Privacy Notice

Last Updated: August 3, 2022

Dandelion Health Inc. (“Dandelion”) has created this Privacy Notice (“Notice”) to describe our data protection practices with regards to the personal information we collect about users who visit the Dandelion website, available at: https://dandelionhealth.ai/ (the “Website”). This Notice is incorporated into our Terms of Use and applies to all user personal information (“Personal Information”) collected by Dandelion through the use of the Website as well as Dandelion products and services (collectively the “Services”) but does not apply to any patient personal information or patient health information, as this is covered under applicable health institution policies. All capitalized terms used in this Notice but not defined herein have the meanings assigned to them in the Terms of Use.

This Notice applies to the protection of personal data established by the General Data Protection Regulation (GDPR) 2016/679 and also undertakes to apply to any regulation that may come into force in the USA or any territory in which Dandelion is active.

The privacy of users of our Website and Services is of great importance to us. By visiting our Websites and/or using the Services in any manner, you acknowledge that you accept the practices and policies outlined in this Notice and you hereby consent to the collection, use and disclosure of your Personal Information in accordance with this Notice. 

PLEASE READ THIS PRIVACY NOTICE CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR PERSONAL INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY NOTICE, PLEASE DO NOT USE THE WEBSITE OR THE SERVICES.

Information We Collect and How We Collect It

We collect personally identifiable information about you when you use the Website and the Services. We obtain information about you through the means discussed below when you use the Services. Please note that we may need certain types of information so that we can provide the Services to you. If you do not provide us with such information, or ask us to delete it, you may no longer be able to access or use part or all of the Services.

NOTE: We do not knowingly solicit or collect data from children nor knowingly market to anyone under the age of 18. If you are under the age of 13, you are explicitly not authorized to use the Website or the Services. If you become aware that your child has provided us with Personal Information without your consent, please contact us at compliance@dandelionhealth.ai. If we become aware that a child under 18 has provided us with Personal Information, we will take reasonable steps to remove such information from our systems and terminate the applicable account. California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information pursuant to California law.

Information you provide to us or to a third party

We collect a variety of Personal Information that you voluntarily provide to us when you register for a Dandelion product account (an “Account”), when you sign a contract; when you request a demo or further information from the website; and when you use the Services. We also receive your contact information that you provided to a third-party event host and that you have consented to be included in an attendee list that is forwarded to vendors.

The specific types of information we collect will depend upon the Services you use, how you use them, and the information you choose to provide. For example, the types of data we collect directly from you may include:

  • First and last name 

  • Contact information (such as email address)

  • Log-in credentials if you create an Account 

  • Company name and title

  • Interview responses

  • Billing information, such as shipping address, credit or debit card number, verification number, expiration date, and identity verification information, collected by our payment processors on our behalf

  • Information about transactions with us

  • Information about your customer service and maintenance interactions with us

  • Any other information you choose to directly provide to us in connection with your use of the Services.

Information Collected by Technologies or Automated Means

We collect certain information about your use of the Services and the devices you use to access the Services, as described in this Section. As discussed further below, we and our service providers (which are third party companies that work on our behalf), may use a variety of technologies, including cookies and similar tools, to assist in collecting this information.

Our Website. As you visit or browse the Website and/or use the Services, we collect information about the device and browser you use, your network connection, your IP address, and information about the cookies installed on your device. This information is logged to help diagnose technical problems for analytics and for quality control purposes. We also collect Personal Information submitted by any visitor to our Website through features we make available on our Website and use such information for the purpose of responding to your requests.

Location Information. When you use the Services, we and/or our service providers may automatically collect general location information (e.g., IP address, city/state and or postal code associated with an IP address) from your computer or mobile device. This information allows us to enable access to content that varies based on a user’s general location.

Activity Log files – As is true of most websites, we gather certain information automatically and store it in log files. These logs contain the Internet domain from which you access the site (e.g. search engine); the IP address which is automatically assigned to your computer when you get on the Internet; the type of operating system and browser you use; the time and date you visited; the pages you viewed; and the address of the website you linked from, if any. If you sign into the Dandelion Website to use its features and/or the Services, our logs will contain an individual identifier and show the Services you have accessed. Dandelion uses log information to help us identify popular features, to resolve user problems, and to improve the design of our product.

Cookies – Like many online services, we use cookies to collect information. Cookies are small pieces of information that a website sends to your computer’s hard drive while you are viewing the website. Cookies serve a functional purpose and improve user website experience. If you decide at any time that you no longer wish to accept cookies from our site, then you can change your browser’s settings. If you do not accept cookies, however, you may not be able to use all portions of the website.

Mouse clicks/movement – We use an analytics system to help improve product usability and the customer experience. This involves collecting the mouse movements and mouse clicks associated with a user.

