Privacy policy

LAST UPDATED: September 25, 2025

Pine Street Clinic, LLC (referred to as “Pine Street Clinic”, "the Company", "We", "Us", or "Our") is committed to protecting the privacy of users of the website located at www.PineStreetClinic.com (collectively, the “Website”); and those customers who purchase products and services via the Website. This Privacy Policy describes how we gather information about visitors to the Website (“Visitors”), the types of personal information we collect, how we use (and do not use) the information and with whom we share it. This Privacy Policy also describes, among other things, the measures we take to protect the security of the information gathered and how you can contact us about our privacy practices. This Privacy Policy applies solely to the information that we collect through the Website. This Privacy Policy does not address personal information that you provide to us in other contexts (e.g., through a business relationship not handled through the Website). 

ACCEPTANCE OF PRIVACY POLICY
By using the Website, you signify your acceptance of this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Website. Your continued use of the Website following the posting of changes to these terms will mean that you accept those changes.

NOTICE OF HIPAA PRIVACY PRACTICES
Click here for our notice of HIPAA Privacy Practices

ELECTRONIC MAIL CONSENT
Before allowing electronic mail (“email”) communications with Pine Street Clinic LLC, please click here to read and agree to the following information regarding the risks and conditions of email use

QUICK LINKS
Cookie Policy & Preferences
Cookies Declaration
Data Requests
Do Not Sell or Share My Personal Information
Shopify Consumer Privacy Policy
Shopify Privacy Portal

QUICK CONTACT
Opt-out, ask questions, or get assistance:

Email us: hello@pinestreetclinic.com
Call Toll Free: (800) 456-9654
Call Local: (415) 485-0484
Online Contact Form: Click here
Mail: Pine Street Clinic, 124 Pine St, San Anselmo, CA, 94960

WHAT TYPES OF PERSONAL INFORMATION DO WE COLLECT?
“Personal Information” means information that identifies you or could reasonably be used to identify you. Examples of Personal Information include your name, address, phone number, and/or email address. We may obtain personal information about you from various sources, including this Website, when you choose to provide such information, such as when you call or email us or communicate with us through social media, or when you participate in promotions. We also may obtain information about you from our business partners and other third parties. The types of personal information we may obtain include:

• Your contact information (such as name, Twitter handle, email address, address, or phone number)
• Username and password for the account you may establish on the Website
• Demographic information (such as age, job title, date of birth, gender, etc.)
• Any content (e.g., comments, photographs, information and other materials) that you post directly on the Website or share with us (please bear in mind any personal information you submit can be read, collected or used by others; accordingly, please exercise caution when deciding to disclose any personal information in public activities or submissions)
• Information you provide by interacting with us through social media, including photographs
• Location information
• Pine Street Clinic emails you open
• Reading, browsing, advertising information (clicks, interactions, post-impression performance data) and shopping behavior and preferences, and a record of the purchases you make on the Website
• Your search queries conducted on the Website
• Other details that you may submit to us or that may be included in the information provided to us by third parties.

WHAT IS OUR PURPOSE FOR COLLECTING PERSONAL INFORMATION?
Our primary goal in collecting personal information is to provide you, the user, with a customized experience on the Website. This includes personalization services, interactive communications, online shopping and many other types of services.

HOW DO WE USE YOUR PERSONAL INFORMATION?
We will only use your Personal Information when the law allows us to. Most commonly, we will use your Personal Information in the following circumstances:

• Registering you for membership at the Website, and managing and maintaining your account on the Website
• Providing products or services you request
• Validating, confirming, verifying, delivering and tracking your purchases (including contacting you about your orders, including by telephone)
• Maintaining a record of the purchases you make and the areas you browse on our Website
• Responding to your questions and comments and provide customer support
• Communicating with you about products, services, offers, and promotions from Pine Street Clinic, and offering you products and services we believe may be of interest to you from Pine Street Clinic
• Enabling you to communicate with us through our blogs, social networks and other interactive media
• Managing your participation in sweepstakes and other promotions
• Tailor our products and services to suit your personal interests and the manner in which visitors use the Website, applications and social media assets
• Diagnosing or fixing technology problems
• Managing our business
• Protecting against and prevent fraud, unauthorized transactions, claims and other liabilities, and managing risk exposure, including by identifying potential hackers and other unauthorized users
• Providing, improving, testing, and monitoring the Website
• Enforce our Website’s Terms of Service, of which this Privacy Policy is a part
• Complying with applicable legal requirements and industry standards and our polices 
• To conduct age and identity verification
• Sharing with business partners and third parties that offer products and services that may be of interest to you
• Providing Shopify Enhanced Services (powered by Shopify Network Intelligence), which use interactions with our store, other Shopify merchants, and Shopify to improve personalization, store performance, fraud prevention, and advertising support.

In addition to the data uses described above, we also may use the information we obtain about you in other ways for which we may provide notice at the time of collection. If you do not wish to receive emails or other communications from us, you may contact us at hello@PineStreetClinic.com and request that your Personal Information be removed from our list.

