Privacy Policy

Last updated: January 1, 2024

1. Introduction

This Privacy Policy outlines the data protection practices of Dondy, along with its subsidiaries and affiliated organizations, collectively referred to as "we," "us," or "our”. It encompasses your interactions with any Dondy website, affiliated mobile applications (the "Apps"), or any other data provided to Fountain. The term "Services" encompasses the Websites, Apps, and other offerings provided by Fountain. This Privacy Policy is incorporated into our Terms of Use, and any capitalized terms not defined here are ascribed their meanings in the Terms of Use. Please carefully review this Privacy Policy to understand how we handle your information. If you disagree with this Privacy Policy, kindly refrain from using the Services. This Privacy Policy includes the following sections:

• The Information We Collect and Its Sources
• Purposes for Using Your Information
• Online Analytics and Advertising
• Sharing and Disclosure of Your Information
• Your Marketing Preferences
• Third-Party Services and Health Information Notice
• Information Security Measures
• Retention of Your Information
• Updates to Our Privacy Policy
• How to Contact Us

THE INFORMATION WE COLLECT AND ITS SOURCES

We gather information about you through the methods outlined below when you utilize the Services. Please note that certain types of information are necessary for us to provide the Services. Failure to provide such information or requesting its deletion may restrict your access to or use of some or all of our Services.

Information Provided by You

We collect various information directly from you. This includes information obtained through:

• Account and product registration and management
• Processing orders and treatment requests
• Submission of questions, communications, or feedback via forms or email
• Participation in research and surveys
• Requests for customer support and technical assistance, including online chat functionalities
• Uploads or posts to the Services
• Submission of employment applications
• The specific information collected depends on the Services utilized, your usage patterns, and the information you opt to provide. Data collected directly from you may include:
• Personal details like name, address, phone number, date of birth, and email
• Medical information such as conditions, treatment preferences, physician referrals, prescriptions, and health-related data like physical and emotional characteristics
• Login credentials if you create an account
• Billing details like shipping address, credit/debit card number, verification details, expiry date, and identity verification information, handled by our payment processors
• Transaction information like purchases or other dealings with us
• Customer service and maintenance interactions
• Demographic data such as gender and age
• User-generated content posted in public online forums on our Services
• Any other information directly provided by you in connection with your Service usage.

Data Collection Through Automated Means

We gather specific details about your use of the Services and the devices you utilize to access them, as outlined in this section. In collaboration with our service providers (third-party entities acting on our behalf), we employ various technologies, including cookies and similar tools, to aid in this data collection process. Our Websites: When you browse our Websites, we collect and analyze data such as your IP address, browser types, language settings, operating system, geographical location (state or country), software and hardware attributes (including device IDs), referring and exit pages, URLs, platform type, clicks, downloaded files, domain names, landing pages, page views, browsing duration, search terms used on our sites, date and time of usage, error logs, and similar information. Our Apps: Upon using our Apps, we automatically receive specific details about the mobile phone, tablet, or computer you use to access them. This includes a mobile device identifier, IP address, operating system, version, Internet service provider, browser type, domain name, and similar information. Additionally, we collect data regarding App updates, usage date and time, and activity within the Apps. Location Information: While utilizing the Services, both we and our service providers may gather general location data (e.g., IP address, city/state, or postal code associated with an IP address) from your computer or mobile device. This allows us to provide location-based content and services tailored to your general location, such as accurate sales tax information. For precise GPS location information, we will seek your permission beforehand. In such cases, we utilize your exact geo-location data to offer customized services, content, promotional offers, and relevant information. Should you wish to cease the collection and usage of GPS location data by us and our service providers, you can disable location features on your device. Refer to your device manufacturer's settings for guidance. Use of Cookies and Similar Technologies: To gather the aforementioned information, we and our service providers utilize web server logs, cookies, tags, SDKs, tracking pixels, and comparable tracking mechanisms. These technologies enable us to offer a personalized experience to users. Web server log: Stores website activity data. SDK: Embedded tools or code in our Apps and software, facilitating third-party data collection on user interactions with the Services. Cookie: Small text files placed on your device during website visits, allowing us to recognize your device, store preferences, track usage, deliver personalized content and advertisements, conduct searches and analytics, and assist with security and administrative functions. Tracking pixels: Small electronic tags embedded in websites, online ads, or emails, designed to collect usage data, measure Service popularity and associated advertising, and access user cookies. We may adopt additional technologies for data gathering in the future. You have the option to modify your browser settings to receive notifications when cookies are set or updated, or to block cookies altogether. However, note that blocking, disabling, or managing cookies may restrict access to certain features or offerings of the Services. Refer to your browser's "Help" section for guidance on managing cookies (e.g., Internet Explorer, Google Chrome, Mozilla Firefox, or Apple Safari).

Data Collection from Social Media and Other Content Platforms

When you interact with us on social media platforms like Facebook, Instagram, Twitter, or other similar sites by "liking" or "following" us, we may gather certain information from you. This information may include your name, email address, and any relevant comments or content you share with us. Additionally, if you participate in our promotions or provide information to us through social media channels, we may also collect your information in those instances.

