Privacy Notice

Last Updated: 14 Feb 2025

Prenuvo, Inc. and its affiliates, including Prenuvo of Golden State, P.C., Prenuvo of Minnesota LLC, Prenuvo Radiology PC, Hercules Study PC, Independent Radiology of New York P.C., Vigilance Health Imaging Network, and Lisa Prevention LLC (“Prenuvo”, “us,” “we,” or “our”) are committed to protecting the privacy of your Personal Information (i.e., information reasonably related to a specific individual).

The purpose of this Privacy Notice (“Privacy Notice”) is to explain how we may collect, use, store, disclose, or otherwise process your Personal Information when you interact with us through our websites, emails, social media accounts, mobile applications, and other properties (collectively, our “Digital Properties”) and through other online and offline interactions, such as when you receive a Prenuvo scan at one of our locations. All capitalized terms not defined in this Privacy Notice have the same meaning as in the Prenuvo Terms of Service, available here: https://prenuvo.com/terms/.

Some of the Personal Information we receive or collect about you may be subject to different state and federal privacy laws governing the use and disclosure of Personal or Health Information. We have designed this Privacy Notice to comply with applicable regional privacy laws and descriptions regarding our collection, use and disclosure of Personal Information. In some cases regional laws may be slightly different than what we have outlined here and may further restrict the collection or use of your Personal Information. Please see our Regional Privacy Notice Addenda in addition to this Privacy Notice for additional information that may apply to the region where your scan is performed or you reside.

Employees, job applicants and independent contractors will receive a supplemental HR Privacy Notice that applies to their relationship with Prenuvo. In the event of any conflict or inconsistency with this Privacy Notice, the terms of that supplementary privacy notice will prevail.

We may change this Privacy Policy from time to time, when we do we will update the “Last Updated” date at the top of this Privacy Notice. The updated version will be effective when it is posted. If we make material changes to the way we use or disclose information we collect, we will use reasonable efforts to notify you such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other methods consistent with applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

Categories of Personal Information We May Collect

Identifiers and Contact Information (Including Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))), such as your name, physical characteristics or description, alias, postal/physical address, email address, telephone number, business contact information, account number or other unique personal identifier, device identifiers (such as cookie IDs and IP address), and/or other similar identifiers.

Sensitive Personal Information and/or Protected class and demographic information under California or other applicable regional law, such as Government Identifiers (driver’s license; state identification card; Personal Health Number, or passport number), age (40 years or older) including date of birth; race or ethnic origin; color; ancestry; religious beliefs; information about your health including medications, treatments, substance use, mental and/or physical symptoms, conditions, or disabilities; Medical or Health Insurance information including insurance policy number; sex (including gender, gender identity, gender expression, transgender or non-binary status, pregnancy or childbirth and related medical conditions); content of mail, email, and text messages where we are not the intended recipient.

Records about you, such as preference information (including marketing and purchasing preferences), account settings (including any default preferences), the content, timing and method of communications you have with us, such as online chats, calls, and emails, signatures and physical characteristics or a description of you.

Commercial and Payment information, such as purchase or subscription information, information about products you order or are interested in, payment details, delivery details, and other commercial or financial information; and legal information relating to your transactions, such as fraud checks or flags raised about your transactions, payment card refusals, complaints and information related to their resolution, and legal requests and communications.

Internet or other electronic network activity information, such as your browsing history, search history, and other information regarding your interactions with and use of the Digital Properties. For more information about cookies and other device data, please see the Cookies and Other Tracking Technologies section below.

Non-precise geolocation data, such as your approximate location based on your IP address.

Audio, electronic, visual, or other sensory information, such as photographs taken at events, call recordings, and video recordings.

Inferences drawn from any of the information we collect to assess the level of interest in our products and services based on frequency of visits and contact and determine your preferred frequency for receiving offers. Profile reflecting a person’s preferences; characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sources of Personal Information

“Personal Information” is any data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Data does not include publicly available information, de-identified or aggregated information, or information covered by certain federal and state laws.

We collect Personal Information about you from the following sources:

Directly from you. We may collect Personal Information you provide to us directly, such as when you contact us through our Digital Properties, interact with us in person at one of our locations, sign up for offers or newsletters, communicate with us, place or customize orders, or sign up for an account or other services.

Data collected automatically and through tracking technologies. We may automatically collect information or inferences about you, such as through cookies and other tracking technologies, when you interact with our Digital Properties. This may include information about how you use and interact with our Digital Properties or otherwise interact with us, information about your device, and internet usage information.

From third parties. We may collect Personal Information from third parties, such as physicians and other medical professionals who practice through our affiliated professional companies, service and content providers, business partners, data brokers, lead generators, companies that provide or sell lists of potential customers, social media companies or other parties who interact with us.

From publicly available sources. We may collect Personal Information about you from publicly available sources, such as public profiles and websites. We may combine and use information and make inferences from information that we receive from the various sources described in this Privacy Notice, including third party sources. We may also use or disclose the combined information and inferences for the purposes identified below.

How We Use Personal Information

We may use Personal Information for the following purposes:

To provide you products and services, such as providing and delivering you the goods and services you request, providing customer service; processing or fulfilling orders and transactions, verifying customer information; processing payments; communicating with you about your product, service or subscription; hosting informational webinars; verifying eligibility for certain programs or benefits; responding to requests, complaints, and inquiries; and providing similar services or otherwise facilitating your relationship with us.

For our internal business purposes, such as maintaining or servicing accounts; operating our Digital Properties and customizing the content; maintaining internal business records; enforcing our policies and rules; conducting organizational analysis; completing management reporting; auditing; and/or maintaining records on business activities.

For our internal research and product improvement purposes, such as verifying or maintaining the quality or safety of our products or services; improving our products or services; designing new products and services; evaluating the effectiveness of our advertising or marketing efforts; and debugging and repairing errors with our systems, networks, and equipment.

For legal, safety or security reasons, such as complying with legal requirements, processes, or orders; fulfilling reporting and similar requirements; complying with government inspections and other requests from government or other public authorities; pursuing legal rights and remedies; investigating and responding to claims against us and our customers and employees; protecting our, your, our customers’, and other individuals’ safety, property or rights; addressing security and health and safety issues (including managing spread of communicable diseases) and malicious, deceptive, fraudulent, or illegal activity; and receiving legal advice or approval.

For marketing and targeted advertising, such as marketing our products or services or those of our affiliates, business partners, or other third parties. For example, we and our business partners may use Personal Information we collect to personalize advertising to you on the Prenuvo website or others, to analyze interactions with our email communications or website areas viewed, to develop product, brand or services audiences (including by identifying you across devices/sites) to better target our advertising to you, or to send you newsletters, surveys, questionnaires, promotions, or information about events or webinars.

Prenuvo will not use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing you notice of the intended use and the rights that may apply to you.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by applicable regional law.

Sharing, Disclosure and Selling Personal Information

We understand the importance of protecting the confidentiality of your information and limit our disclosure of your Personal and/or Health Information to the following categories of third parties:

• Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership.
• Service providers that work on our behalf to provide the products and services you request or support our relationship with you, such as IT providers, internet service providers, web hosting providers, data analytics providers, and companies that provide business support services, financial administration, or event organization.
• Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
• Other entities in connection with a corporate transaction, such as if we, or some or all of our assets, are acquired by another entity, including through a sale in connection with bankruptcy or other forms of corporate change.
• Business partners that may use Personal Information for their own purposes, such as companies that operate cookies and other tracking technologies, social media companies, data brokers, marketing and advertising partners, and other business partners for their own marketing, research, or analytics purposes. Where required by law, we will obtain your consent prior to disclosing your Personal Information to our business partners. Where recipients use your Personal Information for their own purposes independently from us, we are not responsible for their privacy practices or Personal Information processing policies.
• Entities to which you have consented to the disclosure.

We disclose your Personal Information to the categories of third parties listed above for the following business purposes:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• Helping to ensure security and integrity of our Services and IT infrastructure to the extent the use of the Personal Information is reasonably necessary and required for these purposes.
• Debugging to identify and repair errors that impair existing intended functionality.
• Short–term use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us. Our agreements with third parties generally prohibit your Personal Information from disclosure to another third-party and from using your Personal Information to build a profile about you or otherwise alter your experience outside your current interaction with us.
• Performing services on behalf of us, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of us.
• Providing advertising and marketing services to Consumers.
• Undertaking research and publications for technological development and demonstration in the health care space.