DO WE DISCLOSE ANY PERSONAL INFORMATION TO OUTSIDE PARTIES?

Disclosures for Marketing Purposes. We may share your Personal Information with business partners, agents, and third parties that offer products and services that may be of interest to you. The Personal Information shared may include your name, title, email address and other personal information, for marketing or other purposes, and you should presume that your Personally Identifiable Information may thus be subject to future transactions.

Disclosures to Third Parties Assisting In Our Operations. We may share your Personal Information with third parties that work with, or on behalf of, Pine Street Clinic. These companies may use your Personal Information to assist Pine Street Clinic in its operations. However, these companies do not have any independent right to share this information, and Pine Street Clinic endeavors to oblige the third parties to follow practices substantially similar to those of Pine Street Clinic with respect to such information.

Disclosures Under Special Circumstances. We may provide information about you to respond to subpoenas, court orders, legal process or governmental regulations, or to establish or exercise our legal rights or defend against legal claims. We believe it is necessary to share information in order to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.

Business Transfers. We may share your Personal Information with other business entities in connection with the sale, assignment, merger or other transfer of all or a portion of Pine Street Clinic’s business to such business entity, including, but not limited to, bankruptcy, mergers, acquisitions, and sales of all or substantially all of our assets. We will require any such successor business entity to honor the terms of this Privacy Policy.

AUTOMATICALLY COLLECTED INFORMATION/ANONYMOUS INFORMATION
Each time a Visitor comes to the Website, Pine Street Clinic collects some information to improve the overall quality of the Visitor’s online experience. The types of non-personal information we may obtain include:

• Hardware/software information (geographic location, IP address, browser type, device type, operating system, bandwidth, etc.);
• Analytics information (time spend on site, number of pages viewed, referring web page, browsing information, social sharing, etc.);
• Advertising information (type of ads seen, number of times ads were served, pages where the ads were served, etc.); and
• Information collected through cookies, web beacons, and similar technologies.

This type of information is collected anonymously through the use of technology, such as third-party cookies, web beacons, and other similar methods. Some of the technology used includes but is not limited to:

Aggregated Data. We collect aggregate queries both directly and through third-party website analytic tools (Google Analytics, a web analytics service provided by Google, Inc.) for internal reporting and also to count, track, and aggregate the Visitors’ activity into Pine Street Clinic’s analysis of general traffic-flow at the Website. To this end, Pine Street Clinic may merge information about you into aggregated group data. In some cases, Pine Street Clinic may remove personal identifiers from Personal Information and maintain it in aggregate form that may later be combined with other information to generate anonymous, aggregated statistical information. Such anonymous, group data may be shared on an aggregated basis with Pine Street Clinic’s affiliates, business partners, service providers and/or vendors.

Web Server Logs and IP Addresses. An Internet Protocol (“IP”) address is a number that automatically identifies the computer or device you have used to access the Internet. The IP address enables our server to send you the web pages that you want to visit, and it may disclose the server owned by your Internet Service Provider. Pine Street Clinic may use IP addresses to conduct the Website’s analyses and performance reviews and to administer the Website. 

Cookies and Web Beacons. You can set your browser to refuse all or some browser cookies, or to alert you when the Website set or access cookies. You can also opt out of Google Analytics for Display Advertising and customize Google Display ads using the Google Ads Preferences Manager. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. Cookies are pieces of information that a website transfers to a user’s computer for purposes of storing information about a user’s preferences. Cookies in and of themselves do not personally identify users, although they do identify a user’s computer. Many websites use cookies as a standard practice to provide useful features when a user visits the Website and most web browsers are set up to accept cookies. Pine Street Clinic uses cookies to improve your online experience when visiting the Website, such as to keep authenticating Visitors, track of advertisements and compile aggregate data about site traffic and site interaction. Information that we collect through cookies includes (i) the name and version of the operating system on the Visitor’s computer, (ii) the name and version of the Visitor’s browser, (iii) which page on the The Website the Visitor is currently reading, as well as clicks and time spent on a particular page, (iv) if the Visitor was sent to the current page by some other page on the web, the universal resource locator (“URL”) of the referring web page, and (v) geolocation of the Visitor’s computer or device. You can set your browser to refuse cookies, but some portions of the Website may not work properly if you refuse cookies. Some of the Website’s web pages may use web beacons in conjunction with cookies to compile aggregate statistics about the Website’s usage. Both Pine Street Clinic and our third-party vendors, including Google, also use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) to inform, optimize and serve ads based on your past visits to the Website. A web beacon is an electronic image (also referred to as an “action tag,” “single-pixel,” or “clear GIF”) that is commonly used to track the traffic patterns of users from one web page to another in order to maximize web traffic flow and to otherwise analyze the effectiveness of the Website. Some web beacons may be unusable if you elect to reject their associated cookies. For more information on cookies, web beacons, and other similar technologies, please visit the Internet Advertising Bureau’s Interactive Glossary. By accessing and using the Website, you expressly consent to the storage of cookies, other local storage technologies, beacons or other information on your computer or devices. You also consent to the access of such cookies, local storage technologies, beacons and information by us.

