This California Privacy Notice (“Notice”) supplements our general Privacy Policy and applies solely to California residents (“consumers” or “you”). This Notice is provided by Verify Diagnostics LLC dba Vanta Diagnostics and KorPath (“Verify,” “we,” “us,” or “our”), operating clinical laboratory facilities in South Carolina, Florida, and Pennsylvania.
We adopt this Notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), and other applicable state and federal privacy laws.
Scope and HIPAA Exemptions
Please note that the CCPA contains broad exemptions for Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA) and medical information governed by the California Confidentiality of Medical Information Act (CMIA).
Therefore, this Notice does not apply to your protected health information, clinical laboratory test orders, or test results that we process as a HIPAA-covered entity or business associate. Our handling of that data is strictly governed by federal HIPAA regulations, CLIA (Clinical Laboratory Improvement Amendments), and our Notice of Privacy Practices. This CCPA Notice applies only to personal information collected outside of your health/medical records (such as information collected via our website, marketing inquiries, or business-to-business interactions).
Categories of Personal Information We Collect
In the preceding 12 months, we may have collected (and may continue to collect) the following categories of non-PHI personal information:
- Identifiers such as name, postal address, email address, IP address, or online identifiers.
- Personal information such as name, address, telephone number, or insurance policy number.
- Protected classification characteristics such as age, ethnicity, gender, veteran status, mental illness or disabilities.
- Commercial Information such as records of testing services.
- Internet/Electronic network activity such as browsing history, search history, and interactions with our website or advertisements.
- Professional or employment-related Information
Sources of Information and Business Purposes for Use
We collect this data directly from:
- Directly from you (e.g. when you fill out a form on our website).
- Indirectly from you (e.g. automatically through cookies and tracking pixels when you navigate our site).
- Directly from our clients or their agents (e.g. information provided by your healthcare provider for testing services).
We use this information for the following business purposes:
- To operate, maintain, and optimize our website and customer service.
- To respond to your inquiries or coordinate services with healthcare providers.
- To detect security incidents and protect against fraudulent or illegal activity.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
Sharing of Personal Information
We do not sell your personal information. However, like many companies, we use standard digital analytics and advertising partners that may track online activity. Under the CCPA’s broad definitions, this sharing could be construed as “selling” or “sharing” for cross-context behavioral advertising.
- We do not knowingly sell or share the personal information of consumers under 16 years of age.
- We do not use or disclose “sensitive personal information” for purposes other than those permitted by the CCPA.
We may share your personal information with:
- Companies or individuals who advise us while running our business.
- Relevant authorities, or other recipients as required in litigation, if Verify believes in good faith that such disclosure is necessary (i) in connection with any legal investigation; (ii) to comply with relevant regulatory requirements and laws, such as laws requiring the disclosure of payments made to healthcare providers, (iii) to respond to subpoenas or warrants served to Verify; (iv) to protect or defend the rights or property of Verify; or (v) to investigate or assist in preventing any violation or potential violation of the law.
Your Rights Under the CCPA
If you are a verified California resident, you have the following rights regarding your non-exempt personal information:
- Right to Know/Access: You can request to know what personal information we have collected, used, and disclosed about you over the past 12 months.
- Right to Delete: You can request that we delete the personal information we collected from you, subject to certain legal exceptions (such as our compliance with federal or accreditation agency laboratory data retention laws).
- Right to Correct: You can request that we correct inaccurate personal information that we maintain about you.
- Right to Opt-Out of Sale/Sharing: You have the right to direct us not to “sell” or “share” your personal information with third-party ad networks.
- Right to Non-Discrimination: We will not discriminate against you (e.g., deny services) for exercising your privacy rights.
How to Contact Us and Exercise Your Rights
To exercise any of your CCPA rights, or if you have questions regarding our privacy practices across our laboratory locations or digital footprints, please submit a verifiable consumer request to us using one of the contact methods described in our Privacy Policy or Notice of Privacy Practices.
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. We must verify your identity before fulfilling requests to delete, correct, or disclose information to ensure data security.
Under California Civil Code Section 1798.83, California residents with whom we have an established business relationship are entitled to request and receive, free of charge, once per calendar year, information about the Personal Information we shared, if any, with other businesses for their own direct marketing uses during the prior year.
Changes to this Notice
We reserve the right to amend this Notice at our discretion and at any time. The date this Notice was last updated is identified at the top of this page. You are responsible for periodically visiting our website and this Privacy Notice to check for any changes.