1. INTRODUCTION
We (Masks For Docs) collect, use, and otherwise process various kinds of information from or about you or your device (“personal information”) to provide you with our Services. As used in this Privacy Policy, the “Services” means the personalized service provided by Masks For Docs for helping find and provide personal protective equipment (PPE) and other services to protect people from COVID-19 and related issues, the website (“Website”), user interfaces, marketing campaigns, social features, as well as all content and software associated with our service (collectively, the “Services”). We may use all personal information in the manner described in this Privacy Policy or as otherwise permitted by law.
2. INFORMATION WE COLLECT
Masks For Docs may collect the following categories of personal information from the sources identified below:
a. Information you actively provide to us: We collect the information you actively provide to us, which may include personal information. For example, medical professionals may provide their contact information, location, and details about the equipment they need through a form on our Website. Similarly, people with extra virus protection equipment may provide us their name, contact information, location, and details of the equipment they are willing to donate. We may also collect the information you submit through other means including surveys.
b. Usage and log data: We collect information when you use and interact with the Services. For example, we may collect your IP address, device type, device language setting, screen size, device identifiers, advertising identifiers, browser type, your actions in the Services.
c. Data collected through cookies and similar technologies: We use cookies and similar technologies to help collect usage information and store your preferences. For more information about cookies visit our Cookies and Similar Technologies notice. We do not currently respond to browser do-not-track signals because there is currently no consensus among the industry as to what “Do Not Track” signals mean and how to respond to them.
d. Data from other parties: We may work with other parties to support our services, better promote our services, partner with similar services, and other reasons as described below. These parties may send us information about you, your device, or browser (such as demographics and online history) for the purposes described in this Privacy Policy.
3. USE OF INFORMATION WE COLLECT
a. Use of Personal Information:
We use the categories of personal information listed above for the following purposes:
• providing the functionality of the Services and fulfilling your requests;
• track inventory and needs of you and other users;
• picking up and delivering PPE and other physical items;
• contacting you;
• improving our Services and developing new services;
• reporting and analysis, including compiling aggregate or anonymized data;
• fraud and security monitoring;
• conducting research, such as to help predict the spread of viruses;
• facilitating social sharing, should you choose to use those features;
• protecting your and our rights;
• customer support;
• performing obligations and exercising rights; and
• any other purpose that is disclosed to you at the time we collect the information or that is related to a request made by you.
We will engage in these activities to manage our contractual relationship with you, to comply with a legal obligation, where we have a legitimate interest in doing so, to protect the vital interests of individuals, performing a task in the public interest, or with your consent to the extent required by law.
b. Your COVID-19 infection status:
Our forms don’t ask for whether you have, have had, or think you have COVID-19 and we have no policy of asking such information. However, we may incidentally learn information during the normal course of interacting with you. For example, when we contact someone to let them know we’re coming to pick up PPE from their home, they may voluntarily inform us that they have tested positive to let our pick-up person know to be extra careful. We do not store this information and will not share this information with other parties or the government unless legally required to do so by law. Furthermore, we are not a health care service provider.
c. Use of Aggregated or De-Identified Information:
We may collect and use information that is no longer reasonably linked to an individual, device, or household for any purpose. For example, we may aggregate or de-identify personal information and analyze the resulting statistical information to help track the impact of COVID-19 and may make that aggregate information public.
4. SHARING PERSONAL INFORMATION WITH THIRD PARTIES
We may share your personal information as follows:
a. Service Providers: We may share personal information with our third-party service providers for them to facilitate services they provide to us. These services include things like website hosting; data storage; data analysis; social sharing; maps/directions services; information technology and related infrastructure provision; customer service; email and notifications delivery (including marketing messaging); and auditing.
b. For legal reasons: We may share personal information as we believe necessary or appropriate to comply with applicable laws and regulations; to cooperate with law enforcement; to enforce our terms and conditions; to protect our rights, privacy, safety, or property and/or that of our affiliates, you, or others; to prevent or take action regarding possible illegal activities or a violation of our policies; or for other legal reasons. These obligations may arise from laws and requests from authorities outside your country of residence.
c. In connection with a sale or business transaction: We may disclose or transfer your personal information to a potential or actual buyer in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings), including any due diligence related to such a transaction, in accordance with applicable law.
d. With your consent or when you otherwise choose to share: We may share personal information with any party when we have your consent or when you otherwise choose to share such information, for example by using our social sharing functions or participating in contests (which may have their own terms)
5. SECURITY
We use organizational, technical, physical, and administrative data security measures intended to protect personal information within our organization. Note that if you allow others to access your account, they may be able to view information about or stored within your account, including what content you’ve viewed.