Click here for a list of cookies our website uses and their purpose.

SECURITY OF YOUR PERSONAL DATA
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

THIRD-PARTY LINKS ON OUR THE WEBSITE
The Website may contain links to other websites. Please be aware that we are not responsible for the privacy practices of such other websites. When you connect to a website that is linked to the Website, we encourage you to read the privacy statements of that website. This privacy statement applies solely to information collected by the Website.

SHOPIFY AS OUR ECOMMERCE PLATFORM & ENHANCED SERVICES
Our store is hosted by Shopify. When you visit or make a purchase, Shopify processes your personal information to operate the ecommerce platform and to provide additional features (“Enhanced Services”). Enhanced Services are powered by Shopify Network Intelligence and use information about your interactions with our store, with other Shopify merchants, and with Shopify to help improve personalization and products, store performance, fraud prevention, and advertising support. No other merchant can access your data through these services. 

Information submitted by customers to this store will be shared with Shopify as well as third parties that may be located in other countries, in order to provide services to such users, including but not limited to Enhanced Services. Customers have direct rights with Shopify regarding Enhanced Services processing.

For details on how Shopify handles personal information, please review Shopify’s Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers

In addition to the choices we provide below, you can exercise certain privacy rights directly with Shopify (for example, requesting access to, deletion of, or opting out of sharing/targeted advertising related to Enhanced Services) by visiting Shopify’s Privacy Portal: https://privacy.shopify.com.

CREDIT CARD COMPANIES
Credit card transactions are handled by third party financial institutions and their vendors and contractors who receive credit card numbers and other personal information from us to verify the credit card numbers and process transactions. The use of your personal information by the third-party financial institutions and their vendors and contractors will be subject to their own privacy policies.

INTERNATIONAL TRANSFER OF INFORMATION
We share information with Shopify and other service providers that may be located outside your state or country, including in the United States and Canada. As a result, your personal information may be stored or processed in other jurisdictions. We take steps designed to require appropriate protections for such transfers. For details on Shopify’s practices, see the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/consumers).

CHILDREN’S PRIVACY
The Website is not intended for children under the age of 18. We will not knowingly collect Personally Identifiable Information from the Website’s visitors in this age group. We encourage parents to talk to their children about their use of the Internet and the information they disclose online. If a child has provided us with personally identifiable information, a parent or guardian of that child may contact us via e-mail at the above e-mail address if they would like this information deleted from our records. We will use reasonable efforts to delete the child’s information from our databases.

AGE & IDENTIFY VERIFICATION
For some orders, we use AgeChecker.net to verify your age and identity. More details:

AgeChecker.net Privacy Policy
AgeChecker.net Terms of Use

GLOBAL PRIVACY CONTROL (GPC) & DO NOT TRACK
We honor Global Privacy Control (GPC) signals in regions where we provide a data sharing opt‑out page (for example, California). When our site receives a valid GPC signal, we treat it as an opt‑out of the sale or sharing of personal information and of targeted advertising for that browser or device, and, where we can associate the browser/device with an account, we apply the opt‑out to your account profile.

We do not currently respond to "Do Not Track" (DNT) signals because a common industry standard for DNT has not been adopted. You can also use our "Do Not Sell or Share My Personal Information" page to manage your preferences.

EMAIL MARKETING
We may use Your Personal Data to contact You with newsletters, marketing or promotional materials and other information that may be of interest to You. You may opt-out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email We send or by contacting Us.

We may use Email Marketing Service Providers to manage and send emails to You including, but not limited to, Klaviyo and Aftership.

Click here for Klaviyo's privacy policy.

Click here for Aftership's privacy policy.

YOUR RIGHT TO ACCESS YOUR PERSONAL INFORMATION
If you are a citizen of a European Union state, you have rights under data protection laws in relation to your Personal Information that Pine Street Clinic has collected. You may exercise these rights by clicking here or by contacting us at hello@PineStreetClinic.com.

You have the right to:

• Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.
• Request correction of the Personal Information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal data. This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your Personal Information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Request restriction of processing of Personal Information. This enables you to ask us to suspend the processing of Personal Information in the following scenarios: (i) If you want us to establish the data’s accuracy; (ii) Where our use of the data is unlawful but you do not want us to erase it; (iii) Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; (iv) Where you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Request the transfer of Personal Information to you or to a third party. We will provide to you, or a third party you have chosen, Personal Information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process Personal Information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you are located in the European Union (EU), you have the right to make a complaint at any time to the data protection authority based in the country to which you are resident.