We do not use or disclose your Sensitive Personal Information, including Personal or Protected Health Information for any purpose other than the following:

• To perform services on behalf of us, such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of us.
• To perform the services or provide the goods reasonably expected by an average Consumer who requests such goods or services.
• To detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted Personal Information, provided that our use of your Personal Information is reasonably necessary and proportionate for such purposes.
• To resist malicious, deceptive, fraudulent, or illegal actions directed at Prenuvo and to prosecute those responsible for those actions, provided that our use of your Personal Information is reasonably necessary and proportionate for this purpose.
• To ensure the safety of natural persons, provided that our use of your Personal Information is reasonably necessary and proportionate for this purpose.
• To verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by us.

In addition to the above, we may disclose any or all categories of Personal Information to any third-party (including government entities and/or law enforcement entities) as necessary to:

• Comply with federal, state, provincial, or local laws, or to comply with a court order or subpoena to provide information.
• Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, provincial, state, or local authorities.
• Cooperate with law enforcement agencies concerning conduct or activities that we (or one of our service providers) believe may violate federal, state, provincial, or local law.
• Comply with certain government agency requests for emergency access to your Personal Information if you are at risk or danger of death or serious physical injury.
• Enforce or apply our Terms of Use and other agreements or policies.
• Protect your, our, our customers’, or other third parties’ safety, property, or rights.
• Exercise or defend legal claims.

“Sale” of Your Personal Information for Monetary or Other Valuable Consideration

We do not sell Personal Information as the term “sell” is commonly understood to require an exchange for money. However, using advertising and analytics cookies on our Website is considered a “sale” of Personal Information as the term “sale” is broadly defined in some regional legislation, such as the CCPA in California, to include both monetary and other valuable consideration. Using this broad definition, our “sale” is limited to our use of third-party advertising and analytics cookies and their use in providing behavioral advertising and their use in understanding how people use and interact with our Website(s). Our “sale” of your Personal Information is subject to your right to opt-out of those sales (see Exercising Your Privacy Rights), however, if you reside in certain regions including the United Kingdom, European Economic Area and Quebec, Canada you must consent to sharing of your Personal Information before we can use your information for these purposes.

“Sharing” of Your Personal Information for Cross-Context Behavioral Advertising

Prenuvo may “share” your Personal Information for the purpose of cross-context behavioral advertising, subject to your right to opt out of that sharing, or consent to this sharing if you reside in certain regions including the United Kingdom, the European Economic Area and Quebec, Canada. Our “sharing” for the purpose of cross-context behavioral advertising would be limited to our use of third-party advertising cookies and their use in providing you cross-context behavioral advertising (i.e., advertising on other websites or in other mediums). When the recipients of your Personal Information disclosed for the purpose of cross-context behavioral advertising are also permitted to use your Personal Information to provide advertising to others, we also consider this disclosure as a “sale” for monetary or other valuable consideration under the the definition of “sell” above. We do not knowingly sell or share any Personal Information of minors under the age of 18.

Below you will find a list of the categories of Personal Information we have collected and with the categories of third parties with whom it was sold, shared, or disclosed for a business purpose in the past 12 months.

Personal Identifiers

Categories of Third Parties With Whom We Disclose Identifiers for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Identifiers are Sold or Shared

(1) Advertisers, ad platforms and networks, and social media platforms, (2) Third parties whose cookies and tracking tools we use as described in our Cookies Policy, (3) Commercial data partners to whom we make information available for their own marketing purposes, (4) Partners who work with us on promotional or sponsorship opportunities, including co-branded products and services

Personal Information

Categories of Third Parties With Whom We Disclose Personal Information for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Personal Information are Sold or Shared

(1) Advertisers, ad platforms and networks, and social media platforms, (2) Third parties whose cookies and tracking tools we use as described in our Cookies Policy, (3) Commercial data partners to whom we make information available for their own marketing purposes, (4) Partners who work with us on promotional or sponsorship opportunities, including co-branded products and services

Characteristics of Protected Classifications

Categories of Third Parties With Whom We Disclose Characteristics of Protected Classifications for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Characteristics of Protected Classifications are Sold or Shared

Not Sold or Shared

Payment Information

Categories of Third Parties With Whom We Disclose Payment Information for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Payment Information are Sold or Shared

Not Sold or Shared

Commercial Information

Categories of Third Parties With Whom We Disclose Commercial Information for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Commercial Information are Sold or Shared

(1) Advertisers, ad platforms and networks, and social media platforms (2) Third parties whose cookies and tracking tools we use as described in our Cookies Policy. (3) Commercial data partners to whom we make information available for their own marketing purposes (4) Partners who work with us on promotional or sponsorship opportunities, including co-branded products and services.

Internet or Other Electronic Network Activity

Categories of Third Parties With Whom We Disclose Internet or Other Electronic Network Activity for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Internet or Other Electronic Network Activity are Sold or Shared

(1) Advertisers, ad platforms and networks, and social media platforms (2) Third parties whose cookies and tracking tools we use as described in our Cookies Policy. (3) Commercial data partners to whom we make information available for their own marketing purposes (4) Partners who work with us on promotional or sponsorship opportunities, including co-branded products and services

Geolocation Data

Categories of Third Parties With Whom We Disclose Geolocation Data for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Geolocation Data are Sold or Shared

(1) Advertisers, ad platforms and networks, and social media platforms (2) Third parties whose cookies and tracking tools we use as described in our Cookies Policy. (3) Commercial data partners to whom we make information available for their own marketing purposes (4) Partners who work with us on promotional or sponsorship opportunities, including co-branded products and services

Audio, Electronic, Visual, or Other Sensory Information

Categories of Third Parties With Whom We Disclose Audio, Electronic, Visual, or Other Sensory Information for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Audio, Electronic, Visual, or Other Sensory Information are Sold or Shared

Not Sold or Shared

Inferences

Categories of Third Parties With Whom We Disclose Inferences for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Inferences are Sold or Shared

(1) Advertisers, ad platforms and networks, and social media platforms (2) Third parties whose cookies and tracking tools we use as described in our Cookies Policy. (3) Commercial data partners to whom we make information available for their own marketing purposes (4) Partners who work with us on promotional or sponsorship opportunities, including co-branded products and services

Sensitive Personal Information

Categories of Third Parties With Whom We Disclose Sensitive Personal Information for a Business Purpose

(1) Affiliates and subsidiaries, (2) Service providers, (3) Professional consultants, (4) Vendors necessary to complete transactions you request, (5) Law enforcement, government, agencies, and other recipients for legal, security, or safety purposes, (6) In connection with a corporate transaction, (7) Entities to which you have consented to the disclosure

Categories of Third Parties to Whom Sensitive Personal Information is Sold or Shared

Not Sold or Shared

Cookies and Other Tracking Technologies

See our Cookies and Tracking Technologies Notice located here.

Your Rights Regarding Your Personal Information

Although different regions have different privacy related rights, we have standardized the list of requests you can submit in order to meet more comprehensive regulations such as in Europe, Quebec and California. You may have some, or all, of the rights listed below in relation to Personal Information that we have collected about you. Please note that these rights are not absolute, and in certain cases, we may decline your request as permitted by law. If you are a resident of a region that has its own Privacy Laws, please see our Regional Privacy Rights Addenda for information in addition to this Privacy Notice and your rights listed below.

Right to Access / Know. You have the right to request information about the categories of Personal Information we have collected about you. This includes: (a) the categories of Personal Information we have collected about you; (b) the categories of sources from which that Personal Information came from; (c) our purposes for collecting this Personal Information; (d) the categories of third parties with whom we have shared your Personal Information; and (e) if we have “sold” or “shared” or disclosed your Personal Information, a list of categories of third parties to whom we “sold” or “shared” your Personal Information, and a list of the categories of third parties to whom we disclosed your Personal Information to. You may make a Right to Know or a Data Portability Request a total of two (2) times within a 12-month period at no charge.

Right to Delete.  You have the right to request that Prenuvo delete the Personal Information that we collected from or about you, and retained, subject to certain exceptions. Once we receive and confirm your Request, we may delete your Personal Information entirely or we may anonymize or aggregate your information such that it no longer reasonably identifies you, and may use it to improve our Services (and direct our service providers to do the same), unless a legal requirement or exception applies. Some exceptions to your right to delete include, but are not limited to, if we are required to retain your Personal Information to complete the transaction or provide you the goods and services for which we collected the Personal Information or otherwise perform under our contract with you, to detect security incidents or protect against other malicious activities, and to comply with legal obligations, including those related to medical record retention. We may also retain your Personal Information for other internal and lawful uses that are compatible with the context in which we collected it. In addition, if you ask us to delete your information, you may no longer be able to access or use some of our Services.

