CA Privacy Policy - Bay Alarm Medical

California Privacy Policy

Last Updated: July 2020

Bay Alarm Medical, LLC (“Bay”, “Company,” “we,” “our,” or “us”) takes your privacy seriously. We want you to know how we collect, use, share, and protect your Personal Information and about the rights of California Consumers under California law.

We provide you with this supplementary privacy statement to comply with the California Consumer Privacy Act of 2018 (CCPA) which takes precedence over our general privacy statement available at: https://www.bayalarmmedical.com/privacy-policy/

This Privacy Policy addresses the following topics

The Scope of this Privacy Policy
The Company’s Collection, Use and Disclosure of Personal Information
Your California Privacy Rights
How to Exercise Your Rights
How We Will Verify Your Requests
Requests by Authorized Agents
The Company’s Non-Discrimination Policy
Your Right to Information About Disclosures of Personal Information for Direct Marketing Purposes
Your “Do Not Track” Browser Setting
Third-Party Links and Services
Minors Under 13 Years of Age
For More Information
Changes to This California Privacy Policy

Assistance For The Disabled

Alternative formats of this Privacy Statement are available to individuals with a disability. Please contact us at [ccpa@bayalarmmedical.com] for assistance.

The Scope Of This Privacy Policy

What Is Personal Information?

“Personal Information”. “Personal Information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California Consumer or household.

Whose Personal Information Is Covered By This Policy?

This California Privacy Policy applies to the Personal Information of residents of the State of California in their capacity as consumers (“California Consumers”).

What Personal Information Does This Privacy Policy Cover?

This Privacy Policy applies to all Personal Information of California Consumers that we collect both online and offline, including through California Consumers’ (a) visits to our website, and (b) use of our products, applications, or services that references this Privacy Policy (collectively, the “Services”).

Whose Personal Information Is Not Covered By This Privacy Policy?

For purposes of this Privacy Policy, “Consumer” does not include:

California residents who are the Company’s employees, job applicants, owners, directors, officers, or contract workers (collectively, “HR Individuals”),or the emergency contacts of HR Individuals or the dependents or spouses who receive Company benefits by virtue of their relationship to an HR Individual in their capacities as HR Individuals or emergency contacts, dependents, or spouses; or

California residents who are employees or other agents of a business engaged in a transaction with the Company in their capacities as employees or agents of that business.

The Company’s Collection, Use And Disclosure Of Personal Information

Categories Of Personal Information Collected

In the last 12 months, the Company collected the following categories of Personal Information about California Consumers:

Identifiers, including: real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, and account name.
Categories described in Cal. Civ. Code § 1798.80(e) (except those already listed in “Identifiers” above), including: medical information, photograph, signature, insurance policy number, credit card number, debit card number, or any other financial information.
Characteristics of protected classifications under California or federal law, including: gender identity, gender expression (when you enquire about our services and provide your title, we will address you accordingly (for example as Mr. or Mrs.)).
Commercial information, including: products and services purchased; purchase, service, and installation dates.
Internet or other electronic network activity information, including:
Geolocation data, including: physical location or movements.
Sensory information, including: Audio, electronic, visual, thermal, olfactory, or similar information. Some of our products can record camera feeds. When you record a camera feed, we collect audio and video information.
Professional or Employment-Related Information. The CCPA does not provide examples for of what information falls into this category. We consider that the following constitutes professional or employment-related information: job title, employer, skill set, professional interests, years of service, performance information.
Profile information, including: attitudes collected from open-ended comments left by users on Company website; purchasing patterns.

Sources Of Personal Information and Purposes For Using Personal Information

In the last 12 months, Company collected the categories of Personal Information listed above from the following sources and used those categories of Personal Information for the following purposes:

