Last Updated: June 30, 2021
HOW WE COLLECT PERSONAL INFORMATION
Personal Information You Voluntarily Provide
Depending on the nature of your interaction with us, the personal information that we may ask you to provide to us may include the following information:
- Information that you provide by interacting with us through the Website, such as by placing an order or inquiry, or requesting services or support through our Website. When you make a purchase through the Website we collect the following types and categories of personal information in order to fulfill and ship your order:
- your full name, email address, telephone number, shipping address, and payment information;
- any personal information described on a vaccine card or other proof of vaccination that you upload or submit to the Website.
- Your username and e-mail address that you associate with your account if you create an account through the Website.
- Records and copies of your correspondence (including e-mail addresses) if you contact us, whether through the Website or otherwise.
- Details of transactions you carry out through our Website and of the fulfillment of your orders for products, services, and support. As noted above, you will be required to provide payment information to place an order through our Website. This payment information will be processed by a third-party payment processor integrated into the Website.
- Information about your social media profile or account if you interact with us through Social Media.
Additional information regarding the collection and use of personal information is described below.
Automatically Collected Information
HOW WE USE VOLUNTARILY PROVIDED PERSONAL INFORMATION
PLEASE NOTE THAT YOU DO NOT HAVE TO PROVIDE US WITH YOUR PERSONAL INFORMATION TO BROWSE THE WEBSITE, AND YOU ARE NEVER UNDER ANY OBLIGATION TO PROVIDE YOUR PERSONAL INFORMATION. However, if you do not provide your personal information, you may not be able to use certain features of the Website or VaxCard services.
By providing us your personal information, you signify to us your understanding that we will use that information for the purposes identified herein, that we will store your information on our servers located in the United States, that your personal information may be subject to the laws of the United States, and that it may be accessible to governments, tribunals, law enforcement and regulatory agencies in the United States.
Use Of Personal Information To Perform Services Requested And To Contact You
VaxCard uses personal information provided by Website users to provide them with the services and products we offer, and to respond to their requests and inquiries. For example, if you make an order from VaxCard or create an account with VaxCard we will associate the information you provide with your order or account. Depending on the service or product ordered from VaxCard, and subject to availability, we may also use your personal information provided to verify your proof of vaccination. If you submit an inquiry to us we will use the information you provide to respond to your inquiry. Finally, we may use the personal information you provide to us to contact you regarding your use of the Website, if necessary, and to provide required notices.
Use Of Personal Information For VaxCard’s Marketing Purposes
If you engage with us through the Website or Social Media, create an account with VaxCard, or participate in or support any VaxCard activities, we may use the personal information you provide to contact you or send you information about VaxCard’s programs and how you can support or get involved with VaxCard. This may include information about promotions or events, or information that would otherwise be considered marketing information. At any time, you may request that we stop contacting you for marketing purposes by contacting VaxCard at email@example.com. Also, if we use your personal information to send you marketing communications via email, we will provide you with an unsubscribe mechanism to opt-out of receiving future marketing communications. If you request that we not contact you for marketing purposes (either by using the unsubscribe mechanism or by sending us an email), depending on the nature of our business relationship with you, we may still contact you for non-marketing purposes relating to your use of the Website or otherwise in regard to our business relationship with you.
For the avoidance of doubt, VaxCard does not share personal information collected through the Website with any third parties for their marketing purposes.
Use Of Personal Information Generally
In addition to the purposes described above, we may also use both personal information and Automatically-Collected Information to help diagnose problems with the Website, to analyze statistical use patterns and demographic data, and to customize and tailor your experience using the Website, such as to display content in accordance with your interests and preferences.
In addition, we may use personal information that you provide to us, including feedback, as well as Automatically-Collected Information, to develop and improve our product and service offerings.
COLLECTION AND USE OF AUTOMATICALLY-COLLECTED INFORMATION
As described above, VaxCard uses commonly-used automatic information-gathering tools, such as cookies and Google Analytics, to collect Automatically-Collected Information as you navigate the Website in order to make your interactions with the Website easy and meaningful. When you visit the Website, our servers may send a cookie to your computer or other operating device. The cookie is placed on your hard drive or other operating device, and it assigns your computer or operating device a unique, random number that acts as a sort of anonymous ID. Standing alone, cookies do not personally identify you; rather, a cookie identifies the computer or operating device used to access the Website. Unless you choose to identify yourself to us, such as by placing an order, logging-in to your account, or filling out a web form, you remain anonymous to us when browsing the Website.
