SimplyTest Website Privacy Policy

September 10, 2026

INTRODUCTION, SCOPE, AND ACCEPTANCE

Alimetrix, Inc. d/b/a SimplyTest® (“Company”), is a health diagnostics company. We offer oral health and functional health diagnostic testing services, and we provide test results and related information to consumers and healthcare providers through our website and portal (collectively, “Products and Services”). We respect your privacy and take our responsibility to safeguard your information seriously. We also believe you should know what information we collect about you and how we use it. The purpose of this privacy policy (“Policy”) is to let you know how we handle the information collected through the use of the website located at https://simplytest.solutions/ and the portal located at https://providerportal.simplytest.com/signin and any associated ordering pages, payment links, payment setup workflows, or other online interfaces through which we collect information in connection with our Products and Services (collectively, the “Website”). As used in this Policy, terms such as “we”, “us” or “our” refer to Company. This Policy applies to the information that we collect through the Website. This Policy also applies to the information you provide to us when you respond to our invitations and marketing communications, such as emails and SMS/text messages. This Policy describes our practices for collecting, using, maintaining, protecting, and disclosing that information, as well as your choices and rights with respect to the same.

By accessing or using the Website, including registering an account or accessing the portal via the Website, completing forms on the Website, subscribing to our emails and other communications, or otherwise accessing or using any of the features or functionality offered on or through the Website, you consent to this Policy. Your use of the Website is also governed by the applicable terms and conditions posted on the Website, which are incorporated into and form part of this Policy by reference.

If you are a resident of the European Economic Area (EEA) or United Kingdom (UK) and choose to access or use this Website, we are subject to, as applicable, the EU General Data Protection Regulation (EU GDPR) and UK GDPR (together, “GDPR”) and, in such cases, we act as the “controller” of your Personal Information for purposes of the GDPR.

We also maintain a separate Consumer Health Data Privacy Policy for Washington residents, which describes our practices for collecting and using Washington residents’ consumer health data. That policy is available at https://simplytest.solutions/health-data-privacy. SimplyTest is a covered entity under the Health Insurance Portability and Accountability Act (“HIPAA”). To the extent that we receive or maintain protected health information governed by the HIPAA, our collection, use, and disclosure of such information is governed by our separate Notice of Privacy Practices.

This Policy does not apply to information collected by us offline, except as expressly described herein, or to information collected from third parties, including any third-party websites that may be accessible on or through this Website.

If you do not agree to the terms of this Policy, please do not access or use the Website or provide us with any Personal Information through the Website. Your continued use of the Website following the posting of changes to this Policy will mean that you accept those changes. If you have any questions about this Policy or our privacy practices, please contact us using the information in the CONTACT US section at the end of the Policy.

Your use of the Website is also governed by our Terms and Conditions, available at https://simplytest.solutions/terms-conditions/, which is hereby incorporated by reference. Except as expressly set forth in this Privacy Policy, the Terms and Conditions govern your access to and use of the Website and any related Services. To the extent of any conflict between the Terms and Conditions and this Privacy Policy on matters relating to the collection, use, disclosure, or protection of personal information, or the exercise of data privacy rights, this Privacy Policy shall control. For the avoidance of doubt, the dispute resolution and governing law provisions set forth in the Terms and Conditions apply to any dispute arising under or relating to this Privacy Policy.

Table of Contents

DEFINITIONS

The following capitalized terms apply throughout this Policy. Capitalized terms used in this Policy that are not included below are defined elsewhere in the Policy.

“Aggregated Information” is information about groups or categories of individuals, which does not identify and cannot reasonably be used to identify an individual.

“Individual” or “consumer” means a living natural person.

“Non-Identifying Information” is any information that does not directly or indirectly identify, and cannot reasonably be used to identify, an individual, household, or device.

“Personal Information” is any information that can identify, relate to, describe, or be linked with a consumer or their household.

“Process,” “Processing,” or “Processed” means any operation or set of operations performed on Personal Information, including through automated means.

“Sensitive Personal Information” is Personal Information that reveals a consumer’s (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) precise geolocation; (d) racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of a consumer’s mail, email and text messages, unless the business is the intended recipient of the communication; (f) genetic data; (g) the Processing of biometric information for the purpose of uniquely identifying a consumer; (h) Personal Information collected and analyzed concerning a consumer’s health; or (i) Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.

“Special Category Personal Information” is Personal Information that reveals a consumer’s racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs, or trade union membership; genetic and biometric data; and data concerning health, sex life or sexual orientation.

COLLECTION OF PERSONAL INFORMATION

You can browse the Website without telling us who you are or providing us with Personal Information. However, when you access or use the Website, we collect certain information about your use of the Website, as described below. If you choose to order diagnostic testing services, register for an account, access the portal, submit forms on the Website, or otherwise provide Personal Information to us, we will use that information and may disclose it to our affiliates, healthcare providers, and service providers for the purposes described in this Policy. Payments are processed through the portal and through third-party payment processors. You do not have to provide us with Personal Information; however, this may limit your ability to use some functions of the Website.

We may also collect Non-Identifying Information and use it along with Personal Information to create Aggregated Information. We do not treat Aggregated Information as Personal Information because it does not identify and cannot reasonably be used to identify an individual. In connection with providing our diagnostic testing services and processing billing, we may collect information classified as Sensitive Personal Information under applicable state privacy laws, including health-related data. We collect and use this information only as necessary to provide the products and services you request. In addition, we collect account log-in credentials (your username and password) solely to provide you with access to the Website portal and to maintain and service your account. Because we do not collect or process this information for the purpose of inferring characteristics about you, we treat this data as Personal Information (not Sensitive Personal Information) in accordance with applicable law.

