California Privacy Notice
Scope note: medical information governed by HIPAA or California's Confidentiality of Medical Information Act (CMIA) is largely exempt from the CCPA; that information is handled under the Privacy Policy and our business associate agreements. This notice covers the personal information the CCPA does apply to (for example, website visitors, professional accounts, and contact-form correspondence).
1. Categories collected
In the last 12 months we have collected these CCPA categories, from you directly, from your device, or from the organization that invited you to the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email, phone, account ID, IP address | Accounts, communication, security |
| Professional information | Licenses, certifications, work history in the network | Credential verification, matching |
| Commercial information | Work orders, payouts, transactions | Operating the marketplace |
| Geolocation | Nurse location during an active visit window | Live visit tracking |
| Internet activity | App and site usage logs | Security, reliability |
| Audio/visual & electronic | In-app messages, signatures | Care coordination, audit trail |
2. Selling and sharing
VeinFusion does not sell personal information and does not share it for cross-context behavioral advertising, and has not done either in the preceding 12 months. We do not knowingly collect or sell the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes requiring a right to limit under the CPRA.
3. Your rights
- Right to know / access — the categories and specific pieces of personal information we hold about you.
- Right to delete — subject to CCPA exceptions (e.g., legal obligations, security, completing a transaction). See Request data deletion (Cal. Civ. Code §1798.105).
- Right to correct — inaccurate personal information.
- Right to portability — a copy of your data in a usable format.
- Right to non-discrimination — we will not discriminate against you for exercising these rights.
4. How to exercise them
Submit a request via the data-deletion form, by email to privacy@veinfusion.com, or through the contact page. We verify requests by matching the information you provide against your account (and may ask for additional verification for sensitive requests). An authorized agent may act for you with written permission. We respond within 45 days, extendable once by 45 days with notice.
5. Retention
We keep each category no longer than reasonably necessary for the purposes above and our legal obligations, as described in the Privacy Policy §6.
6. Contact
privacy@veinfusion.com · VeinFusion · [ADDRESS].