Last updated: April 22, 2025
This Privacy
Policy explains how Kana
Health Inc. (“KanaHealth”,
“Company”, “we”, “us” or “our”) collects, uses, discloses, and
otherwise processes personal information (as defined below) in connection with
our website www.kanahealth.ai (the “Sites”) and any other mobile
application we own and operate that links to this Privacy Policy, and the related
content, platform, services, products, apps, and other functionality
offered on or through our services (collectively, the “Services”).
In
certain situations, KanaHealth may function as a service
provider for an associated but independent
group of affiliated clinical practices (the “Professionals”). In the course of providing services
for the Professionals, we may collect your personal information on behalf of the Professionals. We refer to this type of
personal information as “Customer Data.”
We collect and process Customer Data on behalf of the Professionals subject to
restrictions set forth in our contracts with them, including HIPAA business
associate agreements. This Privacy Policy does not apply to our collection and
processing of Customer Data. We recommend referring to the Professionals’
Notice of Privacy Practices here for information on how
they engage service providers, like us, to collect and process Customer Data on
their behalf.
When
we use the term “personal information” in this Privacy
Policy, we mean any data or information that identifies, relates to,
describes, is capable of being associated with, or could reasonably be linked,
directly or indirectly, with a particular natural person or household or any other
data or information that constitutes “personal data”, “personal information,” or
“personally identifiable information.”
We
collect personal information in a variety of ways. For example, you may provide
us your personal information when you send us messages, subscribe to our mailing
lists, newsletters or other forms of marketing communications, participate in a
survey, or use some other feature of our Service.
We
may link or combine your activities and information collected
from you on our websites
and mobile apps with information
we receive from third parties, as well as information we collect automatically
through tracking technologies (defined below). This allows us to provide you
with a personalized experience regardless of how you interact with us.
We may collect the following categories personal
information submitted to us by individuals through
the Services:
· Network Application Information. If you apply to join the KanaHealth network as a Professional, we may collect your first and last name, phone number, state of licensure, license type, referral information, current practice setting, and information regarding how you learned about KanaHealth. We use this information to fulfill your request, to communicate with you directly, and to determine whether you are eligible to join the network.
· Inquiry and Communications Information, including information provided in custom messages sent through the forms, in chat messages, to one of our email addresses, or via phone. This also includes contact information provided on our Services. We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the services we offer to our users and to manage and grow our organization.
· Login Information. In addition to information you provide upon sign-up, such as your email address, we collect your login credentials, including your username and password, when you create an account with us. If you choose to create an account using a third-party service, such as Google, we collect information from the third party. For more information about this, and information we collect when we use other third-party services to provide certain features, please see Personal Information from Third Parties, below.
· Internet and Other Electronic Network Information, including IP address, online identifiers, and device identifiers. For more details about this type of information collection, please see the Cookie Policy.
· Newsletter and Marketing Emails, including email address and applicable interests and communication preferences. We use this information to manage our communications with you and send you information about products and services we think may be of interest to you. If you wish to stop receiving email messages from us, simply click the “unsubscribe link” provided at the bottom of the email communication. Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices).
· Survey and Testimonial Information, including information included in any questions submitted through surveys or content of any testimonials. We use this information to administer and facilitate the Services, to respond to your submission, to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.
· Events and Promotions. If you fill out any forms or participate in KanaHealth events or promotional events, we may collect your contact information (such as your name, email, and phone number, postal code) and any other information requested as part of the event or promotion entry, including photos/videos (each, as applicable). If you are part of our event or promotion partner, we may also collect your personal information including your name, company email, and company address.
· Feedback Information. We may also collect feedback and ratings you provide relating to our services or products. We use this information to communicate with you, to conduct market research, inform our marketing and advertising activities and improve and grow our business.
· Provider or Employment Application Information, including your contact and demographic information, educational and work history, credentialing information, professional history and expertise, employment interests, information obtained during interviews and any other information you choose to provide, if you apply for a position with us or seek to join our network as a Professional. For more information about our information practices in this context, please see “Additional Information for Job or Provider Applicants” below.
