Privacy Policy

Last revised: February 24, 2026

This privacy policy (the “Privacy Policy”)  describes our policies and procedures on the collection, use, and disclosure of any personal information that Advanced Medical Certification Ltd,  a Domestic Nonprofit Corporation formed in the State of Indiana in the United States of America ("us," "we," "our" or the “Company”) may obtain when you visit us, use our Services (as defined in the Terms and Conditions), or access the features on advancedmedicalcertification.com (the "Website").

For the Purposes of this Privacy Policy, “You” or “Your” means the individual accessing or using the Service, or the Company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. In all cases described in this Privacy Policy, we will process your personal information as a data controller.

Your access to and use of the Website is conditional upon your acceptance of and compliance with this Privacy Policy. This Privacy Policy also governs the use of Personal Information we obtain from you from any third party site or application where we post content or invite your feedback or participation, including, but not limited to: Twitter, Facebook, and LinkedIn. This Privacy Policy applies to everyone, including, but not limited to: visitors, users, and others, who wish to access or use the Website. Please take a moment to read this Privacy Policy carefully.

By accessing or using the Website, you agree to be bound by this Privacy Policy. If you disagree with any part of the Privacy Policy, then you do not have our permission to access or use the Website.

Our Website Infrastructure and International Data Processing

Our Website and learning platform are hosted and managed for us by Coredna, a trusted third‑party content management and hosting provider located in  Australia. Coredna acts as our data processor, handling certain technical, storage, and infrastructure operations on our behalf. As a result, personal data you provide through the  Website may be transferred to and processed in Australia, where Coredna’s systems are based.

We carry out these cross-border transfers in accordance with this Privacy Policy and applicable data protection laws, and we implement appropriate safeguards (such as Standard Contractual Clauses or equivalent protective mechanisms) to ensure that your personal information remains secure.

Concerning the information we collect:

We may collect and store any and all information that you enter on this Website. This Privacy Policy is intended to inform you how we gather, define, and use information that could identify you, including, but not limited to: items such as your first and last name, email address, address, phone number, other contact details, online identifiers or other information that you provide to us when using our websites or when relying on our Services.

When you visit our Website or use our Service, we may collect certain information automatically from your device. In some countries, including countries in the European Economic Area (EEA), this information may be considered personal information under applicable data protection laws. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g., country or city-level location), and other technical information. We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked, or Service, including content accessed. Collecting this information enables us to better understand the visitors who come to our Website or use our Service, where they come from, and what content and functionality are of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website and/or Service to our visitors and users.

If you are a visitor or user from the EEA, our legal basis for collecting and processing your Personal Information will depend on the personal information concerned and the specific context in which we collect it. This legal basis may include, but is not limited to:

• The processing is necessary to perform our contractual obligations, such as to provide you with our Services;
• The user giving prior consent, which may be withdrawn at any time (such as for marketing purposes or other purposes we obtain your consent for from time to time) by contacting us at the email provided under Questions at the bottom of this Privacy Policy, and for residents of the European Economic Area, you can give or withdraw consent for marketing communications and cookies at any time using the cookie banner or by contacting us at the email provided under Questions at the bottom of this Privacy Policy
• The processing is necessary to comply with a legal obligation, a court order or to exercise or defend legal claims;
• The processing is necessary for the purposes of our legitimate interests, such as improving, personalizing, profiling or marketing, and developing our Services, marketing new features or products that may be of interest, and promoting safety and security as described above. We also conduct a legitimate interest assessment to ensure your rights and freedoms are respected.

You may object to this processing at any time by contacting us at the email provided below under Questions at the bottom of this Privacy Policy or by using the opt-out mechanisms provided in marketing communications.

The following information is also required to be collected to perform a contract: (i) Name, (ii) Postal/Address, (iii) Billing Address, (iv) Email Address, and (v) Products/ Services Purchased, Obtained or Considered. It is also necessary to collect your Billing Address for compliance with any associated legal obligation(s) and your Email Address in order to take steps that you requested prior to entering into a contract. We also collect the types of Products or Services Purchased, Obtained or Considered by the user in order to fulfill requests prior to entering into a contract.