Personal Information From Third Parties

We also obtain Personal Information from third parties, which we may combine with Personal Information we collect either automatically or directly from an individual.

We may receive the same categories of Personal Information as described above from the following third parties:

  • Business Partners: Our business partners may collect Personal Information in connection with the Services provided and may share some or all of the information with us.

  • Employment-Related Third Parties: If you are applying for a position at Dandelion, we may receive personal information from employment-related third parties, such as job application platforms, references, background check providers and recruiters.

  • Social Media: When an individual interacts with our Services through various social media networks, such as when someone “Likes” us on Facebook or follows us or shares our content on Facebook, Twitter, LinkedIn, or other social networks, we may receive some information about individuals that they permit the social network to share with third parties. The data we receive is dependent upon an individual’s privacy settings with the social network. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services.

  • Service Providers: Our service providers that perform services solely on our behalf, such as web hosting and analytics providers. For example, we may receive Personal Information from our service providers that conduct marketing or analytics activities. 

  • Other Third Parties: From time to time, we may receive information about individuals from third parties. For example, we may obtain information from our marketing partners or from third parties to enhance or supplement our existing information about an individual. We may combine this information with the information we collect directly from individuals.

  • Publicly Available Sources: We collect Personal Information about individuals that we do not otherwise have, such as contact information, employment-related information, and interest-in-services information, from publicly available sources. We may combine this information with the information we collect from an individual directly. We use this information for a variety of reasons, including to contact individuals, to send advertising or promotional materials or to personalize our Services and to better understand the demographics of the individuals with whom we interact.

How we use your Personal Information

Personal Information is used as part of the Services provided by Dandelion. Using the data minimization principle, Dandelion commits to use only the Personal Information strictly necessary and are for the following purposes:

  • processing a request for information and providing product marketing information that we think will be of use to you,

  • creating and managing your user account,

  • software updates,

  • educational and product support,

  • management of your registration for events organized by Dandelion, 

  • engage in internal research to understand the effectiveness of our Services, improve our Services, and better understand our user base, 

  • communicate with you by email, postal mail, or phone about surveys, promotions, special events, conferences, or our products and Services and those of our third-party partners,

  • provide you with customer service,

  • measure or understand the effectiveness of advertising and content we serve to you and others, and to deliver and customize relevant advertising and content to you.

In compliance with the regulation applicable to the use of your Personal Information, Dandelion reserves the right to use your data for information purposes on its products and Services or for any other purpose evident and necessary to the information of the user.

In general, Dandelion uses your Personal Information to respond to your requests or to aid us in serving you better. We use Personal Information to perform data analysis and audits, safeguard and protect our site and the Dandelion product, enhance, improve and modify the site and the Dandelion product, create Accounts, identify usage trends, provide improved administration of our site and related products, identify you as a user in our system, send you administrative email notifications, respond to your inquiries, and to provide you the services you request.

When you submit information to the Website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also share this information with Google Drive for storage and Zapier for data porting.

Dandelion also creates anonymous data records by excluding information that makes the data personally identifiable to you. We use such anonymous data records for any purpose, except where required to do otherwise under applicable law.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making. There will always be human intervention into decisions based on automated processing, if any.

How we share your information

Dandelion shares or transfers your Personal Information as described below and as described elsewhere in this Notice:

  • When you submit information to the Website, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also share this information with Google Drive for storage and Zapier for data porting.

  • Dandelion may share your Personal Information to comply with a legal requirement or legal process served on or by Dandelion, or in connection with a merger, financing, acquisition or dissolution transaction,

  • We will share your Personal Information with third party service providers to: provide you with the Services that we offer through our Website or products; to conduct quality assurance testing; to facilitate creation of Accounts; to provide technical support; and/or to provide other services. In this case, all third parties are committed to follow applicable data protection regulations. 

Personal Information is processed in the country in which it was collected and in other countries where laws regarding processing of Personal Information may be less stringent than the laws in your country. By providing your Personal Information, you consent to such transfer.

How we protect your information

Dandelions strives to protect Personal Information submitted through the Website and its products. Dandelion maintains technical, administrative and physical safeguards designed to protect against unauthorized disclosure, alteration, use or destruction of the Personal Information you provide. Dandelion implements all the measures at its disposal to create an environment for preserving the quality, security, and integrity of your Personal Information.

Dandelion also employs technologies to help keep the Information you provide on this site secure including: Secure Socket Layer (SSL) encryption, firewalls, system alerts and other information system security technologies; housing health data in secure facilities that restrict physical and network access; and regular evaluation and enhancement of our information technology systems, facilities, and information collection, storage and processing practices.