1. Information Received from External Sources

We collaborate closely with third-party entities, such as physicians, medical professionals, pharmacies, and other intermediaries involved in providing you with our Services and related healthcare services. This collaboration may lead to the receipt of additional information about you from these third parties. Furthermore, we engage with subcontractors in technical roles, advertising networks, analytics providers, and search information providers, who may also furnish us with supplementary information about you.

PURPOSES FOR USING YOUR INFORMATION

In our provision of the Services, we may utilize your information for various business purposes, including but not limited to:

• Enhancing, managing, and refining the Services, and when applicable, facilitating healthcare services provision by physicians or other healthcare providers, ensuring they have the necessary support for their healthcare operations.
• Conducting internal research to evaluate the efficacy of our Services, enhance their quality, and gain deeper insights into our user community. Research outcomes shared externally will be anonymized and aggregated to safeguard individual user privacy.
• Corresponding with you regarding the Services, your usage, or inquiries related to them, and conveying communications on behalf of physicians or healthcare providers leveraging our Services to cater to your needs.
• Contacting you via email, postal mail, or phone regarding surveys, promotions, special events, or products and services offered by us, our subsidiaries, affiliates, parent companies, related businesses, and third-party partners.
• Providing technical assistance and customer support.
• Confirming your identity and managing your account, including processing payments and fulfilling orders.
• Ensuring optimal presentation of our Services' content for you and your device, enabling participation in interactive features, and maintaining the safety and security of our Services.
• Assessing the effectiveness of advertisements and content served to you, and delivering personalized advertising and content.
• Gaining insights into your interests and requirements through analysis and research on Service usage.
• Adhering in good faith to applicable procedures, laws, and regulations that pertain to us, when necessary for our legitimate interests or those of others.
• Protecting, asserting, or defending our legal rights, when necessary for our legitimate interests or those of others.

Combined Information: For the purposes outlined in this Privacy Policy, we may merge the information collected through the Services with data received from other sources, both online and offline. This combined information will be handled and shared in accordance with this Privacy Policy. Aggregate/Anonymized Data: Information collected through the Services may be aggregated and/or de-identified to a degree where it can no longer be linked to you or your device. This Aggregate/Anonymized Information may be used for various purposes, including research and marketing, and may be shared with third parties, including advertisers, promotional partners, and sponsors.

ONLINE ANALYTICS AND ADVERTISING

Online Analytics

We employ third-party web analytics services, such as Google Analytics (including Google Signals, Google User-ID, and other features), and MixPanel, to gather and analyze usage information using cookies and similar tools. These services aid in auditing, research, reporting, fraud prevention, and identifying unique users across different browsers or devices to enhance service customization. If you have personalized advertising enabled on your Google account, Google Signals may provide us with analytics and engagement data across your various device usage. You can prevent Google from using your information for analytics, including cross-device tracking, by installing the Google Analytics Opt-out Browser Add-on from their website. Additionally, you can opt out of Google Signals by adjusting your "Settings" app, selecting "Google," choosing "Ads," and enabling "Opt out of Ads Personalization." Cross-device tracking can also be disabled through your Android or Apple device settings. For emails received from us, certain analytics tools like clear GIFs may capture data such as message opens, link clicks, or banner interactions. This data aids in assessing the effectiveness of our communications and marketing efforts.

1. Online Advertising

Our Services may incorporate third-party advertising technologies (e.g., ad networks and servers like Facebook, Google Ad Words, Criteo, etc.) using cookies and similar methods to deliver relevant content and ads for Fountain products on our platform and other websites and applications. These ads may be influenced by factors like the visited page's content, entered information (e.g., searches), demographic data, and other collected information. They may also be based on current or historical activity across various online platforms. We sometimes share customer information, such as email addresses, with service providers who match this data in anonymized form with cookies or mobile ad identifiers to offer more personalized ads on other websites and mobile apps. We do not govern or have access to cookies or tracking technologies placed on your device by non-affiliated third-party advertising networks. For more information on tailored browser advertising and managing cookies, you can visit opt-out links provided by the Network Advertising Initiative, Digital Advertising Alliance, or Your Online Choices. Additionally, you can learn about Criteo's privacy practices or opt out of their advertising services by reviewing their Privacy Policy. We do not control the participation of companies in these opt-out programs or the availability and accuracy of these mechanisms. Note that exercising the above opt-out choices may still result in seeing advertising on the Services, albeit not tailored based on your online behavior.

1. Mobile Advertising

When using mobile applications, you may encounter tailored in-application advertisements. We may engage third-party service providers for mobile app advertisements or analytics. Each operating system (e.g., iOS, Android, Windows) provides instructions on how to prevent receiving tailored in-application ads. Contact the platform provider for details on opting out of personalized in-app ads. Refer to support materials or device settings for respective operating systems to opt out of tailored in-app ads.

1. Do Not Track Notice

Do Not Track (DNT) is a browser privacy preference. While we offer various opt-out mechanisms for third-party data collection on our website, we do not currently recognize or respond to browser-initiated DNT signals. Learn more about DNT preferences here.