The charts below provide additional details about the collection and storage of your information for the following: (i) Identifying Information, (ii) Characteristics of Protected Classifications, (iii) Commercial Information, and (iv) Internet or Other Electronic Activity:

In each of the instances mentioned in the charts above, the user’s information collected has been submitted by the consumer and the user’s submission of this information is consent to the collection and processing of their information; provided that the user’s Name can also be obtained through social networks and surveys, and the user’s IP address and Device Identifier can be obtained through tracking pixels. Commercial Information and Internet or Other Electronic Activity also collects information through tracking pixels. With the exception of the user’s Search History and Products/ Services Purchased, Obtained or Considered, all other Commercial Information and Internet or Other Electronic Activity may also collect information through the observation and recording of activities by the business, such as through the use of cookies.

If you have any questions or would like further information concerning the legal basis on which we collect and use your Personal Information, please contact us by email (see Questions at the bottom of this Privacy Policy).

II. With whom we share your personal information

Your personal information will be used in connection with our Website to send you communications about new Services, features, or enhancements that may be of interest to you and to handle your customer service questions or issues. We may share your personal information with our affiliates and third-party service providers that provide Services on our behalf; process, analyze, or store data; or assist with operations such as hosting, marketing, transaction processing, analytics, and customer support.

When these companies perform Services for us, they may access your personal information only as needed to fulfill their contractual obligations. We require all such third parties to comply with this Privacy Policy and to implement appropriate confidentiality, security, and data‑protection measures.

Service Providers and Partners

To the extent applicable, your personal information may be shared with the following categories of third parties for the purposes described below:

While providing services on our behalf, these companies act as data processors, processing your information under our direction and solely for the purposes outlined above.

Marketing Communications

We may also share limited personal information with the following categories of third parties to market to you via email or other communication channels:

• CUSTOMER MANAGEMENT SYSTEMS
• DATA ANALYTICS PROVIDERS
• EMAIL MARKETING VENDORS

You can opt out of receiving marketing emails at any time by following the unsubscribe link in our emails or contacting us directly.

Protection of Rights

We will share personal information if we have a good-faith belief that such action is reasonably necessary to:

1. satisfy any applicable law, regulation, legal process (such as a court order or subpoena), or a request by law enforcement or governmental authorities;
2. enforce our Terms and Conditions or any other agreement between you and the Website;
3. Detect, prevent, or address fraud, security, or technical issues; or
4. protect the rights, property, or safety of the Company, its employees, independent contractors, users of the Website, or others.

Business Transfers

If we undergo a merger, acquisition, or other transaction involving the sale of all or part of the Company’s assets, user information (including personal data collected through your use of the Website) may be transferred. In such cases, we will notify you via email and/or a prominent notice on the Website.

How we protect your personal information

We use reasonable administrative, logical, physical and managerial measures to safeguard your personal information against loss, theft and unauthorized access, use, and modification. We use robust security measures to protect data from unauthorized access, maintain data accuracy, and help ensure the appropriate use of data. We regularly review and update our security practices to maintain data protection. When the Services are accessed using the internet, Secure Socket Layer (“SSL”) technology protects your Information, using both server authentication and data encryption. These technologies help ensure that your Information is safe, secure, and only available to you and to whom you have granted access. We have implemented the following measures to protect and safeguard your personal information:

• Using SSL or other secure connection technologies when receiving or sending personal information beyond internal networks;
• Performing regular risk assessments;
• Screening all employees and independent contractors with access to personal information;
• Training our employees and independent contractors;
• Requiring our employees and independent contractors to sign confidentiality agreements;
• Performing regular due diligence of vendors.

Sale of your information

We do not sell your personal information. If you wish to opt out of the sale of your personal information, you can email customerservice@advmedcert.com.

Cookies and Tracking Pixels

Cookies and tracking pixels are small data files or code snippets that are commonly stored on your device when you browse and use websites and online Services. Cookies and tracking pixels help the Website function properly, improve performance, reporting, site optimization and provide personalized content and advertising. This Website may use cookies and tracking pixels  for reasons including, but not limited to: 

• Analyze our web traffic using an analytics package;
• Identifying if you are signed into the Website;
• Testing and improving content on the Website;
• Storing information about your preferences;
• Recognizing when you return to the Website.

