Data We Collect

Personal Data You Disclose To Us

Effective Date: November 26, 2024

At Lofty Care(“we,” “us,” “Lofty,” or “our”), we are committed to protecting your privacy and ensuring that your personal health information is handled responsibly. This California Consumer Privacy Act (CCPA) Privacy Policy outlines how we collect, use, and disclose personal health information (PHI) and other personal data, and the rights California residents have under the CCPA with respect to their personal information.

This policy applies to California residents whose personal information we collect, and is designed to comply with the CCPA, as well as other applicable privacy laws governing the handling of health data, including the Health Insurance Portability and Accountability Act (HIPAA) and the California Consumer Health Data Privacy Act (CHDPA), if applicable.

1. Information We Collect

We may collect the following types of personal health information, which may include but is not limited to:

• Health-related information: Medical history, diagnoses, treatment plans, prescriptions, lab results, medical records, and other health data.
• Identifiable information: Name, date of birth, contact details, and health insurance information.
• Online activity: IP address, browser type, and usage data related to your interaction with our website or digital services.

We collect this information directly from you when you engage with our services, such as during consultations, registrations, or through your use of our website or mobile applications.

2. How We Use Your Personal Health Information

We use your personal health information for the following purposes:

• To provide healthcare services and medical treatment.
• To process prescriptions and manage your healthcare needs.
• To communicate with you regarding your health status, care plans, and services.
• To comply with legal and regulatory obligations, including reporting requirements.
• To improve our services, conduct research, and enhance patient care.

We will not use your personal health information for purposes other than those outlined in this policy without your explicit consent.

3. Sharing and Disclosure of Personal Health Information

We may disclose your personal health information in the following circumstances:

• With healthcare providers: We may share your health information with medical professionals or service providers involved in your care.
• With third-party service providers: We may share your data with vendors and contractors who assist us in providing healthcare services, such as medical labs, technology providers, or online pharmacies, under strict confidentiality agreements.
• As required by law: We may disclose your personal health information to comply with legal obligations, such as court orders or requests from government authorities.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal health information may be transferred as part of the transaction.

We will never sell your personal health information to third parties.

4. Your Rights Under the CCPA

As a California resident, you have the following rights under the CCPA regarding your personal health information:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, including health-related data.
• Right to Delete: You may request that we delete your personal health information, subject to certain exceptions (e.g., if we are required to retain it for legal or regulatory reasons).
• Right to Opt-Out: If we were to sell your personal data (which does not include health data under current law), you would have the right to opt-out of such sales. We do not sell your health-related information.
• Right to Non-Discrimination: You have the right to exercise your privacy rights without facing discrimination in the quality of services we provide.

5. How to Exercise Your CCPA Rights

To exercise any of the rights described above, please contact us at:

• Email: [email protected]
• Phone: 888-563-8910

Please include your name, contact information, and a description of your request so that we can process it promptly. We will respond to your request within the timeframes required by law.

6. Data Retention

We retain your personal health information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When your personal health information is no longer needed, we will take reasonable steps to securely delete or anonymize it.

7. Data Security

We implement reasonable security measures to protect your personal health information from unauthorized access, use, or disclosure. While no security system is completely impenetrable, we take all necessary steps to safeguard your information.

8. Changes to This Policy

We may update this CCPA Privacy Policy from time to time. Any changes will be posted on this page with an updated Effective Date. We encourage you to review this policy periodically to stay informed about how we are protecting your personal health information.

9. Contact Us

If you have any questions or concerns about this policy or our practices regarding personal health information, please contact us at:

• Email: [email protected]
• Phone: 888-563-8910
• Mail: 6600 W. Sunset Blvd Floor 2, Hollywood, CA 90028

Lofty Care Consumer Health Data Privacy Policy

Effective Date: November 26, 2024

At Lofty Care (“we,” “us,” “Lofty,”or “our”), we are committed to protecting your privacy and safeguarding the sensitive health information we collect. This Consumer Health Data Privacy Policy outlines how we collect, use, store, and share your health data in compliance with the Washington State My Health My Data Act (MHMD), which provides additional protections for consumer health information. We also describe your rights under the MHMD Act, how you can exercise those rights, and how we ensure your personal health information is kept secure.