We also obtain personal
information from third
parties; which we often combine
with personal information we
collect either automatically or directly from an individual. We may receive the same categories of personal information as described above from the following third parties:
· KanaHealth Entities: We may receive personal information from KanaHealth’s affiliated entities.
· Other Users or Individuals who Interact with our Services: We may receive your information from other users or other individuals who interact with our Services. For example, if you engage in one of our communications hosted on third-party platforms, we will be able to see any public communications made within that platform.
· Third-Party Integrations: Our Services integrate with third parties to offer certain functionalities. This includes logging into the Services through a third-party service like Azure Identity and Access Management and/or Google or providing scheduling functionality through a third-party calendar feature or using “SendGrid” for any communicating with You, as our users in order . When you use third-party sign-on services, we receive your email address, name, and identifiers associated with that third-party service. When you use a third-party scheduling feature, we collect your email address associated with your calendar account and the start and end times of events on your calendar to determine availability. We choose what information we collect from the third party, and we do not collect other details about your calendar events, such as invitees or event names. After we facilitate scheduling an event for the Services, we collect the online identifier associated with that event so that we may help modify it in case you or a Professional need to reschedule or cancel. Please note that our use of these third-party integrations may be subject to their terms and privacy policies We recommend that you review and, if necessary, adjust your privacy settings on third-party websites and services before sharing information and/or linking or connecting them to other platforms, including our Services.
· Social Media: When an individual interacts with our Services through various social media networks, such as when someone “Likes” us on Facebook or follows us or shares our content on Facebook, LinkedIn, X (erstwhile Twitter), or other social networks, we may receive some information about individuals that they permit the social network to share with third parties. The data we receive is dependent upon an individual’s privacy settings with the social network. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.
· Service Providers: Our service providers that may perform services solely on our behalf, such as survey and marketing providers and payment processors, collect personal information and often share some or all of this information with us. The information may include contact information, demographic information, payment information, information about your communications and related activities, and information about your orders. We may use this information to administer and facilitate our services, your orders, and our marketing activities.
· Business Partners: We may receive your information from our business partners, such as companies that offer their products and/or services on our Services. We may use this information to administer and facilitate our services, your orders, and our marketing activities.
· Other Sources: We may also collect Personal Information about individuals that we do not otherwise have from, for example, publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions. We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.
In addition to the information provided above, we may
use personal information we collect to:
·
Fulfill or meet the reason the information was provided, such as to fulfill our contractual
obligations, to deliver the Services you have requested;
·
Verify your identity and entitlement to Services when you contact
us or access our Services;
·
Register you for and provide you access to events
and webcasts;
·
Communicate with
individuals, including via email, social media, and phone calls;
·
Request
individuals to complete surveys about our organization, organizations we
partner with, and Services;
·
For marketing and
advertising purposes, including to market to you or offer you through email,
direct mail, phone or text message information
and updates on products or services we think that you may be interested in;
·
Administer, maintain, and personalize our Services, including by recognizing an individual and remembering their information when
they return to our Services;
·
Process payment for our Services (as applicable);
·
Facilitate customer support services;
·
Identify, analyze,
and improve our Services, and develop new products or services;
·
Improve and customize our Services to address the needs and interests of our user base and other
individuals we interact with;
·
Test, enhance,
update, and monitor
the Services, or diagnose or fix technology problems;
·
Help maintain
the safety, security,
and integrity of our property
and Services, technology assets and business;
·
To enforce
our Terms of Use, and other terms and conditions that apply to the use
of Services, to resolve
disputes, to carry
out our obligations, and enforce our
rights, and to protect our business interests and the interests and rights of
third parties;
·
Prevent, investigate, or provide notice of fraud or
unlawful or criminal activity;
·
Comply with
contractual and legal obligations and requirements;
·
To fulfill
any other purpose
for which you provide personal
information; and
·
For any other
lawful purpose, or other purpose that you consent to.
Where you choose to contact us, we may need additional information to fulfill
the request or respond to inquiries. We may provide you with additional
privacy-related information where the scope of the inquiry/request and/or personal information we require fall outside the scope of this Privacy
Policy. In that case, the additional Privacy Policy
will govern how we may process the information provided at that time.