Most browsers automatically accept cookies, but you can disable the acceptance of cookies at any time by changing the preferences in your browser. Most browsers also allow you to change the settings to require that the browser notify you when you receive a new cookie. Please refer to your browser for information on how to disable and control cookies. Information about managing cookies in commonly used browsers is available online from www.allaboutcookies.org. If you disable your web browser’s ability to accept cookies, you will be able to browse the Website, but you may not be able to successfully use certain features of the Website.
Our use of Google Analytics
When you visit our Website, Google Analytics may automatically collect information from you through the use of Google’s analytics IDs, and Google provides some of this information to us in aggregate and anonymized form. An analytics ID is a specific string of numbers and letters (often called a “character string”) that is assigned to your computer or device but does not name you. The analytics ID allows Google to track usage data of a website, such as date and time of visit, duration of visit, website traffic patterns, “clickstreams,” other similar information about how visitors use a website, the type of web browser used, the operating system/platform a visitor uses, IP address, the websites that referred or linked a user to a website, and your CPU speed. Google Analytics provides information about the use of our Website to us in aggregate form (i.e., data about many Website users combined and not just about you). Some of this data might include the regional location or city of Website users, but again, this data will be in aggregate (and not individual) form. We might use information we receive from Google Analytics to learn how users are using the Website in general, and to improve the Website. We will not receive the analytics ID assigned to your computer or device that you use to access and use the Website.
“Do Not Track”
The Website does not track your online activities over time and across third-party web sites or online services, and so does not respond to browser “Do Not Track” signals. As described below, the Website may contain links to other websites not owned or operated by VaxCard. These websites may set cookies that obtain information about the fact that a web browser visited the Website from a certain IP address. These websites are not authorized to collect any other personal information from the Website unless you provide it to them directly.
HOW WE SHARE THE PERSONAL INFORMATION WE COLLECT
VaxCard may share your personal information in the manners described in this section. In addition, VaxCard may also share aggregated Automatically-Collected Information that has been de-identified or otherwise rendered anonymous without restriction.
Third-Party Service Providers
VaxCard may provide your personal information and Automatically Collected Information to third party service providers to perform certain services for us, including: to send communications on our behalf; to perform website analytics services, as described above in this Privacy Statement; to process payments for orders placed through the Website; to verify of proof of vaccination; and to provide other services relating to the operation of the Website (such as hosting, data storage, and security).
VaxCard does not sell personal information to any third parties. Rather, any disclosure of personal information described under this section is solely to enable the third party to perform the requested services on VaxCard’s behalf. These third-parties are not authorized to use your information received from VaxCard in any way, including for their own marketing efforts, other than for the purpose of providing a service on our behalf, and are required to keep personal information received from VaxCard confidential.
Merger, Acquisition, or Sale
Required by Law
Notwithstanding anything to the contrary in this Privacy Statement, VaxCard reserves the right to disclose your personal information and Automatically-Collected Information, without your consent and without additional notice to you, if we reasonably believe we are required by law, rule, regulation, judicial proceeding, court order, subpoena, or similar legal process to do so; if we reasonably believe that disclosure is necessary to protect, establish, or exercise our rights or property, or to defend against legal claims; or if we reasonably believe that disclosure is necessary to protect our other Users or our employees, property, or business, or to take action regarding illegal activities or suspected fraud.
RETENTION, STORAGE AND REMOVAL
We may retain all personal information and Automatically-Collected Information in our databases for as long as necessary to perform the business purposes for which we’ve collected it, or until you ask us to remove your information from our databases, unless applicable laws permit or require otherwise. At all times we will use reasonable efforts to securely store your personal information that is in our possession. Note that when you ask us to remove your information from our databases, it may be impossible to remove some information, such as information tracked in our web server log files and information that may reside in backup files. We retain this residual information to preserve the integrity of our back-up files and for business continuity purposes. We may also retain Automatically-Collected Information even after you request that we remove your information from our databases, for use in the aggregate and to analyze and improve the Website.