WHAT OPTIONS DO YOU HAVE ABOUT HOW PINE STREET CLINIC USES OR SHARES YOUR INFORMATION?
If you no longer wish for us to share your contact information with our sponsors or other third parties, please send us an e-mail at hello@PineStreetClinic.com. For us to be able to locate your record, your e-mail must include your name and e-mail address. Please also state your request in the body of the email. We will endeavor to process your request within 10 days, and thereafter we will no longer share your contact information with third parties. Please note that we will not be able to stop third parties from sending you information about their products or services if your information was shared with them before we received your request.

HOW TO UNSUBSCRIBE TO PINE STREET CLINIC MARKETING EMAILS AND “SPONSORED EMAIL”
You can unsubscribe from receiving Pine Street Clinic emails at any time. You can unsubscribe by clicking on the “Unsubscribe” link in the footer of any Pine Street Clinic email and following the instructions. Please note, unsubscribe requests sent by email are not valid. Requesting an unsubscribe by replying to a Pine Street Clinic email or through communication with a Pine Street Clinic employee is not considered a legitimate unsubscribe request. If you’ve been subscribing to our emails then from time to time you’ve also been receiving emails marked “Sponsored Email” in the subject line and in the email header. These emails are content paid for by our sponsors. You can unsubscribe from receiving Sponsored Email emails. However, if you do so, you will no longer receive Pine Street Clinic emails either. You can unsubscribe by clicking on the “Unsubscribe” link in the footer of any Pine Street Clinic email and following the instructions. We will endeavor to process your request within 10 days. Please note that during that time, you may continue to receive e-mail messages from Pine Street Clinic. Additionally, regardless of whether you have unsubscribed from receiving advertising and promotional material from Pine Street Clinic, you will continue to receive transactional information from us, such as information relating to your account, orders, or shipments.

DATA RETENTION
We retain personal information only as long as reasonably necessary and proportionate to achieve the purposes described in this Privacy Policy, including to provide the Services, comply with legal, accounting, or tax obligations, maintain security and prevent fraud, and protect our rights.

Instead of fixed periods for every data type, we apply criteria to determine retention, such as: the amount, nature, and sensitivity of the data; potential risk of harm from unauthorized use or disclosure; the purposes for which we process it and whether we can achieve those purposes through other means; and applicable legal requirements (for example, tax and accounting rules).

Examples of how this applies by category:
• Orders and transaction records: kept as required by tax, accounting, and audit laws and best practices.
• Account and support records: kept while your account is active and for a reasonable period afterward to manage our relationship.
• Marketing and site analytics: kept for a limited period to evaluate performance and improve our services.
• Security and fraud prevention logs: kept as long as reasonably necessary to protect our business, customers, and the Website.

We may retain de‑identified or aggregated information for research and statistical purposes.

YOUR CALIFORNIA PRIVACY RIGHTS - CCPA/CPRA PRIVACY NOTICE
This privacy notice section for California residents supplements the information contained in Our Privacy Policy and it applies solely to all visitors, users, and others who reside in the State of California.

Categories of Personal Information Collected
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. The following is a list of categories of personal information which we may collect or may have been collected from California residents within the last twelve (12) months.

Please note that the categories and examples provided in the list below are those defined in the CCPA/CPRA. This does not mean that all examples of that category of personal information were in fact collected by Us, but reflects our good faith belief to the best of Our knowledge that some of that information from the applicable category may be and may have been collected. For example, certain categories of personal information would only be collected if You provided such personal information directly to Us.

Scroll down for details on Categories A through L:

CATEGORY	EXAMPLES	COLLECTED?
Category A: Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number, passport number, or other similar identifiers.	Yes
Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	Yes
Category C: Protected classification characteristics under California or federal law.	Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	Yes
Category D: Commercial information.	Records and history of products or services purchased or considered.	Yes
Category E: Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	Yes
Category F: Internet or other similar network activity.	Interaction with our Service or advertisement.	Yes
Category G: Geolocation data.	Approximate physical location.	Yes
Category H: Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	Yes
Category I: Professional or employment-related information.	Current or past job history or performance evaluations.	Yes
Category J: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	No
Category K: Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes
Category L: Sensitive personal information.	Account login and password information, geolocation data.	Yes

 

Under CCPA/CPRA, personal information does not include:

• Publicly available information from government records
• Deidentified or aggregated consumer information
• Information excluded from the CCPA/CPRA's scope, such as:
  • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
  • Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994

Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from You. For example, from the forms You complete on our Service, preferences You express or provide through our Service, or from Your purchases on our Service.
• Indirectly from You. For example, from observing Your activity on our Service.
• Automatically from You. For example, through cookies We or our Service Providers set on Your Device as You navigate through our Service.
• From Service Providers. For example, third-party vendors to monitor and analyze the use of our Service, third-party vendors to deliver targeted advertising to You, third-party vendors for payment processing, or other third-party vendors that We use to provide the Service to You.

