U.S. State-Specific and EU/European Economic Area Privacy Disclosures

12. Your U.S. Privacy Rights and How to Exercise Them. If you are a U.S. resident, depending on where you live, you may have the following rights with respect to your Personal Information under applicable data protection laws:

• Access – You may have the right to know what Personal Information we have collected about you and to access such data.
• Data portability – You may have the right to receive a copy of your information in a portable and readily usable format.
• Deletion – You may have the right to delete your Personal Information that we have obtained, subject to certain exceptions.
• Correction – You may have the right to correct inaccuracies in your Personal Information.
• Opt out of certain processing – You may have the right to: (a) opt out of the processing of your Personal Information for purposes of targeted advertising, (b) opt out of the sale or sharing of your Personal Information; (c) limit the use of your Sensitive Personal Information (if applicable), and (d) opt out of the processing of your Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effect concerning you. (Please see Disclosure of Personal Information under Section 11 for more information on how TimelyCare sells, shares, and uses information for targeted advertising).

If required by law, we will only collect and process sensitive Personal Information from you, when we have obtained your prior express consent. You may withdraw your consent at any time by contacting us at the information below in Section 16 “Contact Information.” Note that withdrawal of your consent will not affect the lawfulness of our uses or sharing of your personal information before you withdraw your consent.

See Section 14 on how to exercise your rights including your right to opt-out of certain processing.

13. Individuals in the European Union, European Economic Area, and the United Kingdom. This section provides additional information regarding TimelyCare’s processing of personal information of people located in the European Union (“EU”), European Economic Area (“EEA”), and the United Kingdom (“UK”) in accordance with the EU Data Protection Regulation and UK Data Protection Regulation. For purposes of this section, “Personal Information” shall have the same definition as similar terms set forth in the foregoing data protection laws.

For a description of the categories of personal information collected and disclosed by us, the purposes of the processing, the recipients or categories of recipients of the Personal Information, and data retention policies please see the following Sections:

• Section 1, “Personal Information We May Collect About You”
• Section 5, “Use of Personal Information”
• Section 6, “Sharing of Personal Information”
• Section 9, “Data Retention”
• Section 11, “Categories of Third Parties to Whom We Sell or Share Personal Information ”

Legal Basis for Processing
Our legal basis for processing Personal Information depends on the Personal Information concerned and the context in which we process it. We process Personal Information from you where the processing is in our legitimate interests (including the purposes described in this Privacy Notice), where the processing is necessary for us to meet our applicable legal obligations, if we otherwise have your consent, or for the purposes of preventive or occupational medicine or medical diagnosis.

Automated Decision Making

TimelyCare does not make any automated decisions on your behalf or about you without first obtaining your express, opt-in consent. In the event we secure your consent to do so, you have the right to object to the processing of Personal Information via automated decision making at any time by following the instructions set forth below.

Transfers to Third Parties and Countries

Personal Information that we collect or receive may be transferred to and/or processed by third parties that are located outside of the EU, EEA or the UK, some of which applicable authorities may not consider to have an adequate level of protection for Personal Information. TimelyCare will only transfer Personal Information to third parties located outside of the EU, EEA, and the UK when it has ensured appropriate safeguards for such Personal Information through use of the standard contractual clauses or other lawful and approved methods.

You may have the following rights with respect to your Personal Information:

• The right to withdraw consent – If we use or share your Personal Information based on your consent, you may withdraw your consent at any time. Note that withdrawal of your consent will not affect the lawfulness of our uses or sharing of your Personal Information before you withdraw your consent.
• The right to access – You have the right to request TimelyCare for copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that TimelyCare correct any information you believe is inaccurate. You also have the right to request TimelyCare to complete information you believe is incomplete.
• The right to erasure – You have the right to request that TimelyCare erase your personal data under certain conditions.
• The right to restrict processing – You have the right to request that TimelyCare restrict the processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that TimelyCare transfer the data we have collected to another organization, or directly to you, under certain conditions.
• The right to object – You have the right to object at any time to processing of your personal data, under certain conditions.
• The right to lodge a complaint – If you believe we are using, disclosing, or otherwise processing your Personal Information in a way that is not in accordance with applicable law, you can lodge a complaint with the relevant data protection authority in your country. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so.

14. How to Exercise Your Rights.

To opt out of marketing emails, please reply to the email you received or by following the instructions included in the email or text correspondence. Please note that, even if you unsubscribe from certain correspondence, we may still need to contact you with important transactional or administrative information, as permitted by law. Additionally, if you withdraw your consent or object to processing of your Personal Information, or if you choose not to provide certain Personal Information, we may be unable to provide some or all of our Services to you.
To exercise any of the privacy rights afforded to you under applicable data protection laws, please submit a request to us by one of the following methods:

• Calling us toll free at (833) 484-6359
• Submitting a request through our webform.

You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Privacy Notice which means we will not deny goods or Services to you, provide different prices or rates for goods or Services to you, or provide a different level or quality of goods or Services to you. Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your Personal Information. You may also make a request on behalf of your minor child.

For security purposes, we may request additional information from you to verify your identity when you request to exercise your privacy rights. This information will be used solely to verify your identity in connection with your request and will not be retained. You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may require the agent to provide proof that you gave the agent signed permission to submit the request. We may also ask you to verify your identity or to directly confirm with us that you provided the agent permission to submit the request.

We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.

We will deliver our written response by mail or electronically, at your option.

We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law.

Appeals: If you are not satisfied with the resolution of your request and would like to submit an appeal, please contact us using the information below in Section 16 “Contact Information.”

15. Changes to Our Privacy Notice. TimelyCare reserves the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

16. TimelyCare Contact Information. If you have any questions or comments about this notice, the ways in which TimelyCare collects and uses your information described above, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Phone: 1-833-484-6359
Website: https://timelycare.com
Postal Address:
TimelyCare
Attn: Privacy Officer / Data Protection Officer
1315 South Adams
Fort Worth, Texas 76104

17. Acknowledgement and Consent. By using our website, application, and Services, you consent to the collection and use of your personal data as described in this Privacy Notice and to the processing and potential erasure of their personal data as outlined in this Privacy Notice. We remain committed to safeguarding the privacy and rights of our users in accordance with applicable regulations.