Right to Correct / Correction. You have the right to request that we correct inaccurate Personal Information we collect and/or maintain about you.

Right of Portability / Access to Specific Pieces of Information. You also have the right to request that Prenuvo provide you with a copy of the specific pieces of Personal Information that we have collected about you, including any Personal Information that we have created or otherwise received from a third-party about you. If you make a Data Portability Request electronically, we will provide you with a copy of your Personal Information in a portable and, to the extent technically feasible, in a format that allows you to send the Personal Information to another third-party. In response to a Data Portability Request, we will not disclose your driver’s license number or other government-issued identification number, or your account password. We will also not provide this information if the disclosure would create a substantial, explainable, and unreasonable risk to your Personal Information, your account with Prenuvo, or the security of our systems or networks. If we are unable to disclose certain pieces of your Personal Information, we will describe generally the types of Personal Information that we were unable to disclose and provide you a description of the reason we are unable to disclose it. You have the right to receive a copy of the Personal Information we hold about you and to request that we transfer it to a third party. You may make a Right to Know or a Data Portability Request a total of two (2) times within a 12-month period at no charge.

Right to Withdraw Consent, Limit or Object to Processing. Where we rely on consent to process your Personal Information, including Sensitive Personal Information, you may have the right to withdraw this consent at any time. Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and that where you withdraw your consent, we may not be able to deliver the expected service to you. Additionally, have the right to ask us to stop, suspend or restrict our processing of Personal Information. Certain laws may allow you to object to or limit the manner in which we process some of your information, including the ways in which we use or share it. For example, you may have these rights if the processing was undertaken without your consent and without a legitimate business interest (although we may not be required to cease or limit processing in cases where our interests are balanced against your privacy interests).

Right to Not Have a Decision Made Solely on Automated Decision-Making. You may have the right to request that decisions made about you are not based solely on automated processing, including profiling if that decision produces legal effects about you or significantly affects you. Please note that Prenuvo does not make solely automated decisions about Individuals.

Right to Opt Out of Sales/Sharing/Targeted Advertising. You may have the right to opt out of (i) the sale or sharing of your Personal Information, (ii) targeted advertising, and cross context behavioral advertising, which is showing advertising on other websites or other media based on your browsing history with our Website. If you reside in certain regions including the United Kingdom, European Economic Area and Quebec, Canada you must consent to sharing of your Personal Information before we can use your Personal Information for these purposes.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your rights. Unless permitted regional legislation, we will not do any of the following as a result of you exercising your privacy rights: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services; or (d) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Right to Regulator Contact. You may have the right to contact or file a complaint with regulators or supervisory authorities about our processing of information. To do so, please contact your local data protection or consumer protection authority.

Exercising Your Privacy Rights

Only you, or an Authorized Agent that you authorize to act on your behalf, may make a Privacy Request related to your Personal Information. To designate an Authorized Agent, see Authorized Agents below. If you believe any of your Personal Information is inaccurate or incomplete, you may review and correct some information about yourself by logging into your online account with us and visiting your “Profile” page or you may submit a request to correct it by emailing us at hello@prenuvo.com or phoning our team at 1-833-773-6886.

Making a Privacy Request does not require you to create an account with us. However, we do consider requests made through your password protected Prenuvo account to be verified when the request relates to Personal Information associated with the logged in account.

To exercise the rights described above, please submit a request (a “Consumer Request” or “Data Subject Request”) to us by:

• Completing the Data Subject Request form located here;
• Emailing us at privacy@prenuvo.com; or
• Phoning us at 1-833-773-6886

If you or your Authorized Agent submit a Consumer or Data Subject Request online, we may use a two-step process in order to confirm the request. This process may include verifying your request by contacting you via the phone number or email address we have for you in our records, therefore, by making a Consumer or Data Subject Request, you consent to us contacting you through one or more of these ways.

All Consumer or Data Subject Requests must:

• Provide enough information so we can verify you are the person about whom we collected Personal Information or an Authorized Agent of such a person. This may include:
  
  • Filling out an interactive webform; or
  • Verifying one or more of the following:
    
    • full first & last name;
    • date of birth;
    • mailing address on file;
    • phone number on file;
    • email address; and/or
    • any other appropriate individualized data point.
• Describe your request with enough detail, including the Privacy Right you would like to exercise, so we can understand, evaluate, and respond to your request.

We will only use Personal Information provided in a Consumer Request or Data Subject Request to verify your identity or authority to make the request. If we cannot verify your identity or authority to make the request and confirm which Personal Information relates to you or the individual that you are making the request for, we will not respond or provide you with any Personal Information.

We reserve the right to charge a reasonable fee or take other appropriate action in response to requests from a Data Subject that are unfounded, excessive, or repetitive.

Authorized Agents

You may authorize your agent to exercise your rights, under the CCPA or other applicable regional law, on your behalf by registering your agent with the California Secretary of State or other similar regional authority or by providing them with power of attorney to exercise your rights (an “Authorized Agent”). We may request that your Authorized Agent submit proof of identity and proof of authorization to exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

Communication Preferences

Marketing, Promotional or Sales Messages

• Phone: If you have provided your phone number through one of our information request, lead or wait list forms, we may phone you to discuss the Prenuvo scan with you. These calls are generally informational but can include booking a Prenuvo scan and making payments. If you no longer want to receive phone promotional phone calls from Prenuvo, please inform the person that contacted you or by submitting a Privacy Rights request.
• Email: From time to time, Prenuvo may also send you marketing emails to provide you with free newsletters, surveys, offers, and other promotional materials. If you wish to stop receiving marketing emails from us, you can opt out by clicking the unsubscribe link at the bottom of any marketing email or by submitting a Privacy Rights request. Please keep in mind that opting out of promotional messages does not mean that we will not contact you by email about your account, services we have provided or other transactions with us.
• SMS, Text or Instant Messaging: You may opt in to receive marketing, promotional and/or sales text messages when requesting more information about our services. Depending on your level of engagement through SMS, you can expect to receive approximately 3 messages per week. If you decide you no longer want to receive these messages, you can opt out of receiving future Prenuvo text messages by replying “STOP.” If you send us a text message asking a question, our team may still respond to the specific question even if you have opted out of promotional text messages.

Transactional Messages

• Phone: We may phone you about the Prenuvo services you have purchased or received. These calls may include payment processing, booking confirmations or updates, appointment reminders, status updates and to follow with you before, and after, your Prenuvo scan. Please be aware that you cannot opt out of transactional phone calls as they are the primary way we communicate and collect information required to provide services to you.
• Email: We may send you periodic emails that relate to the Prenuvo services you have purchased or received. These messages may include booking confirmations or updates, password reset notifications, appointment reminders, status updates and messages to follow with you before, and after, your Prenuvo scan. Please be aware that you cannot opt out of transactional emails as they are the primary way we communicate status updates or changes about your Prenuvo scan.
• SMS, Text or Instant Messaging: We may send you SMS messages to communicate time sensitive reminders or tips relating to your Prenuvo scan. These messages are generally sent in the days leading up to your scan to help make the process as smooth as possible and shortly after your scan in case we need to contact you afterwards. You can opt out of transactional SMS messages at any time by replying “STOP” to any Prenuvo text messages and we will update your preferences right away.

Your Account and Contact Information

If you have booked or had a scan with Prenuvo, you can access your contact information and preferences by logging into https://prenuvo.com going to the “Profile” page. You can edit your account information as necessary, this includes your email address, name, phone number, mailing address, and you can adjust your communication preferences. When you update your account information, we may keep a copy of your previous account details for our records and to prevent fraud or other activities that violate our terms, policies and agreements.

Notice of CCTV Use at Prenuvo Clinics

At Prenuvo, the safety and security of our patients, staff, and facilities are of the highest importance. We use Closed-Circuit Television (CCTV) systems in our common areas to monitor and ensure the security of our clinics. The video footage captured is accessible only by authorized Prenuvo staff and is reviewed solely for incident investigations. We do not share this footage unless required by applicable law. The retention of this information is limited to the duration necessary to maintain security at these locations.

We are committed to handling all video surveillance data responsibly and in compliance with relevant privacy laws and regulations. Your safety, privacy and security are our priorities.