In the twelve (12) months prior to the “last updated” date of this Policy, we have collected the categories of Personal Information indicated below:

Category Examples Collected
Identifiers A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. Yes
Identifiers Social Security number, Driver’s License number, or passport number, or other similar identifiers No
Personal information categories listed in the California Customer Records statute
(Cal. Civ. Code § 1798.80(e))(Note: Some of this information may overlap with information in other categories.)		 A name, address, telephone number, medical information, bank account number, credit card number, debit card number, or any other financial information, and company name Yes
Personal information categories listed in the California Customer Records statute
(Cal. Civ. Code § 1798.80(e))(Note: Some of this information may overlap with information in other categories.)		 Signature, education or employment history, social security number, physical characteristics or description, passport number, driver’s license or state identification card number, insurance policy number No
Protected classification characteristics under California or federal law Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, sexual orientation, reproductive health decision-making, military and veteran status, or genetic information (including familial genetic information), marital status, medical condition, and sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions) No
Commercial information Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies) Yes
Biometric information Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. No
Internet or other similar network activity Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement Yes
Geolocation data Physical location or movements, including precise geolocation. No
Sensory data Audio, electronic, visual, thermal, olfactory, or similar information. No
Professional or employment-related information Company, industry, job title Yes
Professional or employment-related information Performance evaluations. No
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. No
Inferences drawn from other Personal Information Profile reflecting a person’s preferences, characteristics, and behavior No
Inferences drawn from other Personal Information Profile reflecting a person’s psychological trends, predispositions, attitudes, intelligence, abilities, and aptitudes No
Account access information Website portal account log-in and password Yes
Account access information Financial account or card number in combination with any required security or access code No

We obtain the categories of Personal Information listed above from the following sources:

  • Directly from you. For example, we obtain information from you when you register for an account, access the portal, order or request diagnostic testing services, submit contact or onboarding forms on the Website, sign up for or respond to emails and/or SMS/text messages, request customer service or technical support, or otherwise contact us through the Website.
  • Indirectly from you. For example, we collect information about you based on your actions on our Website or from obtaining your contact information from electronic communications through the Website.
  • From healthcare providers. We may receive information from your ordering healthcare provider, such as your dentist, physician, or telehealth provider, who provides us with information necessary to fulfill your test order

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies, such as pixels, cookies, and analytics tools to collect certain information about your equipment, browsing actions, and patterns, including:

  • Details of your visits to our Website, including traffic data, logs, the pages you visit and the dates and times of your visits, the approximate general location indicated by your IP address, and other communication data and the resources that you access and use on the Website. We do not collect precise geolocation information or otherwise track your physical location.
  • Information about your computer and internet connection, including your IP address, operating system, device, and browser type.
  • Information about the types of marketing communications that you open and/or to which you respond.
  • Page URLs and referrers.
  • Information about your interactions with our Website, including your browsing behavior and engagement with Website features like our forms.

This information may be shared with the third parties that provide the tracking technologies, in some cases on a real-time basis. Certain third-party technologies used on this Website, including those provided by CloudFlare, Inc. for website security and performance and Google, LLC through Google Analytics and Google Tag Manager for website analytics, may collect information about your online activities when you visit our Website. For more information about these technologies and how to control them, see the COOKIE POLICY (ONLINE TRACKING TECHNOLOGIES) section below. Some browsers allow users to select “DO NOT TRACK” as an option to tell website owners you do not wish to have your information tracked. Please note that our Website currently does not respond to Do Not Track signals.

We use the information we collect automatically to help determine how visitors use parts of the Website so that we can analyze trends, administer the Website, determine consumer interest, and gather broad demographic information to provide for a better experience for the user. We also use this information to:

  • Estimate our audience size and usage patterns.
  • Store information about your preferences, allowing us to customize our Website according to your individual interests.
  • Speed up your searches.
  • Recognize you when you return to our Website.
  • Administer and troubleshoot issues directly related to the Website.
  • Maintain the security and performance of the Website.

Some of these automatic data collection technologies, as well as other content or applications on this Website, are provided by third parties. While we have implemented these third-party technologies on the Website and can configure certain settings related to their use, we do not control these third parties or the underlying technologies they may use. For more information about these third parties, as well as about our own use of automatic data collection technologies, please see the COOKIE POLICY (ONLINE TRACKING TECHNOLOGIES) section below. For information about your choices and rights regarding these automatic data collection technologies, please see the CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION section of this Policy.

USE OF PERSONAL INFORMATION

Our primary purpose in collecting Personal Information is to provide you with access to our Website and to facilitate the diagnostic testing services you request, including delivering your test results through the portal. If you choose to provide us with Personal Information through the Website and/or by registering an account with us, we use and Process your Personal Information for a number of purposes such as:

To present the Website and its contents to you.

To provide, support, and further develop our Website and diagnostic testing services, including sharing your Personal Information with your ordering healthcare provider, and service providers.

  • To customize, measure, and improve our services and content, and to operate, maintain, troubleshoot, test, and improve the functionality, features, usability, and performance of the Website.
  • To deliver, fulfill, and provide the diagnostic testing services and other offerings you request or order, including test order processing, fulfillment, delivery of test results and analysis, and related customer service and support.

To process, facilitate, authorize, and record payments and other transactions, including billing, invoicing, collections, and related recordkeeping, which may involve sharing information with payment processors, financial institutions, and other transaction service providers.

To communicate and otherwise correspond with you, including by email, telephone, text message, or other means, to respond to your inquiries and support requests, send transactional, administrative, account, billing, and security notices, and to inform you about our services and deliver service updates and promotional offers based on your communication preferences.

To provide you with other services you request as described when we collect the information, or to otherwise fulfill or meet the reason you provided the information.

To comply with applicable laws, regulations, and legal process, including to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

To protect our rights, the rights of affiliates or related third parties, or take appropriate legal action.

To help maintain the safety, security, and integrity of our Website, Products, Services, databases and other technology assets, and business, and to detect, investigate, prevent, and address fraud, unauthorized access, abuse, misuse, or other prohibited, harmful, or unlawful activity, including enforcing our terms, policies, and agreements.