1. Information We Collect

We collect and process personal health data, which may include:

• Health Information: Medical conditions, health diagnoses, physical and mental health status, treatments, prescriptions, lab results, fitness and wellness data, and other similar information.
• Identifiable Information: Name, date of birth, contact information, health insurance details, and other personally identifiable information.
• Online Activity: Information collected through our website, mobile apps, or other digital platforms, including IP addresses, device identifiers, and usage data related to your interactions with our services.

This data is collected directly from you when you interact with our services, use our products, or engage with our online platforms.

2. How We Use Your Personal Health Data

We use the health data we collect for the following purposes:

• To provide, manage, and improve our products and services.
• To deliver personalized health recommendations, treatment plans, or wellness advice.
• To communicate with you about your health status, upcoming appointments, or related services.
• To comply with legal obligations, including health data reporting and regulatory requirements.
• To conduct research or analysis to improve our services (with your consent where required).

3. How We Share Your Personal Health Data

We may share your personal health data with the following parties under specific circumstances:

• Service Providers: We may share your data with third-party vendors and contractors who help us provide our services, such as cloud service providers, technology vendors, or analytics partners. These service providers are bound by strict confidentiality agreements and only use your data as necessary to perform their services.
• Health Professionals: We may share your data with healthcare providers, medical specialists, or other professionals directly involved in your care.
• Legal Compliance: We may disclose your data if required by law, including in response to a subpoena, court order, or to comply with applicable regulations.
• Business Transfers: In the event of a merger, acquisition, or sale of our company, your personal health data may be transferred as part of the transaction, subject to the terms of this policy.

We do not sell your health data to third parties. We are committed to ensuring that your health data is only shared for legitimate purposes in accordance with applicable laws.

4. Your Rights Under the MHMD Act

As a Washington State resident, you have the following rights regarding your personal health information under the MHMD Act:

• Right to Know: You have the right to request details about the types of health data we collect, how we use it, and who we share it with. You can request a copy of the specific health data we hold about you.
• Right to Delete: You have the right to request that we delete your personal health data, subject to certain exceptions (such as if we need to retain the data for legal, regulatory, or contractual reasons).
• Right to Control: You can control how we use and share your health data. This includes the ability to opt out of certain data uses or sharing (e.g., sharing data with third-party partners).
• Right to Non-Discrimination: You have the right to exercise your privacy rights without facing discrimination in the quality of our services.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at:

• Email: [email protected]
• Phone: 888-563-8910
• Mail: 6600 W. Sunset Blvd Floor 2, Hollywood, CA 90028

When you submit a request, we may need to verify your identity to ensure that we are responding to the correct individual. We will respond to your request within 30 days, as required by law, and will inform you if we need more time to process your request.

6. Data Retention

We retain your personal health data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or resolve disputes. Once your health data is no longer necessary, we will securely delete or anonymize it.

7. Data Security

We take the security of your personal health data seriously and implement reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, use, or disclosure. While no system is 100% secure, we regularly review and update our security measures to minimize risks to your data.

8. Your Choices Regarding Health Data

You can control how your health data is used and shared in certain ways:

• Opt-Out of Marketing: If you have provided your health data for marketing or promotional purposes, you can opt-out at any time by contacting us at the contact details above.
• Withdraw Consent: If you have given consent for the collection or use of your health data for specific purposes, you may withdraw that consent at any time. However, withdrawing consent may impact our ability to provide certain services.

9. Changes to This Policy

We may update this policy from time to time. Any changes will be reflected on this page, and we will update the Effective Date at the top of this policy. We encourage you to review this policy periodically to stay informed about how we protect your health data.

10. Contact Us

If you have any questions or concerns about this policy or our practices related to personal health data, please contact us at:

• Email: [email protected]
• Phone: 888-563-8910
• Mail: 6600 W. Sunset Blvd Floor 2, Hollywood, CA 90028