This Privacy Notice describes how Celia Group, Inc. (“Celia”, “we”, “us” and/or “our”), handles the personal information that we collect from and about you when you visit our websites, currently located at https://celia-health.com/ and https://celia-rx.com/ (the “Site(s)”); use our mobile applications(s) (“App(s)”); engage with us through our newsletters, emails, and branded social media accounts; or otherwise interact with us (collectively, our “Services”). This Privacy Notice also describes certain legal rights you may have, subject to applicable law, and how you can exercise them.
For the purposes of this Privacy Notice, “Personal Information” means information about an identified or identifiable person, as defined by applicable law. This includes information that alone or in combination with other information may be used to identify, contact, or locate you, such as your name, address, email address, or phone number.
Some state laws classify certain categories of Personal Information as Sensitive Personal Information or Consumer Health Data. Where required by applicable law, we obtain your affirmative consent before collecting, processing, or sharing such information. Residents of California, Colorado, Virginia, and other states with comprehensive privacy laws have the right to limit our use of Sensitive Personal Information for targeted advertising purposes.
If you are a resident of Connecticut, Nevada, or Washington, please also review our Consumer Health Data Privacy Notice, which provides additional information about how we handle Consumer Health Data as defined under the laws of those states.
We may sell or share your Sensitive Personal Information as defined under Texas law. You have the right to opt out of such sharing by emailing us at privacy@celia-rx.com.
Please read this notice carefully. In addition, please review our Terms of Use, which govern your use of the Services.
Some information we collect directly from you. For instance, we collect information that you voluntarily provide in the following ways:
We also collect certain information automatically as you navigate our Services or interact with our communications, including the following:
We collect some of the information above using cookies or similar technologies. A “cookie” is a small text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or device or to store information or settings in the browser/device. We, and our third-party service providers, use cookies in order to do things such as recognize you when you return to our Site, save your preferences (including your preferences regarding cookie handling), understand usage patterns, and improve our mobile applications. We use both session cookies (which expire when you close your browser or app) and persistent cookies (which stay on your device until you delete them or until they expire).
If you do not want us to collect information through the use of cookies, you can disable cookies, limit the types of cookies you allow, or set your browser to alert you when cookies are being sent. Please refer to the guidance offered by your chosen web browser if you would like help managing your cookie preferences. Please note that if you reject or block cookies, the Services may not work as intended.
We also may partner with third parties who provide analytics services and serve advertisements on our behalf across the Internet and in mobile applications. These third parties may use cookies and similar technologies to track your engagement with our Site as well as our online advertising and email marketing campaigns and permit us and them to analyze and track data, and do things like determine which advertising or marketing source brought someone to our Sites and target advertisements to an audience based on prior browsing patterns on our Sites.
We may also obtain Personal Information from other sources. For instance, we may collect Personal Information about you from the following third-party sources:
We may combine the information we collect about you from these various sources. If a combination of information that we collect identifies you as an individual, we will treat the combined information as Personal Information.
We use the information described above to do the following:
We use information that may be considered “sensitive personal information” or “special categories of data” under applicable law (“Sensitive Personal Information”), for each of the purposes described above and to make inferences about users, which we may use to promote certain products or services. Where required by law, Celia only processes this Sensitive Personal Information with your consent.
We may disclose information about you with third parties in the following circumstances:
You have a variety of rights and choices related to our use of your Personal Information.
The laws in the European Economic Area (“EEA”), United Kingdom (“UK”), and Switzerland require businesses to disclose certain information, including (i) the controller(s) of your Personal Information, (ii) the legal bases relied on to use or disclose your Personal Information (iii) your legal rights with respect to your Personal Information, (iv) safeguards used for transferring your Personal Information outside of these jurisdictions, and (v) the contact details of the controller and/or data protection offer. To the extent those laws apply, our answers are as follows:
| Controller | Celia is considered the “data controller” of the Personal Information that we handle under this Privacy Notice. |
| Legal Basis | Legitimate Interest. In most cases, we handle Personal Information on the ground that it furthers our legitimate interests in commercial activities such as the following in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals:
Legal Compliance. We need to use and disclose Personal Information in certain ways to comply with our legal obligations, such as complying with trade control laws and legal and business recordkeeping requirements. To Honor Our Contractual Commitments to an Individual. We need to process some Personal Information to meet our contractual obligations to the individual to whom the Personal Information pertains. Consent. Where required by law, and in some other cases, we handle Personal Information on the basis of implied or express consent. For instance, we will obtain and rely on your consent to send you newsletters or for the use of certain cookies. |
| Legal Rights | Right to Access & Portability: You have the right to request that we provide access to and/or a copy of the Personal Information we hold about you (including, in some cases, in an easily accessible format along with information explaining how that data is used). You may also request that we transfer your Personal Information to a third party.
