Your California Privacy Rights and Disclosures

This section supplements our Privacy Notice for California residents and is provided pursuant to the CCPA/CPRA.

Personal Information We Collect

We collect the following categories of personal information: identifiers; personal information under California Civil Code § 1798.80; protected classification characteristics relevant to trial eligibility; internet and network activity; geolocation data (city and state level); professional and employment information; health and medical information including physical or mental health diagnoses, conditions, and treatment history; and inferences drawn from the above for trial matching purposes. Health and medical information constitutes sensitive personal information under the CCPA/CPRA.

We collect this information directly from you; from affiliate referral partners; from clinical trial sites; and from medical record and health information exchange providers where you have explicitly authorised us to retrieve your records.

Sale and Sharing

Device identifiers and click identifiers may be transmitted to affiliate partners for conversion attribution, and conversion event data may be transmitted to third-party platforms via server-side integrations. This may constitute a sale or sharing of personal information under California law. We do not sell or share sensitive personal information.

Automated Decision-Making

We use automated matching technology to process your health profile and questionnaire responses to determine trial eligibility and facilitate referrals. You have the right to opt out of this processing as described below.

Your Rights

Right to Know — request the categories and specific pieces of personal information we hold about you, our sources, purposes, and the third parties with whom we have shared it, including in portable machine-readable format where feasible.

Right to Delete — request deletion of personal information we have collected, subject to legal exceptions.

Right to Correct — request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing — click [Do Not Sell or Share My Personal Information] or broadcast a GPC signal from a supported browser. We will process opt-out requests within 15 business days.

Right to Opt Out of Automated Decision-Making — opt out of our trial matching technology, noting this will significantly limit our ability to identify relevant trials for you.

Right to Limit Use of Sensitive Personal Information — direct us to limit use of your sensitive personal information to purposes necessary to provide our services.

Right to Non-Discrimination — we will not deny, degrade, or price-discriminate against you for exercising any of these rights.

To exercise any right, email privacy@healthmatch.io or submit a request at [INSERT LINK]. We will acknowledge within 10 business days and respond within 45 days. We will verify your identity before processing — for account holders by matching account information, and for others by verifying against information we hold.

You may designate an authorised agent by providing written proof of authorisation. We may verify your identity directly before processing.

Shine the Light

We do not disclose personal information to third parties for their own direct marketing purposes. California residents may contact us at privacy@healthmatch.io with questions about this.