Categories of Personal Information Collected in the Last 12 Months	Sources of that Personal Information	Business Purposes and Commercial Purposes for Collecting that Personal Information
Identifiers	From the California Consumer	Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting impressions to unique visitors, verifying positioning and quality of impressions, and auditing compliance with the law. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Short-term, transient use. Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, and providing analytic services. Facilitating communications, for example, by collecting and organizing contact information, establishing means of communications, and communicating with current and prospective customers, including regarding questions and feedback.
Categories described in Cal. Civ. Code § 1798.80(e)	From the California Consumer	Short-term, transient use. Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, and providing analytic services. Facilitating communications, for example, by collecting and organizing contact information, establishing means of communications, and communicating with current and prospective customers, including regarding questions and feedback.
Characteristics of protected classifications under California or federal law	From the California Consumer	Facilitating communications, for example, by collecting and organizing contact information, establishing means of communications, and communicating with current and prospective customers, including regarding questions and feedback.
Commercial information	From the California Consumer	Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting impressions to unique visitors, verifying positioning and quality of impressions, and auditing compliance with the law. Short-term, transient use. Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, and providing analytic services. Facilitating communications, for example, by collecting and organizing contact information, establishing means of communications, and communicating with current and prospective customers, including regarding questions and feedback.
Internet or other electronic network activity information	Automated technologies in the website, including cookies, IP address and time of visit	Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting impressions to unique visitors, verifying positioning and quality of impressions, and auditing compliance with the law. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Short-term, transient use. Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, and providing analytic services. Facilitating communications, for example, by collecting and organizing contact information, establishing means of communications, and communicating with current and prospective customers, including regarding questions and feedback.
Geolocation data	Global Positioning System (GPS) enabled mobile products	Performing services, including dispatching emergency services, maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, and providing analytic services.
Sensory information	From the California Consumer	Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting impressions to unique visitors, verifying positioning and quality of impressions, and auditing compliance with the law. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Short-term, transient use. Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, and providing analytic services. Facilitating communications, for example, by collecting and organizing contact information, establishing means of communications, and communicating with current and prospective customers, including regarding questions and feedback.
Profile information	From the California Consumer	Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting impressions to unique visitors, verifying positioning and quality of impressions, and auditing compliance with the law. Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Short-term, transient use. Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, and providing analytic services. Facilitating communications, for example, by collecting and organizing contact information, establishing means of communications, and communicating with current and prospective customers, including regarding questions and feedback.

Disclosure Of Personal Information To Third Parties

In the last 12 months, Company disclosed the following categories of Personal Information about California Consumers to the following categories of third parties for a business or commercial purpose:

Category of Personal Information	Categories of Third Parties
Identifiers	Service Providers, including providers of Data Collection Technologies, providers of data analytics services, website providers, and e-commerce vendors Government agencies, law enforcement, and other parties as required by law, including in litigation
Categories described in Cal. Civ. Code § 1798.80(e)	Service Providers, including providers of Data Collection Technologies, providers of data analytics services, website providers, and e-commerce vendors Government agencies, law enforcement, and other parties as required by law, including in litigation
Characteristics of protected classifications under California or federal law	Service Providers, including providers of Data Collection Technologies, providers of data analytics services, website providers, and e-commerce vendors Government agencies, law enforcement, and other parties as required by law, including in litigation
Commercial Information	Service Providers
Internet or Other Electronic Network Activity Information	Service Providers, including providers of Data Collection Technologies, providers of data analytics services, and website providers
Geolocation Information	Government agencies, law enforcement, and other parties as required by law, including in litigation
Sensory Information	Service Providers
Profile Information	Service Providers, including providers of Data Collection Technologies, providers of data analytics services, and website provider

No Sale Of Personal Information

The Company does not and will not sell California Consumers’ Personal Information.

Your California Privacy Rights

Right to Know

California Consumers have the right to submit a verifiable request to know:

The categories and specific pieces of Personal Information that the Company has collected about them;
The categories of sources from which the Company collected the Personal Information;
The categories of Personal Information that the Company sold or disclosed to a third party (other than a service provider) for a business purpose and the categories of recipients of that information; and
The business or commercial purposes for the Company’s collection, disclosure, or sale of the Personal Information.

Right To Delete

California Consumers have the right to submit a verifiable request for deletion of their Personal Information that the Company has collected from the Consumer.

Right to Opt Out of Sale of Personal Information

California Consumers have a right to opt-out of the sale of the Personal Information. However, as stated above, the Company does not and will not sell Personal Information.

How to Exercise Your Rights

We will respond to requests in accordance with applicable law if it can verify the identity of the individual submitting the request. California Consumers can exercise their rights in the following ways:

Complete the online request form available here: [https://www.bayalarmmedical.com/wp-content/uploads/Bay-Alarm-Medical-CCPA-Request-Form.pdf]
Contact by telephone: 877-522-9633.

Requests By Authorized Agents

You may designate an authorized agent to exercise your right to know or your right to delete by submitting to us a completed “Authorized Agent Designation” form. You can obtain the designation form by contacting us at [ccpa@bayalarmmedical.com].

If an authorized agent submits a request to know or a request to delete on your behalf, the authorized agent must submit with the request either (a) a power of attorney that is valid under California law, or (b) a document signed by you that authorizes the authorized agent to submit the request on your behalf. In addition, we may ask you to follow the applicable process described above for verifying your identity

How We Will Verify Your Requests

The processes that we follow to verify that the person making a request to know or a request to delete is the person about whom we have collected personal information are described below. The relevant process depends on how and why the request is submitted.

