notice.

 

Categories of Personal Information We Collect

 

The CPRA defines “Personal information” as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Below are the categories of Personal Information that we may have collected, used, and disclosed for a business purpose, as permitted by law, in the last twelve (12) months, depending on the Services you receive:

 

 

Category

Examples May Include

Collected

A. Identifiers

your name, postal address, unique personal identifier, online identifier, email address, and telephone number

Yes

B. Customer Records Personal Information Categories

Name, signature, address, telephone number, education, employment

Yes

C. Protected Classification Characteristics

gender, age

Yes

D. Commercial Information

products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

Yes

E. Biometric information

biological measurements — or physical characteristics — that can be used to identify individuals (e.g., fingerprint or retina scan)

No

F. Internet or other electronic network activity information

Browsing history, search history, and information regarding your interaction with an Internet website, application, or advertisement

Yes

G. Geolocation data

City and state location of your device

Yes

H. Sensory Data

Audio, electronic, visual, thermal, olfactory, or similar information

No

I. Professional or Employment-related Information

employer, job title, occupation, practice type/specialty, year of school graduation, professional provider number

Yes

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99)).

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades or transcripts.

Yes

K. Inferences drawn from other personal information collected

Inferences drawn from the information we collect when you visit our Sites, reflecting your preferences, predispositions, etc.

Yes

L. Sensitive Personal Information

For the purpose of inferring characteristics about consumers, Social Security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; your precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of mail, email, or text messages; genetic data; health information

No

 

Sources from which We Collect Personal Information

 

The following are categories of sources from which we may receive your Personal Information:

  • directly from you when you inquire about our services via our Site, by telephone, or in person;
  • directly from you when you complete the registration process required by certain services that we offer;
  • from public online forums where you share information with other users;
  • from market research studies and surveys sponsored by us or other third parties;
  • directly from you when you participate in Continuing Medical Education (CME) or a Continuing Education (CE) activity through the Site;
  • from information collected through third party advertisements;
  • from information collected through the use of cookies, web beacons, and other tracking technologies within our Site and third party advertisements on our Site; and
  • from third parties that assist us in providing relevant services.

 

A more detailed description of these categories of sources from which Personal Information is collected is available in our Privacy Policy, available here.

 

Business or Commercial Purposes for which We Collect Personal Information

 

We may collect the Personal Information listed above for the following business or commercial purposes:

  • To respond to your questions;
  • To confirm or fulfill purchase and/or registration requests;
  • To provide to you the services, subscriptions, or information you requested;
  • To send you information about third party services through pop-ups, banners and emails;
  • To target advertising and marketing communication to your interests and geographic location;
  • To conduct and administer tests, surveys, sweepstakes, competitions and/or similar promotions;
  • To contact you regarding CME/CE activities, news, or other resources and to advise you of products or services that may be available;
  • To display content we think may be of interest to you and customize your visit to the Site and with communications;
  • To notify you about website maintenance, updates, and new features;
  • To contact you as needed to inform you of updates to or to address a suspected violation of our Terms of Use, Privacy Policy, or any other rules or policies applicable to the Site;
  • To send and manage educational outcomes measurement surveys;
  • To get your feedback to assess user-satisfaction or other needs and interests;
  • To perform information analysis, compliance audits, and data metrics;
  • To evaluate the use and the effectiveness of the Services that we offer which can include the effectiveness of content, advertising or programs;
  • To help us create new tools, features, and services and improve our Sites, content, and Services;
  • To perform security and integrity tasks, including detecting security incidents and protecting against malicious or illegal activity;
  • To provide required reporting on CME/CE activity to the appropriate monitoring bodies and involved CME/CE providers;
  • To study our CME/CE activities for effectiveness and understand educational needs;
  • To maintain archival records of your participation for historical and research purposes, subject to retention limits imposed by applicable laws;
  • To comply with applicable laws, rules, or regulations in operating our business; and
  • Otherwise in rendering, administering, and improving the Site, our Services, and our business.

 

Disclosure of Personal Information for Our Business or Commercial Purposes

 

We have disclosed the following categories of Personal Information for business or commercial purposes in the preceding twelve (12) months to the following categories of third parties:

 

 

Categories of Third Parties to Whom Personal Information Was Disclosed for a Business or Commercial Purpose

Categories of Personal Information Disclosed for a Commercial Purpose

Business or Commercial Purpose for Disclosing Personal Information

Service providers or contractors

Identifiers, Professional or Employment-related Information, Geolocation data

To help facilitate, manage, and/or analyze our Services (including web servers, cloud storage systems and service providers, support teams, web analysis, and others)

Subsidiaries and affiliates

Identifiers, Professional or Employment-related Information, Geolocation data

To operate our business and provide Services

Third parties authorized by law to receive Personal Information

Identifiers, Professional or Employment-related Information, Sensory Data, Protected Classification Characteristics, Sensitive Personal Information

To comply with applicable legal requirements

Third parties involved in business transfers

Identifiers, Professional or Employment-related Information, Geolocation data

For example, for a corporate merger, acquisition, consolidation, the sale of substantially all of our assets, or other fundamental corporate change, whatever form it may take

Market research sponsors

Identifiers, Professional or Employment-related Information, Geolocation data, Non-public education information

When you consent to participate in a market study or survey

Current or prospective advertisers, sponsors, and other business partners

Identifiers, Professional or Employment-related Information, Geolocation data, Non-public education information

For marketing purposes

Accreditors of our continuing education programs

Identifiers, Professional or Employment-related Information, Geolocation data, Non-public education information

To maintain our continuing education programs

Third parties to whom you or your agents request or authorize us to disclose your Personal Information in connection with products or services we provide to you.