To keep a record of our transactions and communications.

To notify you of changes to this Policy.

As described to you when collecting your Personal Information.

For our legitimate interests or those of a third party.

Where you consent.

As otherwise necessary or useful for us to conduct our business, so long as such use is permitted by law.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice and, where required, obtaining your consent.

What we use your Personal Information for: Our reasons:
To provide products and services to you For the performance of our contract with you or to take steps at your request before entering into a contract
To prevent and detect fraud against you or us For our legitimate interests or those of a third party, i.e., to minimize fraud that could be damaging for us and for you
Conducting checks to identify our customers and verify their identity; Screening for financial and other sanctions or embargoes; Other processing necessary to comply with professional, legal, and regulatory obligations that apply to our business, e.g., under health and safety regulation or rules issued by our professional regulator(s) To comply with our legal and regulatory obligations
Gathering and providing information required by or relating to audits, inquiries, or investigations by regulatory bodies To comply with our legal and regulatory obligations
Ensuring business policies are adhered to, e.g., policies covering security and internet use For our legitimate interests or those of a third party, i.e., to make sure we are following our own internal procedures so we can deliver the best service to you
Operational reasons, such as improving efficiency, training, and quality control For our legitimate interests or those of a third party, i.e., to be as efficient as we can so we can deliver the best service for you at the best price
Ensuring the confidentiality of commercially sensitive information For our legitimate interests or those of a third party, i.e., to protect trade secrets and other commercially valuable information; and to comply with our legal and regulatory obligations
Statistical analysis to help us manage our business, e.g., in relation to our financial performance, customer base, or other efficiency measures For our legitimate interests or those of a third party, i.e., to be as efficient as we can so we can deliver the best service for you at the best price
Preventing unauthorized access and modifications to systems For our legitimate interests or those of a third party, i.e., to prevent and detect criminal activity that could be damaging for us and for you; and to comply with our legal and regulatory obligations
Updating and enhancing customer records For the performance of our contract with you or to take steps at your request before entering into a contract; to comply with our legal and regulatory obligations; and for our legitimate interests or those of a third party, e.g., making sure that we can keep in touch with our customers about existing orders and new products
Statutory returns To comply with our legal and regulatory obligations
Ensuring safe working practices, staff administration and assessments To comply with our legal and regulatory obligations; and for our legitimate interests or those of a third party, e.g., to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you
Marketing our services to: (i) existing and former customers; or (ii) third parties who have previously expressed an interest in our services For our legitimate interests or those of a third party, i.e., to promote our business to existing and former customers
Credit reference checks via external credit reference agencies For our legitimate interests or those of a third party, i.e., to ensure our customers are likely to be able to pay for our products and services
External audits and quality checks For our legitimate interests or those of a third party; and to comply with our legal and regulatory obligations

Certain Personal Information we collect, including medical information and data concerning health, may constitute Special Category Personal Information under the GDPR. We process Special Category Personal Information only as necessary to provide the diagnostic testing services you request or with your explicit consent.

Artificial Intelligence Technologies. In limited cases, we use artificial intelligence technologies, such as generative AI and machine learning, to improve the quality and efficiency of our customer support. You will be informed when you are directly interacting with an AI-supported chatbot, agent, or similar communications channel, in accordance with applicable law. We do not use AI technologies to provide diagnostic testing or test results. We do not collect, use, or sell personal data for the purpose of training large language models.

DISCLOSURE OF PERSONAL INFORMATION

Company does not sell, trade, rent, or share Personal Information in exchange for money. Under certain privacy laws, our use of third-party cookies, including analytics and advertising cookies, may be considered a “sale” or “sharing” of Personal Information under applicable law. We share Personal Information with third parties only as described in this Policy or as otherwise permitted by law. We may share Aggregated Information, Non-Identifying Information, and other information that does not identify any individual with our service providers and trusted affiliates for the purposes outlined in this Policy, without restriction. We do not engage in automated decision-making that produces legal or similarly significant effects on consumers.

Disclosures to Affiliates. We may share Personal Information with our parent company, Spectrum Lab Services, Inc., and its other parents, affiliates, and subsidiaries for internal business purposes, including administration, support, and coordination of the services we provide.

Disclosures to Healthcare Providers. When a healthcare provider, such as your dentist, physician, or telehealth provider, orders a diagnostic test on your behalf, we share your test results and analysis with that provider so they can use the results in your care.

Disclosures to Third Parties Assisting In Our Operations. We may share Personal Information with third-party companies that we collaborate with or hire to perform services on our behalf, including website hosting, security, and infrastructure providers, payment processors, email or SMS/text marketing service providers, and other service providers that assist us in operating the Website and providing our services. We only allow our service providers to handle your Personal Information if we are satisfied that they take appropriate measures to protect your Personal Information and do so in accordance with applicable law.

Business Transfers. We may share Personal Information with other business entities if all or part of Company’s business is sold, merged, assigned, dissolved, acquired, or transferred in a similar transaction to such business entity. We will require any such successor business entity to honor the terms of this Policy.

Disclosures Under Special Circumstances. We may share information about you in response to a court order, subpoena, search warrant, law or regulation. We may cooperate with law enforcement authorities in investigating and prosecuting activities that are illegal, violate our rules, or may be harmful to other visitors. In such circumstances, we will take appropriate measures to ensure that the requester understands the sensitive nature of the Personal Information that they may receive.

Disclosures to Protect Rights, Safety, or Property. We may share information about you where we believe it is necessary or appropriate to protect the rights, safety, or property of Company, our affiliates, our users, or others, including to investigate, prevent, or take action regarding suspected fraud, security incidents, misuse of the Website or our services, violations of our terms or policies, or other unlawful or harmful activity, and to establish, exercise, or defend legal claims.

In the twelve (12) months prior to the “last updated” date of this Policy, we have shared the Personal Information detailed in the chart found in COLLECTION OF PERSONAL INFORMATION with the categories of third parties indicated in the chart below.