Use of Personal Information

We may use or disclose personal information We collect for "business purposes" or "commercial purposes" (as defined under the CCPA/CPRA), which may include the following examples:

• To operate our Service and provide You with Our Service.
• To provide You with support and to respond to Your inquiries, including to investigate and address Your concerns and monitor and improve our Service.
• To fulfill or meet the reason You provided the information. For example, if You share Your contact information to ask a question about our Service, We will use that personal information to respond to Your inquiry. If You provide Your personal information to purchase a product or service, We will use that information to process Your payment and facilitate delivery.
• Communicating with you about products, services, offers, and promotions from Pine Street Clinic, and offering you products and services we believe may be of interest to you from Pine Street Clinic
• To share hashed personal data with advertising platforms (such as Google) to improve the accuracy of conversion tracking and ad targeting (as part of Enhanced Conversions).
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to You when collecting Your personal information or as otherwise set forth in the CCPA/CPRA.
• For internal administrative and auditing purposes.
• To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity, including, when necessary, to prosecute those responsible for such activities.
• Other one-time uses.
• Other uses discussed elsewhere in this privacy policy

Please note that the examples provided above are illustrative and not intended to be exhaustive. For more details on how we use this information, please refer to the "HOW DO WE USE YOUR PERSONAL INFORMATION?" section and other sections of this privacy policy.

If We decide to collect additional categories of personal information or use the personal information We collected for materially different, unrelated, or incompatible purposes, We will update this Privacy Policy.

Disclosure of Personal Information

We may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of personal information for business or commercial purposes:

• Category A: Identifiers
• Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
• Category C: Protected classification characteristics under California or
  federal law.
• Category D: Commercial information
• Category E: Biometric information
• Category F: Internet or other similar network activity
• Category G: Geolocation data
• Category H: Sensory data
• Category I: Professional or employment-related information
• Category K: Inferences drawn from other personal information
• Category L: Sensitive personal information

Please note that the categories listed above are those defined in the CCPA/CPRA. This does not mean that all examples of that category of personal information were in fact disclosed, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been disclosed.

Share of Personal Information

We may share, and have shared in the last twelve (12) months, Your personal information identified in the above categories with the following categories of third parties:

• Service Providers
• Payment processors
• Our affiliates
• Our business partners
• Contractors
• Data processors 
• Third party vendors to whom You or Your agents authorize Us to disclose Your personal information in connection with products or services We provide to You

Sale of Personal Information

As defined in the CCPA/CPRA, "sell" and "sale" mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer's personal information by the Business to a third party for valuable consideration. This includes sharing hashed first-party data (e.g., email address) with third-party platforms such as Google Ads for Enhanced Conversions. This means that We may have received some kind of benefit in return for sharing personal information, but not necessarily a monetary benefit.

We do not sell personal information as the term sell is commonly understood. We do allow Service Providers to use Your personal information for the business purposes described in Our Privacy Policy, for activities such as advertising, marketing, and analytics, and these may be deemed a sale under CCPA/CPRA.

We may sell and may have sold in the last twelve (12) months the following categories of personal information:

• Category A: Identifiers
• Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
• Category C: Protected classification characteristics under California or
  federal law.
• Category D: Commercial information
• Category E: Biometric information
• Category F: Internet or other similar network activity
• Category G: Geolocation data
• Category H: Sensory data
  
• Category I: Professional or employment-related information
  
• Category K: Inferences drawn from other personal information
• Category L: Sensitive personal information

Please note that the categories listed above are those defined in the CCPA/CPRA. This does not mean that all examples of that category of personal information were in fact sold, but reflects our good faith belief to the best of Our knowledge that some of that information from the applicable category may be and may have been shared for value in return.

Sale of Personal Information of Minors Under 16 Years of Age

We do not knowingly collect personal information from minors under the age of 16 through our Service, although certain third party websites that we link to may do so. These third-party websites have their own terms of use and privacy policies and We encourage parents and legal guardians to monitor their children's Internet usage and instruct their children to never provide information on other websites without their permission.

We do not sell the personal information of Consumers We actually know are less than 16 years of age, unless We receive affirmative authorization (the "right to opt-in") from either the Consumer who is between 13 and 16 years of age, or the parent or guardian of a Consumer less than 13 years of age. Consumers who opt-in to the sale of personal information may opt-out of future sales at any time. To exercise the right to opt-out, You (or Your authorized representative) may submit a request to Us by contacting Us.

If You have reason to believe that a child under the age of 13 (or 16) has provided Us with personal information, please contact Us with sufficient detail to enable Us to delete that information.

Your Rights under the CCPA/CPRA

The CCPA/CPRA provides California residents with specific rights regarding their personal information. If You are a resident of California, You have the following rights:

• The right to notice. You have the right to be notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
• The right to know/access. Under CCPA/CPRA, You have the right to request that We disclose information to You about Our collection, use, sale, disclosure for business purposes and share of personal information. Once We receive and confirm Your request, We will disclose to You:
  • The categories of personal information We collected about You
  • The categories of sources for the personal information We collected about You
  • Our business or commercial purposes for collecting or selling that personal information
  • The categories of third parties with whom We share that personal information
  • The specific pieces of personal information We collected about You
  • If we sold Your personal information or disclosed Your personal information for a business purpose, We will disclose to You:
    • The categories of personal information categories sold
    • The categories of personal information categories disclosed
• The right to say no to the sale or sharing of Personal Data (opt-out). 