HOW WE SHARE AND DISCLOSE YOUR INFORMATION

We may share your information for business purposes as follows:

• Affiliates and Subsidiaries: Information collected may be shared within the Fountain Life group to provide consistent service levels, enhance products, services, and overall customer experience.
• Health Care Providers and Services: Information may be shared with healthcare providers for appointment scheduling, healthcare service delivery, and other operational purposes.
• Service Providers: Select third parties may access or receive your information to perform various services on our behalf.
• Protection of Dondy and Others: We may disclose information if required by law or to protect rights, property, or safety.
• Business Transfers: In business developments, user information may be transferred as assets.
• Public Forums: Information shared in public areas of our Services may be used for various purposes.
• Consent: Information may be disclosed based on user direction or consent.
• Aggregate/Anonymized Information: We may create and share anonymized data for various purposes.

YOUR MARKETING CHOICES

You can instruct us not to contact you for marketing purposes via email, postal mail, or phone by using the contact information below. However, certain information may still be used as permitted by this Privacy Policy or applicable law.

THIRD PARTY SERVICES AND NOTICE ABOUT HEALTH INFORMATION

This Privacy Policy does not govern the privacy practices of third-party services or websites linked from our platform. You are advised to review the privacy policies of such third parties.

HOW WE PROTECT YOUR INFORMATION

We implement technical and organizational security measures to safeguard your information. However, no method of transmission over the Internet or electronic storage is entirely secure. You acknowledge and accept this inherent risk associated with information transmission. If you have a password enabling access to the Services, ensure its confidentiality. Publicly shared information may be viewed by any Service user.

PRIVACY INFORMATION FOR CALIFORNIA RESIDENTS

If you reside in California, state law mandates that we furnish you with additional details concerning the collection, utilization, and dissemination of your "personal information" (as delineated in the California Consumer Privacy Act ("CCPA")). Categories of personal information collected. Throughout this Policy, we elaborate on the specific types of personal information obtained from and concerning our users. According to the CCPA, we are obliged to outline the "categories" of personal information we gather. These categories encompass: identifiers (e.g., name, address, email address); commercial details (such as transaction data); financial particulars (including credit card information); internet or device activity (e.g., browsing history, app usage); general and precise geolocation data; inferred information about you (e.g., based on your product and service usage); legally protected classifications (solely gender); insurance (including health coverage) details; medical records; physical attributes or description; and any other information that identifies you or can reasonably be linked to you. Utilization and disclosure of these personal information categories. We utilize and disclose the personal information categories gathered from and about you in accordance with the diverse business purposes delineated in this Policy. Please refer to the "Purposes for How We Use Your Information" and "How We Share and Disclose Your Information" sections of this Policy above for comprehensive insight. Kindly note that the CCPA imposes certain obligations on businesses that "sell" personal information to third parties. We do not engage in such activities and have abstained from doing so in the preceding twelve months.

Your California Privacy Rights

CCPA Rights Disclosure. If you are a California resident, the CCPA affords you the opportunity to make specific requests concerning your personal information. Specifically, you may request us to: Provide insights into the categories of personal information collected or disclosed about you; the sources of such information; the business or commercial intent behind collecting your personal data; and the categories of third parties with whom we share/disclose personal information. Furnish access to and/or a copy of certain information held about you. Erase certain information we possess about you. Additionally, the CCPA entitles you to non-discriminatory treatment (as permitted by applicable law) for exercising your rights. Please be aware that certain information may be exempt from such requests under California law. For instance, certain details are necessary for us to deliver the Services to you. Moreover, we will undertake reasonable measures to verify your identity before addressing a request. Should you be a California resident and wish to exercise any of your data rights under California law, kindly reach out to us and let us know your concerns. Please include your full name, email address, and residential address linked to your use of our Services, along with the rights you wish to exercise, to expedite your request. If you desire to receive a copy of your medical records in association with your request, please specify this in your email. By opting for this method of receiving your medical records, you consent to receiving them via an unencrypted email. Shine the Light Disclosure. The California law extends to California residents the privilege, under specific circumstances, to request details from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing endeavors. We refrain from sharing your personal information with third parties for their independent direct marketing objectives.

RETENTION OF YOUR INFORMATION

We retain your information for no longer than necessary for the purposes for which it was collected and processed. The duration for which we retain information depends on the reasons for its collection and use, and/or as mandated by applicable laws.

REVISIONS TO OUR PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time to reflect changes in legislation, our data handling practices, the functionalities of our Services, or technological advancements. The updated Privacy Policy will be made available through the Services, prompting you to review it periodically. The date of the last revision of this Privacy Policy is indicated at the top of the document. You are responsible for regularly monitoring and reviewing any updates to the Privacy Policy. In the event of a material alteration to the Privacy Policy, we will provide appropriate notice in accordance with legal requirements. Your continued use of our Websites or Apps after such modifications (and notice, if applicable) will constitute your acknowledgment of the changes to this Privacy Policy.

CONTACTING US

Should you have any inquiries regarding this Privacy Policy or Dondy's privacy practices, please reach out to us.