Category Shared with
Identifiers Analytics Providers (Google)
Internet or other similar network activity Analytics Providers (Google)

In the twelve (12) months prior to the “last updated” date of this Policy, we have disclosed the Personal Information detailed in the chart found in COLLECTION OF PERSONAL INFORMATION for a business purpose to the categories of third parties indicated in the chart below.

Category Disclosed to
Identifiers Affiliates, Healthcare Providers, Website Service Providers
Personal information categories listed in the California Customer Records statute
(Cal. Civ. Code § 1798.80(e))		 Affiliates, Healthcare Providers, Website Service Providers
Commercial information Affiliates, Healthcare Providers, Website Service Providers
Internet or other similar network activity Affiliates, Healthcare Providers, Website Service Providers
Professional or employment-related information Affiliates, Healthcare Providers, Website Service Providers
Website portal account log-in and password Website Service Providers
Sensitive Personal Information (medical information) Affiliates, Healthcare Providers, Website Service Providers

Some pages on this Website may use cookies, pixel tags, local storage, and other technologies to automatically collect information through this Website. These technologies allow us to understand who has interacted with us and also help us to operate this Website and provide our services more efficiently.

Cookies are small data files that a website or its service providers place on your computer or other device through your web browser when you access a website. Cookies help make your browsing experience with this Website more personal. Different cookies serve different purposes, such as recognizing your devices, storing information about your preferences, identifying the geographic area of a user, tracking browsing habits and preferences, recalling information entered on forms, login pages, or other features of this Website. This helps us understand how this Website is being used and is used to generally improve your browsing experience on this Website.

A pixel tag (also known as a web beacon) is a piece of code embedded on this Website that collects information, including Personal Information, about users’ engagement on the site. Pages of our Website and our e-mails may contain pixel tags that permit the Company to, for example, count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Types of Cookies

First Party Cookies. These cookies originate from this Website and may be managed by the Company.

Third Party Cookies. These cookies originate with service providers or business partners providing services on or through this Website and can be used by these third parties to recognize your device when it visits other websites. Third Party Cookies may also be used for other purposes, such as analytics, advertising, and social media features.

Session Cookies. These cookies expire once you close your web browser.

Persistent Cookies. These cookies stay on your computer or mobile device until you delete them.

Strictly Necessary Cookies. These cookies are necessary for this Website to function. Strictly necessary cookies are typically set in response to actions or services that you request, such as setting your privacy preferences, logging in, or filling out a form. Strictly necessary cookies can also be used to manage sessions on load-balanced servers or to ensure user requests are routed consistently to the correct server. You can set your browser to block these cookies or to alert you about these cookies, but some parts of this Website will not work if you select such settings.

Analytics/Performance Cookies. These cookies count visits and traffic sources so the performance of this Website can be measured and improved, including determining whether a user is new or returning, distinguishing users from one another, and calculating new and returning visitor statistics. These cookies help us to know which pages are the most and least popular on this Website and to see how visitors move around this Website. Information collected through these performance cookies is generally aggregated and anonymous. This information is combined with data from a large number of other users to create an overall picture of Website use and is not identified individually or personally.

Functional Cookies. Functional cookies are small pieces of code that are stored on a device or browser to help websites remember user preferences and provide additional functionality. They can be first-party or third-party, persistent or session-based. An example of a functional cookie is a cookie that remembers user location, chosen language, or other settings to provide a personalized user experience on a website. Other examples of functional cookies include chat services and user preferences.

Marketing/Advertising Cookies. Tracking/Marketing/Advertising cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and usually originate with third parties. You can opt out of many of these cookies by updating your preferences at www.aboutads.info.

Social Media Cookies. Social media cookies are stored on your computer browser to help you log into your social media accounts faster. Social media companies may recognize you and collect Personal Information about your visit to this Website, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.

What Cookies Do We Use?

This Website uses both First Party and Third-Party cookies that may be categorized as Strictly Necessary, Analytics/Performance, and Marketing/Advertising.

Why Do We Use Cookies?

We use cookies and other tracking technologies to improve the performance and security of the Website and to provide you with additional functionality on the Website. We may also use cookies and related technologies to learn how you access and interact with this Website so that we may improve your experience.

How Do Third Parties Use Cookies on This Website?

Some cookies and similar technologies on our Website are provided by third parties that help us operate and secure the Website and analyze how it is used.

We use Cloudflare cookies for bot management and to help protect the Website from security risks. These are Strictly Necessary cookies that support the security and performance of the Website. We use Google Analytics cookies to collect information such as unique identifiers, visits, sessions, and pages viewed so we can better understand how visitors use the Website. These are Analytics/Performance cookies. We use cookies associated with Google Tag Manager to manage and deploy analytics and other tags on the Website. Google Tag Manager may also automatically set advertising-related cookies. We do not currently run active advertising campaigns using this data. Our Website is built on the WordPress platform, which sets cookies necessary to display and operate Website pages, including cookies that detect whether your browser can properly render certain content. Additionally, HubSpot, Inc. provides marketing and forms services on this Website. Cloudflare sets its bot management cookie across multiple HubSpot-related subdomains used by HubSpot’s infrastructure. These are Strictly Necessary cookies.

Certain portions of the Website may also link to or direct you to webpages and websites run by third parties. These third-party services may set additional cookies on your browser. These third parties may use cookies, alone or in connection with web beacons and other technologies, to collect information about you when you visit those pages or click the links to those third-party websites. The information they collect may be associated with your Personal Information, or they may collect information, including Personal Information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. In most instances, we do not control these third-party technologies, the targeted content they deliver, or how the information they collect is used.

For more information about how these third parties may collect and use your data, please refer to their privacy policies:

CloudFlare: https://www.cloudflare.com/privacypolicy/

Google: https://policies.google.com/privacy

WordPress: https://wordpress.org/about/privacy/

HubSpot: https://legal.hubspot.com/privacy-policy

This Policy does not cover the use of cookies by any third parties, and these third parties’ use of your Personal Information and such technologies is governed by their own privacy policies or notices.