  The right to say no to the sale or sharing of Personal Data and the right to opt out of targeted advertising (cross‑context behavioral advertising).

• The right to correct Personal Data. You have the right to correct or rectify any inaccurate personal information about You that We collected. Once We receive and confirm Your request, We will use commercially reasonable efforts to correct (and direct our Service Providers to correct) Your personal information, unless an exception applies. Click here to make a data request
• The right to limit use and disclosure of sensitive Personal Data. You have the right to request to limit the use or disclosure of certain sensitive personal information We collected about You, unless an exception applies. Click here to make a data request.
• The right to delete Personal Data. You have the right to request the deletion of Your Personal Data under certain circumstances, subject to certain exceptions. Click here to make a data request. Once We receive and confirm Your request, We will delete (and direct Our Service Providers to delete) Your personal information from our records, unless an exception applies. We may deny Your deletion request if retaining the information is necessary for Us or Our Service Providers to:
  • Complete the transaction for which We collected the personal information, provide a good or service that You requested, take actions reasonably anticipated within the context of our ongoing business relationship with You, or otherwise perform our contract with You.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if You previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on Your relationship with Us.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which You provided it.
• The right not to be discriminated against. You have the right not to be discriminated against for exercising any of Your consumer's rights, including by:
  • Denying goods or services to You
  • Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
  • Providing a different level or quality of goods or services to You
  • Suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services

Exercising Your CCPA/CPRA Data Protection Rights

Please see the Do Not Sell My Personal Information link and Data Requests link for more information on how to opt out and limit the use of sensitive information collected. These links are also found at the top of this page under "Quick Links".

Fastest method: Use our Data Sharing Opt‑Out page (also linked at the top of this policy under “Quick Links”).

We also honor Global Privacy Control (GPC) signals as a valid request to opt out of sale/sharing and targeted advertising where required by law.

Additionally, in order to exercise any of Your rights under the CCPA/CPRA, and if You are a California resident, You can contact Us:

• By email: hello@pinestreetclinic.com

• By visiting this page on our website: https://pinestreetclinic.com/contact

• By toll-free phone number: (800) 456-9654

• By mail: 124 Pine St, San Anselmo, CA, 94960

Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information.

Your request to Us must:

• Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative
• Describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it

We cannot respond to Your request or provide You with the required information if We cannot:

• Verify Your identity or authority to make the request
• And confirm that the personal information relates to You

We will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.

Any disclosures We provide will only cover the 12-month period preceding the verifiable request's receipt.

For data portability requests, We will select a format to provide Your personal information that is readily usable and should allow You to transmit the information from one entity to another entity without hindrance.

How to exercise privacy rights with Shopify
If you want to exercise certain rights directly with Shopify (for example, to opt out of sharing/targeted advertising based on your interactions with Shopify merchants), visit Shopify’s Privacy Portal: https://privacy.shopify.com.

Do Not Sell Or Share My Personal Information / Targeted Advertising Opt-Out
As defined in the CCPA/CPRA and similar state laws, “sell,” “share,” and “targeted advertising” include certain disclosures of personal information for cross‑context behavioral advertising. While we don’t “sell” personal information in the traditional sense, we may use services (including Shopify’s Enhanced Services and advertising/analytics tools) that could be considered a sale, sharing, or targeted advertising under these laws.

How to opt out:

• Use our Data Sharing Opt‑Out page: https://pinestreetclinic.com/pages/data-sale-opt-out

• Use a browser or extension that sends a valid Global Privacy Control (GPC) signal; we honor GPC signals as an opt‑out where required.

• Or contact us using the details below.

If we’re able to associate your browser/device with your account, we apply the opt‑out to your account profile. Opt‑outs don’t affect strictly necessary processing (e.g., security, fraud prevention). If we use Shopify Audiences, customers who opt out of sale/sharing or targeted advertising (including via GPC) will be excluded.

BEHAVIOR REMARKETING

The Company uses remarketing services to advertise to You after You accessed or visited our Service. We and Our third-party vendors use cookies and non-cookie technologies to help Us recognize Your Device and understand how You use our Service so that We can improve our Service to reflect Your interests and serve You advertisements that are likely to be of more interest to You.

These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies and to enable Us to:

* Measure and analyze traffic and browsing activity on Our Service
* Show advertisements for our products and/or services to You on third-party websites or apps
* Measure and analyze the performance of Our advertising campaigns

Some of these third-party vendors may use non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit You to block such technologies. You can use the following third-party tools to decline the collection and use of information for the purpose of serving You interest-based advertising:

• The NAI's opt-out platform: http://www.networkadvertising.org/choices/
• The EDAA's opt-out platform http://www.youronlinechoices.com/
• The DAA's opt-out platform: http://optout.aboutads.info/?c=2&lang=EN

You may opt-out of all personalized advertising by enabling privacy features on Your mobile device such as Limit Ad Tracking (iOS) and Opt Out of Ads Personalization (Android). See Your mobile device Help system for more information.