Further, where you request that we remove your information from our databases, we may retain personal information and Automatically-Collected Information to comply with any applicable law, rule, regulation, or guideline; to prevent fraudulent activity; to protect ourselves against liability; as well as to allow us to enforce our contractual or other rights, and to pursue available remedies and limit any damages we may sustain.
LINKS AND SOCIAL MEDIA
We maintain commercially reasonable procedures and technology designed to prevent unauthorized access to the personal information you provide to us. This Website has reasonable technical and organizational security measures in place to protect the loss, misuse, or alteration of information under our control. However, we cannot guarantee that unauthorized third parties will never be able to defeat those security measures. Although we cannot guarantee that our systems are completely secure all of the time, we periodically update and test the adequacy of the processes and technologies used to protect the personal information of our customers and other individuals.
We do not send e-mails to customers requesting billing, login, or password information. If you receive an e-mail purporting to be from VaxCard that asks you to provide personal or account information, or login and passwords, do not provide such information unless you have first verified that the web site or e-mail is from VaxCard. Such e-mails may be fraudulent and used in connection with scams known as phishing. We asks that you report any suspicious e-mails or websites purporting to be or having an affiliation with VaxCard to us.
ACCESSING, CORRECTING AND UPDATING YOUR INFORMATION
In general, Website users may access, update or change their personal information by sending us a request to firstname.lastname@example.org. If you want us to delete your personal information from our databases, please contact us at email@example.com. Upon receipt of your request to delete or to change your personal information, we will use commercially-reasonable efforts to remove your existing personal information from our databases, but see the Section entitled “Retention, Storage, and Removal” above regarding why we may retain some information. Please note that if we remove any or all of your personal information not all features of the Website may function properly.
YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION
If you are based in certain jurisdictions, you may in some circumstances have the following rights in relation to the personal information we collect about you. These may include some or all of the rights to request to:
- know the categories of personal information collected about you, including:
- specific pieces of personal information collected;
- the categories of sources from which we collected personal information;
- the purposes for which we use the personal information;
- the categories of third parties with whom we share the personal information;
- the categories of information that we sell or disclose to third parties
- access a copy of the personal information held about you
- rectify any incorrect or incomplete personal information we hold about you
- delete, restrict or remove the personal information we hold about you
- transfer the personal information we hold about you to another party
- object to any further processing of your personal information; or
- object to the (i) sale, or (ii) sharing for cross-contextual advertising purposes, of your personal information (VaxCard does not currently sell your personal information or share it for any cross-contextual advertising purposes).
We will attempt to respond to your requests within one month and free of charge. Please note that with regard to all these rights, we reserve the right to:
- refuse your request based on the exemptions set out in the applicable data protection laws;
- verify your identity in order to process the request or request further information in furtherance of the same;
- charge you a reasonable administrative fee for any repetitive, manifestly unfounded, or excessive requests.
If we refuse your request to exercise any of these rights, we will give reasons for our refusal and allow you to challenge our decision. If we have shared your personal information with others, if required by applicable law, we will tell them about your request to rectify, erase, restrict or object to the processing or sale where possible. If you ask us, where possible and lawful to do so, we will also tell you with whom we shared your personal information so that you can contact them directly.
If you have any concerns about how we handle your personal information, please contact us at firstname.lastname@example.org
Your California Privacy Rights
Please note that VaxCard does not sell or disclose personal information to third parties for their direct marketing purposes. Notwithstanding the above, if you are a California resident, you have the right to request information from us regarding the manner in which we share certain categories of your personal information with third-parties. Specifically, California law provides you the right to submit a request to us at email@example.com to receive the following information:
- the categories of information we disclosed to third-parties for the third-parties’ direct marketing purposes during the preceding calendar year;
- the names and addresses of third-parties that received such information; and
- if the nature of a third-parties’ business cannot be reasonably determined from the third-parties’ name, examples of the products or services marketed.
You are entitled to receive a copy of this information in a standardized format and the information will not be specific to you individually.
We do not knowingly collect personal information from children under the age of 18. If we learn that we are in possession of personal information collected from a child under the age of 18, except where such information was collected with the consent of a parent or guardian age 18 or older, we will immediately delete that information from our systems.
How to Contact Us Regarding Your Privacy