However, we cannot ensure or warrant against all risks with regard to the security of that information, so information you choose to transmit to Dandelion and which we store is provided to us at your own risk. Dandelion does not guarantee that such information will not be accessed, disclosed, altered, or destroyed by breach of any of our safeguards. In addition, other services or Internet sites that may be accessible through Dandelion, its Services, and the Website, have separate data and privacy practices independent of us, and we disclaim any responsibility or liability for their policies or actions.

Where we have given you (or where you have chosen) a password that enables you to access the Website and/or Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. The information you share in public areas may be viewed by any user of the Services.

Storage and Retention Period Of Your Personal Information

We will retain Personal Information for as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. We may retain certain data as necessary to prevent fraud or future abuse, or for legitimate business purposes, such as analysis of aggregated, non-personally-identifiable data, account recovery, or if required by law. Unless otherwise set forth in the applicable Terms of Use or a separate agreement with you governing the applicable Services, if you cease using such Service, we may retain or destroy, at our discretion, all Personal Information and non-personally identifiable information we collect through your use of such Service. All retained Personal Information will remain subject to the terms of this Notice.

Your Personal Information used in the Account/contract creation is kept for the duration of a contract and for an additional ten (10) years for purposes of regulatory compliance and commercial needs, without prejudice of the obligations of conservation or the limitation periods. Prospect data is retained for a period of three (3) years from the date of the data collection or from the last contact with Dandelion.

Upon your request, we will delete or anonymize your Personal Information so that you can no longer be identified, unless the law authorizes or compels us to keep certain Personal Information, especially in the following situations:

  • If there is an unresolved issue with your account, such as unpaid or unresolved claim or litigation, we will retain the necessary Personal Information until the issue is resolved;

  • If we are required to retain Personal Information as a result of legal, tax, auditing and accounting obligations, we will retain the necessary Personal Information for the period required by applicable law.

  • To establish, exercise, or defend our legal rights where it is necessary for our legitimate interests or the legitimate interests of others.

Data Subject Rights

Except as limited by applicable law, such as medical device regulation compliance, your data subject rights are:

  • Right to be informed and to request access to the Personal Information we process;

  • Right to rectification: the right to ask us to update your Personal Information when they are inaccurate or incomplete;

  • Right to erasure: the right to ask us to permanently delete your Personal Information;

  • Right to restriction of processing: the right to ask us to stop temporarily or permanently the processing of all or part of your Personal Information;

  • Right to object: the right to refuse at any time the processing of your Personal Information for personal reasons or for direct marketing purposes;

  • Right to data portability: the right to request a copy of your Personal Information in electronic format and the right to transmit such Personal Information for use by a third party service;

Opt-Out Choices

To “opt-out” of (1) any consents previously given to us, (2) receiving communications from us, or (3) having Personal Information disclosed to third parties, follow the unsubscribe instructions provided in the email you receive or directly contact us using the form listed on the Contact page of the Website and indicate that you no longer want to receive promotional materials. Despite your indicated email preferences, we may send you service-related communications, including notices of any updates to our Terms of Service or this Notice. Notwithstanding this right to request to cease receiving communications from us and to have us not share Personal Information with third parties, we retain the right to collect, maintain and process information provided by and collected about you on and through the Services and/or the Website, and disclose such information to comply with our reasonable business and legal obligations.

Changes to this Notice

This current Notice will take effect on August 3, 2022 and will remain in effect until Dandelion replaces it.  We may revise this Notice from time to time as we add new features or modify the way in which we manage information, or as laws change that may affect our services. If we do, we will post the changes on the website and update the last updated date. Any revisions will apply both to information we already have about you at the time of the change, and any personal information created or received after the change takes effect. We encourage you to periodically review this Notice to see if there have been any changes that may affect you. Your continued use of the Website after changes to this Policy shall constitute your consent to the new Policy.

Additional State Rights

If you are a California, Nevada, Colorado, Virginia, or Utah resident, your state's laws may provide you with additional rights regarding our use of your personal information.

To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/ccpa. California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Site that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to compliance@dandelionhealth.ai. 

Colorado, Virginia and Utah each provide their state residents with rights to:

  • Confirm whether we process their personal information.

  • Access and delete certain personal information.

  • Data portability.

  • Opt-out of Personal Information processing for targeted advertising and sales.

  • Colorado and Virginia also provide their state residents with rights to:

  • Correct inaccuracies in their personal information, taking into account the information's nature processing purpose.

  • Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights please email compliance@dandelionhealth.ai.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to this designated address: compliance@dandelionhealth.ai. However, please know we do not currently sell data triggering that statute's opt-out requirements.

Questions, contacting Dandelion, reporting alleged violations

If you have any questions, concerns or complaints about this Notice or our data collection or processing practices, or if you want to report any security violations to us, please contact us by email at compliance@dandelionhealth.ai.

Dandelion will address any discrepancies and grievances of all Users with respect to processing of information expeditiously.