·
KanaHealth Entities: We may share personal information with our affiliated entity which also includes our subsidiary.
·
Marketing Providers: We may coordinate and share personal
information with our marketing providers to communicate with individuals
about the Services we make available.
·
Customer Service and Communication Providers: We share personal information with third parties who assist us in providing
our customer services and facilitating our communications with individuals that submit inquiries,
this is done through SendGrid.
·
Third-Party Providers: In addition
to the third parties identified above, we engage other third-party service providers that perform business
or operational services
for us or on our behalf,
such as website hosting, infrastructure provisioning, IT services, analytics services, employment
application-related services, payment processing services, and administrative
services. This also includes third parties that help us provide
certain features on the Services, like third-party sign-in or scheduling features.
·
Survey Providers: We may share personal information with third parties who assist us in delivering our survey offerings and
processing the responses.
·
Ad Networks and Advertising Providers: We work with third-party ad networks and advertising providers to deliver
advertising and personalized content on our Services, on other websites and
services, and across other devices. These parties may collect information
directly from a browser
or device when an individual visits our Services
through cookies or other data collection
technologies. This information is used to provide and inform targeted
advertising, as well as to provide advertising-related services such as
reporting, attribution, analytics, and market
research. For more information, please see the Third Party
Data Collection and Online Advertising, section,
below.
·
Business Partners: From time to time, we may share personal
information with our business partners, or we may allow our
business partners to collect your personal information. Our business partners
may use your information for their own business and commercial purposes,
including to send you any information about their products or services that may be of interest to you.
·
Business Transaction or Reorganization: We may evaluate, take part in, or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose
personal information to a third-party during negotiation of, in connection
with, or as an asset in such a corporate business transaction. Personal
information may also be disclosed in the event of insolvency, bankruptcy, or
receivership.
·
Legal Obligations and Rights: We may disclose personal information to third parties,
such as legal advisors and law enforcement:
o in connection with the establishment, exercise, or defense of legal claims;
o to comply with laws or to respond to lawful requests and legal process;
o to protect our rights and property and the rights and property of others, including to enforce our agreements and policies;
o to detect, suppress, or prevent fraud;
o to protect the health and safety of us and others; or
o as otherwise required by applicable law.
·
With Your Consent:
We may disclose personal
information about an individual to certain other third parties
or publicly with their consent
or direction. For example, with an individual’s consent or direction we may post their testimonial on our Sites
or service-related publications.
We
may participate in interest-based advertising and use third-party advertising companies
to serve you targeted advertisements based on your
browsing history. We may permit third-party online advertising networks, social
media companies, and other third-party services, to collect information about
your use of our online services over
time so that they may play or display ads on our Services,
on other websites or services you may use, and on
other devices you may use. Typically, though not always, the information used
for interest-based advertising is collected through tracking technologies, such
as cookies, web beacons, embedded scripts, location-identifying technologies,
and similar technology, which recognize the device you are using and collect
information, including click stream information, browser type, time and date
you visited the Sites, geolocation, and other information. We may share a
common account identifier (such as a hashed email address or user ID) with our
third-party advertising providers to help identify you across devices. We and
our third-party providers use this information to make the advertisements you
see online more relevant to your interests, as well as to provide
advertising-related services such as reporting, attribution, analytics, and
market research. We may also use services provided by third parties (such as
social media platforms) to serve targeted ads to
you and others on such platforms. We may do this by providing a hashed version
of your email address
or other information to the platform provider. We may engage in the following:
·
Social Media Platforms. We may display targeted advertising to you through
social media platforms, such as Twitter, Instagram, LinkedIn, and other
social media forums.
These companies have interest-based advertising programs that allow us to direct
advertisements to users
who have shown interest in
our services while those users are on the social media platform, or to groups
of other users who share similar traits, such as likely commercial
interests and demographics. We may share a unique identifier, such as a user
ID, with these platform providers or they may collect information from our
website visitors through a first- party pixel, in order to direct targeted
advertising to you or to a custom audience on the social media platform. These
advertisements are governed by the privacy policies of those social media
companies that provide them. If you
do not want to receive targeted ads on your social networks, you may be able to
adjust your advertising preferences through your settings on those networks.
