We collect CHD directly from the email inbox(es) that you authorize us to access.

We collect and use CHD for the purposes described in our Privacy Notice. More specifically, we collect and use information that could be considered CHD for the following purposes:

- To perform the functions of the services you request or authorize, such as blocking you from unwanted subscription emails and creating a “roll-up” of other subscriptions and/or transactions; authenticating you as part of our security processes; developing and offering new services; and tailoring content as part of our service such as in our roll-up summaries.
- As reasonably necessary to provide the services and operate our business. This may include providing users with access to our website, mobile application, services, or features; developing, delivering, and operating the services and their features; responding to your communications; better understanding our users and their interests and preferences; tailoring certain features of the services; ensuring the secure and reliable operation of the systems that support the services; troubleshooting and improving the services; and other essential business operations that support the provision of the services.
- For any purpose for which you consent, authorize, or direct us to collect or use it.

We may use CHD for other purposes for which we will give you choices and/or obtain your consent as required by law. See the “Privacy Rights and Choices” section below and within our Privacy Notice for more details on the rights and choices you may have.

For transparency purposes: We do not use your name, address, or any directly identifiable information you provide to us for direct marketing or sales purposes to you. We never share this identifiable information with telemarketers, nor do we permit our business customers to use it for direct marketing or sales to you.

We may share each of the categories of CHD described above for the following purposes:
‍
- For enhancing our and our affiliates’ measurement capabilities by combining the information that we collect with other information available to them.
- To the extent necessary to provide a service that you have requested or as reasonably necessary to complete any transaction or provide any product or service you have requested or authorized.
- If we are involved in a merger, asset sale, financing, corporate divesture, reorganization, or acquisition of all or some portion of our business to another company or if we undergo liquidation or bankruptcy proceedings, we may disclose your information in connection with such transaction or proceeding before and or after the transaction closes or the proceedings are completed.
- For any purpose for which you consent, authorize, or direct us to disclose it.
- We may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process, or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss in connection with an investigation of suspected or actual illegal activity, or if necessary to protect the vital interests of another individual.

We do not exchange information that could be considered your CHD with third parties for monetary or other valuable consideration. To the extent permitted under applicable law, we may deidentify or aggregate CHD so that it will no longer be considered CHD. Our use and disclosure of deidentified or aggregated information is not governed by this CHD Notice.

As a reminder, we do not use your name, address, or any directly identifiable information you provide to us for direct marketing or sales purposes to you. We never share this identifiable information with telemarketers, nor do we permit our business customers to use it for direct marketing or sales to you.

As necessary for the purposes described in the section “Consumer Health Data We Share,” we disclose information that could be considered CHD with the following categories of third parties:

- Affiliates. We enable access to data across our subsidiaries, affiliates, and related companies, for example, where we utilize common data systems or where access helps us to provide our services and operate our business. Cleanfox belongs to the group of companies listed here, which together form the "NIQ Group."
- Government, regulatory, and public authorities. As described in our Privacy Notice, we disclose data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process.
- Parties to a corporate transaction. We may disclose information that might be considered CHD as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
- Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers. We may also disclose CHD, as directed by you in order to provide the services you request. To the extent we share your CHD with other third parties, we will do so in accordance with health data privacy laws.

If you are a consumer under the health data privacy laws and we collect, use, or share your CHD, you may have the following rights with respect to your CHD, subject to applicable exceptions.
‍
- Right to access. You have the right to confirm whether we are processing your CHD and to access such CHD.
- Right to delete. You have the right to ask us to delete certain CHD we have collected about you.
- Right to withdraw consent. If you consent to any collection or sharing of CHD, you have the right to withdraw your consent at any time.

You can request to exercise such rights using the methods described in the “Privacy Rights and Choices” section of our Privacy Notice, including through our webform available at Your Privacy Rights, also located in the footer of our website, or by emailing us at support@cleanfox.io.

If your request to exercise a right under the health data privacy laws is denied, you may appeal that decision by contacting our privacy support team at support@cleanfox.io. If your appeal is unsuccessful, you can raise a concern or file a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.