Privacy Policy

1. Scope of this Policy

This policy applies to information we collect through:

• Our website, contact forms, and online portals.
• Email and other electronic communications related to our testing services.

It does not apply to information collected by:

• Us offline or through any other means, including on any other website operated by Company or any third party; or
• Any third party, such as our webhost or payment processor, including through any application or content (including advertising) that may link to or be accessible from or through the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

This Privacy Policy does not apply to information collected or maintained as part of our clinical laboratory operations that are governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). For patients whose information we receive through healthcare providers, our use and disclosure of protected health information (“PHI”) is governed by our HIPAA Notice of Privacy Practices.

2. Information We Collect

We may collect the following types of information:

A. Personal Information

Information you provide directly through our website, such as:

• Name, email address, phone number, and organization.
• Job title or professional affiliation (for healthcare providers).
• Any information you include in inquiries or support requests.

B. Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address, browser type, operating system, and device information.
• Pages visited, time spent on the site, and referring websites.
• Cookies or similar technologies used for analytics and functionality.

C. Protected Health Information (PHI)

If you are a patient and your healthcare provider submits your test order to us, we may receive PHI (such as your name, date of birth, and medical information). Such information is not collected through this website and is protected under HIPAA. For more details, please see our separate HIPAA Notice of Privacy Practices available upon request.

Information You Provide to Us

The information we collect on or through our Website may include:

• Information that you provide by filling in forms on our Website. This includes information provided at the time of making a donation or contacting us for information. We may also ask you for information when you report a problem with our Website.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Details of transactions you carry out through making a donation on our Website. You may be required to provide financial information before making a donation through our Website.
• Your search queries on the Website.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.
• Information needed to protect our system.

The information we collect automatically may include personal information, and we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website. For information about managing your privacy and security settings for cookies, see Choices About How We Use and Disclose Your Information.
• Web Beacons. Pages of our Website may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or [opened an email] and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

We do not collect personal information automatically, but we may tie non-personal information collected automatically to personal information about you that we collect from other sources or that you provide to us.

By using our website, you consent to the use of cookies and other tracking technologies.

Third-Party Use of Cookies and Other Tracking Technologies

We do not control third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Choices About How We Use and Disclose Your Information.

3. How We Use Your Information

We may use your information to:

• Respond to inquiries or service requests.
• Provide information about our laboratory testing services.
• Improve website functionality and user experience.
• Maintain security and prevent fraud.
• Comply with legal and regulatory obligations.

4. Sharing of Information

We may share personal information only as necessary to:

• Provide services you request (e.g., with contracted service providers).
• Comply with applicable laws, regulations, or lawful requests.
• Protect the safety, rights, or property of our organization or others.

All service providers who access personal information are bound by confidentiality and data protection obligations consistent with this Privacy Policy and applicable law.

We may disclose personal information that we collect or you provide as described in this privacy policy:

• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of The Haven’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by The Haven about our Website users is among the assets transferred.
• To third parties to market their products or services to you if you have consented to/not opted out of these disclosures. We contractually require these third parties to keep personal information confidential and use it only for the purposes for which we disclose it to them. For more information, see Choices About How We Use and Disclose Your Information.
• To fulfill the purpose for which you provide it. For example, when you make an inquiry.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our website, company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

5. Cookies and Analytics

Our website may use cookies and third-party analytics tools (e.g., Google Analytics) to understand usage trends. You can control cookies through your browser settings, though disabling them may affect site functionality.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

6. Your Rights Under California Law

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) may grant you specific rights, including the right to:

• Know what personal information we collect and how it is used.
• Request deletion of certain personal information.
• Opt out of the sale or sharing of personal information (we do not sell data).
• Correct inaccurate personal information.Certain terms used in this section have the meanings given to them in the California Consumer Privacy Act (“CCPA”).
  • Categories of Personal Information Machaon Collects from or About Its Guests
    • Identifiers (e.g., name, mailing address, email address, phone number, credit/debit card numbers)
    • Characteristics of protected classifications (e.g., age, sex, race)
    • Commercial information (e.g., products or services purchased, purchase history)
    • Internet or other electronic network activity (e.g., browse or search history)
    • Geolocation data (e.g., latitude or longitude)
    • Audio, electronic, visual, or similar information (e.g., recording of Guest service calls)
    • Inferences drawn from any of the above (e.g., preferences or characteristics)

• Categories of Sources from Which Machaon Collects Personal Information About Guests (for more information, see the how is your information collected section of this privacy policy).
  • Consumer Directly
  • Advertising Networks
  • Data analytics providers
  • Government Entities
  • Social networks
  • Subsidiaries
  • Operating systems and platforms
  • Data brokers

• Business or Commercial Purposes for Which Machaon Collects, Shares or Sells Personal Information About Guests (also see the how is your information used section of this privacy policy).
  • Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage or providing similar services;
  • Providing advertising and marketing services;
  • Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
  • Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us;
  • Helping to ensure security and integrity;
  • Debugging to identify and repair errors that impair existing intended functionality;
  • Undertaking internal research for technological development and demonstration; and
  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.

• Retention of Personal Information
  • We will retain your personal information in accordance with Machaon’s record retention requirements and policies which reflect business and legal considerations. Machaon will retain your personal information for the time period reasonably necessary to achieve the business and commercial purposes described in this Privacy Policy (including the California Residents section) or any other notice provided at the time of collection. Your personal information may be retained longer if required or permitted by applicable law.