Overall, cookies and pixel tracking help us provide you with a better Website, by enabling us to monitor which pages you find useful and which you do not. Cookies and tracking pixels do not give us access to your computer or personal information beyond what you choose to share. You can accept or decline cookies and pixel tracking. Most web browsers automatically accept cookies, but you can modify your browser settings to decline them. Please note that declining cookies may limit certain features of the Website. For more information on managing cookies and pixel tracking operated by third party advertisers and analytics providers, please see the Analytics Program section below.

Children’s Privacy

This Website is intended for use by a general audience. We do not knowingly collect or solicit personal information from anyone under the age of 16. We strongly believe in protecting the privacy of children. Any use or access by anyone under the age of 16 is prohibited, and certain regions and content offered through our Website may have additional requirements and/or restrictions. In line with this belief, we do not knowingly collect or maintain personal information (i.e., information that can be used to identify you and which may also be referred to as “personally identifiable information” or “personal information”) on our Website from persons under 16 years of age, and no part of our Website is directed to persons under 16 years of age. If you are under 16 years of age, then please do not use or access this Website at any time or in any manner. We will take appropriate steps to delete any personal information of persons less than 16 years of age that has been collected on our Website without verified parental consent upon learning of the existence of such personal information.

If you wish to submit a privacy request as a minor or on behalf of your minor child in accordance with applicable jurisdictional laws, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., you are the child’s legal guardian or authorized representative). Please contact us at the email provided under Questions at the bottom of this Privacy Policy. We may not be able to modify or delete your information in all circumstances.

Analytics Programs

We use data for analytics and measurement to understand how our Services are used. We use a variety of tools to do this, such as Google Analytics, Microsoft Clarity, Mixpanel, VWO, and may use other similar sites or Services now and in the future (collectively, “Analytics Programs”). These Analytics Programs track and analyze traffic on the Website, and collect information about you and your behaviors. These companies use cookies, tracking pixels, or other technologies to collect and analyze information about your interactions with the Website and report on activities and trends. These may also collect information regarding your use of other websites, apps, and online resources. Analytics Programs automatically track your computer’s IP address. That information is transmitted to and stored by the applicable Analytics Programs. This information is used to evaluate consumer use of the Website, compile reports on Website activity for our use, and provide other Services relating to Website activity and usage.  These technologies may use information such as cookies, scripting language or clear gifs to measure the effectiveness of advertisements and to personalize the content you see.

Information collected by Analytics Programs may include:

• Pages you visit and actions you take on the Website, such as search queries and Click Path/User Journey;
• Time spent on the Website and navigation paths, including ;
• Device and browser information, including IP addresses, Technical and System Details
• Operating System, Geographical Location, and Language Settings;
• Interaction with content, ads, or other elements

These Analytics Programs may also transfer this information on our behalf or, in some cases, share it with third parties where required by law or for reporting and measurement purposes. These third parties may view, edit, or set their own cookies or tracking technologies and may also collect non-personal and personal information concerning your online activities across different websites or apps to help analyze usage and serve targeted advertising. This may include other sites you have visited, applications you have downloaded, or other information about you or your device.

This Website uses Google Analytics. The use of cookies by Google Analytics is covered by Google’s privacy policy. You can learn more about Google’s practices at http://www.google.com/policies/privacy/partners and view currently available opt-out options at https://tools.google.com/dlpage/gaoptout.

This Website also uses Mixpanel to help us understand how users interact with our Website and services (for example, which pages are visited, which features are used, and how users move through our purchase flows). Mixpanel uses cookies and similar technologies to collect this information. You can learn more about Mixpanel’s privacy practices at https://mixpanel.com/legal/privacy-policy/.

You may manage your cookie preferences through our cookie banner and/or by selecting the appropriate settings on your browser. Please note that if you disable certain cookies, including those used by Analytics Programs, you may not be able to use the full functionality of the Website.