Data Security and Data Retention

We maintain reasonable security procedures and technical and organizational measures to protect your Personal Information against accidental or unlawful destruction, loss, disclosure or use. However, no method of data transmission or method of physical or electronic storage can be guaranteed to be perfectly secure. There is some risk that an unauthorized third party may find a way to circumvent our security or that a transmission of your information over the Internet will be intercepted. Prenuvo has implemented and continues to improve measures to provide a level of security appropriate to the risks of processing your information. You acknowledge and accept that we cannot guarantee the security of your information.

Aside from our efforts in securing your information, it is your responsibility to protect the security of your account credentials, keep your password confidential and to take reasonable precautions to protect the Personal Information you send and receive from us. If you notice suspicious activity or believe that your account may have been compromised in some way, please contact us immediately at privacy@prenuvo.com.

Your Personal Information will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to retain it for longer by applicable law. This includes retaining your Personal Information to provide you with the products or services you have requested and interact with you; maintain our business relationship with you; improve our business over time; ensure the ongoing legality, safety and security of our services and relationships; or otherwise in accordance with our internal retention procedures. Once you have terminated your relationship with us, we may retain your Personal Information in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts, legal or regulatory requirements or for other legitimate business purposes, such as to enable easier future user onboarding, demonstrate our business practices and contractual obligations, or provide you with information about our products and services in case of interest. If you would like to know more about the retention periods applicable to your Personal Information, you can contact us using details provided in the Contact Information section below.

Children’s Privacy

Our Digital Properties are not directed at, marketed to, nor intended for, children under 18 years of age. As a general rule, we do not knowingly collect any information, including Personal Information, from children under 18 years of age. If you believe that we have inadvertently collected Personal Information from a child under the age of 18, please contact us at the address in the Contact Information section below, and we will take prompt steps to investigate and appropriately address the related information.

External Links

Our Digital Properties may contain links to other third party sites or online services that we do not control, including those embedded in third party advertisements or information. We are not responsible for the privacy practices or data collection policies of such third-party services. You should consult the privacy notices of those third-party services or websites for details on their practices.

International Transfers of Personal Information

The Personal Information that we collect will be transferred to, stored at/processed in, or accessed from countries outside the jurisdiction in which you are based in, for the purposes described in this Privacy Notice. Specifically, we have servers for that store and process your information in the United States and Canada in addition to our physical clinic locations. By using our Services you understand that we may transfer of your Personal Information to third parties (if any) in order to engage with, and provide our services to you. This may include the cross-border transfer of your information to any country or region where we have databases or affiliates and, in particular, to the jurisdictions specified herein.

For such transfers of data outside the relevant region we use applicable safeguards.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com.

For any other questions, please send an email to hello@prenuvo.com or phone us at 1-833-773-6886.

Regional Privacy Notice Addenda

Although we have created our Privacy Notice with an inclusive approach to regional laws and regulations, some regions require that specific notices, language and rights be made available to you. The Regional Privacy Notice Addenda are intended to (the “Regional Privacy Notice Addenda”) supplement the information contained in Prenuvo’s Privacy Notice to ensure we meet these requirements. The Regional Privacy Notice Addenda apply to all visitors of our Website and users of our Services who reside in the applicable regions (“Consumers” or “you”). All capitalized terms not otherwise defined in these Regional Privacy Notice Addenda have the same meaning as set forth in the Prenuvo’s Privacy Notice, available here: https://prenuvo.com/privacy/.

Changes to the Regional Privacy Notice Addenda

Prenuvo may amend the Regional Privacy Notice Addenda at our sole discretion and at any time. When we make changes to any of the Regional Privacy Notice Addenda, we will post the updated addendum on the Website and update the addendum’s last updated date. Your continued use of our website and services following the posting of changes to our Regional Privacy Notice Addenda constitutes your acceptance of such changes.

California Privacy Addendum

Last Updated: 14 Feb 2025

Scope of this California Privacy Addendum

This Privacy Addendum for California Residents (the “California Privacy Addendum”) supplements the information in our Privacy Notice for residents of California. We adopt this notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”) and any terms defined in the CCPA have the same meaning when used in this notice.

This California Privacy Addendum applies to information that we collect on our Website and when you use our Services that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your device (“Personal Information”). However, publicly available information that we collect from government records and deidentified or aggregated information (when deidentified or aggregated as described in the CCPA) are not considered Personal Information and this California Privacy Addendum does not apply to such information.

This California Privacy Addendum does not apply to employment-related Personal Information collected from our California-based employees, job applicants, contractors, or similar individuals (“Personnel”). Please contact your People and Culture representative if you are part of our California Personnel and would like additional information about how we process your Personal Information. This California Privacy Addendum also does not apply if you are a service provider or have a business-to-business relationship with us.

This California Privacy Addendum does not apply to certain Personal Information that is excluded from the scope of the CCPA, such as:

• Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and
• Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

Categories, Collection, Sources and Use of Personal Information Collected

Please refer to our Privacy Notice for details regarding the categories, sources and use of Personal Information about our Consumers collected over the past twelve (12) months.

To Whom Do We Sell or Share Your Personal Information

As noted in our Privacy Notice, we do not sell Personal Information as the term “sell” is commonly understood to require an exchange for money. However, the use of advertising and analytics cookies on our Website is considered a “sale” of Personal Information as the term “sale” is broadly defined in the CCPA to include both monetary and other valuable consideration. Using this broad definition, our “sale” is limited to our use of third-party advertising and analytics cookies and their use in providing behavioral advertising, and their use in understanding how people use and interact with our Website, App, or Services. Our “sale” of your Personal Data in this matter is subject to your right to opt-out of those sales.

Although we do not “sell” Personal Information for money, we engage in routine practices with our Digital Properties involving third parties that could be considered a “sale” or “sharing” (i.e., for targeted advertising). We do not knowingly sell or share any Personal Information of minors under the age of 16.

We only use and disclose Sensitive Personal Information for the following essential business purposes: (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) for short-term, transient use, including non-personalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) for purposes that do not infer characteristics about you.

Please refer to our Privacy Notice for details regarding the sale of Personal Information about our Consumers over the past twelve (12) months.

Consumer Data Requests and Exercising Your CCPA Privacy Rights

The rights listed below have been incorporated into our general Prenuvo Privacy Notice please see prenuvo.com/privacy. For completeness, we have included the list of the CCPA specific rights below.

The CCPA provides California residents with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent.

• Right to Know. You have the right to request that Prenuvo disclose certain information to you about our collection and use of your Personal Information over the past 12 months. This includes: (a) the categories of Personal Information we have collected about you; (b) the categories of sources from which that Personal Information came from; (c) our purposes for collecting this Personal Information; (d) the categories of third parties with whom we have shared your Personal Information; and (e) if we have “sold” or “shared” or disclosed your Personal Information, a list of categories of third parties to whom we “sold” or “shared” your Personal Information, and a separate list of the categories of third parties to whom we disclosed your Personal Information to. You must specifically describe if you are making a Right to Know request or a Data Portability Request (discussed next). If you would like to make both a Right to Know Consumer Request and a Data Portability Consumer Request you must make both requests clear in your request. If it is not reasonably clear from your request, we will only process your request as a Right to Know request. You may make a Right to Know or a Data Portability Consumer Request a total of two (2) times within a 12-month period at no charge.
• Access to Specific Pieces of Information (Data Portability). You also have the right to request that Prenuvo provide you with a copy of the specific pieces of Personal Information that we have collected about you, including any Personal Information that we have created or otherwise received from a third-party about you. If you make a Data Portability Consumer Request electronically, we will provide you with a copy of your Personal Information in a portable and, to the extent technically feasible, readily reusable format that allows you to transmit the Personal Information to another third-party. You must specifically describe if you are making a Right to Know request or a Data Portability request. If you would like to make both a Right to Know Consumer Request and a Data Portability Consumer Request you must make both requests clear in your request. If it is not reasonably clear from your request, we will only process your request as a Right to Know request. In response to a Data Portability Consumer Request, we will not disclose your driver’s license number or other government-issued identification number, or your account password. We will also not provide this information if the disclosure would create a substantial, articulable, and unreasonable risk to your Personal Information, your account with Prenuvo, or the security of our systems or networks. We will not disclose any Personal Information that may be subject to another exception under the CCPA. If we are unable to disclose certain pieces of your Personal Information, we will describe generally the types of personal information that we were unable to disclose and provide you a description of the reason we are unable to disclose it. You may make a Right to Know or a Data Portability Consumer Request a total of two (2) times within a 12-month period at no charge.
• Correction. You have the right to request that we correct any incorrect Personal Information about you to ensure that it is complete, accurate, and as current as possible. You may review and correct some Personal Information about yourself by logging into the Website and visiting your “Account Details” page. In some cases, we may require you to provide reasonable documentation to show that the Personal Information we have about you is incorrect and what the correct Personal Information may be. We may also not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect or if the Personal Information is subject to another exception under the CCPA.
• Deletion. You have the right to request that Prenuvo delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your Consumer Request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies pursuant to the CCPA. Some exceptions to your right to delete include, but are not limited to, if we are required to retain your Personal Information to complete the transaction or provide you the goods and services for which we collected the Personal Information or otherwise perform under our contract with you, to detect security incidents or protect against other malicious activities, and to comply with legal obligations, including those related to medical record retention. We may also retain your Personal Information for other internal and lawful uses that are compatible with the context in which we collected it.
• Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not do any of the following as a result of you exercising your CCPA rights: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services; or (d) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. We may, however, offer you certain financial incentives as described below.