·
Third-Party Providers. We work with a variety of third-party providers to
provide advertising services. For example, we use services to recognize you and
link the devices you use when you visit our Services on your browser or mobile
device, log in to your account on our Services, or otherwise engage with us. We
share a unique identifier, like a user ID, with Google
to facilitate the service (“Analytics Service Providers”). These Analytics
Service Providers allow us to better understand how our users interact with our
Services and to tailor our advertisements and content to you. These Analytics
Service Providers have their own policies viz your data its collection and
processing.
·
We may also
utilize certain forms of display advertising and other advanced features
through Analytics Service Providers .
These features enable us to use first-party cookies (such as the Google
Analytics cookie) and third-party cookies (such as the DoubleClick advertising
cookie) or other third-party cookies together to inform, optimize, and display
ads based on your past visits
to the Services. You may
control your advertising preferences or opt-out by visiting NAI’s online
resources at http://www.networkadvertising.org/choices.
Our Services do not currently respond to Do Not Track
(“DNT”) signals. However, our Services may recognize and respond to other
opt-out preference signals, like the Global Privacy Control (“GPC”) signal. For
more information about the GPC signal, including how to download
a GPC browser plug-in,
please visit their site, at https://globalprivacycontrol.org/.To learn more about interest-based advertising and how you may be able to
opt-out of some of this advertising, you may wish to visit the Digital
Advertising Alliance’s (DAA) resources and/or the Network Advertising
Initiative’s (NAI) online resources, at www.aboutads.info/choices or
http://www.networkadvertising.org/choices. You may also be able to limit interest-based
advertising through the settings menu on your mobile
device by selecting “limit ad tracking” (iOS) or
“opt-out of interest-based ads” (Android). You may also be able to opt-out of some — but not all — interest-based
advertising served by mobile ad networks by visiting http://youradchoices.com/appchoices and
downloading the mobile AppChoices app.
Please note that when you opt out of receiving
interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online services.
It means that the online ads that you
do see from DAA program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance
with, any third parties’ opt-out options or programs
or the accuracy of their statements regarding their
programs. In addition, third parties may still use cookies to collect
information about your use of our
online services, including for analytics and fraud prevention as well as any other purpose
permitted under the DAA’s Principles.
You may control
your information in the following ways:
· Access to Your Device Information. You may control the Services’ access to your device information through your “Settings” app on your device. For instance, you can withdraw permission for the Services to access your network devices and geolocation and to integrate with your other applications.
· Email Communications Preferences. You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in such communications. You may not opt-out of service- related communications (e.g., account verification, transactional communications, changes/updates to features of the Services, technical and security notices).
· Push Notifications. You can stop receiving push notifications from us by changing your preferences in the iOS or Android notifications settings menu.
· SMS Text Messaging. You may opt-out of receiving promotional SMS text messages at any time. Please note that unsubscribing from promotional text messages will not prevent you from SMS texts from KanaHealth directly relating to your use of the Services, such as for account login (e.g., we may send you a security verification code). To unsubscribe from promotional SMS texts, you can reply STOP to any one of our promotional text messages.
· Modifying or Deleting Your Information. If you have any questions about reviewing, modifying, or deleting your information, please submit a request by e-mailing us on compliance@kanahealth.ai. We may not be able to modify or delete your information in all circumstances.
We
store the personal information we collect about you for no longer than
necessary to fulfill the purposes for which it was collected, and in accordance
with our legitimate business interests and applicable law. We may retain personal information for
longer periods of time, until set retention periods and deadlines expire, for
instance where we are required to do so in accordance with legal, tax, and accounting requirements set by
industry or government authorities.
To
determine the appropriate duration of the retention of personal information, we consider the amount,
nature and sensitivity of the personal information, the potential risk of harm
from unauthorized use or disclosure of personal information and if we can attain
our objectives by other means, as well as our legal, regulatory, tax,
accounting, and other applicable obligations.
Once retention of the personal
information is no longer necessary for the purposes outlined above, we will
either delete or deidentify the personal information or, if this is not
possible (for example, because
personal information has been stored in backup archives), then we will securely
store the personal information and isolate it from further processing until
deletion or deidentification is possible.