6. YOUR RIGHTS
If you would like to request to access, correct, update, suppress, restrict, or delete personal information, object to or opt out of the processing of personal information,withdraw your consent for the collection, use, or disclosure of your personal information, or if you would like to request to receive a copy of your personal information (to the extent these rights are provided to you by applicable law), you may contact us in accordance with the Contact Us section below and clearly describe your request. We will respond to your request consistent with applicable law.
In your request, please make clear what personal information you would like to have provided or changed, or whether you would like to have your personal information suppressed from our database. For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request.
We will try to comply with your request as soon as reasonably practicable or as required by applicable law. Please note that if you choose to suppress or delete information, we may need to retain certain information for purposes such as recordkeeping, security, fraud prevention,legal requirements, and/or to complete any transactions that you began prior to requesting a change or deletion.
7. RETENTION
We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods may include:
• how long we have a legitimate need in keeping the personal information, or, if our collection is based on consent, whether you have revoked your consent;
• the length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services);
• whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
• whether retention is advisable to protect our rights or the rights or freedoms of our users (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
8. THIRD-PARTIES
This Privacy Policy does not address, and we are not responsible for the privacy, security, information, or other practices of any third parties, including any third party operating any website or service to which our Services link. The inclusion of a link in our Services does not imply endorsement of the linked site or service by us or by our affiliates.
In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as partners organizations, hospitals, medical professionals, the persons who provide PPE to us, social media platform providers, operating system providers, or wireless service providers, including with respect to any personal information you disclose to other organizations through or in connection with the Services.
9. USE OF THE SERVICES BY CHILDREN
We do not knowingly collect or sell personal information from children (as defined under applicable law) without involvement and approval of a parent or guardian, unless consistent with applicable law.
10. INTERNATIONAL PROCESSING
Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers, and, by using the Services, you understand that your information may be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your personal information.
Some non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here). For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission to protect your personal information. You may obtain a copy of these measures by contacting us in accordance with the “Contact Us” section below.
11. SENSITIVE INFORMATION
Unless we request it, do not send or disclose to us any sensitive personal information (e.g., social security/social insurance numbers, copies of personal identification cards such as drivers licenses, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) on or through the Services, through customer service, or otherwise.
12. UPDATES TO THIS PRIVACY POLICY
The “Last Updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. We reserve the right to revise this Privacy Policy from time to time. Any changes will become effective when we post the revised Privacy Policy on the Services or as otherwise stated in the revised Privacy Policy.
13. CONTACT US
Masks For Docs is the company responsible for collection, use, and disclosure of your personal information under this Privacy Policy. If you have any questions about this Privacy Policy, please contact us at [email protected].
14. ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS
Effective January 1st, 2020, the California Privacy Protection Act (“CCPA”) provides its residents with certain rights. If you are a California resident, the law permits you to request that we disclose to you the following information covering the past twelve months: the categories of personal information we collected about you and the categories of sources from which we collected such personal information; the specific pieces of personal information we collected about you; the business or commercial purpose for collecting or selling (if applicable) personal information about you; the categories of third parties with whom we shared personal information about you; the categories of personal information about you that we sold and the categories of third parties to whom we sold such personal information (if applicable); and the categories of personal information about you that we otherwise shared or disclosed, and the categories of third parties with whom we shared or disclosed such personal information (if applicable). Additionally, you may request that we delete personal information we have collected from you as defined under the California Privacy Protection Act (“CCPA”).
To make a request to use one of these rights, please contact us in accordance with the “Contact Us” section above. You must use the email used in your account to make the request. Alternatively, you may designate an authorized agent to make a data request to us on your behalf under the CCPA. In order for such an agent to make a request, they must provide proof of their power of attorney and valid government identification of both the requester and the agent. In some instances, we may decline to honor your request where an exception applies, such as where the disclosure of personal information would adversely affect the rights and freedoms of another California resident. Consistent with California law, we will not charge you different prices or provide a different quality of service if you use your rights unless it relates to the value of the information.
We have not “sold” personal information as defined by the CCPA. We do permit other parties to collect information through the Services and share information with other parties for business purposes. These business purposes are described above.
Masks For Docs and its Logo are trademarks of Masks For Docs. All other product names, company names, marks, logos, and symbols are trademarks of their respective owners.