California Consumer Privacy Act Notice

This privacy notice is for California residents in compliance with the California Consumer Privacy Act of 2018 (CCPA). This notice supplements our Privacy Policy. It explains what Personal Information (PI) we collect about you, where and from whom we obtain it, why we collect it, and your rights regarding it.  This notice applies to any PI that we collect about you.

PI We Collect And Disclose For Business Purposes

In the preceding twelve (12) months, we may have collected the following PI about California residents and have disclosed it for business purposes described:

Category

Examples

Collected

Categories of Third Parties to Which We Disclose PI for Business Purposes

Identifiers

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

PI categories listed in the California Customer    Records law

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some Personal Information included in this category may overlap with other categories.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Protected classification characteristics under  California or federal law

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), veteran or military status, genetic information (including familial genetic information).

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Commercial information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Biometric information

Genetic, physiological, behavioral, and  biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

Yes

Contracted Service Providers, Employers, Health Care Provider, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Internet and/or network   activity

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Geolocation data

Physical location or movements.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Sensory data

Audio, electronic, visual, thermal, olfactory, or similar information.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Professional or employment-related information

Current or past job history or performance evaluations.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Education information  subject to the Family Educational Rights and Privacy Act

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

Yes

Contracted Service Providers, Employers, Health Care Providers, Vendors, Family Members, Friends, Brokers, Insurance Carriers

Inferences drawn from     other personal information

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

No

 

 

PI does not include:

  • De-identified or aggregated consumer information
  • Publicly available information from government records
  • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
  • PI covered by other privacy laws, including: The Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA), the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994
Categories of Sources of PI

We obtain the categories of PI listed above from:

  • You or your authorized agent,
  • Service providers,
  • Affiliates,
  • Publicly available information,
  • Organizations with which you are employed or affiliated, or
  • Activity on our apps and websites

The collections from these sources can occur online, in person, paper or other electronic means.

Why We Collect PI

We collect your PI for one or more of the following business purposes:

  • To respond to an email or particular request from you
  • To communicate with you
  • To personalize services for you
  • To process an application as requested by you
  • To administer surveys and promotions
  • To provide you with information that we believe may be useful to you, such as information about products or services provided by us or other businesses
  • To perform analytics and to improve our products, websites, and advertising
  • To comply with applicable laws, regulations, and legal processes
  • To protect someone's health, safety, or welfare
  • To protect our rights, the rights of affiliates or related third parties, or take appropriate legal action
  • To keep a record of our transactions and communications
  • To detect and protect against security incidents
  • To debug to identify and repair errors
  • As otherwise necessary or useful for us to conduct our business, so long as such use is permitted by law

In the preceding twelve (12) months, we have not sold any PI.

Third parties are not allowed to use or disclose your PI other than as specified in our contract and as permitted by law.

If we seek to use your PI for a materially different purpose than we previously disclosed in this notice, we will notify you and will not use your PI for this new purpose without your explicit consent.

Your Rights
  1. You have the right to request that we disclose certain information to you about our collection and use of your PI over the preceding twelve (12) months prior to your request. Once we receive and confirm your verifiable consumer request, we will disclose to you:
    • What PI we collect about you
    • Where and from whom we collect PI about you
    • Our business purpose for collecting PI about you
    • The types of third parties with whom we share your PI
    • The specific pieces of PI we collect about you (however, we will not disclose your actual Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers)
    • The types of PI that we disclosed about you for a business purpose, and the categories of third parties to whom we disclosed your PI
  2. You have the right to be informed about the PI that we collect about you at the time that or before we collect it. This is that notice.
  3. You have the right to request that we delete any PI about you that we have. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why.
  4. You will not be discriminated against or penalized for exercising your rights to your PI, and we will honor your rights by not:
    • Denying you services,
    • Charging you different prices or rates for services,
    • Imposing penalties, or
    • Providing you with a different level or quality of services
How to Exercise Your Rights
  • You can submit requests for information about your PI by calling us at 1-800-503-5814 or in writing to: UnitedHealthcare Global Solutions 14141 Southwest Fwy Suite 500, Sugar Land, TX 77478
  • You may be required to submit proof of your identity for these requests to be processed
  • We will not be able to comply with your request if we are unable to confirm your identity
  • You may designate an authorized agent to make a request on your behalf subject to proof of identity and authorization
Timing
  • Our responses to any of your requests for the information described above will be limited to information that we have collected in the preceding twelve (12) months before our receipt of your verified request
  • You will receive our response to your request within 45 days of your request, unless we provide you with notice that it will take more than 45 days to respond (in that case, we won’t take more than 90 days to respond)
Changes

We will review this CCPA Notice annually and update it from time to time. Any changes will be posted on this page and will become effective as of the “Last Revised” date. We encourage you to review this notice periodically to be sure you are aware of those changes.

 

Last Revised: October 26 2020