Right to Correction: You have the right to request that we update Personal Information about you that is out-of-date or incorrect. Right to Restrict Processing: In certain cases where we process your information, you may also have the right to restrict or limit the ways in which we use your Personal Information. Right to Deletion: In certain circumstances, you have the right to request the deletion of your Personal Information, except information we are required to retain by law, regulation, or to protect the safety, security, and integrity of our business. Right to Object: If we process your Personal Information based on our legitimate interests as explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will stop processing your Personal Information unless we have a compelling legitimate ground to continue processing or where it is legally necessary. Right to Withdraw Consent: Where we rely on consent, you can withdraw your consent to our processing by using various means we offer, such as an email unsubscribe link. This is without prejudice to your right to permanently delete your Personal Information. We will consider all requests and provide our response within the time period stated by applicable law. Please be aware that certain information may be exempt from such requests in some circumstances. Before responding to your request, we may require that you provide us with additional information to confirm your identity. You have the right to lodge a complaint with the appropriate supervisory authority if you believe our processing of your Personal Information violates applicable law. |
| Safeguards | Personal Information we collect may be stored and processed for the purposes set out in this Privacy Notice in the United States where we are based or in any country where we have operations or engage vendors or service providers. These countries may have different data protection and government surveillance laws than your country.
Some of these countries have received a European Commission adequacy decision. For other countries, we take organizational, contractual, and legal measures, such as entering into written agreements with the relevant third party, to ensure your Personal Information is adequately protected and processed exclusively for the purposes set forth above. In most cases, our legal reason for processing and transferring your Personal Information is to fulfill a contract with you or to provide the services or assistance you have requested. For additional information regarding these transfers, please contact us at privacy@celia-rx.com. |
| Electronic Direct Marketing | Celia may send you electronic direct marketing subject to national law, if you have not declined such messages. If you do not wish to receive such messages any longer, you can opt-out at any time by following the instructions in those messages or by contacting us at privacy@celia-rx.com. |
| Contact Information for Controller/DPO | For personal information we process under this Privacy Notice:
405 Elizabeth Street, Austin, TX 78704 |
Certain U.S. state privacy laws – such as those in California, Colorado, Virginia, Connecticut, and other applicable jurisdictions – require businesses to provide certain disclosures to residents, including (i) the categories of Personal Information collected, (ii) the purposes for which Personal Information is used or disclosed, (iii) the categories of third parties with whom Personal Information is shared, (iv) your rights with respect to your Personal Information, including the rights to access, delete, correct, or opt out of certain data processing, and (v) how you can exercise those rights. To the extent these laws apply, we provide those disclosures below.
| Notice of Collection | While this information is covered in greater detail above, the categories of Personal Information that we have collected – as described by the California Consumer Privacy Act – are:
|
| Business or Commercial Purpose for Collecting and Using Personal Information | We collect each category of Personal Information listed above for the business or commercial purposes described in “Personal information we collect” section above. |
| Categories of Sources of Personal Information | We collect each category of Personal Information listed above directly from you, through automatic data collection means, or through the third-party sources described in “Personal information we collect” section above. |
| Categories of Personal Information Disclosed | In the preceding 12 months, we have disclosed the categories of Personal Information listed above in the circumstances described in “How we share your personal information” section above. |
| Selling and Sharing Personal Information | California law requires that we disclose whether we sell or share your Personal Information. We do not “sell” your Personal Information, as that term is defined under California law. However, we may “share” personal information (in the form of identifiers and internet activity information) with third-party advertising partners for the purposes of targeting advertisements for our Services to you on non-Celia websites, applications, and services. In addition, we may allow third parties to collect Personal Information from you on our Services if those third parties are authorized service providers who have agreed to contractual limitations as to their retention, use, and disclosure of your Personal Information. |
| Right to Opt Out of Selling and Sharing / Personalized Advertising Opt Out | You have the right to direct Celia not to share your Personal Information. You can exercise this right by emailing us at privacy@celia-rx.com or by using the Global Privacy Control (GPC). You can also adjust your cookie preferences to decline all non-essential cookies on our Services. If you notify us of your preference through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal. If you are logged in, your preference will be associated with your account and if you log in from another device or browser, you will be automatically opted out. However, if you are not logged into your account, your request will only be associated with the browser you are currently using. |
