Additional Notice of State-Specific Privacy Information and Rights
Additional Notice of State-Specific Privacy Information and Rights
State-Specific Privacy RightsIf you are a resident of California, or a U.S. state in which a comprehensive privacy law similar to the California Consumer Privacy Act comes into effect after the Effective Date of this Notice, you may have one or more of the following rights. We will honor requests received to the extent required by applicable law and within the time provided by law.
Right to Know. You may have the right to request that we disclose certain information to you about our collection and use of your Personal Information. Specifically, you may have the right to request that we disclose:
Whether we are processing Personal Information about you.
The categories of Personal Information we collected about you.
The categories of sources for the Personal Information we collected about you.
Our business or commercial purpose for collecting, selling, or sharing that Personal Information.
The categories and/or list of third parties to whom we disclose that Personal Information.
The categories of Personal Information about you, if any, that we have sold or shared and the categories of third parties to whom we have sold or shared the information, by category or categories of Personal Information for each category of third party to whom we sold or shared the Personal Information.
The categories of Personal Information about you that we disclosed for a business purpose and the categories of recipients to whom we disclosed the information for a business purpose.
The specific pieces of Personal Information we collected about you.
Right to Delete
. You may have the right to request that we delete Personal Information that we have collected about you. Please note if you have requested a service that requires the use of your Personal Information, we may not be able to provide that service if you choose to delete your Personal Information.
Right to Correct
. You may have the right to request that we correct inaccurate Personal Information that we have collected about you.
Right to Opt-Out. You have the right to opt-out of the sale of Personal Information about you for valuable consideration, the sharing of Personal Information about you for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. To opt-out, click Do Not Sell or Share My Personal Information or as provided below under “Exercising Your Applicable State Specific Rights.” You can also opt-out of targeted advertising by using the opt-out tools provided by the Network Advertising Initiative and the Digital Advertising Alliance.
Additionally, we will process opt-out requests submitted by your opt-out preference signal as required by applicable law. The technical specifications of your opt-out preference signal determine how we process such signal. For example, if you install opt-out preference technology on a browser, and the opt-out preference signal it sends is associated solely with your browser, the opt-out will be applied to the browser.
You can learn how to set up and use an opt-out preference signal by visiting the California Attorney General’s “California Consumer Privacy Act (CCPA)” page or the California Privacy Protection Agency’s “Frequently Asked Questions (FAQs)” page.
Right to Appeal
. If you receive our refusal to fulfill a previous request that you submitted, you may have the right to appeal such refusal by emailing us at
.
Right to Non-Discrimination. Subject to applicable law, we may not discriminate against you for exercising any of the above-listed rights or any other rights under the California Consumer Privacy Act or similar comprehensive privacy laws that come into effect in U.S. states after the Effective Date of this Notice, including by:
Denying you goods or services.
Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.
Providing you a different level or quality of goods or services.
Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
We may, however, charge different prices or rates, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to CareDx by your Personal Information, subject to the requirements of applicable law.Disclosure, Selling, and Sharing of Personal InformationWithin the last 12 months, we have disclosed the categories of Personal Information identified in the above section titled “Personal Information We Collect” for our business purposes. We list the categories of third parties to which we may disclose Personal Information in the above section titled “How and When We Disclose Your Information”.As is common practice among businesses that operate Internet Web sites, we may disclose certain identifiers, information about the use of the CareDx Website, and inferences drawn about you to our analytics, advertising, and social media partners for their services. These disclosures may qualify as sales of Personal Information for valuable consideration or sharing of Personal Information for cross-context behavioral advertising under applicable law. However, we do not sell or share Personal Information covered by this Notice in exchange for monetary value. We also do not knowingly sell or share the Personal Information of individuals under 18 years of age.Exercising Your Applicable State-Specific RightsIf you are a resident of California or a U.S. state in which a comprehensive privacy law similar to the California Consumer Privacy Act has come into effect since the Effective Date of this Notice, and you would like to exercise any of the above rights, please submit your request via our webform, email us at privacy@caredx.com, or call us at +1-888-255-6627.For requests made in connection with the Right to Know, Right to Correct, and Right to Delete, please note:
As required or permitted by law, we may take steps to verify your request before we can provide Personal Information to you, correct Personal Information, delete Personal Information, or otherwise process your request. To verify your request, we may require you to provide your name, physical address, email address, contact information, and information about your account or previous transactions with us. If we believe we need further information to verify your request as required by law, we may ask you to provide additional information to us.
We may also limit our response to your exercise of rights as permitted by law. For example, if you request deletion, we may need to retain certain Personal Information to comply with our legal obligations or other permitted purposes.
We will process your request in the manner required by law within 45 days (or the applicable statutory timeframe) after receipt of a verifiable request, unless we notify you that we require additional time to respond, in which case we will respond within such additional period required by law. We may deliver the Personal Information to you through your account, if you maintain an account with CareDx, or electronically or by mail at your option. If electronically, then we will deliver the information to you or, at your request, to another entity, in a portable and, to the extent technically feasible, in a structured, commonly used, machine-readable format that allows you to transmit the information from one entity to another without hindrance.
Authorized AgentYou may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with a signed written permission stating that the agent is authorized to make the request on your behalf. Your agent may contact us via the information provided in the “Exercising Your Applicable State-Specific Rights” section to make a request on your behalf. If you are submitting a request through an authorized agent, we may, as permitted by law, require:
The authorized agent to provide proof that you gave the authorized agent signed permission to submit the request.
You to verify your identity directly with us.
You to directly confirm with us that you have provided the agent with your permission to submit the request on your behalf.
Data Sharing for Direct Marketing Purposes (California)California Civil Code Section § 1798.83 permits California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. If you are a California resident, you may ask us to refrain from sharing your Personal Information with certain of our affiliates and other third parties for their marketing purposes. To make such a request, please use our webform, email us at privacy@caredx.com, or call us at +1-888-255-6627.