PREPARE FOR YOUR CARE WEBSITE PRIVACY POLICY

Last modified: August 1, 2024

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. BY USING THIS WEBSITE, YOU AGREE TO THIS PRIVACY POLICY. IF YOU DO NOT AGREE WITH THE TERMS SET OUT IN THIS PRIVACY POLICY, PLEASE DO NOT REGISTER FOR AN ACCOUNT, ACCESS, OR OTHERWISE USE THE WEBSITE. IN ORDER TO ACCESS AND USE THE WEBSITE AND ITS FUNCTIONALITIES YOU MUST BE AT LEAST EIGHTEEN (18) YEARS OLD.

INTRODUCTION

The Regents of the University of California, its affiliates, subsidiaries, officers, employees, contractors, agents, and service providers (the "University", "we", "our", or "us") respect and are committed to protecting the privacy of users of the Website (as defined below) ("User," "you," or "your").

This "Privacy Policy" describes the types of information that may be collected from you or that you may provide when you visit our website at: https://prepareforyourcare.org/ (our "Website") and the practices for collecting, using, maintaining, protecting, and disclosing that information.

This Privacy Policy applies to information that may be received, collected, or maintained about you when you visit the Website through any forms you may complete on it.

THIS PRIVACY POLICY DOES NOT APPLY TO INFORMATION THAT IS:

1. collected offline;

2. collected on any other applications or websites, including websites you may access through this Website;

3. provided to or collected by any third party, including, but not limited to, any third-party websites, applications or services that you may access through the Website.

Other websites and applications, and third-party websites and applications may have their privacy policies. Users who link to third-party websites, applications, and services from the Website should check the privacy and security policy statements of such third-party websites, applications, and services to understand the policies and practices of such third-party, as we are not responsible for those policies and practices. If you disclose your information to third parties on other websites on the internet, you do so at your own risk, as different rules may apply to their use or disclosure of such information.

USERS UNDER THE AGE OF 18

The Website is not intended for persons under 18 years of age, and we do not knowingly collect the personal information of persons under 18. If you are under 18, do not use or provide any information on this Website or through any of its features or provide any information about yourself, including your name, address, telephone number, or email address. If we learn we have collected or received personal information from a child under 18, we will delete that information. If you believe we might have any information from or about a person under 18, please contact us as described at the end of this Privacy Policy.

INFORMATION WE COLLECT AND HOW WE COLLECT IT

We may collect personal information about you that you provide when you:

1. create an account to use the Website; we may collect contact and registration information, such as your email address and password;

2. access or use the Website, such as information you upload or provide, name, email address, date of birth, postal address, telephone number, Internet Protocol (IP) Address, geographic location, and/or information about associated persons (e.g., medical decision makers, witnesses);

3. provide any information in connection with your outreach if you contact us with questions, comments, or for customer service, such as name, email, phone number, address, and other information that you choose to provide during the outreach.

Our Website and the planning and decision-making forms provided through it ("Forms") allow you to provide the information you desire through open-ended free-text entry fields. We do not require you to provide any information through such data entry fields and specifically request that you refrain from entering sensitive, personal information such as financial, bank, or credit card information and social security numbers. You acknowledge and agree that you provide any information on the Website or the Forms at your own and sole risk, and we shall not be responsible for any such information.

HOW WE SHARE YOUR INFORMATION

We do not share or disclose your information with any other parties or for any other purposes. If you desire to share the information you provided through our Forms, you will have to do so on your own. We provide functionality on the Website, allowing you to download or print the Forms to use as you see fit or share with any third parties with whom you desire.

HOW WE USE YOUR INFORMATION

We use the personal information that you provide us for the limited purposes of:

1. allowing you to complete the Forms on the Website;

2. provide you with effective customer service;

3. personalize your experience and our communications with you;

4. analyze the use of the Website and improve the content, functionality, and usability of the Website and Forms;

5. fulfill any other purpose for which you provide it;

6. comply with procedures, laws, and regulations where necessary for our legitimate interests;

7. establish, exercise, or defend our legal rights where necessary for our legitimate interests, including the enforcement of our Terms of Use, other usage policies, and other legal terms or controls, or to engage in other legal matters; and/or

8. for any other purpose with your consent.

We do not sell, share, rent, lease, or trade any personal information you provide us through our Website or Forms. We also do not use your information to make automated decisions that might affect you.

SECURITY OF INFORMATION

We use technical, organizational, administrative, and physical security measures to protect against the loss, misuse, and alteration of data used by or transmitted to or from our Website. However, no data transmissions over the Internet are guaranteed to be completely secure. While we strive to protect your data from unauthorized use or disclosure, we do not warrant or guarantee the security of the data you provide; any transmission is at your own risk.