We may share information, such as hashed email addresses (if available) or other online identifiers collected on Our Service with these third-party vendors. This allows Our third-party vendors to recognize and deliver You ads across devices and browsers. To read more about the technologies used by these third-party vendors and their cross-device capabilities please refer to the Privacy Policy of each vendor listed below.

Among the third-party vendors We use are:

Google Ads (AdWords) (Provided by Google Inc.)
You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads

Google also recommends installing the Google Analytics Opt-out Browser Add-on for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Bing Ads Remarketing (Provided by Microsoft Inc.)
You can opt-out of Bing Ads interest-based ads by following their instructions: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

You can learn more about the privacy practices and policies of Microsoft by visiting their Privacy Policy page: https://privacy.microsoft.com/en-us/PrivacyStatement

The opt out will place a cookie on Your computer that is unique to the browser You use to opt out. If you change browsers or delete the cookies saved by Your browser, You will need to opt out again.

Google Ads Enhanced Conversions
We use Google Ads Enhanced Conversions to improve the accuracy of our advertising performance measurement. This involves collecting first-party customer data (such as email address, name, phone number, or mailing address) during interactions like form submissions or purchases. This data is hashed using a secure one-way algorithm and sent to Google to enhance conversion tracking.

You can learn more about how Google uses this information here: Google Ads Enhanced Conversions.

Mobile Devices
Your mobile device may give You the ability to opt out of the use of information about the apps You use in order to serve You ads that are targeted to Your interests:

• "Opt out of Interest-Based Ads" or "Opt out of Ads Personalization" on Android devices
• "Limit Ad Tracking" on iOS devices

You can also stop the collection of location information from Your mobile device by changing the preferences on Your mobile device.

Limit the Use or Disclosure of My Sensitive Personal Information
If You are a California resident, You have the right to limit the use and disclosure of Your sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests such services or goods.

We collect, use and disclose sensitive personal information in ways that are necessary to provide the Service. For more information on how We use Your personal information, please see the the applicable sections of this privacy policy or contact us.

Your California Privacy Rights (California's Shine the Light law)
Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes.

If you'd like to request more information under the California Shine the Light law, and if You are a California resident, You can contact Us using the contact information provided below.

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)
California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.

To request removal of such data, and if You are a California resident, You can contact Us using the contact information provided below, and include the email address associated with Your account.

Be aware that Your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

YOUR NEVADA PRIVACY RIGHTS
Nevada SB-220 permits our visitors who are Nevada residents to opt out of the sale of certain personal information (called “covered information”) to third parties. This includes information such as name, address, e-mail addresses, telephone number, social security number, online identifiers and online service activity. To make such an opt out, please contact us at hello@PineStreetClinic.com. 

YOUR VIRGINIA PRIVACY RIGHTS
Under Virginia’s Consumer Data Protection Act (“CDPA”), Virginia residents have certain rights around Pine Street Clinic’s collection, use, and sharing of their Personally Identifiable Information. Pine Street Clinic does not sell your Personally Identifiable Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Pine Street Clinic does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Pine Street Clinic may engage in “targeted advertising” as that term is defined in the CDPA. In compliance with Virginia law, we provide Virginia residents residing in Virginia with certain information upon request (“VA Consumer Request”). This Section of the Privacy Policy outlines how Virginia residents can request information, what you will receive and how to opt-out. If you would like to submit a VA Consumer Request, you can contact us at hello@PineStreetClinic.com. If you choose to submit a VA Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested data. Pine Street Clinic will only use the information it receives to respond to your request. We will not be able to disclose information if we cannot verify that the person making the VA Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. You have: (i) the right to know and confirm whether we are processing your Personally Identifiable Information, and to access the data; (ii) the right to correct inaccuracies in your Personally Identifiable Information; (iii) the right to delete your Personally Identifiable Information; (iv) subject to a number of exceptions in each case; (v) the right to obtain a copy of your Personally Identifiable Information, in a readily usable format; (vi) the right to opt-out of the processing of your Personally Identifiable Information for targeted advertising purposes; (vii) the right to opt-out of the sale of your Personally Identifiable Information; and (viii) the right to opt-out of profiling based upon your Personally Identifiable Information. Pine Street Clinic may not, and will not, treat you differently because of your VA Consumer Request activity. As a result of your VA Consumer Request activity, we may not and will not deny products or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personal Information. 