Third-Party Tracking Pixels

We use third-party tracking pixels, including those from Meta platforms (Facebook), Google, TikTok, and other service providers, which may process data such as your interactions, device/browser identifiers, usage data, and, with some services, interactions with AI features to better understand user engagement, measure the effectiveness of our content and ads, and deliver relevant personalised content and advertising. Tracking pixels are small pieces of code embedded on our website that gather data about your interactions, such as which pages you visit and actions you take. This data helps us optimize our website and enhance your user experience by providing more relevant content and services.These third parties may collect information about your online activity across different websites and devices, as described in their own privacy policies. For example, if you use the Meta AI feature, your interactions may inform which ads or content you see across Meta products (unless you have opted out or your account region is subject to different law). Please refer to Meta’s Privacy Policy for details: https://www.facebook.com/privacy/policy/. You may control your ad-preferences via your account settings with those third-parties and manage cookies/tracking via our cookie settings.

These tracking pixels may collect information about your interactions with our Website, apps, or emails, including:

• Pages you visit and actions you take
• Device and browser information, including IP addresses
• Interaction with ads, content, or other elements

Information collected by these third parties may be combined with information from other websites, apps, or services to provide insights about your interests and online activity.

You can manage ad preferences and adjust cookie settings through these platforms or your browser settings. Disabling cookies and tracking pixels may affect website features, including personalized ads.

Data Retention

We keep your personal information for no longer than necessary for the purposes for which the personal information is collected and processed. The length of time we retain personal information depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise, or defend our legal rights. We will retain your personal information in accordance with our record retention policy.

Direct Marketing

“Direct marketing” is the act of selling products or Services directly to consumers rather than through retailers. We use the information that we collect about you for direct marketing purposes. However, you may object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground. You also have the right to object to where we are processing your personal information for direct marketing purposes. You may, at any time, request that we cease to use your information for direct marketing purposes by contacting us at the email provided below under Questions at the bottom of this Privacy Policy or by using the opt-out mechanisms provided in marketing communication.

Profiling

“Profiling” is a form of automated processing of personal information used to evaluate certain personal aspects of an individual. We use information such as age and gender to create generalized persona categories. This helps us provide marketing communications that are more relevant and improve our Services.

The legal basis for this processing is our legitimate interests in tailoring our Services and marketing efforts. We have assessed that these interests are not overridden by your privacy rights.You may object to this processing at any time by contacting us at the email provided below under Questions at the bottom of this Privacy Policy or by using the opt-out mechanisms provided in marketing communications.

Your Data Protection Rights

You have the following data protection rights:

• If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us by at the email provided below under Questions at the bottom of this Privacy Policy. Note that if you submit a request to delete your personal information, this may prohibit you from using the Website and/or Service.
• Additionally, if you are a resident of the European Economic Area (EEA), you can object to the processing of your personal information, ask us to restrict the processing of your personal information, or request the portability of your personal information. Again, you can exercise these rights by contacting us at the email provided below under Questions at the bottom of this Privacy Policy. Note that if you submit such a request, this may prohibit you from using the Website and/or Service.
• You have the right to opt out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To opt out of other forms of marketing (such as postal marketing or telemarketing), please contact us at the email provided below under Questions at the bottom of this Privacy Policy. Note that if you opt-out of receiving emails about recommendations or other information we think may interest you, we may still send you emails about your account or any Service you have requested or received from us.
• We use cookie banners to obtain your consent for non-essential cookies (such as analytics, advertising, and social media purposes) as required by applicable laws, including GDPR and CCPA. You can manage your preferences through the banner or your browser settings. Similarly, if we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.

By visiting this website and communicating electronically with us, you consent to the transfer and processing of your data as set out in this Privacy Policy in the United States subject to the laws of the United States. If you do not consent to having your information used in accordance with this Privacy Policy, you should not provide your personal information and should disable all cookies and other technologies. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. Where we process your personal information solely on behalf of a customer, we may be legally required to forward your request directly to our customer and social media business partners for their review/handling.

You may have certain rights relating to your Personal Information, subject to local consumer privacy and similar laws. In particular, please see the relevant State Laws Supplemental Notice here if you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Texas, , Utah, Virginia, or any other state having specific privacy rights.

Complaints

You have the right to lodge a complaint regarding our collection, use and sharing of your personal information by contacting us at the email provided below under Questions at the bottom of this Privacy Policy. You will need to provide us with the following information to verify your identity prior to effectuating your request:

• Name;
• Phone number;
• Email address.

