Effective Date: January 31, 2023
Last Updated on: January 31, 2023
Information We Collect
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("personal information"). Personal information does not include:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
We obtain the categories of personal information listed above from the following categories of sources:
We will retain your information for as long as is reasonably necessary for the purposes set out above, considering criteria such as applicable rules on statute of limitations, the sensitivity of the relevant information, and the duration of your use of the Website. We also retain your information as reasonably necessary to comply with our legal obligations and enforce our terms and policies.
We may use, or disclose the personal information we collect for one or more of the following business purposes:
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
We may share your personal information by disclosing it to a third party for one or more of the business purposes listed above. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Company has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below.
Selling Personal Information
We do not sell your personal information.
Your Rights and Choices
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Right to Know and Data Portability
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the "right to know"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Correct or Delete), we will disclose to you:
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
Right to Correct
You have the right to request that we correct inaccurate personal information. To exercise this right, see Exercising Your Rights to Know, Correct or Delete. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
Right to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Correct or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.
We do not provide these deletion rights for B2B personal information.
Exercising Your Rights to Know, Correct, or Delete
To exercise your rights to know, correct, or delete described above, please submit a request by either:
Only you, or someone legally authorized to act on your behalf, may make a request to know, correct, or delete related to your personal information.
You may also make a request to know, correct, or delete on behalf of your child by one of the above methods.
You may only submit a request to know twice within a 12-month period. Your request to know, correct, or delete must:
- If you maintain a password-protected account, we may verify your identity through our existing authentication practices for your account;
- Match the requester's identification information to the personal information already kept by the business;
- If the requester does not have a password-protected account, identity verification is subject to different standards depending on the nature of the request and type of personal information at issue.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
You do not need to create an account with us to submit a request to know, correct, or delete. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account.
We will only use personal information provided in the request to verify the requestor's identity or authority to make it.
Response Timing and Format
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact firstname.lastname@example.org.
We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will provide your personal information via encrypted email that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
BASS Medical Group
2637 Shadelands Drive, Walnut Creek, CA 94598
If you need to access this Policy in an alternative format due to having a disability, please contact us by email at email@example.com or by phone at (925) 350-4044.