Updated January 1st, 2020
MedPro Disposal is compliant with the California Consumer Privacy Act (CCPA).
What Personally-Identifying Information Does MedPro Disposal Collect and How Does MedPro Disposal Use It?
In order to access certain services and portions of the websites or marketing or education programs we offer, you may be required to register by providing certain, limited, personal information regarding you and the company you represent, such as your name, your company name, your email address or billing information, or other data which can be reasonably linked to such information by MedPro Disposal. MedPro Disposal may use this information to contact you and others at your company to further discuss your company’s interest in MedPro Disposal and to send information regarding MedPro Disposal, such as newsletters, promotional materials, and information about upcoming events and training.
MedPro Disposal may use data collected from you or your company for marketing purposes. For example, MedPro Disposal may use information you provide when requesting a quote or more information to contact you via phone, automated dialing, email or direct mail, to contact you about your interest in MedPro Disposal’s services.
When you send emails or other communications to MedPro Disposal, MedPro Disposal may retain those communications in order to process your inquiries, respond to your requests and improve MedPro Disposal’s products and services.
MedPro Disposal uses collected personal information for the following general purposes: products and services, billing, identification and authentication, products and services improvement, contact, and research. If MedPro Disposal uses your personal information in a manner different than the purposes for which it was collected as disclosed in this policy and otherwise by MedPro Disposal to you, then MedPro Disposal will ask for your consent prior to such use.
What Tracking Information Does MedPro Disposal Collect and How Does MedPro Disposal Use It?
All information that MedPro Disposal collects may be used for improving our products and services, providing more effective customer service, performing research, and identifying ways of improving our site.
How Does MedPro Disposal Store My Data?
MedPro Disposal uses its own and third-party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run our business. The technical processing and transmission of the Service, including your content, may involve (a) transmissions over various networks, and (b) changes to conform and adapt to technical requirements of connecting networks or devices. Currently, MedPro Disposal and its authorized third party vendors and hosting partners process data (including possibly your personal information) on servers in the United States of America. In some limited cases, personal information may be processed and stored outside the United States of America.
All customer data, including service records and cleanup documentation, is stored on a secure server within a high-security firewall, with restricted access to external networks.
When Does MedPro Disposal Disclose My Data?
MedPro Disposal only shares information with other companies or individuals outside of MedPro Disposal in the following limited circumstances:
- With your consent, as in providing it to your insurance company who may be assisting with payment of services.
- When MedPro Disposal has a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to (a) comply with valid legal processes, applicable law, regulation or enforceable governmental requests; (b) when your actions violate the Terms of Service; (c) to protect user security, the security of other persons, or the security of MedPro Disposal, consistent with applicable laws; and (d) to defend or assert our legal rights.
- To our subsidiaries, affiliated companies and service providers, such as credit-card payment processors or third party API resources for marketing and research tools, who perform services on our behalf. These subsidiaries, affiliated companies, and service providers may have access to information, including personal information, only as needed to perform their functions and are not permitted to share or use such information for any other purposes.
Your Choices, Accessing and Updating Information
If you become a customer, you may control certain information stored by MedPro Disposal. For example, MedPro Disposal collects your email address. If you previously opted-in to receive marketing emails, no longer want us to contact you for marketing purposes, you can change your account settings by opting out of marketing-related emails. Please remember that we will always need an email for mandatory service communications such as billing reminders, information on pending job details, and security announcements.
Because of the way MedPro Disposal maintains certain records, after we delete your information, residual copies may take a period of time before they are deleted from MedPro Disposal’s active servers and may remain on backup systems.
Compliance with California Consumer Privacy Act (CCPA)
MedPro Disposal is compliant with the California Consumer Privacy Action (CCPA) enacted into law on January 1st, 2020. As a resident of California, you have specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that MedPro Disposal disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
- If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
Deletion Request Rights
You have the right to request that MedPro Disposal delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Exercising Access, Data Portability, and Deletion Rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:
- Emailing us at email@example.com
- Completing the below form:
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collect personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to the personal information associated with that specific account.
We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
For instructions on exercising sale opt-out rights, see Personal Information Sales Opt-Out and Opt-In Rights.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Security and Retention
MedPro Disposal takes commercially reasonable security measures to guard your information against unauthorized access to or unauthorized alteration, disclosure or destruction. These measures include safeguards such as firewalls, encryption, and secure technology. Certain areas of the MedPro Disposal websites such as online payment may only be accessed with a user ID and password. It is your responsibility to keep your password confidential and not disclose it to any other person. You are responsible for all persons using your user ID and password. Please advise us immediately if you believe your user ID and password have been compromised.
MedPro Disposal restricts access to your information to MedPro Disposal employees, contractors, and agents who need to know the information in order to process it on MedPro Disposal’s behalf. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution if they fail to meet these obligations.
However, neither people nor security systems are foolproof, including encryption systems. In addition, people can commit intentional crimes, make mistakes, or fail to follow policies. Therefore, while MedPro Disposal uses commercially reasonable efforts to protect your information, MedPro Disposal cannot guarantee its absolute security. If applicable law imposes any non-disclaimable duty to protect your information, you agree that intentional misconduct will be the standards used to measure our compliance with this duty.
MedPro Disposal retains information for as long as required, allowed or MedPro Disposal believes it is useful but does not undertake retention obligations. MedPro Disposal may dispose of information in MedPro Disposal’s sole discretion without notice, subject to applicable law that specifically requires the handling or retention of information. You must keep your own, separate back-up records of your data.
If you have any questions regarding this policy or your rights to data protection, please contact us by email at firstname.lastname@example.org.