Effective January 1, 2020

California-Specific Privacy Notice

Protecting your privacy on our website

What this privacy policy covers

This California-specific privacy notice applies to all the products, services, websites and applications offered by Kareo, Inc. (“Kareo,” “We,” “Us,” or “Our”), except where otherwise noted (collectively, the “Service” or “Services”). This privacy statement is an extension to and forms part of the main Kareo Privacy Policy.

Personal information we may collect about you and how it is used

General Information

For individuals who are California residents, the California Consumer Privacy Act (“CCPA”) requires certain disclosures about the categories of personal information we collect and how we use it, the categories of sources from whom we collect personal information, and the third parties with whom we share it. While we have set out the categories below as required by the CCPA, you can review our Privacy Policy for examples and other information that describes our data collection and use, as previously disclosed to you and which have not changed under this notice.

Depending on how you interact with us, Kareo may collect the categories of information as summarized in the table below. This Supplemental Notice does not apply to information covered by the Health Information Portability and Accountability Act collected and stored in our provision of Services to healthcare providers and billing companies. Through December 31, 2020, this Supplemental Notice also does not apply to personal information we collect from employees, owners, directors, officers, or contractors of businesses in the course of our provision or receipt of business-related services. It also does not apply to personal information we collect from employees or job applicants in their capacity as employees or job applicants.

Sources of Information Collected

The categories of personal information we collect about you, as detailed below, come from the following categories of sources:

• You, including through your use of our website and Services
• Automatically collected from your browser
• Our subsidiaries
• Third parties

Categories of Business/Commercial Purposes for Our Use of Your Information

The categories of personal information we collect about you (as detailed above) may be used for the following purposes:

• Providing our Services (for example, account servicing and maintenance, customer service, advertising and marketing, analytics, and communication about our Services)
• For our operational purposes and the operational purposes of our service providers and integration partners
• Improving our existing Services and developing new services (for example, by conducting research to develop new products or features)
• Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity
• Bug detection, error reporting, and activities to maintain the quality or safety of our services
• Auditing consumer interactions on our site (for example, measuring ad impressions)
• Short-term, transient use, such as customizing content that we or our service providers display on the services
• Other uses that advance our commercial or economic interests, such as third party advertising and communicating with you about relevant offers from third party partners
• Other uses that we notify you about

Your Rights and Choices

In addition to the rights outlined in our Privacy Policy and subject to certain restrictions, California residents may also have the right to request that we disclose what personal information we collect about you, delete any personal information that we collected from or maintain about you, and opt-out of the sale of personal information about you. As a California resident, you may also have the right to designate an agent to exercise these rights on your behalf. This section describes how to exercise those rights and our process for handling those requests, including our means of verifying your identity. If you would like further information regarding your legal rights under applicable law or would like to exercise any of them, please contact us here. While our contact form is the best way to reach us, you may also email us at privacy@kareo.com or call us at 844-422-7336.

Requests for Access to and Deletion of Your Personal Information

• Right to request access to your personal information

California residents have the right to request that we disclose what categories of personal information we collect, use, or sell about you. You may also request the specific pieces of personal information that we have collected about you. However, we may withhold some information where the risk to you, your personal information, or our business is too great to disclose the information.

• Right to request deletion of your personal information

You may also request that we delete any personal information that we have collected from or about you. However, if you ask us to delete it, you may no longer be able to access or use our Services. Additionally, we may retain personal information as authorized under applicable law, such as personal information required to provide our Services; to protect our business and systems from fraudulent activity; to debug and identify errors that impair existing functionality, as necessary for us, or others; to exercise or ensure another’s exercise of free speech or other rights; to comply with law enforcement requests pursuant to lawful process; for scientific or historical research; for our own internal purposes reasonably related to your relationship with us; or to comply with legal obligations. We may also need certain types of information so that we can provide our Services to you.

• How to exercise your access and deletion rights

California residents may exercise their California privacy rights by submitting your request here. While our contact form is the best way to reach us, you may also email us at privacy@kareo.com or call us at 844-422-7336.

For security purposes, we may request additional information from you to verify your identity when you request to exercise your California privacy rights. This information will be used solely to verify your identity in connection with your request and will not be retained.

Once you submit a request to (1) access the categories of personal information we have about you or (2) obtain a copy of specific pieces of personal information we have about you, we will verify your identity by matching the information provided in your request with information we may have in our system. Upon successfully verifying your identity, we will provide you with your requested information in a secure, password-protected format. If we are unable to verify your identity, we will notify you.

Once you submit a request to delete personal information we have collected from you, we will verify your identity by matching the information provided in your request with information we may have in our system. Upon successfully verifying your identity and confirming whether we have a right or obligation to maintain the information, we will delete your personal information and inform you once the deletion is complete. If we are unable to verify your identity, we will notify you.

Sale of Personal Information

For purposes of the CCPA, Kareo does not “sell” your personal information.

Non-Discrimination Rights

California residents have the right to not be discriminated against for exercising their rights as described in this section. We will not discriminate against you for exercising your CCPA rights.

Questions

If you have questions or suggestions, please contact us at:

Kareo Privacy
1111 Bayside Drive Suite 150
Corona Del Mar, CA 92625
Phone: 888-775-2736
Email: privacy@kareo.com

Last Updated

This policy is effective January 1, 2020.

This policy was last updated on December 31, 2019.