We
do not knowingly allow individuals under the age of 18 to create accounts that
allow access to our Site, unless permitted under applicable law. Children under
the age of 18 may only use the Site and Services in accordance with the Professional Practice Policies and any personal information relating to those
children will be health information governed by the Notice of Privacy
Practices. If we learn that we have collected the personal information of a
child under 18, or equivalent minimum age depending on jurisdiction, outside the above circumstances, we will take steps to delete the information as soon as possible.
As part of the services, we will collect
the personal information of your child.
Your consent is required for the collection, use, and disclosure
of your child’s information and we have collected your information in order to obtain this consent. We will
not collect your child’s personal information unless you consent. However, if
you do not give your consent, your child may not use our services. We will
obtain your verifiable parental consent to collect your child’s information
through a video conference with you or another mechanism that is permissible
under applicable law.
The
types of personal information we collect directly from a child is:
● any information the child provides to us during an appointment, including health related information, or while logged into the account you created if you provide the child with your credentials (we do not allow children under age 18, or under age 19 in Nebraska, to register directly for an account at this time);
● information about the child’s use of the services, including information sent by the mobile device or computer used by the child (e.g., IP address, unique device identifiers, website usage information, etc.) and information sent by the mobile device(s); and location information.
We use and disclose
that information:
● to provide the services;
● for the operation and administration of our business, including disclosures to our business clients who purchase our services for their employees and dependents;
● for business analytics purposes (with the requisite consent);
● for our own marketing purposes (with the requisite consent);
● to provide customer support to you;
● for account and network security purposes;
● to maintain legal and regulatory compliance; and
● to enforce compliance with our agreements and policies.
Our
Services may include links to third-party websites, plug-ins, and applications.
Except where we post, link to or
expressly adopt or refer to this Privacy Policy,
this Privacy Policy
does not apply
to, and we are not responsible for, any personal
information practices of third-party websites
and online services or the practices of other third
parties. To learn about the personal information practices of third parties, please visit their respective
Privacy Policies.
We
may update this Privacy
Policy from time to time. When we make changes
to this Privacy Policy, we will change the date at the beginning
of this Privacy Policy. If we make material changes
to this Privacy Policy, we will notify individuals by email to their registered email address, by prominent posting
on our Services, or through
other appropriate communication channels. All changes shall be effective from the date of
publication unless otherwise provided.
If you have any questions or requests in connection with this Privacy
Policy or other
privacy-related matters, please submit a request through e-mail on compliance@kanahealth.ai.
For residents of the States of California, Colorado, Connecticut, Montana, Nevada, Oregon, Texas, Utah, and Virginia: These Additional U.S. State Privacy Disclosures (“U.S. Disclosures”) supplement the information contained in our Privacy Policy by providing additional information about our personal data processing practices relating to individual residents of these States. For a detailed description of how we collect, use, disclose, and otherwise process personal data in connection with our services, please visit our Privacy Policy. Unless otherwise expressly stated, all terms defined in our Privacy Policy retain the same meaning in these U.S. Disclosures.
For
the purposes of these U.S. Disclosures, personal information does not include
publicly available information or deidentified, aggregated, or anonymized
information that is maintained in a form that is not capable of being
associated with or linked to you. Additionally, these U.S. Disclosures do not
describe our practices when we process Customer Data as a service provider on
behalf of our clients in accordance
with our contractual agreements with our Customers or when we process Customer
Data on behalf of the
Professionals.
In
accordance with applicable privacy
law, and depending
upon the jurisdiction in which you reside, you may have some or all of the following
rights in respect of your personal information:
● Right of access. You may have the right to obtain:
o confirmation of whether, and where, we are processing your personal information;
o information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods;
o information about the categories of recipients with whom we may share your personal information; and
o a copy of the personal information we hold about you.
● Right of portability. You may have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
● Right to rectification or correction. You may have the right to request the rectification or correction of any inaccurate or incomplete personal information we hold about you.
● Right to deletion or erasure. You may have the right, in some circumstances, to request that we delete erase your personal information.