All categories of Personal Data listed above, depending upon the request and/or authorization

To operate our business and provide Services

 

Sale/Sharing of Personal Information

 

Subject to certain limited exceptions, the CPRA defines “sell,” “selling,” “sale,” or “sold,” as “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.” Subject to certain limited exceptions, the CPRA defines “share,” “shared,” or “sharing” as “sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.”

 

In the preceding twelve (12) months, we have “sold” and “shared” Personal Information, within the meaning of the CPRA, as set forth below.

 

You have the right to opt out of the sale or sharing of your Personal Information. You may exercise this right by visiting the Do Not Sell or Share My Personal Information Opt-out form available here.

 

 

Categories of Personal Data “Sold” or “Shared”

Business or Commercial Purpose for Selling or “Shared”

Categories of Third Parties to Whom Personal Data Was Sold or “Shared”

Identifiers

List matching, contract fulfillment, system requirements

Data brokers, clients

Internet or other electronic network activity information

List matching, contract fulfillment, system requirements

Data brokers, clients

Geolocation data

List matching, contract fulfillment, system requirements

Data brokers, clients

Professional or Employment-related Information

List matching, contract fulfillment, system requirements

Data brokers, clients

Inferences drawn from other personal information collected

Contract fulfillment, system requirements

Data brokers, clients

Non-public education information

Contract fulfillment

Clients

 

Consumers under 16 Years of Age

 

MJH does not intentionally collect, sell, or share the Personal Information of consumers under 16 years of age.

 

Data Retention

 

We retain Personal Information about you necessary to fulfill the purpose for which that information was collected, consistent with applicable laws. When we destroy your Personal Information, we do so in a secure manner in compliance with applicable laws, such that the Personal Information may not be reconstructed.

 

My Rights under the CPRA

 

If you are a California resident, you may exercise certain privacy rights related to the Personal Information we collect about you. You may exercise these rights free of charge, except as otherwise permitted under applicable law.

 

  1. Right to Know/Access Personal Information

 

You have the right to request that we disclose to you what Personal Information we collect, use, disclose, and sell. This information includes (a) the categories of your Personal Information that we have collected and sold or shared for a business purpose; (b) the categories of sources from which we have collected your Personal Information; (c) the categories of third parties with whom we shared or sold your Personal Information; (d) the business or commercial purpose for collecting, selling, or sharing your Personal Information; and (e) the specific pieces of Personal Information we have collected about you.

 

  1. Right to Deletion of Personal Information

 

You have the right to request that we delete your Personal Information, subject to certain limited exceptions. For example, we may deny your request to delete Personal Information that we are required to maintain to fulfill a legal obligation.

 

  1. Right to Correct Inaccurate Personal Information

 

You have the right to request that we correct inaccurate Personal Information that we maintain about you.

 

  1. Right to Opt-out of the Sale or Sharing of Personal Information

 

You have the right to opt-out of the “sale” or “sharing” of your Personal Information. You may submit such a request by clicking here.

 

  1. Right to Non-Discrimination

 

We will not discriminate or retaliate against you for exercising your consumer rights under the CPRA, including by (a) denying you goods or services; (b) charging (or suggesting that we will charge) different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; or (c) providing you a different level or quality of goods or services (or suggesting that we will do so). We may, however, offer a different price, rate, level, or quality of goods or services if that price or difference is reasonably related to the value provided to us by your data.

 

How to Submit a Request

 

You may submit your request to access, delete, or correct Personal Information collected about you by contacting us at 1 (800) 598-6115, by email at Info@MJHPrivacy.com , or by visiting https://www.mjhlifesciences.com/contact/.

Verification of Identity and Processing of Requests

 

As required or permitted under applicable law, we may take steps to verify your identity before processing your request to access, delete, or correct Personal Information collected about you as set forth above. In order for your request to be processed, you must provide us with enough information to reasonably verify you are the person about whom we collected Personal Information or an authorized representative of that person. We will confirm receipt of your request within 10 business days and provide information about how we will process your request. We will review each request for access, deletion, or correction carefully and respond to most requests within 45 calendar days if we are able to verify your identify based on the information you have provided; however, we may extend this time period once by an additional 45 calendar days when reasonably necessary, provided that we provide you with notice of this extension.

 

Agent Authorization

 

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf. Your agent may contact us as set forth in this Notice. Even if you choose to use an agent, as permitted by law, we may require you to confirm that you have authorized the agent to act on your behalf or require you to verify your own identity.

 

Questions or Concerns?

 

If you have any questions, you may contact us at 1 (800) 598-6115, by email at Info@MJHPrivacy.com, or by visiting https://www.mjhlifesciences.com/contact/.