Additionally, any information that you provide to us and that we retain will be stored on a third-party IaaS service provider's service (e.g., Google, Amazon Web Services, etc.). We do not have any control over the security measures implemented by such third-party IaaS providers, and you agree we shall not be responsible or liable for any loss or unauthorized use or disclosure of your information. If you allow us to store your information by creating an account (as set out above), you do so at your own risk.

You are solely responsible for maintaining the security of any password or other form of authentication involved in obtaining access to your Account (as defined below) on the Website.

COOKIES

A cookie is a small file placed on your computer, tablet, mobile device, or web browser. Web Beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) are small electronic files that can be included on webpages or emails.

We use cookies on our Website to identify you when you return to our Website. We do not sell, rent, trade, or share any information we collect through cookies. We use certain first-party performance/statistical/analytics cookies to understand better our users, the return rate of users, and the performance of our Website. Cookies generally fall into four categories:

1. Strictly necessary cookies

2. Performance/statistical/analytics cookies

3. Functionality/preference cookies; and

4. Behaviorally targeted advertising/marketing cookies.

Specifically, our Website uses the following cookies:

• Cookie Name(s): laravel_session, PHPSESSID. Type: Necessary. Domain: prepareforyourcare.org. Desription: These cookies notify the website that the same user is still using the website so that the website can make current user's information available on the current page of the website. Duration retained: Less than one day

• Cookie Name(s): XSRF-TOKEN. Type: Necessary. Domain: prepareforyourcare.org. Description: This is a security cookie used to ensure the information being shown on the web page is coming from the website. Duration retained: Less than one day

• Cookie Name(s): Vimeo (multiple cookies). Type: Preference. Domain: vimeo.com. Description: These cookies are used by the Vimeo video player which is embedded in the website. The video player uses them to store your preferences, such as preferred language, so that all videos behave the same way. Duration retained: More than two years

• Cookie Name(s): Google Analytics (multiple cookies). Type: Analytic. Domain: google.com. Description: These cookies are used by Google Analytics which is a service used by the website. Google uses them to record information about you and the pages you view, so that this information can be reported in aggregate to PREPARE to determine website usage patterns. Google also uses this information to conduct business activities unrelated to the website. Duration retained: More than two years

COOKIE PREFERENCES

Almost all web browsers allow you to verify which cookies are present on your device, block cookies, or receive notifications when a cookie is set. You can also place cookie preferences proactively on all browsers and devices used. Additionally, you can reset your preferences whenever you clear your cache or cookies.

Below are links informing you of methods offered by some popular browsers that allow users to express their options regarding the use of cookies:

• Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DDesktop

• Apple Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/16.1/mac/13.0

• Mozilla Firefox: https://support.mozilla.org/en-US/kb/websites-say-cookies-are-blocked-unblock-them#w_check-cookie-settings

• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

DO NOT TRACK

We do not track customers over time and across third-party websites or apps to provide targeted advertising and, therefore, do not respond to Do Not Track (DNT) signals.

USE OF GOOGLE ANALYTICS

We may use Google Analytics to collect certain analytical information (including IP addresses) to help us better understand activity on the Website. Google Analytics uses cookies to track you on the Website, record multiple visits by you to the Website, and record all the pages you visit on the Website. Google Analytics tracks your visits to the Website whenever you return.

We receive this data from Google in an aggregated, anonymous form that does not personally identify you. We will not use Google Analytics to track, collect, or upload any data that personally identifies an individual (such as a name, email address, or address) or other data that can reasonably be linked to such information by Google.

The Website may use all features of Google Analytics, including obtaining specific visitor cookie data, such as the source, medium, and keyword used to visit the Website. Google Analytics does not store any user-specific data, and the Website will not use specific data regarding users in any way related to Google Analytics.

We will not facilitate merging personally identifiable information with non-personally identifiable information collected through any Google advertising product or feature.

If you would like to learn more about how Google uses information collected through Google Analytics, you can find out more here.

If you want to opt out of Google Analytics, you can download and install the add-on for your web browser.

DATA STORAGE AND RETENTION:

The Website allows you to complete Forms as a "guest" or after registering for an account with the Website ("Account").

If you choose to complete our Forms as a "guest," we will purge any information you provide pursuant to our deletion policies, and you will no longer be able to access such information upon closing your browser.