● Right to restriction. You may have the right, in some circumstances, to request to limit the purposes for which we process your personal information, for example if we use or disclose certain “sensitive” personal information for purposes other than those provided by law, or if the accuracy of certain the personal information is contested by you.
● Right to opt-out of “selling”, “sharing”, and targeted advertising. You may have the right to opt-out of certain processing activities. For example, you may have the right to opt out of the use of your personal information for targeted advertising purposes, or to opt out of the “selling” or “sharing” of your personal information with third parties in certain contexts.
● Right to control over automated decision-making/profiling. You may have the right to request that we not use automated decision-making or profiling for certain purposes.
● Right to withdraw consent. If you have provided consent for the processing of your personal information, you may have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal.
● Right to appeal. In the event that we decline to take action on a request exercising one of your rights set forth above, you have the right to appeal our decision. If your appeal is denied, you may have the right to submit a complaint to your state attorney general by contacting them using the below information.
o Colorado Residents: You may contact the Colorado Attorney General here.
o Connecticut Residents: You may contact the Connecticut Attorney General here.
o Montana Residents: You may contact the Montana Attorney General here.
o Oregon Residents: You may contact the Oregon Attorney General here.
o Texas Residents: You may contact the Texas Attorney General here.
o Virginia Residents: You may contact the Virginia Attorney General here.
● Right to Nondiscrimination. You have the right not to receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.
To submit a request to exercise one of the privacy rights
identified above, you may:
● Click
on Cookie Preferences where
you can adjust
your preferences with respect to what data is collected and shared
through cookies and related technology; or
● Or
e-mail us at ____ to make any
of the above privacy
rights requests.
We
may need to verify your identity before processing your request, which may
require us to request additional personal information from you or require you
to log into your account, if you have one. We will only use personal
information provided in connection with a Consumer Rights Request to process
the request.
In
certain circumstances, we may decline a request to exercise the rights
described above, particularly where we are unable to verify your identity or
locate your information in our systems. If we are unable to
comply with all or a portion of your request, we will explain
the reasons for declining to comply with the request.
Under
California law, a “sale” or “sharing” is broadly defined to include the sharing
of personal information in exchange for anything of value. As a result, our use
of advertising cookies and web beacons may be
considered a “sale” or “sharing”
of personal information under California law. The third parties to whom we sell or share
personal information may use such information for their own purposes
in accordance with their own privacy policies.
You
have the ability to opt out of this sharing at any time,
as discussed below.
You do not need to create
an account with us to exercise your right to opt-out. However, we may ask you
to provide additional personal information so that we can properly
identify you to track compliance with your opt-out request. We will only use personal
information provided in an opt-out request to review and comply with the
request. If you choose not to provide this information, we may
only be able to process your request to the extent we are able to identify you
in our data systems.
To
exercise the right to opt-out, you may submit a request by following the
directions below, or the directions above under
“How to Exercise Your Privacy Rights”:
● Cookies-based Opt-Out (Do Not Sell or Share My Personal Information). To exercise your right to opt- out as it relates to the use of cookies and other tracking technologies for analytics and targeted ads, please make the selections through the Cookie Preferences. Please note this opt out is browser specific. You must reset your preferences if you clear cookies or use a different browser or device.
CALIFORNIA-SPECIFIC
DISCLOSURES
The
following disclosures are made in compliance with the California Consumer
Privacy Act, as amended by the
California Privacy Rights Act (collectively “CCPA”).
We collect personal information from and about consumers for a variety of purposes. To learn more about the types of personal information we collect, the sources from which we collect or receive personal information, and the purposes for which we use this information, please refer to the “Our Collection of Personal Information” and “Our Use of Personal Information” sections of our Privacy Policy.
We
collect the following categories of personal information:
● Identifiers, such as your name and email address. If you are a Professional, we collect copies of your government-issued identification;
● California Customer Records (Cal. Civ. Code § 1798.80(e)), such as your phone number;
● Characteristics of protected classifications under state or federal law, such as your age and gender;
● Commercial Information, such as products and services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
● Internet/Network Information, such as device information, logs and analytics data;
● Geolocation Data, such as your approximate location based upon your IP address;
● Professional/Employment Information, such as licensure information if you are Professional;
● Other Personal Information, including information you submit into the feedback forms and any communications between you and KanaHealth, as well as information we receive from social networking sites; and
● Inferences, such as information generated from your use of the Services reflecting your interests and preferences.
