State-Specific Supplements

If you reside in California, Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nevada, Oregon, Texas, Utah, Vermont, Virginia, or Washington, or are otherwise protected by privacy or consumer health data laws in those jurisdictions, this page applies to you and supplements the DoCurious Privacy Policy.

For more information on data subject rights requests and how to submit a request, please visit this link. Please note that you may need to verify your identity and request before further action is taken. As a part of this process, you may be required to provide personal information, such as your name, state of residence, phone number and email address associated with your account, and/or government identification. Consistent with applicable laws, you may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, we may require that (i) you or your authorized agent provide a valid power of attorney; (ii) the agent provide proof that the you gave the agent signed, written permission to submit the request; (iii) you verify your identity with us; and/or (iv) directly confirm with us that the you provided the authorized agent permission to submit the request. Click on your state of residence to find out more.

California

Effective Date: January 1, 2023

If any complaint with us is not satisfactorily resolved, you can contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N 112, Sacramento, California 95834 or by telephone at (800) 952-5210 or (916) 445-1254.

Information Pertaining to California Consumer Requests	You can find information about consumer requests we received and processed under the California Consumer Privacy Act during the previous calendar year by emailing DPO@docurious.com.
Information Sharing by DoCurious Payments	DoCurious Payments will not share information it collects about you with its affiliates or third parties (both financial and non-financial), except as required or permitted by law.
Limit Use and/or Disclosure of Sensitive Personal Information	Certain categories of personal information that we collect and use might be “sensitive” under data privacy laws. Consistent with applicable law, you may limit certain uses or disclosures of your sensitive personal information and may exercise this right by using the instructions found here.
Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by DoCurious.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Sale and Sharing of Data	We do not sell personal information to third parties; we are not data brokers and do not put personal information on the open market. We do not knowingly sell or share the personal information of individuals who are younger than 16. We do allow third parties to collect personal information through the DoCurious Platform and share personal information with third parties for the business purposes described in the Privacy Policy including, without limitation, advertising and marketing on the DoCurious Platform and elsewhere based on users’ online activities over time and across DoCurious, services, and devices. Consistent with applicable law, you may opt out of such processing as described here.
Right of Non- Discrimination	We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on the service may change or no longer be available to you. Any differences in the services are related to the information provided.
Data Retention	We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include: The length of time we have an ongoing relationship with you and provide services to you (for example, for as long as you have an account with us or keep using our services) and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise; Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or Whether retention is allowed by applicable law (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information, except that we may attempt to re-identify the information solely for the purpose of determining whether its de-identification processes satisfy the requirements of the California Privacy Rights Act.

Colorado

Effective Date: July 1, 2023

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by DoCurious upon request.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@docurious.com with the subject “Appeal of Consumer Rights Request.”
Personalized Advertising Opt-Out	We do not sell personal information. However, we do process personal information for purposes of displaying advertisements that are selected based on users’ online activities over time and across different sites, services, and devices. We also engage in automated processing that could affect you. Consistent with applicable law, you may opt out of such processing as described here. We strive to honor opt-out preference signals where required by applicable law. When we detect an opt-out preference signal, we will make reasonable efforts to honor such opt outs for jurisdictions that require them. Please note that your opt-out preference signal might only apply to the particular browser, device, or technology that you use to opt-out. The opt-out preference signals are offered by a third party that we do not control.
Right to Opt-Out for the Purposes of Profiling for Decisions That Produce Legal or Similarly Significant Effects	Consistent with applicable law, you may have the right to opt-out of processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any right you may have, please click here.
Sensitive Data Inferences	We may process inferences from your sensitive data for the purposes discussed in our Privacy Policy. In the event that we do, we will retain the inferences until we have fulfilled the purpose for which we collected them. We will delete such inferences in accordance with our Privacy Policy.
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form consistent with applicable law.

Connecticut

Effective Date: July 1, 2023

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by DoCurious.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@DoCurious.com with the subject “Appeal of Consumer Rights Request.”
Online Contact Information	If you have any questions, you may also contact us at DPO@DoCurious.com with the subject “Privacy Contact.”
Right to Opt-Out for the Purposes of Profiling for Decisions That Produce Legal or Similarly Significant Effects	Consistent with applicable law, you may have the right to opt-out of processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any right you may have, please click here.
Personalized Advertising Opt-Out	We do not sell personal information. However, we do process personal information for purposes of displaying advertisements that are selected based on users’ online activities over time and across different sites, services, and devices. Consistent with applicable law, you may opt out of such processing by using the instructions found here. We strive to honor opt-out preference signals where required by applicable law. When we detect an opt-out preference signal, we will make reasonable efforts to honor such opt outs for jurisdictions that require them. Please note that your opt-out preference signal might only apply to the particular browser, device, or technology that you use to opt-out. The opt-out preference signals are offered by a third party that we do not control. Please see the opt-out preference signal settings and here for more information.
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form consistent with applicable law.