We will respond to most consumer requests within thirty (30) days of receipt. However, some requests may take longer. We will notify you in writing if we need more time to respond. We have the ability to deny your request(s) if certain exceptions in the law apply. If we do deny your request, we will provide you with the reasons for such denial. For any complaints that fall within the scope of legislation in the EU, please submit a consumer request to the email provided under Questions at the bottom of this Privacy Policy. Please note, some rights may be limited, and we may need to retain certain Personal Information, as required or permitted by applicable law. You also have the right to lodge a complaint to your local data protection authority.

For any complaints that fall within the scope of Canada, you may also lodge a complaint with the Office of the Privacy Commissioner of Canada by filling out this form or calling 1-800-282-1376.

For any complaints that fall within the scope of Australian legislation, any such complaints must first be addressed to us in writing as required by Australia Privacy Act 1988 S 40(1A).If you are not satisfied with our response to your complaint, you may then lodge a complaint with the Office of the Australian Information Commissioner by following the steps on this page.

Accountability

You may lodge a complaint with us by contacting the email provided under Questions at the bottom of this Privacy Policy for any concerns regarding our privacy practices and procedures.

Location of Data Processing

Data processing activities are undertaken by us in the United States of America. We utilize Core dna Group Pty Ltd, an Australian-based service provider headquartered in Melbourne, Australia, which processes data on our behalf through its cloud infrastructure in connection with website hosting and content delivery services.

International Data Transfers

Your personal information may be transferred to and processed in countries outside your home country, including the United States and Australia, where our service providers operate. This may involve data processing by third-party providers who help us deliver services, such as data analytics, content delivery, or website hosting.

When transferring personal data internationally, including to the United States and Australia, we rely on Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms to ensure that adequate protections are in place, particularly for transfers of personal data from the European Union or other jurisdictions with data transfer restrictions.

We implement industry-standard security measures to protect your personal data, including data encryption during transmission and access control protocols to safeguard your information. This means that your data is encrypted when transmitted over the internet, and only authorized personnel or services have access to it. Additionally, we follow data minimization principles by ensuring that only the necessary amount of personal data is collected and processed for the intended purpose.

Do Not Track

Our Website does not respond to Do Not Track (“DNT”) signals. DNT is a preference you can set on your browser to inform websites that you do not want to be tracked. Some third-party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser.

International Data Transfers

We may transfer, store, and process your personal information in countries other than your country of residence, including the United States and Australia. These transfers occur in connection with operating our website, delivering our Services, processing transactions, managing communications, and supporting our business operations.

Our primary content management system and hosting infrastructure is provided by Core dna, which processes personal information on our behalf and may store or access data in Australia and other jurisdictions where it or its authorized subprocessors operate.

When personal information is transferred internationally, we implement appropriate safeguards designed to protect your information in accordance with applicable data protection laws. Such safeguards may include Standard Contractual Clauses or other lawful transfer mechanisms where required.

Changes to Privacy Policy

You acknowledge that this Privacy Policy is part of the Terms and Conditions for your use of the Website, and you agree that using the Website signifies your assent to this Privacy Policy. We reserve the right to amend this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it. As we may make changes from time to time without notifying you, we suggest that you periodically consult this Policy. We will notify users of significant changes to this Privacy Policy by posting a notice on our website or emailing registered users. Your continued use of the Website after the effective date of any modification to the Policy will be deemed to be your agreement to the changed terms. The revised Privacy Policy supersedes all previous Privacy Policies.

Links to Other Sites

Our Website may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or Services.

Questions

If you have any questions about this Privacy Policy, please contact us at administration@advmedcert.com.

Additional U.S. State Privacy Disclosure

Updated February 24, 2026

These Additional U.S. State Privacy Disclosures supplement the above information by providing additional information about our personal information processing practices relating to individual residents of the States of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey,  Oregon, Rhode Island, Texas, Nevada, Utah, or Virginia. Unless otherwise expressly stated, all terms defined in our Privacy Policy retain the same meaning in these Disclosures.