If you choose to create an Account to complete our Forms, we will use our best efforts to retain your information for as long as your account is active or as needed to comply with applicable legal obligations. We will also retain and use your information as necessary to resolve disputes, protect us and our users, and enforce our agreements. However, we cannot warrant or guarantee that any information you provide to us through your Account will be available at any given time. You agree that your information shall be available on an "as is" and "as available" basis.

DISCLOSURE OF YOUR INFORMATION

We do not disclose your personal information with any other parties as provided by you on or through the Website and/or the Forms. Except, we may disclose your information in limited circumstances:

1. to comply with any court order, law, or legal process, including to respond to any government or regulatory request;

2. to enforce our rights arising from any contracts entered into between you and us; and

3. if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the University, our customers, or others.

ACCOUNT SECURITY

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. When you create an Account, you will be prompted to create a username and password. We are not responsible for any loss or damage arising from your failure to maintain the confidentiality of your password. Where we have given you (or you have chosen) a password for access to your Account, you are responsible for keeping this password confidential. If you create an Account with us, you are responsible for any activity that occurs under your Account.

THIRD-PARTY LINKS AND FEATURES

The Website may contain links or widgets to third-party sites, apps, services, and plug-ins, including Vimeo.

These links and features are provided for your reference and convenience only. They do not imply any endorsement of the information supplied through these third-party links and features nor any association with their operators. We are not responsible for the practices of such third parties. Any information you provide to third parties on their websites or services is covered under their privacy and data collection policies and is not covered by this Privacy Policy. We urge you to read these third parties' privacy and security policies.

CALIFORNIA RESIDENT'S RIGHTS RELATED TO THEIR INFORMATION

With respect to the personal information of California residents, we provide the following rights:

Right to Know/Access:

You have the right to know:

• The categories of personal information we have about you that you provided us.

• The categories of sources from which the personal information is collected. Please note we either collect information directly from you or our cookies.

• The purpose for collecting your personal information.

• The categories of third parties with whom we share personal information, if any. Please note we do not share your personal information with any other parties.

• The specific pieces of personal information we have collected about you.

Please note that we are not required to provide personal information to you more than twice in a 12-month period.

Right to portability:

You have the right, upon request, to obtain the personal information we have about you by mail or electronically without charge and in a readily usable format that allows you to transmit the information from one entity to another without hindrance.

Please note the Website permits you to download or print the personal information you have provided us independently.

Right to Know personal information sold or shared:

You have the right to know about your personal information that we may sell or share to a third party.

Please note that we do not sell or share your personal information.

Right to opt-out of sale or sharing:

We do not sell or share your personal information.

Right to limit the use or disclosure of sensitive personal information:

You have the right to opt out of using and disclosing your sensitive personal information.

Please note that we do not require or request your sensitive personal information. Any sensitive personal information you provide is at your sole risk.

Right to deletion:

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will delete your personal information from our records;

Please note that we may not delete your personal information if it is necessary to:

• Provide the services you requested from us.

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity.

• Debug to identify and repair errors that impair existing intended functionality.

• Exercise any rights provided for by law.

• Comply with an existing legal obligation.

Right to correction:

You have the right to request correction of inaccurate personal information we maintain about you. Upon receipt of your verifiable request, we will use commercially reasonable efforts to correct the inaccurate personal information.

Protection against discrimination:

You have the right not to be discriminated against by us because you exercised any of your rights herein. This means we cannot, among other things:

• Deny services to you.

• Provide a different level or quality of goods or services to you.

If you would like to exercise any of your rights described in this Privacy Policy, please contact us at info@prepareforyourcare.org.

NOTICE TO CALIFORNIA RESIDENTS

Pursuant to California Civil Code Section 1789.3, California users are entitled to the following consumer rights notice: California residents may reach the Complaint Assistance Unit of the Division of Consumer Services for the California Department of Consumer Affairs by mail at 1625 North Market Blvd., Sacramento, CA 95834, or by telephone at (916) 445-1254 or (800) 952-5210.

NOTICE TO NEVADA RESIDENTS

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to info@prepareforyourcare.org. However, please know that we do not currently sell data triggering that statute's opt-out requirements.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to modify, amend, or cancel this Privacy Policy from time to time, consistent with applicable data privacy laws. Any changes to this Privacy Policy will be posted here. The date the Privacy Policy was last revised is at the top of the page. You are responsible for periodically viewing this Privacy Policy to check for any changes. Your use of the Website following any such change constitutes your agreement that all information collected from or about you after the revised Privacy Policy is posted will be subject to the terms of the revised Privacy Policy.

CONTACT INFORMATION

To ask questions or comments about this Privacy Policy and our privacy practices, contact us at: info@prepareforyourcare.org.