Social Media Cookies

Facebook and Instagram. If you interact with Facebook and/or Instagram through our Website, Meta may process your Personal Information when you use that site.

When a user uses Meta products – including visiting our Facebook and Instagram pages – Meta processes Personal Information even from users who do not use any Meta services. You can find out what Personal Information is processed, for what purposes, and on what legal basis in Meta’s Privacy Policy, which applies to all Meta products, including Facebook and Instagram. This Policy also provides information on how to contact Meta and about setting options for advertising, cookies, etc. Meta’s Cookies Policy (available at https://www.facebook.com/privacy/policies/cookies) provides more information about cookies Meta uses if you have a Facebook or Instagram account, use Meta products, or visit other websites and apps that use Meta products (including the “Like” button or other Facebook or Instagram technologies).

If you visit our Facebook or Instagram page, Meta saves information, including your IP address. Together with other information Meta receives via cookies, Meta provides us, as the owner of the Facebook or Instagram page, statistical information about the use of our page (“Page Insights”). This is collated data that shows how users interact with our pages. These Page Insights can be based on Personal Information collected by Meta when you visit or interact with our Facebook or Instagram page and its content.

Page Insights offers us an anonymous analysis of reach, page visits, duration of video views, actions (likes, comments, sharing) as well as each user’s age, gender and location (as stated in the user’s Facebook or Instagram profile). We can use various settings or filters to analyze reach, such as time periods, views of a specific content, and demographic groups (e.g. female, aged 20–30). This data is anonymized, aggregated and abstracted. Therefore, we are not able to link it to individuals. The purpose of the analysis is to enable us to design our Facebook and/or Instagram offering for optimal PR effectiveness. As the provider of the information service, we do not collect or process any data from the use of our Facebook and/or Instagram page that goes beyond this.

For more information on Meta’s use of Personal Information, see their posted privacy policies, available online here: https://www.facebook.com/about/privacy.

How Can You Control Cookies?

You can set your browser to reject cookies, or you can manually delete individual or all of the cookies on your computer by following your browser’s help file directions. However, if your browser is set to reject cookies or you manually delete cookies, this may alter your access and use of some of the pages and features on this Website.

Users can visit the Google Analytics Opt-out Browser Add-on Download Page at https://tools.google.com/dlpage/gaoptout for information on how to opt out of Google Analytics.

You may also reject or block all or specific types of cookies from this Website through your browser settings, and you can change those settings at any time. You may also visit https://allaboutcookies.org/ or https://www.aboutcookies.org/ for details on how to delete, reject, or block cookies and for further information on cookies generally.

You may have additional rights regarding your Personal Information based on the jurisdiction in which you reside. Please see the section YOUR JURISDICTIONAL PRIVACY RIGHTS for more information.

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

You have the ability to exercise certain controls and choices regarding our collection, use and sharing of your Personal Information. In accordance with the laws that may apply to you, your controls and choices may include:

  • The Right to Know/Right To Access;
  • The Right to Data Portability;
  • The Right to Correct/Right to Rectification;
  • The Right to Delete/Right to Erasure;
  • Right to Opt Out of Targeted Advertising and Profiling;
  • Right to Opt Out of Sale or Sharing of Personal Information;
  • Right to Limit the Use of Sensitive Personal Information.

You may also use an authorized agent to submit a request to opt out on your behalf if you provide the authorized agent signed written permission to do so. See YOUR JURISDICTIONAL PRIVACY RIGHTS for more information on what data privacy rights may apply to you.

To opt out of the sale or sharing of your Personal Information, you or your authorized representative can click on the following link:

DO NOT SELL OR SHARE MY PERSONAL INFORMATION

You may also submit a request to us as provided in the CONTACT US section below. You may enable, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control. Our Website currently responds to Global Privacy Control signals.

Once you make a request to exercise your data privacy rights, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales or sharing. However, you may change your mind and opt back in to our use of your Personal Information by contacting us as provided in the CONTACT US section below. You do not need to create an account with us to exercise your privacy rights. We will use Personal Information provided in your privacy rights request only to review and comply with the request.

In addition, you have other mechanisms to control your information, including:

Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may be inaccessible or not function properly. For more information, see COOKIE POLICY (ONLINE TRACKING TECHNOLOGIES).

Promotional Offers from the Company. If you do not wish to have your contact information used by the Company to promote our own or third parties’ products or services, you can opt out by sending us an email with your request to info@simplytest.com. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. This opt-out does not apply to information provided to the Company as a result of a diagnostic test order, portal account registration, or other transactions.

Disclosure of Your Information for Third-Party Advertising. We do not currently share your Personal Information with unaffiliated third parties for their promotional or advertising purposes.

Limit the Use of Your Sensitive Personal Information.

Under California law, you have the right to limit the use and disclosure of your Sensitive Personal Information to only those purposes necessary to provide the products and services you request. We collect and use Sensitive Personal Information, including health-related data, only as necessary to provide the diagnostic testing services you request and for other purposes permitted by law. Because we do not use your Sensitive Personal Information for purposes beyond what is necessary to provide our services to you, a request to limit will not result in a change to how we process your information. However, you may still submit a request to limit the use of your Sensitive Personal Information by contacting us using the information in the CONTACT US section below or by clicking the following link:

LIMIT THE USE OF MY SENSITIVE PERSONAL INFORMATION

Accessing and Correcting Your Information

You may contact us as provided in the CONTACT US section to request access to, correct, or delete any Personal Information that we have collected about you. In some instances, we cannot delete your Personal Information except by also deleting your user account, if you have a user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Residents of certain jurisdictions may have additional Personal Information rights and choices. Please see YOUR JURISDICTIONAL PRIVACY RIGHTS below for more information.

