California Residents Notice

1. Scope

This notice applies to California residents and supplements our Privacy Policy. In the event of a conflict, this notice controls for California residents.

2. Categories of personal information collected

In the last 12 months we have collected the following categories of personal information from California residents:

3. Business purposes

• Operate, secure, and improve the Platform
• Process orders, payments, and refunds
• Route intake to clinicians and pharmacy partners
• Communicate with you about your account and program
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Send marketing communications where you have consented

4. Sources of information

• Directly from you
• Automatically from your device when you visit the Platform
• From service providers (e.g., payment processors, identity verification, fraud-prevention)

5. Sale, sharing, and disclosure

We do not sell personal information for money. We do not sharepersonal information with third parties for cross-context behavioral advertising in a way that triggers the CCPA definition of “sharing.”

We disclose personal information for business purposes to service providers under written contracts that limit use to providing services to Livozo. Categories disclosed for business purposes include all categories listed in section 2.

6. Retention

We retain personal information for as long as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Retention by category is generally:

• Account identifiers and communications: while account active, then up to 7 years
• Transaction records: 7 years (tax and consumer-protection laws)
• Medical records held by the affiliated PC: state-mandated retention (often 7–10 years)
• Marketing data: until you opt out plus a suppression-list period
• Server logs: typically 90 days

7. Your CCPA / CPRA rights

• Right to know the categories and specific pieces of personal information we hold about you.
• Right to access a copy in a portable format.
• Right to delete personal information (subject to legal exceptions).
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing (we do not sell; we do not share for behavioral advertising).
• Right to limit use of sensitive personal information to what is necessary to perform the service.
• Right to non-discrimination for exercising your rights.

Submit a request by emailing [email protected] or using our web form (link to be added at launch).

8. Do Not Sell or Share / Limit Sensitive PI

Although we do not sell or share personal information as those terms are defined under the CCPA/CPRA, you may submit a “Do Not Sell or Share My Personal Information” request and a request to limit use of sensitive personal information to confirm and document your preference:

• Email [email protected]with subject “Do Not Sell or Share.”
• Send a Global Privacy Control (GPC) signal — we honor it as an opt-out.

9. Shine the Light (Cal. Civ. Code §1798.83)

California residents may request information about disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

10. CMIA acknowledgment

California medical information held by clinicians at {{PC_NAME}}is protected by the California Confidential Medical Information Act (CMIA), in addition to HIPAA. Use and disclosure require your written authorization except in narrow circumstances defined in Cal. Civ. Code §56.10.

11. Verification and authorized agents

We will verify your identity before fulfilling a request, typically by matching the email on the request to the email on your account and by asking for additional confirming information when the request relates to specific pieces of personal information. You may designate an authorized agent in writing; we may ask the agent for proof of authorization and may verify your identity directly.

12. Contact

Email [email protected]. Toll-free phone to be published at launch.