Your Choices Regarding our “Sale” or “Sharing” of Your Personal Information

Our Digital Properties and Services are not sold to or intended for use by people under the age of 18. That said, if you are 16 years old or older, you have the right to opt-out of our sale and/or sharing of your Personal Information.  If you are under 16 years old, you or your legal guardian may opt-in to our sale or sharing of your Personal Information.

“Sale” of Your Personal Information

If you are 16 years of age or older, you have the right to direct us to not sell your Personal Information for monetary or other valuable consideration at any time (the “right to opt-out”). Consumers who opt-in to Personal Information sales may opt-out of future sales at any time.

“Sharing” of Your Personal Information

If you are 16 years of age or older, you have the right to direct us to not share your Personal Information for the purposes of cross-context behavioral advertising, which is showing advertising on other websites or other media based on your browsing history with our Website (the “right to opt-out”). We do not share the Personal Information of Consumers we know are less than 16 years of age for this purpose.

How You May Opt-Out of Our Sale or Sharing of Your Personal Information

You do not need to create an account with us to exercise your opt-out rights. You may be required to provide us with additional contact information so that we may verify your request to opt-in to the sale of your Personal Information. We will only use Personal Information provided in an opt-out request to review and comply with the request.

To opt out of our Sale or Sharing of your Personal Information, please refer to the section “Exercising Your Privacy Rights” in our Privacy Notice for instructions on how to submit such a request.

You (or your authorized representative) may also exercise the right to opt-out of the “sale” of your Personal Information for monetary or other valuable consideration and of “sharing” your Personal Information for the purposes of cross-context behavioral advertising by adjusting your cookie preferences via our Cookie Banner through the “Manage Cookies” link at the bottom of the Website, or by setting your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain parts of our Website or other websites. You can find more information about cookies at http://www.allaboutcookies.org.

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales. However, you (or your Authorized Agent) may change your mind and opt back into the sale of Personal Information at any time by using the “Manage Cookies” link at the bottom of the Website.

Browser Privacy Control Signals

You may also exercise your right to opt-out of the “sale” of your Personal Information for monetary or other valuable consideration and “sharing” your Personal Information for the purposes of cross-context behavioral advertising by setting the privacy control signal on your browser, if your browser supports it. We currently recognize and support the following privacy signals sent by browsers:

• Global privacy control (for more information on how to configure your browser to send this signal, please see https://globalprivacycontrol.org/).
• Location Information. You may be able to adjust the settings of your device so that information about your physical location is not sent to us or third parties by (a) disabling location services within the device settings; or (b) denying certain websites or mobile applications permission to access location information by changing the relevant preferences and permissions in your mobile device or browser settings. Please note that your location may be derived from your WiFi, Bluetooth, and other device settings. See your device settings for more information. We will not share data obtained through our Transactional or Marketing text message programs, including your phone number or location information, with third parties for their marketing purposes.

When we receive one of these privacy control signals, we will opt you out of any further “sale” or “sharing” of your Personal Information when you interact with our Website through that browser and on that device. In the event you have affirmatively opted-in to our “sale” and “sharing” of your Personal Information as described above and we receive a privacy control signal from your browser, we will request further instructions from you before you are opted out of any further “sale” or “sharing.” In the event you participate in a financial incentive program as described below that requires the “sale” or “sharing” of your Personal Information and we receive a privacy control signal, we will request that you confirm that you no longer wish to participate in the financial incentive program or that you wish us to ignore the privacy control signal.

When we receive a privacy control signal, we may also process it in a frictionless manner, which prohibits us from: (a) charging you a fee or requiring any valuable consideration; or (b) changing your experience with our products and services. We will also display a banner to indicate your choice to opt-out of the “sale” or “sharing” of your personal information. You may configure the privacy control signal to operate in a frictionless manner by consulting the documentation for your browser or plug-in that provides the privacy control signal.

Exercising Your CCPA Privacy Rights

Please refer to our Privacy Notice for details about Exercising your Privacy Rights.

Authorized Agents

You may authorize your agent to exercise your rights under the CCPA. Please refer to the Exercising Your Privacy Rights - Authorized Agents in our Privacy Notice for details about how to work with an Authorized Agent to submit a Privacy Rights request.

Personal Information Retention Periods

Please refer to our Privacy Notice for details regarding the retention of Personal Information about our Consumers.

Other California Privacy Rights

Shine the Light

California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Website that are California residents and who provide Personal Information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared your Personal Information with for the immediately prior calendar year (e.g., requests made in 2024 will receive information regarding such activities in 2023). You may request this information once per calendar year. Please refer to the section “Exercising Your Privacy Rights” in our Privacy Notice for instructions on how to submit such a request.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com. 

For any other questions, please send an email to hello@prenuvo.com or phone us at 1-833-773-6886.

Canada Privacy Addendum

Last Updated: 14 Feb 2025

Scope of this Canada Privacy Addendum

This Privacy Addendum for Canada Residents (the “Canada Privacy Addendum”) supplements the information contained in Prenuvo’s Privacy Notice and applies solely to all visitors of our Website, users of our Services, and others acting only in an individual or household context, each of whom resides in the Country of Canada (“Individuals” or “you”). We adopt this Canada Privacy Addendum to comply with the Alberta Personal Information Protection Act (“AB PIPA”) British Columbia Personal Information Protection Act (“BC PIPA”), Quebec Law 25 (“QC Law 25”)the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and any terms defined in AB PIPA, BC PIPA, QC Law 25 or PIPEDA have the same meaning when used in this Canada Privacy Addendum. We may update this Canada Privacy Addendum at any time as necessary in the event of changes to the relevant regional regulations.

This Canada Privacy Addendum applies to information that we collect on our Website and when you use our Services (both online and offline) that is linked or reasonably linkable to an identified or identifiable Individual or device that is linked or reasonably linkable to one or more Individuals in a household (“Personal Information”). However, publicly available information that we collect from government records and deidentified information are not considered Personal Information and this Canada Privacy Addendum does not apply to such information.

Personal Data We Collect About You

Please refer to the section “Categories of Personal Information We May Collect” in our Privacy Notice for details regarding the types of Personal Data we collect about you.

Sources of Personal Data

Please refer to the section “Sources of Personal Information” in our Privacy Notice for details regarding how we collect Personal Data about you.

Use of Your Personal Data

Please refer to the section “How We Use Personal Information” in our Privacy Notice for details regarding the use of your Personal Data.

Your Rights and Choices

We have designed our general Privacy Rights and Choices to align closely with the Canada Privacy Rights listed below.

The AB PIPA, BC PIPA and PIPEDA provide applicable residents with specific rights regarding their Personal Information. This section describes your AB PIPA/BC PIPA/PEPIDA rights that you may exercise yourself or through your Authorized Agent.

• Right to Access: You have the right to request information about the categories of Personal Information we have collected about you. This includes: (a) the categories of Personal Information we have collected about you; (b) the categories of sources from which that Personal Information came from; (c) our purposes for collecting this Personal Information; (d) the categories of third parties with whom we have shared your Personal Information; and (e) if we have “sold” or “shared” or disclosed your Personal Information, a list of categories of third parties to whom we “sold” or “shared” your Personal Information, and a list of the categories of third parties to whom we disclosed your Personal Information to. You may make a Right to Know or a Data Portability Request a total of two (2) times within a 12-month period at no charge.
• Right to Rectification/Correction: If personal information is inaccurate or incomplete, individuals have the right to request corrections.
• Right to Withdraw Consent: Where we rely on consent to process your Personal Information, including Sensitive Personal Information, you may have the right to withdraw this consent at any time. Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and that where you withdraw your consent, we may not be able to deliver the expected service to you. Additionally, have the right to ask us to stop, suspend or restrict our processing of Personal Information. Certain laws may allow you to object to or limit the manner in which we process some of your information, including the ways in which we use or share it. For example, you may have these rights if the processing was undertaken without your consent and without a legitimate business interest (although we may not be required to cease or limit processing in cases where our interests are balanced against your privacy interests).