Washington Residents: For information about your rights with respect to your consumer health data, including how to withdraw consent for the collection or sharing of your consumer health data, please see our separate Consumer Health Data Privacy Policy at https://simplytest.solutions/health-data-privacy.

YOUR JURISDICTIONAL PRIVACY RIGHTS

Residents of certain jurisdictions may be entitled to specific rights under applicable privacy laws with respect to our collection, use, and processing of their Personal Information.

U.S. Data Privacy Rights

The California Consumer Privacy Act (CCPA), as amended and updated by the California Privacy Rights Act (CPRA), provides residents of California specific rights regarding their Personal Information. Additionally, at the time this Policy was last updated, certain states besides California, including Alabama, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, Virginia, and Washington have enacted laws that may provide their state residents with the following rights:

The Right to Know/Right To Access: You have the right to know what Personal Information we collect about you. Upon receipt of your request, and confirmation of your identity, we will disclose to you:

  • the categories and specific pieces of Personal Information that we have collected about you in the preceding twelve (12) months;
  • the sources from which we have collected that information;
  • our business or commercial purpose for collecting such information;
  • the categories and specific pieces of Personal Information that we have disclosed to third parties for a business purpose during the preceding twelve (12) months;
  • the categories and specific pieces of Personal Information that we have sold to or shared with third parties during the preceding twelve (12) months; and
  • the third parties to whom we have disclosed or sold such Personal Information.

The Right to Data Portability: You have the right to request a copy of the Personal Information we have about you. We will provide it in a format of our choosing that you can reasonably transfer to a third party.

The Right to Correct/Right to Rectification: You have the right to request that we correct any inaccurate Personal Information that we may maintain about you, subject to applicable legal exceptions.

The Right to Delete/Right to Erasure: You have the right to request that we delete your Personal Information, subject to applicable legal exceptions. If you submit this request, we will review it and attempt to confirm your identity. Once we confirm your identity, and assuming no exception applies that requires or allows us to retain your Personal Information, we will delete it and direct our service providers to do the same.

We may deny your deletion request in certain instances, including where retaining the Personal Information is necessary for us or our service provider(s) to:

  • Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with any international, national, federal, state, or local laws, rules or regulations, applicable to us or to your Personal Information.
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  • Comply with a legal obligation or other lawful uses.

Right to Opt Out of Targeted Advertising and Profiling: Certain cookies on this Website may be used by third parties, such as Meta/Facebook and Google, to deliver targeted advertising to you on other platforms based on your interactions with this Website. You have the right to opt out of such targeted advertising. To exercise this right, please contact us using the information in the EXERCISING YOUR RIGHTS section below, use the “DO NOT SELL OR SHARE MY PERSONAL INFORMATION” link above, or adjust your browser cookie settings as described in the COOKIE POLICY (ONLINE TRACKING TECHNOLOGIES) section of this Policy.

Right to Opt Out of Sale or Sharing of Personal Information: You have the right to “opt out” of the “sale” or “sharing” of your Personal Information to or with “third parties” (as those terms are defined by applicable law). There may be situations where we cannot fulfill your requests if you opt out of such sharing, and we will notify you if this applies.

Right to Limit: You have the right to limit the use of your Sensitive Personal Information (for example, your social security number, your genetic data, etc.) for limited purposes, such as providing you with the services you requested.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. Unless permitted by the applicable law, we will not:

Deny you goods or services.

Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

Provide you a different level or quality of goods or services.

Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by law that can result in different prices, rates, or quality levels. Any legally permitted financial incentive we offer will reasonably relate to your Personal Information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

You should check the laws of your state of residence to determine whether these rights apply to you. The exact scope of these rights may vary by state. Data privacy laws are constantly evolving, and the list of states herein with data privacy laws may not be all-inclusive.

California’s Required Mandatory Disclosures

See COLLECTION OF PERSONAL INFORMATION, USE OF PERSONAL INFORMATION, and DISCLOSURE OF PERSONAL INFORMATION for our mandatory disclosures.

Virginia’s Required Mandatory Disclosures

See COLLECTION OF PERSONAL INFORMATION, USE OF PERSONAL INFORMATION, and DISCLOSURE OF PERSONAL INFORMATION for our mandatory disclosures.

California Shine the Light Act

California Civil Code Section 1798.83 permits California residents to request certain information regarding the disclosure of their Personal Information to third parties for those third parties’ direct marketing purposes. We do not share your Personal Information with third parties for their direct marketing purposes. If you have questions about this practice, please contact us as provided in the CONTACT US section.

Nevada

Nevada provides its residents with a limited right to opt out of certain Personal Information sales. Residents who wish to exercise this sale opt-out right may do so as provided for in the EXERCISING YOUR RIGHTS section.

European Economic Area (GDPR – EEA) and United Kingdom (GDPR UK)

If you are a resident of the EEA or UK, when you access or use this Website, we are the “controller” of your Personal Information for the purposes of the GDPR (EEA and UK). Under the GDPR (EEA and UK), you may have the following rights:

Right to Be Informed: Individuals have the right to receive clear and transparent information about how their Personal Information will be Processed. This Policy is intended to satisfy your Right to Be Informed.

Right of Access: You may request confirmation as to whether your Personal Information is being processed, and if so, you are entitled to access that data, along with key information about the Processing. This information includes details on:

  • The purpose for processing your Personal Information;
  • The categories of Personal Information we collect;
  • The third parties or the categories of third parties to which your Personal Information is disclosed;
  • The period for which your Personal Information is stored or, where this information is unavailable, the criteria used to determine the period which the Personal Information will be stored;
  • Information regarding deleting, correcting, or restricting the processing of your Personal Information;
  • If your Personal Information was not collected from you, you may request the source that collected the Personal Information; and
  • Information regarding automated decision-making that we use, if any, the logic involved in such automated decision-making, and potential consequences of Processing your Personal Information using automated decision-making methods.