Delaware

Effective Date: January 1, 2025

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by DoCurious.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Right to Opt-Out for the Purposes of Profiling for Decisions That Produce Legal or Similarly Significant Effects	Consistent with applicable law, you may have the right to opt-out of processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any right you may have, please click here.
Personalized Advertising Opt-Out	We do not sell personal information. However, we do process personal information for purposes of displaying advertisements that are selected based on users’ online activities over time and across different sites, services, and devices. Consistent with applicable law, you may opt out of such processing by using the directions here. We strive to honor opt-out preference signals where required by applicable law. When we detect an opt-out preference signal, we will make reasonable efforts to honor such opt outs for jurisdictions that require them. Please note that your opt-out preference signal might only apply to the particular browser, device, or technology that you use to opt-out. The opt-out preference signals are offered by a third party that we do not control.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@docurious.com with the subject “Appeal of Consumer Rights Request.”
Online Contact Information	If you have any questions, you may also contact us at DPO@docurious.com with the subject “Privacy Contact: Delaware.”
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form consistent with applicable law.

Iowa

Effective Date: January 1, 2025

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@docurious.com with the subject “Appeal of Consumer Rights Request.”

Montana

Effective Date: October 1, 2024

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by DoCurious.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Right to Opt-Out for the Purposes of Profiling for Decisions That Produce Legal or Similarly Significant Effects	Consistent with applicable law, you may have the right to opt-out of processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any right you may have, please click here.
Personalized Advertising Opt-Out	We do not sell personal information. However, we do process personal information for purposes of displaying advertisements that are selected based on users’ online activities over time and across different sites, services, and devices. Consistent with applicable law, you may opt out of such processing by using the instructions found here. We strive to honor opt-out preference signals where required by applicable law. When we detect an opt-out preference signal, we will make reasonable efforts to honor such opt outs for jurisdictions that require them. Please note that your opt-out preference signal might only apply to the particular browser, device, or technology that you use to opt-out. The opt-out preference signals are offered by a third party that we do not control.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@docurious.com with the subject “Appeal of Consumer Rights Request.”
Online Contact Information	If you have any questions, you may also contact us at DPO@docurious.com with the subject “Privacy Contact: Montana.”
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form consistent with applicable law.

Nevada

Effective Date: March 31, 2024

Consumer Health Data Privacy Policy	Some of the categories of information you choose to provide to us may be considered “consumer health data.” We may collect, use, and share this information pursuant to our Privacy Policy. Please review our Privacy Policy for information about these categories of personal information, the sources from which we collect personal information, the categories of third parties and affiliates with which we share personal information, and other important information.
Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information, including consumer health data, that we have collected about you as well as more information about our data sharing and other practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information, including consumer health data, held by DoCurious.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information, including consumer health data.
Right to Cease Collection and Sharing of Consumer Health	Some of the categories of information you choose to provide to us may be considered “consumer health data.” To exercise any right you may have, please see here.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@docurious.com with the subject “Appeal of Consumer Rights Request.”

Oregon

Effective Date: July 1, 2024

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by DoCurious.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Right to Opt-Out for the Purposes of Profiling for Decisions That Produce Legal or Similarly Significant Effects	Consistent with applicable law, you may have the right to opt-out of processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any right you may have, please see here.
Personalized Advertising Opt-Out	We do not sell personal information. However, we do process personal information for purposes of displaying advertisements that are selected based on users’ online activities over time and across different sites, services, and devices. Consistent with applicable law, you may opt out of such processing by using the instructions here. We strive to honor opt-out preference signals where required by applicable law. When we detect an opt-out preference signal, we will make reasonable efforts to honor such opt outs for jurisdictions that require them. Please note that your opt-out preference signal might only apply to the particular browser, device, or technology that you use to opt-out. The opt-out preference signals are offered by a third party that we do not control.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@docurious.com with the subject “Appeal of Consumer Rights Request.”
Online Contact Information	If you have any questions, you may also contact us at DPO@docurious.com with the subject “Privacy Contact: Oregon.”
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form consistent with applicable law.

Texas

Effective Date: July 1, 2024

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by DoCurious.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Right to Opt-Out for the Purposes of Profiling for Decisions That Produce Legal or Similarly Significant Effects	Consistent with applicable law, you may have the right to opt-out of processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any right you may have, please click here.
Personalized Advertising Opt-OutUse of Opt-Out Signal	We do not sell personal information. However, we do process personal information for purposes of displaying advertisements that are selected based on users’ online activities over time and across different sites, services, and devices. Consistent with applicable law, you may opt out of such processing by using the instructions found here. We strive to honor opt-out preference signals where required by applicable law. When we detect an opt-out preference signal, we will make reasonable efforts to honor such opt outs for jurisdictions that require them. Please note that your opt-out preference signal might only apply to the particular browser, device, or technology that you use to opt-out. The opt-out preference signals are offered by a third party that we do not control.
Appeal of Consumer Rights Requests	To appeal a refusal to take action on your request, please see the instructions in our response to your request or submit your appeal in writing by contacting DPO@docurious.com with the subject “Appeal of Consumer Rights Request.”
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form consistent with applicable law.

Utah

Effective Date: December 31, 2023

Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices. For more information about how we collect, use, and disclose personal information for business purposes, please review our Privacy Policy.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information. We may use such information in de-identified form consistent with applicable law.

Vermont

Information Sharing by DoCurious Payments

DoCurious Payments will not share information it collects about you with its affiliates or third parties (both financial and non-financial), except as required or permitted by your state’s law.

Virginia