California Customer Records (“Shine the Light”). California Civil Code (section 1798.83) provides In Good Hands (IGH) customers who are California residents the right to request certain information about our disclosure of Personal Information to third parties for their own direct marketing purposes.
California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020. California Civil Code (sections 1798.100 - 1798.199.100) provides California residents, including IGH customers, employees, job applicants, owners, directors, officers, medical staff members, and independent contractors, additional protections relating to their Personal Information. The following consumer rights are available to California residents:
- • The right to know what Personal Information is collected;
- • The right to know if your Personal Information is being sold or shared and to whom;
- • The right to object to the sale of your Personal Information (Opt-Out);
- • The right to access your own Personal Information;
- • The right to equal service and price, even if you choose to exercise your privacy rights (Non-Retaliation);
- • The right to limit the use of your sensitive personal information, to the extent we have any, to those uses which are necessary to perform the services or provide the good you have requested; and
- • The right to request that IGH delete your personal information in its possession.
Sale of Personal Information
In the preceding twelve months, IGH has not sold or shared Personal Information.
Your Rights And How To Exercise.
Deletion Request. You have the right to request that IGH delete any of your Personal Information that was collected from you and kept, with certain exceptions. IGH must receive a verifiable consumer request to delete your Personal Information from our records unless an exception applies.
IGH may deny your deletion request if it is necessary for us or our service providers to maintain the consumer’s Personal Information in order to:
- 1. Complete the transaction for which your Personal Information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with Federal law, provide a good or service requested by you, or conduct any reasonably anticipated business activity within the context of an ongoing business relationship with you, or otherwise perform a contract between the business and you.
- 2. Detect security incidents; protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
- 3. Debug to identify and repair errors that impair existing intended functionality.
- 4. Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.
- 5. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
- 6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest, that adheres to all other applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.
- 7. To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
- 8. Comply with a legal obligation.
- 9. Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Right to Know What Personal Information is Collected and Access Your Personal Information. You have to right to request disclosure of your Personal Information that is collected about you by IGH, including:
- 1. The categories of Personal Information we have collected about you.
- 2. The categories of sources from which your Personal Information is collected.
- 3. The business or commercial purpose for collecting or selling your Personal Information.
- 4. The categories of third parties with whom we share your Personal Information.
- 5. The specific pieces of Personal Information we have collected about you.
IGH must receive a verifiable consumer request before it can disclose Collected Information or give Access to such information.
Do Not Sell. Our use of online tracking technologies may be considered a “sale” or “sharing” under applicable law. You can opt out of being tracked by these third parties by clicking the “Don’t Sell or Share My Personal Information” link at the bottom of our website.
Global Privacy Control Signal. California residents may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). If you wish to use a GPC and have an account with us, we recommend you first submit the Do Not Sell or Share Personal Information form that is found by client the “Don’t Sell My Info” link at the bottom of our website.
Right to Know What Personal Information is Sold or Disclosed for a Business Purpose. You have the right to request disclosure of any Personal Information sold or disclosed for a business purpose by IGH, including:
- 1. The categories of Personal Information that we collected about you.
- 2. The categories of Personal Information that we sold about you and the categories of third parties to whom the Personal Information was sold, by category or categories of Personal Information for each category of third parties to whom the Personal Information was sold.
- 3. The categories of Personal Information that we disclosed about you for a business purpose.
IGH must receive a verifiable consumer request before it can disclose Sold or Disclosed Information. If you wish to exercise any of the rights listed above, please e-mail, call, or write to us at: firstname.lastname@example.org or
In Good Hands
[Attn.: Customer Service]
2000 North Plaza Drive
Visalia CA 93291
Only you or a person registered with the California Secretary of State who you authorize to act on your behalf may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or are an authorized representative.
- • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. We will only use Personal Information provided in a verifiable consumer request to verify your identity or authority to make the request.
Response to Verified Requests.
We aim to respond to all verifiable requests within 45 days. Certain requests may require up to 90 days based on the number of requests and complexity of such requests. Prior written notice for the extension along with the reason for the delay shall be sent prior to the expiration of the initial 45 days.
If IGH does not take action on your request, we shall inform you without delay, and at the latest, within the time period permitted of response by this section, of the reasons for not taking action and any rights you may have to appeal the decision to us.
We do not charge a fee to process or respond to verifiable requests. However, if your requests are manifestly unfounded or excessive, in particular because of their repetitive character, IGH may either charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested, or refuse to act on the request and notify you of the reason for refusing the request.
Any disclosure provided to you by IGH will cover the 12-month period preceding the verifiable request, if applicable. The format in which we will provide such disclosures will be such that the information is readily usable which can be transmitted without hindrance.