In addition to the rights above, Quebec Law 25 provides Quebec residents with additional rights regarding their Personal Information. This section describes the rights and you may exercise these rights yourself or through your Authorized Agent. These additional rights include:

• Right to be informed: Requires we provide clear and transparent information to you about how your personal Information is collected, used, and shared.
• Right to erasure: Allows you to request the deletion of your personal information from Prenuvo’s records. We are required to execute these requests under specific circumstances, such as when the information is no longer necessary, consent is withdrawn, or the data was unlawfully collected or used. However, exceptions exist where we may refuse erasure requests, particularly when retention is legally required or when deletion could put others' information security at risk.
• Right to restrict processing: You can request limitations on how organizations process their personal information under certain circumstances and is similar to the right to withdraw consent noted above and also includes the right to object to profiling or automated decision-making and request restrictions on data use for specific purposes.
• Right to data portability: Allows you to to request your personal information in a structured, commonly used format and have it sent directly to you or another organization if feasible. This right applies to computerized personal information collected from you, excluding information created or inferred by us, and we are expected to comply unless there are significant practical difficulties to provide the requested information.

Exercising Your Privacy Rights

Please refer to our Privacy Notice for details regarding information on how to Exercise your Privacy Rights.

Authorized Agents

You may authorize your agent to exercise your rights under AB PIPA, BC PIPA, QC Law 25 or PIPEDA. Please refer to the Exercising Your Privacy Rights - Authorized Agents in our Privacy Notice for details about how to work with an Authorized Agent to submit a Privacy Rights request.

Personal Information Retention Periods

Please refer to our Privacy Notice for details regarding the retention of Personal Data about our Consumers.

Response Timing and Format

We will generally process these requests within 30 days of its receipt. If we require more time (up to 30 additional days), we will inform you of the reason and extension period in writing. If we cannot comply with your request, we will provide you with an explanation of the reasons we cannot comply with a request.

We do not charge a fee to process or respond to your Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com. 

For any other questions, please send an email to hello@prenuvo.com or phone us at 1-833-773-6886.

Appeals and Review Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us using one or more of the methods listed in the Contact Information section of our Privacy Notice.

Within 30 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may request a review from the appropriate regulatory authority.

Alberta residents can request a review from the Office of the Information and Privacy Commissioner of Alberta.

British Columbia residents can request a review from the Office of the Information and Privacy Commissioner for BC.

Quebec residents can request a review from the Commission d'accès à l'information du Québec.

Residents from other Provinces or Territories can request a review from the Office of the Privacy Commissioner of Canada.

US State Privacy Addendum

Last Updated: 14 Feb 2025

Scope of this US State Privacy Addendum

This Privacy Addendum for Residents of US states that have enacted state specific Privacy or Data Protection laws (the “US State Privacy Addendum”) supplements the information contained in Prenuvo’s Privacy Notice. This Addendum applies solely to all visitors of our Website, users of our Services, and others acting only in an individual or household context, each of whom resides in the State of Colorado, Connecticut, Delaware, Iowa, Maryland, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, or Virginia (“Consumers” or “you”). 

We adopt this US State Privacy Addendum to comply with the Colorado Privacy Act (“CPA”), Connecticut Data Privacy Act (“CTDPA”), Delaware Personal Data Privacy Act (“DPDPA”), Iowa Consumer Data Protection Act (“ICDPA”), Maryland Online Data Privacy Act ("MODPA"), Montana Consumer Data Protection Act (“MTCDPA”), Nebraska Data Privacy Act (“NDPA”), New Jersey Data Protection Act (“NJDPA”), New Hampshire Privacy Act (“NHPA”), Oregon Consumer Privacy Act (“OCPA”), Texas Data Privacy and Security Act (“TDPSA”), Utah Consumer Privacy Act (“UCPA”), and Virginia Consumer Data Protection Act (“VCDPA”) (collectively “Applicable US State Privacy Laws”) and any terms defined in the the State Privacy and Data Protection Laws listed above have the same meaning when used in this US State Privacy Addendum. We may update this Addendum at any time as necessary in the event of changes to the laws listed above or to add additional applicable state laws.

This US State Privacy Addendum applies to information that we collect on our Website and when you use our Services (both online and offline) that is linked or reasonably linkable to an identified or identifiable individual, including pseudonymous data used in conjunction with additional information that reasonably links the data to an identifiable individual (“Personal Data”). However, publicly available information that we collect from government records and deidentified data (when deidentified as described in applicable state law) are not considered Personal Data and this US State Addendum does not apply to such information.

This US State Privacy Addendum also does not apply to certain Personal Data that is excluded from the scope of the applicable State Privacy Law, such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

This US State Privacy Addendum also does not apply to Personal Information collected from residents of the states listed above acting in a commercial or employment context, such as employees, job applicants, contractors, or similar individuals.

Personal Data We Collect About You

Please refer to our Privacy Notice for details regarding the categories and sources of Personal Data we collect about you.

Use of Your Personal Data

We limit the collection of Personal Data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which the Personal Data is processed. We may process the Personal Data we collect for one or more of the purposes described in the Privacy Notice. Please refer to the section “How We Use Personal Information” in our Privacy Notice for details regarding the use of your Personal Data.

Specifically, Prenuvo may collect and use Personal Data to respond to your inquiries, fulfill your requests and improve your experience; for marketing, advertising, and promotional purposes; for reporting and analytics; to improve the effectiveness of our Services, conduct research and analysis, or for other internal operational purposes; to detect, prevent or investigate potential security breaches, fraudulent transactions and monitor against theft.

We will not process Personal Data for purposes that are neither reasonably necessary to nor compatible with the purposes for which the Personal Data is processed as described in the Privacy Notice without your consent.

To Whom Do We Sell or Share Your Personal Data

As noted in our general Privacy Notice, we do not sell Personal Data as the term “sell” is commonly understood to require an exchange for money. However, the use of advertising and analytics cookies on our Website is considered a “sale” of Personal Data as the term “sale” is often broadly defined to include both monetary and other valuable consideration. Using this broad definition, our “sale” is limited to our use of third-party advertising and analytics cookies and their use in providing behavioral advertising, and their use in understanding how people use and interact with our Website, App, or Services. Our “sale” of your Personal Data in this matter is subject to your right to opt-out of those sales.

Please refer to our Privacy Notice for details regarding Sharing, Disclosure and Selling Personal Information collected and respective uses.

Your Rights and Choices

We have designed our general Privacy Rights and Choices to align closely with the US State Privacy Rights listed below. This section describes the rights you may have under the Applicable US State Privacy Laws.

• Confirmation and Access. You have the right to confirm whether we process your personal information and to request access to that personal information we have collected and maintain about you. This may include a list of categories of third parties to which we have disclosed your data or to which we have disclosed data generally.
• Correction. You have the right to correct any inaccuracies in your Personal Data processed by us, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. We may also not be able to accommodate your request to change the Personal Data if we believe it would violate any law or legal requirement or cause the Personal Data or the information associated with the Personal Data to be incorrect.
• Deletion. You have the right to request that we delete your Personal Data. We cannot delete your Personal Data except by also deleting your user account, however, we may not accommodate a request to erase your Personal Data if we believe the deletion would violate any law or legal requirement or cause any information associated with the Personal Data to be incorrect.
• Portability/Obtain. To the extent you provide us with your Personal Data and to the extent we process your Personal Data, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Data in portable, and to the extent technically feasible, readily usable format that allows you to transmit the Personal Data to another controller without hindrance. We shall not provide data that we believe would disclose our trade secrets. You may only make such a request twice within a 12-month period.
• Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your Personal Data for the purposes of:
  • targeted advertising;
  • the sale of your Personal Data; or
  • profiling in furtherance of decisions that produce legal effects or similarly significant effects concerning the consumer

These decisions include decisions that result in the provision or denial by the controller of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities, such as food and water. Please note, however, that Prenuvo does not process Personal Data for purposes of profiling within the meaning of the Applicable US State Privacy Laws.

