This notice supplements our Privacy Policy for California residents, as required by the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"). Medical information governed by HIPAA or California's Confidentiality of Medical Information Act (CMIA) is handled under those laws and is not covered by this notice.
On this page
Categories we collect (past 12 months)
- Identifiers: name, email, phone, postal address, IP address, account ID.
- Customer records (Cal. Civ. Code § 1798.80): payment card brand and last four digits, billing details.
- Protected characteristics: age and sex, when provided for care.
- Commercial information: plans and gift cards purchased.
- Internet activity: pages visited and server log data on our sites.
- Sensitive personal information: account login, government ID for identity verification, and health information you provide for care.
- Inferences: none. We do not build profiles to predict your characteristics or preferences.
Sources
You, the Medical Group, Pharmacy and labs involved in your care, our payment and identity-verification providers, and your browser.
Purposes
Providing and securing the Service, processing payments, verifying identity, communicating with you, complying with law, and improving the Service using de-identified data, as described in our Privacy Policy. We retain each category only as long as needed for these purposes or as required by law.
Disclosures
We disclose personal information for business purposes only to the Medical Group, Pharmacy, shipping carriers and service providers (such as Telea and Stripe) bound by contracts that restrict their use, and as required by law.
No sale or sharing
We do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the past 12 months. We do not knowingly sell or share information of consumers under 16. We honor Global Privacy Control signals.
Sensitive personal information
We use sensitive personal information only for purposes permitted by the CCPA, such as providing the Service you request, security and fraud prevention. We do not use it to infer characteristics about you.
Your California rights
- Right to know and access the personal information we collect, use and disclose.
- Right to delete personal information, subject to legal exceptions (for example, medical records we must keep).
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing (we do neither).
- Right to limit the use of sensitive personal information (we already limit it).
- Right not to be discriminated or retaliated against for exercising these rights.
How to exercise your rights
Email care@rovymi.com with the subject "California privacy request". We will confirm receipt within 10 business days and respond within 45 days, which we may extend once by 45 days with notice. We verify requests by matching information we already hold; an authorized agent may submit a request with your signed permission, and we may ask you to confirm your identity directly.
Shine the Light
California Civil Code § 1798.83 lets residents ask about disclosures to third parties for their direct marketing. We do not make such disclosures.
Contact
care@rovymi.com (subject "California privacy request").