You may also obtain a free copy of your Personal Information. We reserve the right to charge a reasonable fee for any additional copies of your Personal Information that you request. Additionally, your right to obtain a copy of your Personal Information may lawfully be limited where your request may adversely affect the rights and freedoms of other individuals.

Right to Rectification: You may request that we correct inaccurate Personal Information and complete incomplete data without undue delay. If the data has been shared with third parties, we will inform those recipients of the rectification unless doing so is impossible or requires disproportionate effort.

Right to Erasure (Right to Be Forgotten): You may request erasure of your Personal Information if the data is no longer necessary, consent has been withdrawn, the Processing is unlawful, or a legal obligation requires deletion. We may refuse erasure in certain limited circumstances, such as for compliance with a legal obligation under Union or Member State law; freedom of expression and information; public interest in the area of public health; establishing, exercising, or defending legal claims; acting in the public interest or exercising official authority; or archiving in the public interest, such as scientific research, historical research, or statistical purposes.

Right to Restriction of Processing: In certain situations, you may request that your Personal Information be retained but not otherwise Processed. This applies when, for example, you contest the accuracy of your Personal Information, the Processing is unlawful, we no longer need the data but it is required for legal claims, or you have objected to Processing pending verification of legitimate grounds.

Right to Data Portability: Where Processing is based on consent or contract and is carried out by automated means, you have the right to receive your Personal Information in a structured, commonly used, and machine-readable format, subject to certain exceptions. You may also request direct transmission of that data to another controller where technically feasible. When sharing your Personal Information with you or another controller will adversely affect the rights and freedoms of other consumers, we may deny, reject, or otherwise refrain from sharing a copy of your Personal Information with you or another controller.

Right to Object: You may object to Processing of your Personal Information based on legitimate interests or public interest grounds. We will stop Processing your Personal Information after you object unless certain exceptions apply, including where we can demonstrate a compelling legitimate ground that overrides your interests. When your Personal Information is Processed for direct marketing, we will stop Processing your Personal Information if you object.

Right to Withdraw Consent: Where we rely on your consent as the lawful basis for processing your Personal Information, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of any processing carried out before you withdrew your consent. To withdraw consent, please contact us using the details in the CONTACT US section below.

Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Right to Lodge a Complaint: If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Supervisory Authority or the UK Information Commissioner’s Office. Please visit https://ico.org.uk/for-the-public and https://digital-strategy.ec.europa.eu/en/library/list-personal-data-protection-competent-authorities for more information.

We may transfer, store, or Process your Personal Information outside of the EEA/UK, including in the United States and in other jurisdictions where we or our service providers operate. Where the GDPR applies, we will implement an appropriate transfer mechanism and safeguards for such transfers, which may include (as applicable) reliance on an adequacy decision, the European Commission’s Standard Contractual Clauses (and/or the UK International Data Transfer Agreement or UK Addendum), or another lawful mechanism. You may request additional information about the safeguards we use (and obtain a copy of any applicable Standard Contractual Clauses, where available) by contacting us as described in CONTACT US section below.

EXERCISING YOUR RIGHTS

To exercise any of your jurisdictional privacy rights, please submit a request by using one of the following methods:

When submitting a request, you must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative of such individual; and

Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

For information on how to appeal a decision regarding a consumer rights request, see Appeal Process below.

Verification of Requests

Only you, or someone legally authorized to act on your behalf, may make a request regarding your Personal Information. A parent or guardian with legal custody may make a request on behalf of a minor child. An authorized agent must have your signed, written permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you have given your permission and/or to verify your identity.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or your authority to make the request and confirm the Personal Information relates to you. You do not need verification to submit an opt-out request, unless the request appears to be fraudulent or otherwise invalid.

We will not use Personal Information provided in the request for any purpose other than to verify the requestor’s identity or authority to make the request.

Verifying an Authorized Agent

In certain circumstances, you are permitted to use an authorized agent, as that term is defined by applicable U.S. state privacy law (“Authorized Agent”) to submit requests on your behalf where you provide sufficient evidence that the requestor is an authorized agent with written permission to act on your behalf and you successfully verify your own identity with us.

For requests to know and delete by an Authorized Agent, you must (1) provide a valid power of attorney under the laws of the subject individual’s state of residence; or (2) provide sufficient evidence to show that the subject individual has (i) provided the Authorized Agent signed permission to act on their behalf, (ii) verified their own identity directly with us, and (iii) directly confirmed with us that they have provided the Authorized Agent permission to submit the request on their behalf.

For requests to opt out by an Authorized Agent, you must submit a signed, written permission demonstrating that the Authorized Agent has been authorized by the subject consumer to act on their behalf.

Responding to Your Request

We endeavor to confirm receipt of all requests within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us as provided in the CONTACT US section to ensure we have received your request.

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of our receipt, or as required by applicable law. If we require more time (up to another 45 days, or as otherwise provided by applicable law), we will inform you of the reason and extension period in writing.

The information in our response will cover the 12-month period preceding our receipt of your request. If we cannot comply with your request or any portion of your request, our response will explain the reasons why we cannot comply.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeal Process

If we refuse to take action upon your request to exercise any of your data privacy rights, you may appeal our decision within a reasonable period after you receive notice of our decision. To initiate an appeal, please contact us using the information in the CONTACT US section and inform us that you would like to appeal our decision. Within forty-five (45) days after we receive your appeal, or as required by law, we will inform you of any action taken or not taken in response to your appeal, and we will provide you with a written explanation of the reasons in support of our response.

If your appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact your state attorney general, or equivalent in your jurisdiction, to submit a complaint, should you wish to do so.

THIRD PARTY WEBSITES AND SERVICES

We may provide links on the Website to third-party websites, including social media platforms. We are not responsible for the privacy practices of those websites, and we recommend that you review the privacy policy of each website that you visit. When you select a link to a third-party website from this Website, you will be leaving the Website. Any information that you disclose on the third-party website will be governed by that website’s privacy policy.