• • Categories of Personal Information About Guests that Machaon Sells or Shares (for Cross-Context Behavioral Advertising) and Categories of Third Parties to Whom Personal Information Is Sold or Shared (for Cross-Context Behavioral Advertising)
    • Category of Personal Information
      • Internet or other electronic network activity (e.g., “cookies” or other tracking tags)
      • Identifiers (e.g., name, mailing address, email address, phone number, credit/debit card number)
      • Commercial Information (e.g., products or services purchased, purchase history)
    • Category of Third Party
      • Advertising Networks
    • Merchant Partners
  • Categories of Personal Information Machaon Discloses for a Business Purpose and Categories of Third Parties to Whom Personal Information Is Disclosed for a Business Purpose
    • Category of Personal Information
      • Identifiers (e.g., name, mailing address, email address, phone number, credit/debit card number)
      • Characteristics of protected classifications (e.g., gender, age)
      • Commercial information (e.g., products or services purchased, purchase history)
      • Internet or other electronic network activity (e.g., browse or search history)
      • Geolocation data (e.g., latitude or longitude)
      • Audio, electronic, visual, or similar information (e.g., recording of Guest service calls)
      • Inferences drawn from any of the above (e.g., preferences or characteristics)
    • Category of Third Party
      • Advertising Networks
      • Internet Service Providers
      • Data Analytics Providers
      • Government Entities
      • Operating Systems and Platforms
      • Legal, Risk, and Security
  • At your direction or request, or when you otherwise consent, we may share your information with third parties (e.g., if a guest provides explicit, opt-in consent to the linking and use of data with a specifically identified third party partner, such data may be linked and may be used by Machaon and/or the third party partner as described at the time consent is obtained, including for Machaon advertising or advertising measurement purposes).
  • Non-Discrimination
  • Machaon will not discriminate against you because you exercise your rights. For example, Machaon will not deny you goods or services or charge you a different price or rate for goods or services if you make an access, deletion, or do not sell request.
  • If you are a California Resident, You Have the Following Rights Under the CCPA
    • Right to request Machaon disclose Personal Information, or categories of Personal Information, it collects, uses, discloses, and sells or shares for cross-context behavioral advertising
    • Right to request Machaon correct inaccurate personal information we maintain about you
    • Right to request Machaon delete Personal Information we have collected from you
    • Right to request Machaon opt you out of the sale of your Personal Information or sharing of your Personal Information for cross-context behavioral advertising. Note: Machaon will also treat Global Privacy Control browser signals as opt-out of sale/sharing requests.
    • Process Used to Verify an Access, Correction, and/or Deletion Request

If you are a Machaon Guest, you will be required to submit information about yourself that Machaon will use to determine if we have information about you. If we are able to locate information about you, then we will fulfill your access, correction and/or deletion request. If we are not able to verify your information, then we may provide you with a report that includes the categories of personal information we collect, use, disclose, and sell or share.

• If you are an authorized agent, then you will be required to submit your contact information as well as information about the Guest for whom you are making a request. As an authorized agent you will receive an email confirming that we have received the request along with a second email asking you to fill out a certification form confirming your information and certifying you have the right to make a request on behalf of the Guest. Once the report is ready, it will be sent to the email or physical address you have given us, depending on the delivery method you choose.
• How to Submit a Verifiable Request (requests can be made no more than twice in a 12-month period)
  • You can submit a request using the methods listed below
    • Access Requests: Contact the privacy information line at (510) 839-5600
    • Correction Requests: Contact the privacy information line at (510) 839-5600
    • Deletion Requests: Contact the privacy information line at (510) 839-5600
    • Do Not Sell or Share (for Cross-Context Behavioral Advertising) My Personal Information Requests: Call (510) 839-5600
• If you are a California resident under 18 years old and a registered user, you can request that we remove content or information that you have posted to our website or other online services. Note that fulfilment of the request may not ensure complete or comprehensive removal (e.g., if the content or information has been reposted by another user). To request removal of content or information, please call the privacy information line at (510) 839-5600

To exercise your rights, please contact us at:

• info@machaondiagnostics.com
• (800) 566-3462

Other State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.

Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose (excluding Iowa and Utah).
• Data portability.
• Opt-out of personal data processing for:
  • targeted advertising (excluding Iowa);
  • sales; or
  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
• Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights please email us info@machaondiagnostics.com

Nevada provides its residents with a limited right to opt-out of certain personal information sales. However, please know we do not currently sell data triggering that statute’s opt-out requirements.

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no data transmission or storage system can be guaranteed to be 100% secure. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

8. Data Retention

We retain information only as long as necessary for business, legal, or regulatory purposes, consistent with applicable federal and state laboratory regulations.

9. Links to Other Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those third-party sites.

10. Children’s Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.

If you are under 18, do not use interactive features or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information.

Residents of certain states under 13, 16, or 18 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights for more information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The revised version will be posted on this page with an updated “Effective Date.” Continued use of our website after such updates constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact:

Machaon Diagnostics, Inc.
Attn: Privacy Officer
2023 Eighth Street
Berkeley, CA 94710 USA
info@machaondiagnostics.com
(800) 566-3462