Requests Through Your Password-Protected Account

If you created a password-protected account with us before the date of your request, we will rely on the fact that your request has been submitted through your account as verification of your identity. We will require that you re-authenticate yourself before we disclose your personal information in response to a request to know and before we delete your personal information in response to a request to delete.

You are responsible for protecting the security of your log-in credentials for your account. Please do not share your log-in credentials with anyone. If we suspect fraudulent or malicious activity on or from your account, we will not respond to a request to know or a request to delete until we have been able to confirm, through further verification procedures, that you made the request.

Requests Other Than Through A Password-Protected Account

If you submit a request by any means other than through a password-protected account that you created before the date of your request, the verification process that we follow will depend on the nature of your request as described below:

Requests To Know Categories Of Personal Information: We will match at least two data points that you provide with your request to know, or in response to our request for verification information, against information about you we already have in our records and that we have determined to be reliable for purposes of verifying your identity. Examples of relevant data points include your mobile phone number, your zip code, or information about products or services that you have purchased from us.

Requests To Know Specific Pieces Of Personal Information: We will match at least three data points that you provide with your request to know, or in response to our request for verification information, against information that we already have about you in our records and that we have determined to be reliable for purposes of verifying your identity.

Requests To Delete Personal Information: Our process for verifying your identity will depend on the sensitivity (as determined by Company) of the personal information that you ask us to delete. For less sensitive personal information, we will require a match of two data points as described in Point No. 1, above. For more sensitive personal information, we will require a match of three data points as described in Point No. 2, above.

We have implemented the following additional procedures when verifying the identity of requestors:

If we cannot verify your identity based on the processes described above, we may ask you for additional verification information. If we do so, we will permanently delete the verification information that you provide promptly after we have completed the verification process. We will not use that information for any purpose other than verification.
If we cannot verify your identity to a sufficient level of certainty to respond to your request, we will let you know promptly and explain why we cannot verify your identity.

The Company’s Non-Discrimination Policy

California Consumers have the right not to be subject to discriminatory treatment by the Company for exercising their privacy rights under the California Consumer Privacy Act, and Company will not discriminate on that basis. However, the Company may charge a California Consumer a different price or rate or provide a different level or quality of goods or services if the difference is reasonably related to the value provided to the California Consumer by the Consumer’s Personal Information. If the Company does so, it will provide Consumers with any legally required notice.

Your Right to Information About Disclosures of Personal Information for Direct Marketing Purposes:

Under California law, California Consumers can request information from us whether we have disclosed Personal Information to any third parties for the third parties’ direct marketing purposes. We will not sell your Personal Information to, or share it with, third-party companies for their direct marketing purposes without your consent. California Consumers desiring to request further information about our compliance with these laws or who have questions or concerns about our privacy practices and policies are welcome to contact us using the contact information below.

Your ‘Do Not Track’ Browser Setting

The Site collects personally identifiable information about your online activities over time and across third-party websites or online services. We support the Do Not Track (DNT) browser setting. DNT is a preference you can set in your browser’s settings to let the websites you visit, including the Site, know that you do not want the sites collecting your personally identifiable information.

Third-Party Links And Services

We provide links to third party websites operated by organizations not affiliated with the Company. We do not disclose your Personal Information to organizations operating such linked third-party websites. We do not review or endorse, and are not responsible for, the privacy practices of these organizations. We encourage you to read the privacy policy of each and every website that you visit. This Privacy Policy applies solely to information collected by the Company through the Services.

Minors Under 13 Years of Age

We respect the privacy of children. Our Services are not designed to attract an audience younger than thirteen (13), and we do not knowingly collect Personal Information from children under thirteen (13). If you are under the age of thirteen (13), you are not permitted to use our Services and should not send any information about yourself to us through the Services. Please contact us using the contact details below if you believe we may have collected information from your child under the age of thirteen (13), and we will work to delete it.

For More Information

For questions or concerns about the Company’s privacy policies and practices, please contact us at [ccpa@bayalarmmedical.com].

Changes To This California Privacy Policy

From time to time, we may modify this California Privacy Policy to accommodate new technology, industry practices, regulatory requirements, or for other purposes. If we make material changes to this California Privacy Policy that would impact your continued use of our Services, we will make reasonable efforts to notify you of such changes (including through email, push message, and/or by posting a notice directly to your account), and may also ask you to affirmatively consent to the changes at the time of your next login to the Services. By continuing to use the services after such notice and/or consent, you agree to the terms of the California Privacy Policy as modified. If you do not agree with our changes to the California Privacy Policy, your sole and exclusive remedy will be to discontinue use of the Services and this website.