Additional personal information Disclosures

Sensitive Information

The following personal information elements we collect may be classified as “sensitive” under certain privacy laws (“sensitive information”):: 

• Credit/debit card number plus expiration date and security code (CVV), and financial account number and routing number; and
• Username and password

We use this sensitive information for the purposes set forth in the  “Concerning the information we collect” section of our Privacy Policy, to register you for training courses and to comply with legal and regulatory requirements. 

We do not sell your sensitive information, and we do not process or otherwise share sensitive information for the purpose of targeted advertising.

Deidentified Information

We may at times receive or process personal information to create de-identified data that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified data, we will maintain and use the data in deidentified form and not attempt to reidentify the data except as required or permitted by law.  

Your Privacy Choices

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

• The Right to Know.The right to confirm whether we are processing your personal information and, under some state laws, to obtain certain personalized details about the personal information we have collected about you, including::
  • The categories of personal information collected;
  • The categories of sources of the personal information;
  • The purposes for which the personal information were collected;
  • The categories of personal information disclosed to third parties (if any), and the categories of recipients to whom the personal information were disclosed;
  • The categories of personal information shared for cross-context behavioral advertising purposes (if any), and the categories of recipients to whom the personal information were disclosed for those purposes; and
  • The categories of personal information sold (if any), and the categories of third parties to whom the personal information were sold.
• The Right to Access & Portability. The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
• The Right to Correction. The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
• The Right to Deletion. The right to have us delete the personal information we maintain about you.
• The Right to Opt-Out of Sales or Sharing of Personal Data. The right to direct us not to “sell” your personal information to third parties for monetary or other valuable consideration, or “share” your personal information to third parties for cross-context behavioral advertising purposes and targeted advertising purposes.  Good news about that – we don’t sell personal information or share it for targeted advertising purposes.  Cross-context behavioral advertising means in essence that we would share your information with a third party which would then use that information to advertise in places unrelated to 360training.   We don’t do that.  
• “Shine the Light.” California residents that have an established business relationship with us have rights to know how their personal information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law, or the right to opt out of such practices (Civ. Code §1798.83).

Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise any of the rights described in this “Additional U.S. State Privacy Disclosure”.

Submitting Privacy Rights Requests

To submit a request to exercise one of the privacy rights identified above, please email us at the email provided under Questions at the bottom of this Privacy Policy.

Before processing your request, we may need you to log in to your account with us so we can verify your identity. If you can’t log in or don’t have an account, we may not be able to link you to any personal data of yours on our systems, but we’ll do our best. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. We will only use personal data provided in connection with your request to review and comply with the request.

We may reject requests that are unreasonable or not required by law, including those that would be extremely impractical, could require disproportionate technical effort, or could expose us to operational risks. We may retain information as required or permitted by applicable laws and regulations, including to honor your choices, for our billing or records purposes and to fulfill the purposes described in this Privacy Policy.

Submitting Authorized Agent Requests

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf.  The authorized agent can submit a request on your behalf to the email provided under Questions at the bottom of this Privacy Policy along with a statement signed by you certifying that the agent is authorized to act on your behalf. To verify the request and your identity, you will need to provide your name, phone number, and email address when submitting your request.

Appealing Privacy Rights Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted to the email provided under Questions at the bottom of this Privacy Policy. 

Minors

See the Children’s Privacy section of the Privacy Policy.

California-Specific Disclosures

The following disclosures only apply to residents of the State of California.

The California Consumer Privacy Act of 2018 (the “CCPA”) is a California law that gives California residents (“You”, or “Your”), the right to learn about and control certain aspects of how a business handles the personal information that a business collects about them.

If you are a California resident, you have certain rights under the CCPA and California Privacy Rights Act (CPRA), including:

• The Right To Know: Request information about the categories of personal information we collect, use, and share;
• Right to Opt-Out of Sale or Sharing: Opt out of the sale or sharing of your personal information for advertising purposes;
• The Right To Delete: Request deletion of personal information, subject to certain exceptions; andhe right to access the specific pieces of personal information we’ve collected; and
• Right to Non-Discrimination: You will not be penalized for exercising your privacy rights..

To exercise your rights, contact us at the email provided under Questions at the bottom of this Privacy Policy. Verification of your identity may be required to confirm the request is made by you. Please be prepared to provide specific details such as your full name, email address, and date of the request.