• Right to Non-Discrimination: We will not discriminate against individuals for exercising one or more of the rights listed above. Unless permitted by the Applicable US State Privacy Laws, we will not do any of the following as a result of you exercising your Applicable US State Privacy Law rights:
  • deny you goods or services;
  • charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; or
  • provide you a different level or quality of goods or services.

Exercising Your Privacy Rights

Please refer to our Privacy Notice for details about Exercising your Privacy Rights.

Authorized Agents

You may authorize your agent to exercise your rights under the Applicable US State Law. We may request that your Authorized Agent submit proof of identity and that they have been authorized to exercise your rights on your behalf. Please refer to the Exercising Your Privacy Rights - Authorized Agents in our Privacy Notice for details about how to work with an Authorized Agent to submit a Privacy Rights request.

Personal Information Retention Periods

Please refer to our Privacy Notice for details regarding the retention of Personal Data about our Consumers.

Response Timing and Format

We will generally process these requests within 45 days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. If we cannot comply with your request, we will provide you with an explanation of the reasons we cannot comply with a request.

We do not charge a fee to process or respond to your Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com. 

For any other questions, please send an email to hello@prenuvo.com or phone us at 1-833-773-6886.

Appeals Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us using one or more of the methods listed in the Contact Information section of our Privacy Notice.

Within 60 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may lodge a complaint with the supervisory authority in your state of residence.

Australia Privacy Addendum

Last Updated: 14 Feb 2025

Scope of this Australia Privacy Addendum

This Privacy Addendum for Australia Residents (the “Australia Privacy Addendum”) supplements the information contained in Prenuvo’s Privacy Notice. This Australia Privacy Addendum applies solely to all visitors of our Website, users of our Services, and others acting only in an individual or household context, each of whom resides in the Country of Australia (“Individuals” or “you”). We adopt this Australia Privacy Addendum to comply with the Australia Privacy Act 1988 (“APA”) and any terms defined in the APA have the same meaning when used in this Australia Privacy Addendum. We may update this Australia Privacy Addendum at any time as necessary in the event of changes to the APA.

This Australia Privacy Addendum applies to information that we collect on our Website and when you use our Services (both online and offline) that is linked or reasonably linkable to an identified or identifiable Individual or device that is linked or reasonably linkable to one or more Individuals in a household (“Personal Information”). However, publicly available information that we collect from government records and deidentified information are not considered Personal Information and this Australia Privacy Addendum does not apply to such information.

Personal Data We Collect About You

Please refer to the section “Categories of Personal Information We May Collect” in our Privacy Notice for details regarding the types of Personal Data we collect about you.

Sources of Personal Data

Please refer to the section “Sources of Personal Information” in our Privacy Notice for details regarding how we collect Personal Data about you.

Use of Your Personal Data

Please refer to the section “How We Use Personal Information” in our Privacy Notice for details regarding the use of your Personal Data.

Your Rights and Choices

The APA provides residents with specific rights regarding their Personal Information. This section describes your APA rights and you may exercise these rights yourself or through your Authorized Agent.

• Right to Know: You have the right to know when and why your personal information is being collected, how it will be used and who it will be disclosed to.
• Right to Access: You have the right to ask for access to your personal information (including your health information)
• Right to Correction: If personal information is inaccurate or incomplete, individuals have the right to request corrections.
• Right to Stop Receiving Direct Marketing: Right to not be sent unwanted direct marketing.
• Right to Request to not be Identified: have the option of not identifying yourself, or of using a pseudonym in certain circumstances.

Exercising Your APA Privacy Rights

Please refer to our Privacy Notice for details regarding information on how to Exercise your Privacy Rights.

Authorized Agents

You may authorize your agent to exercise your rights under the APA. Please refer to the Exercising Your Privacy Rights - Authorized Agents in our Privacy Notice for details about how to work with an Authorized Agent to submit a Privacy Rights request.

International Transfers of Personal Information

The Personal Information that we collect will be transferred to, stored at/processed in, or accessed from countries outside of Australia for the purposes described in this Privacy Notice. Specifically, we have servers for that store and process your information in the United States and Canada in addition to our physical clinic locations. By using the Services, you consent to the transfer of your Personal Information to third parties (if any), which may include the cross-border transfer of your information to any country or region where we have databases or affiliates and, in particular, to the jurisdictions specified herein.

For such transfers of data outside of Australia we have assessed, and confirmed, that the regions and facilities where your Personal Information is stored provide acceptable safeguards for your information and additional measures have been implemented to ensure your rights are protected and aligned with the APA.

Personal Information Retention Periods

Please refer to our Privacy Notice for details regarding the retention of Personal Data about our Consumers.

Response Timing and Format

We will generally process these requests within 30 days of its receipt. If we require more time (up to 30 additional days), we will inform you of the reason and extension period in writing. If we cannot comply with your request, we will provide you with an explanation of the reasons we cannot comply with a request.

We do not charge a fee to process or respond to your Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com. 

For any other questions, please send an email to hello@prenuvo.com or phone us at 1-833-773-6886.

Appeals and Complaint Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us using one or more of the methods listed in the Contact Information section of our Privacy Notice.

Within 30 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may request a review.

Australia residents can make a Privacy Complaint to The Office of the Australian Information Commissioner.

Regional Health Privacy Addenda

Although we have created our Health Information Privacy Notice with an inclusive approach to regional laws and regulations, some regions require that specific notices, language and rights be made available to you. The Regional Health Information Privacy Notice Addenda (the “Regional Health Privacy Addenda”) supplement the information contained in Prenuvo’s Health Information Privacy Notice to ensure we meet these requirements. The Regional Health Information Privacy Addenda apply to all patients and prospective patients of Prenuvo (“Patients” or “you”) who reside in the applicable regions. All capitalized terms not otherwise defined in these Regional Health Information Privacy Addenda have the same meaning as set forth in the Prenuvo’s Health Information Privacy Notice, available here: https://prenuvo.com/privacy/.   

Changes to the Regional Health Information Privacy Addenda

Prenuvo reserves the right to amend the Regional Health Privacy Addenda at our sole discretion and at any time. When we make changes to any of the Regional Health Information Privacy Addenda, we will post the updated addendum on the Website and update the addendum’s last updated date. Your continued use of our website and services following the posting of changes to our Regional Health Information Privacy Addenda constitutes your acceptance of such changes.

Washington Health Privacy Addendum

Last Updated: 14 Feb 2025

Information for Individuals Whose Health Data is Collected in Washington

Our collection of Consumer Health Data is covered by the Washington My Health My Data Act (“WA MHMD”). In addition to our Privacy Notice at https://prenuvo.com/privacy/ and other Prenuvo Privacy Notices or Addendums, this Washington Health Privacy Notice only applies to individual patients or consumers who are residents of the state of Washington, or individuals whose Consumer Health Data is collected in the state of Washington (“Health Data Subjects,” or “you”).

“Consumer Health Data” means personal information that is linked or reasonably linkable to a particular individual and that identifies that individual’s past, present, or future physical or mental health status. However, the following categories of information are not Consumer Health Data and not covered by this Washington Health Privacy Notice:

• Deidentified data;
• Protected Health Information (“PHI”), as defined by the Health Insurance Portability and Accountability Act (“HIPAA”);
• Health care information collected, used, or disclosed in accordance with WA Revised Code § 70.02 (“Medical Records – Health Care Information Access and Disclosure”);
• Publicly available information; or
• Information otherwise excluded from the scope of WA MHMD.

This Washington Health Privacy Notice provides the following information to individuals in Washington:

• Categories of Consumer Health Data we collect;
• Purposes for which we collect Consumer Health Data;
• How we use and process Consumer Health Data;
• Categories of sources from which we collect Consumer Health Data;
• Categories of Consumer Health Data we share;
• Categories of third parties or specific affiliates with whom we share Consumer Health Data;
• The rights you may have rights under WA MHMD; and
• How you can exercise your rights.

This Washington Health Privacy Notice does not apply to the information of individuals acting in an employment context, such as job applicants, employees, or contractors to by Prenuvo, Inc. and its affiliates, including Prenuvo of Golden State, P.C., Prenuvo of Minnesota LLC, Prenuvo Radiology PC, Hercules Study PC, Independent Radiology of New York P.C., Vigilance Health Imaging Network, and LISA Preventative Health PLLC , collectively referred to as “Prenuvo”, “us,” “we,” or “our”.

We may update this Washington Health Privacy Notice Addendum from time to time. Any updated Health Privacy Notice will be effective when posted. Please check this page periodically for updates. If required by law, we will contact you directly to provide you with an updated notice. Your continued use of our website and services following the posting of changes constitutes your acceptance of such changes.

