Kerecis Kers Privacy Policy

U.S. PRIVACY POLICY

We at Kerecis respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This US Privacy Policy describes our practices with respect to Personal Information we may collect from or about you when you use the Kerecis Mobile Health Application.

PERSONAL INFORMATION WE COLLECT:
The following subsections detail the categories of Personal Data that we may collect. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy
laws, rules, or regulations.

Kerecis may collect information about you from different sources, such as:
– Direct interaction with you, such as mail responses, phone calls, or online chat.
– When you visit the Kerecis Mobile Health Application, exchange emails with us, or use our online forms and services.

We may use non-personal information:
– Statistically analyze user behavior and activity (eg analytics data)
– In research and marketing activities

HOW WE USE PERSONAL INFORMATION:
We may use Personal Information for the following purposes:
– To provide, administer, maintain and/or analyze services;
– To improve our services and conduct research;
– To communicate with you;
– To comply with legal obligations and legal process.

We do not share your Personal Information with anyone and we will never sell your Personal Information.

Kerecis does not make Personal Information available to third parties, but you should be aware that any information you disclose to other web sites you access via or within the Kerecis Mobile Health Application is not subject to this Policy. In addition, we do not control how third parties use Cookies or how they manage the Non-Personal Information they gather through your use of their websites.

Non-personal information will always remain de-identified following guidance provided by the US Department of Health and Human Services to comply with the Health Insurance Portability and Accountability (HIPAA) Privacy Rule.

CHILDREN AND PERSONAL DATA:
Kerecis cares about protecting the online privacy of children. Our Service is not directed to children under the age of 13. Kerecis does not knowingly collect Personal Information from children under the age of 13. We will not intentionally collect any personal information (such as a child’s name or e-mail address)
from children under the age of 13. If you think that we have collected personal information from a child under the age of 13, please contact us at privacy@kerecis.com to request deletion of that information.

DATA SECURITY AND RETENTION:
We use reasonable administrative, technical, and physical safeguards to protect your personal information.

We will retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Information will depend on a number of
factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, our purpose for processing the information, and any legal requirements.

CHANGES TO PRIVACY POLICY:
We reserve the right to change or modify this Policy or any of our tools or services at any time and any changes will be effective upon being posted unless we advise otherwise. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law.

We encourage you to periodically review this information.

CALIFORNIA RIGHTS AND DISCLOSURES
The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (CCPA), provides California residents with specific rights regarding their personal information.

Access
You have the right to request certain information about our collection and use of your Personal Data, including the following:
– The categories of Personal Data that we have collected about you.
–  The categories of sources from which that Personal Data was collected.
–  The business or commercial purpose for collecting or selling your Personal Data.
–  The categories of third parties with whom we have shared your Personal Data.
–  The specific pieces of Personal Data that we have collected about you.

If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each third-party recipient. If we have sold your Personal Data over the past 12 months, we will identify the categories of Personal Data purchased by third-party recipients.

Deletion
You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.

HOW TO CONTACT US:
Please send us an email if you have any questions about our Privacy Policy or the Personal Information we maintain about you. You can contact our representatives at privacy@kerecis.com.