YOUR PERSONAL INFORMATION UNDER THE CCPA:

Cookies and Similar Tracking Technologies

Cookies and similar tracking technologies (including pixels, web beacons, and local storage) are small data files or code snippets that are stored on your device when you visit and use websites and online services. These technologies help our Website function properly, improve performance and security, enable analytics and reporting, optimize site functionality, and provide personalized content and advertising experiences.

How We Use Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential Website Operations: Enabling core functionality including user authentication and login status, maintaining your shopping cart, processing purchases and transactions, and ensuring security features work properly.
• Analytics and Performance Monitoring: Analyzing web traffic, user behavior, page performance, and site usage through analytics platforms (including Google Analytics 4, Microsoft Clarity, and Mixpanel) to understand how visitors interact with our Website and identify areas for improvement.
• User Session Management: Identifying whether you are signed into the Website, maintaining your login status across sessions, and remembering your account information.
• Personalization and Preferences: Storing information about your preferences, settings, and previous interactions to provide a customized experience when you return to the Website.
• Content Optimization and Testing: Testing and improving different versions of content, features, and layouts to enhance user experience and Website effectiveness.
• Advertising and Retargeting: Delivering relevant advertisements through advertising platforms (including Facebook Ads and Microsoft Bing Ads), measuring ad campaign effectiveness, retargeting visitors who have previously visited our Website, and limiting ad frequency.
• Customer Relationship Management: Supporting our customer relationship management systems (including Nifti CRM) to manage customer interactions and communications.
• Abandoned Cart Recovery: Tracking incomplete purchases and sending reminder emails about items left in your shopping cart to help you complete your transaction.
• Conversion Tracking: Measuring the effectiveness of our marketing campaigns by tracking user actions such as purchases, sign-ups, and other conversions.

Types of Cookies We Use

• First-Party Cookies: Set directly by our Website and used only by us.
• Third-Party Cookies: Set by our service providers, analytics partners (Google, Microsoft, Mixpanel), advertising networks (Facebook/Meta, Microsoft Bing), and CRM platforms to provide services on our behalf.
• Session Cookies: Temporary cookies that expire when you close your browser.
• Persistent Cookies: Cookies that remain on your device for a set period or until you delete them.

Third-Party Services We Use

Our Website uses cookies and tracking technologies from the following third-party services:

• Analytics: Google Analytics 4, Microsoft Clarity, Mixpanel.
• Advertising: Facebook Ads (Meta Pixel), Microsoft Bing Ads.
• Customer Relationship Management: Nifti CRM.
• Marketing Automation: Email marketing and abandoned cart recovery services.

These third-party providers may collect information about your online activities over time and across different websites to provide their services and improve their offerings.

Your Cookie Choices

You have several options for managing cookies and tracking technologies:

• Browser Settings: Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies, receive notifications when cookies are being sent, or delete cookies that have already been set. Each browser has different procedures for managing cookies—please consult your browser's help documentation for specific instructions.
• Opt-Out Tools:
  • Digital Advertising Alliance (DAA): www.aboutads.info/choices
  • Network Advertising Initiative (NAI): www.networkadvertising.org/choices
  • Facebook advertising preferences: Available through your Facebook account settings.
  • Google advertising settings: www.google.com/settings/ads
• Mobile Device Settings: Mobile devices may offer privacy settings where you can limit ad tracking or reset your advertising identifier.
• Do Not Track: Some browsers offer "Do Not Track" signals, though we may not respond to these signals as there is no universal standard for how to interpret them.

Important Notice About Cookie Management

Please note that if you disable or decline cookies, some features and functionality of the Website may be limited or unavailable. Specifically:

• You may not be able to complete purchases or maintain items in your shopping cart.
• You may need to sign in each time you visit the Website.
• Your preferences and settings may not be saved.
• You may see less relevant advertising and marketing communications.
• Certain Website features may not function properly.
• Essential cookies required for basic Website functionality (such as shopping cart and checkout processes) cannot be disabled if you wish to use these features.

Cookies and tracking technologies do not give us access to your computer, mobile device, or any personal information beyond what you choose to share with us or what is necessary for the functioning of the Website and completing transactions.