Categories, Sources, and Use of the Consumer Health Data We Collect

Please see our Health Privacy Notice for information regarding the types, sources and purposes for which we collect Consumer Health Data or Personal Health Information.

Sharing of Consumer Health Data

We may share each of the categories of Consumer Health Data described above with your consent, or to the extent necessary to provide a product or service that you requested.

“Share” under the WA MHMD means to release, disclose, disseminate, divulge, make available, provide access to, license, or otherwise communicate Consumer Health Data to a third party or affiliate. However, “share” does not include:

• Disclosure of Consumer Health Data to provide goods or services in a manner consistent with the purpose for which we collected the Consumer Health Data;
• Disclosure to a third party with whom you have a direct relationship when the disclosure is for the purpose of providing a product or service you if we maintain control and ownership of the data, and the third party uses the data only at our direction and consistent with your consent and for the purpose for which it was collected; or
• Disclosure or transfer of Consumer Health Data to a third party as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in compliance with WA MHMD

The term “third party,” as used in this Washington Health Privacy Notice, means a person who is not a consumer, an entity regulated under WA MHMD, a processor, or an affiliate of an entity regulated under WA MHMD.

We may share Consumer Health Data to the following categories of third parties and specific affiliates:

• Business partners;
• Affiliates of Prenuvo; and
• Research organizations such as universities or other organizations in the health and/or medical space.

Use of Artificial Intelligence

Please see our Health Privacy Notice for information regarding the use of Artificial Intelligence (AI).

Your Health Data Rights

Health Data Subjects have the following rights under WA MHMD. You may have the right to:

• Confirm if we are collecting, sharing, or selling your Consumer Health Data;
• Access your Consumer Health Data;
• Delete your Consumer Health Data;
• Withdraw consent for the collection and/or sharing of your Consumer Health Data; and
• Appeal our decisions on requests to exercise any of these rights.

Exercising Your Health Information Privacy Rights

Please refer to our Privacy Notice information regarding exercising your Health Information and other Privacy Rights.

Response Timing and Format

We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. If you believe our response to your rights request is insufficient, you can appeal our decision by submitting an appeal request via the same method used to submit your initial request, and we will inform you of our final decision within 45 days.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Sales of Consumer Health Data

Please see our Health Information Privacy Notice for information regarding the sale of Consumer Health Data.

Third-Party Collection

A third party may collect Consumer Health Data over time and across different Internet websites or online services when you use any Internet website or online service of Prenuvo. However, we do not knowingly permit third parties to collect Consumer Health Data from you while you are on webpages that are made available after you log in to the password-protected part of our website.

We do not control the collection and use of your information collected by third parties. These third parties may aggregate the information they collect with information from their other customers for their own purposes. You can opt out of third parties collecting your information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page.

You may also see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based, and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com. 

For any other questions, please send an email to hello@prenuvo.com or phone us at 1-833-773-6886.

Nevada Health Privacy Addendum

Last Updated: 14 Feb 2025

Information for Individuals Whose Health Data is Collected in Nevada

Our collection of Consumer Health Data is covered by the Nevada Consumer Health Data Privacy Law (“NV CHDP”). In addition to our Privacy Notice at https://prenuvo.com/privacy/ and other Prenuvo Privacy Notices or Addendums, this Nevada Health Privacy Notice only applies to individual patients or consumers who are residents of the state of Nevada that requested a product or service from Prenuvo, or individuals whose Consumer Health Data is collected in the state of Nevada (“Health Data Subjects,” or “you”).

“Consumer Health Data” means personally identifiable information that is linked or reasonably capable of being linked to a particular individual and that is used to identify that individual’s past, present, or future health status. However, the following categories of information are not Consumer Health Data and not covered by this Nevada Health Privacy Notice:

• Deidentified data;
• Protected Health Information (“PHI”), as defined by the Health Insurance Portability and Accountability Act (“HIPAA”);
• Collection or sharing of Consumer Health Data where expressly authorized by federal or state law;
• Publicly available information; or
• Information otherwise excluded from the scope of NV CHDP.

This Nevada Health Privacy Notice provides the following information to individuals in Nevada:

• Categories of Consumer Health Data we collect;
• Purposes for which we collect, use, and share Consumer Health Data;
• How we use and process Consumer Health Data;
• Categories of sources from which we collect Consumer Health Data;
• Categories of Consumer Health Data we share;
• Categories of third parties or specific affiliates with whom we share Consumer Health Data;
• The rights you may have rights under NV CHDP, and
• How you can exercise your rights.

This Nevada Health Privacy Notice Addendum does not apply to the information of individuals to by Prenuvo, Inc. and its affiliates, including Prenuvo of Golden State, P.C., Prenuvo of Minnesota LLC, Prenuvo Radiology PC, Hercules Study PC, Independent Radiology of New York P.C., Vigilance Health Imaging Network, and LISA Preventative Health PLLC , collectively referred to as “Prenuvo”, “us,” “we,” or “our”.

This Nevada Health Privacy Notice Addendum also does not apply to the information of individuals acting as an agent of a governmental entity.

We may update this Nevada Health Privacy Notice Addendum from time to time. Any updated Health Information Privacy Notice will be effective when posted. Please check this page periodically for updates. If required by law, we will contact you directly to provide you with an updated notice. Your continued use of our website and services following the posting of changes constitutes your acceptance of such changes.

Categories, Sources, and Use of the Consumer Health Data We Collect

Please see our Health Information Privacy Notice for information regarding the types, sources and purposes for which we collect Consumer Health Data or Personal Health Information.

Sharing of Consumer Health Data to Third Parties or Affiliates

We may share each of the categories of Consumer Health Data described above with your affirmative, voluntary consent, to the extent necessary to provide a product or service that you requested, or as required or authorized by law.

“Share” under the NV CHDP means to release, disclose, disseminate, divulge, make available, provide access to, license, or otherwise communicate Consumer Health Data. We may share Consumer Health Data to the following categories of third parties and affiliates. The term “third party”, as used in this Nevada Health Privacy Notice, means a person who is not a consumer, an entity regulated under NV CHDP, a processor or an affiliate of an entity regulated under NV CHDP.

However, “share” does not include:

• Disclosure of Consumer Health Data to provide goods or services in a manner consistent with the purpose for which we collected the Consumer Health Data;
• Disclosure to a third party with whom you have a direct relationship when the disclosure is for the purpose of providing a product or service you if we maintain control and ownership of the data, and the third party uses the data only at our direction and consistent with your consent and for the purpose for which it was collected; or
• Disclosure or transfer of Consumer Health Data to a third party as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in compliance with NV CHDP.

We may share de-identified Consumer Health Data to the following categories of third parties and specific affiliates:

• Business partners;
• Affiliates of Prenuvo; and
• Research organizations such as universities or other organizations in the health and/or medical space.

Use of Artificial Intelligence

Please see our Health Privacy Notice for information regarding the use of Artificial Intelligence (AI).

‍Your Health Data Rights

Health Data Subjects have the following rights under NV CHDP. You have the right to:

• Confirm whether Consumer Health Data is collected, shared, or sold;
• Delete Consumer Health Data;
• Opt out of the collecting, selling, or sharing of Consumer Health Data;
• Obtain a list a list of all third parties with whom Consumer Health Data; has been shared or sold;
• Appeal our decisions on requests to exercise any of these rights.

Exercising Your Health Information Privacy Rights

Please refer to our Privacy Notice information regarding exercising your Health Information and other Privacy Rights.

Response Timing and Format

We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. If you believe our response to your rights request is insufficient, you can appeal our decision by submitting an appeal request via the same method used to submit your initial request, and we will inform you of our final decision within 45 days.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Sales of Consumer Health Data

Please see our Health Information Privacy Notice for information regarding the sale of Consumer Health Data.

Third-Party Collection

A third party may collect Consumer Health Data over time and across different Internet websites or online services when you use any Internet website or online service of Prenuvo. However, we do not knowingly permit third parties to collect Consumer Health Data from you while you are on webpages that are made available after you log in to the password-protected part of our website.

We do not control the collection and use of your information collected by third parties. These third parties may aggregate the information they collect with information from their other customers for their own purposes. You can opt out of third parties collecting your information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page.

You may also see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based, and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests.

Contact Information

If you have questions regarding this Notice, please contact us using the request form located here, or email us at: privacy@prenuvo.com. 

For any other questions, please send an email to hello@prenuvo.com or phone us at 1-833-773-6886.