● Sensitive Personal Information: login credentials to access your account with the Services. We do not use or disclose sensitive personal information for purposes beyond those permitted by the CCPA.
We
collect this information from a variety of sources, including directly from
you, from your employer or organization, from our
customers and other users, from our business
partners and affiliates, from your browser or
device when you use our Services, or from third parties
that you permit to share information
with us. Please see the sections above, in the Privacy
Policy for more information about the sources of
personal information we collect.
We
may disclose all of the categories of information we collect with third parties
for a business purpose or as legally required, as described in this Privacy
Policy. The categories of third parties to whom we sell or disclose your
personal information for a business purpose include:
● Service providers and advisors that perform services for us, on our behalf, which may include providing marketing and advertising services, providing mailing or email services, tax and accounting services, data enhancement services, fraud prevention, web hosting, or similar services;
● Select marketing and strategic providers who use this information to market to you, to perform analytics and conduct research, or for other purposes;
● Ad networks and advertising providers, including social networks, to deliver advertising and personalized content to you on our services, on other sites and services you may use, and across other devices you may use, as well as provide advertising-related services such as reporting, attribution, analytics, and market research;
● Social networks for advertising or personalization purposes, or to engage with you.
● Analytics providers to better understand the demographics of our users and visitors, and to personalize, enhance and improve our Service;
● We may also disclose personal information to other third parties at your direction or upon your request, or to comply with legal process or contractual obligations, as described in this Privacy Policy.
We may sell
the following categories of personal information to third parties, subject to your settings and
preferences and your Right to Opt Out:
● Identifiers
● Commercial Information
● Internet / Network Information
In
addition, please see the other sections of the Privacy Policy to learn more
about how third-party advertising networks, social media companies, and other
third-party businesses collect and disclose your personal information directly
from your browser or device through cookies or tracking technologies when you
visit or interact with our Services or otherwise
engage with us.
We
do not sell the personal information and do not have actual knowledge that we
sell the personal information of minors under 16 years of age. Please submit a
request through e-mail compliance@kanahealth.ai to
inform us if you, or your minor child, are under the age of 16.
If you are under the age of 18 and you
want to remove your name or comments from our website or publicly displayed
content, please submit a request through e-mail compliance@kanahealth.ai.
The
California “Shine the Light” law gives residents of California the right under certain circumstances to request information from
us regarding the manner in which we share certain categories of personal
information (as defined in the Shine the Light law) with third parties for
their direct marketing purposes.
This
section supplements the information provided above and describes the additional
personal information we collect when
you apply for a position with us or join our network as a Professional. We may collect the personal
information in the below list in the following ways: directly from you; from publicly available sources, such as
government entities, public records systems, and social media networks; data analytics providers and
data brokers; or as you may otherwise authorize, such as a former employers or
references.
Please
note if you use our Services in the application process, additional information
is collected, as described above. We may collect the personal information categories listed in Cal. Civ. Code § 1798.80(e)
(the California Customer Records Statute) in addition to the categories of
personal information listed below. Items with an asterisk (*) may be considered
“sensitive” personal information according to the CCPA.
● Identifiers*: Government-issued identification numbers, including your Social Security, driver’s license, passport, state identification card, or military identification card numbers;
● Demographics and Protected Classifications*: citizenship, gender, data of birth, age, and other traditionally protected classifications that you chose to disclose, such as race and ethnicity, marital status, sexual orientation, veteran or military status, disability, and medical status;
● Professional or Employment Related Information: credentialing information, professional associations and employment history, including name of employer, position, employer contact information, and associated employment records;
● Educational Information: educational institutions attended, degrees and certifications attained, and other educational or student records, which may include details about attendance, grades, and academic and disciplinary history.
We generally collect this personal information in order to evaluate your application for employment. For more details about how we use and disclose the personal information listed here, please refer to the other parts of Privacy Policy.
***