RESPONSE TO “DO NOT TRACK” SIGNALS

Some Internet browsers include the ability to transmit “Do Not Track” signals. Since uniform standards for “Do Not Track” signals have not yet been adopted, Company does not process or respond to “Do Not Track” signals. Company does recognize and honor Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of Personal Information under applicable law.

CHILDREN’S PRIVACY PROTECTION

The Website is not designed for, or intentionally targeted at, children under 18 years of age. It is not our policy to intentionally collect, maintain, sell, or share Personal Information of individuals under 18 years of age. If you are under 18, do not use the Website, provide any information to the Website or through any of its features, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Information from an individual under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about an individual under 18, please contact us using the information in the CONTACT US section below. Residents of certain states who are under 13, 16, or 18 years of age may have additional rights regarding the collection and sale of their Personal Information.

COMMUNICATION PRACTICES; SMS/TEXT MESSAGES

We may use Personal Information to send electronic newsletters, notification of account status, and other communications, such as marketing communications, on a periodic basis to various individuals and organizations. We may also send email communications regarding topics such as Website updates. We offer you appropriate consent mechanisms, such as opt-out, for marketing and certain other communications (i.e., commercial email or text messages), as described below. We have a legitimate interest in Processing your Personal Information for promotional purposes. However, where consent is needed, we will ask for this consent separately and clearly.

Right to Opt Out of Promotional Offers and SMS/text Messages: From time to time, we may ask for your consent to receive SMS/text messages from us for the purposes of marketing, promoting, or advertising our products or services to you or providing you with information about our products or services. By providing your consent, you agree that we may contact you via SMS/text messaging using the phone number that you provide to us. Receiving SMS/text messages is optional, and you can stop them at any time. The Company will not share your phone number with third parties for marketing purposes.

If you do not wish to have your email address, phone number, or other contact information used by the Company to promote our products or services, you can opt out of non-essential communication by:

Contacting us as provided in the CONTACT US section below;

Using the “UNSUBSCRIBE” link in emails; or

Replying “STOP” in response to a SMS/text message.

Please be aware that opt-outs may not apply to transactional or service-related communications, including order confirmations, payment links, result-availability notices, account alerts, security notices, or updates to this Policy, the Terms and Conditions, or other policies, by email, SMS/text or otherwise regarding your existing or past relationship with us, nor will opt-outs preclude us, including our employees, contractors, agents and other representatives, from accessing and viewing your Personal Information in order to maintain and improve this Website or for any other legally permissible purpose. This opt-out does not apply to information provided to the Company as a result of a diagnostic test order, portal account registration, collection kit purchase, payment link transaction, or other transactions.

If you instruct us to provide further products or services in the future, make additional requests, or if there are changes in the law, regulations, or the structure of our business, we may ask you to confirm or update your preferences regarding promotional communications.

GLOBAL PRIVACY STANDARDS

Company strives to comply with all applicable laws globally that are designed to protect our customer’s privacy. Although legal requirements may vary from country to country, Company intends to adhere to the principles set forth in this Policy. For more information, please see the GLOBAL DATA TRANSFER, STORAGE, AND PROCESSING POLICIES section below.

DATA SECURITY

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, use, alteration, disclosure, or destruction, appropriate to the volume and sensitivity of the information we process. Because SimplyTest processes health-related data, we apply heightened security measures to that data in accordance with applicable law and industry standards.

While we are committed to protecting your Personal Information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of the information you transmit to us or that we store, and any transmission of Personal Information is at your own risk.

Where you have a password for access to portions of this Website, you are responsible for keeping your password confidential. We recommend that you not share your password with anyone and that you log out of your account when you are finished using the Website, particularly on shared or public devices.

DATA RETENTION POLICIES AND PRACTICES

We retain your Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The retention period for each category of Personal Information depends on the nature of the data, the purposes for which it is processed, applicable legal requirements, and our legitimate business needs.

After the applicable retention period expires, we will securely delete or de-identify your Personal Information, unless further retention is necessary:

To comply with applicable federal, state, or local laws, regulations, or legal obligations;

To resolve disputes, enforce our agreements, or establish, exercise, or defend legal claims;

To maintain records of how we handled your requests; or

To meet legitimate recordkeeping or audit requirements.

Different retention periods apply for different types of Personal Information. We will not retain your Personal Information for longer than is reasonably necessary for the purposes set out in this Policy.

GLOBAL DATA TRANSFER, STORAGE, AND PROCESSING POLICIES

Our headquarters is located in the United States, and we primarily store and Process your Personal Information in the United States. Our service providers may also store or Process your Personal Information in the United States or in other jurisdictions where they operate. If you access this Website from outside the United States, please be aware that your Personal Information will be transferred to, stored, and Processed in the United States, where data protection laws may differ from those in your jurisdiction. When we transfer Personal Information internationally, we take reasonable steps to ensure that such transfers comply with applicable laws and that your Personal Information receives adequate protection, which may include, where applicable:

Implementing standard contractual clauses approved by the European Commission or other applicable authorities;

Relying on an adequacy decision by the European Commission or other applicable authorities; or

Obtaining your consent or employing other lawful transfer mechanisms.

If you have any questions or concerns about how your Personal Information is transferred, stored, or Processed, please contact us as provided in the CONTACT US section below.

CHANGES TO THIS POLICY

This Policy may be revised from time to time as we add new features and services, as laws change, and as industry privacy and security best practices evolve. We display an effective date on the Policy so that it will be easier for you to know when there has been a change. If we make any change to this Policy regarding use or disclosure of Personal Information, we will provide appropriate notice and choices to you, on this Website or in other appropriate locations (including email), based on the scope and extent of changes.

CONTACT US

If you have any questions or concerns regarding this Policy and our related privacy practices, you may contact the Company by email at info@simplytest.com, or by postal mail at the address below.

Alimetrix, Inc. d/b/a SimplyTest
800 Hudson Way NW
Huntsville, AL 35806