| Right to Limit the Use and Disclosure of Sensitive Personal Information (or Sensitive Personal Information Inferences) | You can request to limit the use of Sensitive Personal Information to only what is necessary for providing goods or services. |
| Right to Opt Out of Processing for Purposes of Profiling | You may have the right to opt-out of processing of your Personal Information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. Celia does not use your Personal Information for purposes of profiling. |
| Right of Appeal | If we deny (or otherwise refuse to act) on your request to exercise your rights, we will provide you with information about how you can appeal our decision. |
| Notice of Financial Incentive | We may offer referral programs, points, or other incentivized data collection programs. For example, we may offer incentives to you such as discounts, points, promotional items, or credits in connection with these programs, wherein you provide your Personal Information in exchange for a reward, or provide Personal Information regarding your friends or colleagues (such as their email address) and receive rewards when they sign up to use our Services. The referred party may also receive rewards for signing up via your referral. These programs are entirely voluntary and allow us to grow our business and provide additional benefits to you. The value of your data to us depends on how you ultimately use our Services, whereas the value of the referred party’s data to us depend on whether the referred party ultimately becomes a customer and uses our Services. Said value will be reflected in the incentive offered in connection with each program. |
| Non-Discrimination | You have the right not to receive discriminatory treatment by us for the exercise of your rights. |
| Authorized Agent | Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent, please contact us as set forth in “Contact Us” below and provide written authorization signed by you and your designated agent. |
| Verification | To protect your privacy, we take reasonable steps to verify your identity before fulfilling your request. |
| De-identified Data Disclosure | Celia may use de-identified data in some instances. Celia either maintains such data without attempting to re-identify it or treats such data as personal information subject to this Privacy Notice and applicable law. |
| Shine the Light | California Civil Code § 1798.83, also known as the “Shine the Light” law, permits California residents to request and obtain from us, once a year and free of charge, information about categories of Personal Information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared Personal Information in the immediately preceding calendar year. Tiled does not share personal information with third parties for their direct marketing purposes. |
Our Services are intended for adults and we do not knowingly collect Personal Information from children. If you are a parent or legal guardian and think your child under 13 (or a higher age threshold where applicable) has given us Personal Information without your consent, please email us using the contact information below.
We may provide links to third-party websites, services, and applications that are not operated or controlled by Celia. This Privacy Notice does not apply to the privacy practices of those third parties. The fact that we link to a website, service, or application is not an endorsement, authorization, or representation of our affiliation with that third party. We encourage you to review the privacy policies of any third-party service before providing any Personal Information to or through them.
Personal Information we collect may be stored and processed for the purposes set out in this Privacy Notice in the United States or in any country where we have operations or where we engage vendors or service providers. These countries may not have the same data protection laws as the country in which you originally provided the data. By using our Services or submitting your Personal Information to us, you agree to such transfers.
We only keep your Personal Information for so long as reasonably necessary for the purposes described in this Privacy Notice, as required by law, or as necessary to resolve disputes and enforce our rights and agreements. To dispose of Personal Information, we may anonymize it, delete it, or take other appropriate steps. Data may persist in copies made for backup and business continuity purposes for additional time.
Celia uses generally accepted administrative, physical, and technical safeguards we believe are appropriate to protect the confidentiality, integrity, and availability of your Personal Information. Although we make reasonable efforts to protect Personal Information from loss, misuse, or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the internet and storing information electronically. Celia cannot and does not guarantee absolute security.
We may update this Privacy Notice from time to time to reflect changes in our practices or in the law. If we make changes to this notice, we will post the updated Privacy Notice on our website and indicate when it was last revised. You are advised to review this notice periodically to stay informed of our practices. If we make material changes, we may provide you with additional notice, such as posting a statement on our homepage or sending you an email notification, if we have your email address on file. Your continued use of the Services after the revised Privacy Notice has become effective indicates that you have read, understood, and agreed to the current version of this Privacy Notice, to the extent permitted by law.
If you have any questions about our Privacy Notice or how we protect your Personal Information, please contact us at privacy@celia-rx.com or you may write to us at 405 Elizabeth Street, Austin TX 78704.