YOUR COLORADO PRIVACY RIGHTS
Under Colorado’s Consumer Privacy Act (“CPA”), Colorado residents have certain rights around Pine Street Clinic’s collection, use, and sharing of their Personally Identifiable Information. Pine Street Clinic does not sell your Personally Identifiable Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Pine Street Clinic does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Pine Street Clinic may engage in “targeted advertising” as that term is defined in the CPA. In compliance with Colorado law, we provide Colorado residents residing in Colorado with certain information upon request (“CO Consumer Request”). This Section of the Privacy Policy outlines how Colorado residents can request information and what you can receive. If you would like to submit a CO Consumer Request, you can contact us at hello@PineStreetClinic.com. If you choose to submit a CO Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested Personally Identifiable Information. Pine Street Clinic will only use the information it receives to respond to your request. Pine Street Clinic will not be able to disclose information if it cannot verify that the person making the CO Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. Pine Street Clinic does not sell, rent, or lease your Personally Identifiable Information to third parties.

1. Request to Access.You may submit a CO Consumer Request to obtain a copy of or access to the Personally Identifiable Information that Pine Street Clinic has collected on you. 
2. Request to Know. You may submit a CO Consumer Request to receive information about Pine Street Clinic’s data collection practices. You may request information on the categories of Personally Identifiable Information (as defined by Colorado law) Pine Street Clinic has collected about you; the categories of data collection sources; Pine Street Clinic’s business or commercial purpose for collecting or selling Personally Identifiable Information; the categories of third parties with whom Pine Street Clinic shares Personally Identifiable Information, if any; and the specific pieces of Personally Identifiable Information we have collected about you. Please note that the categories of Personally Identifiable Information and sources will not exceed what is contained in this Privacy Policy. Additionally, Pine Street Clinic is not required to retain any information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. Pine Street Clinic is also not required to reidentify Personally Identifiable Information if it is not stored in that manner already.
3. Request to Delete. You may request that Pine Street Clinic delete your Personally Identifiable Information. Subject to certain exceptions set out below we will, on receipt of a verifiable CO Consumer Request, delete your Personally Identifiable Information from our records and direct any service providers to do the same. Please note that we may not delete your Personally Identifiable Information if it is necessary to: (1) Complete the transaction for which the Personally Identifiable Information was collected; (2) Provide a product or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; (3) Detect security incidents, protect against malicious, deceptive activity, and take all necessary and appropriate steps to mitigate current and future risk; (4) Debug and repair internal information technology as necessary; undertake internal research for technological development and demonstration; (5) Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; (6) Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; (7) Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; (8) comply with an existing legal obligation; or (9) Otherwise use your Personally Identifiable Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
4. Request to Correct. You may request that Pine Street Clinic correct inaccuracies in your Personally Identifiable Information.
5. Request to Opt-Out. You may request to opt-out of the processing of your Personally Identifiable Information for purposes of targeted advertising or the sale of Personally Identifiable Information.
6. Right to Data Portability. You have the right to obtain a copy of your Personally Identifiable Information, that you previously provided to Pine Street Clinic, in a format that: to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows you to transmit the data to another without impediment, where the processing is carried out by automated means. Pine Street Clinic may not, and will not, treat you differently because of your CO Consumer Request activity. As a result of your CO Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information.

YOUR CONNECTICUT PRIVACY RIGHTS
Under Connecticut’s Data Privacy Act (“CTDPA”), Connecticut residents have certain rights around Pine Street Clinic’s collection, use, and sharing of their Personally Identifiable Information. Pine Street Clinic does not sell your Personally Identifiable Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Pine Street Clinic does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Pine Street Clinic may engage in “targeted advertising” as that term is defined in the CTDPA. Under Connecticut law, if you are a resident of Connecticut, you have the right to request access to or a copy of the Personally Identifiable Information we have about you. This Personally Identifiable Information may include information you have given us directly such as your name, address, phone number, and your marketing preferences. Personally Identifiable Information we have obtained through your interactions with us, such as your transaction history with Pine Street Clinic, your actions on the Pine Street Clinic website, and your Pine Street Clinic account. Personally Identifiable Information that third parties have shared about you, such as your demographic data. 

In compliance with Connecticut law, we provide Connecticut residents residing in Connecticut with certain information upon request (“CT Consumer Request”). This Section of the Privacy Policy outlines how Connecticut residents can request information and what you can receive. If you would like to submit a CT Consumer Request, you can contact us at hello@PineStreetClinic.com. If you choose to submit a CT Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested data. Pine Street Clinic will only use the Personally Identifiable Information it receives to respond to your request. Pine Street Clinic will not be able to disclose Personally Identifiable Information if it cannot verify that the person making the CT Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. Pine Street Clinic does not sell, rent, or lease your Personally Identifiable Information to third parties.

1. Request to Access. You may submit a CT Consumer Request to obtain a copy of or access to the Personally Identifiable Information that Pine Street Clinic has collected on you.
2. Request to Know. You may submit a CT Consumer Request to receive information about Pine Street Clinic’s data collection practices. You may request information on the categories of Personally Identifiable Information (as defined by Connecticut law) Pine Street Clinic has collected about you; the categories of data collection sources; Pine Street Clinic’s business or commercial purpose for collecting or selling Personally Identifiable Information; the categories of third parties with whom Pine Street Clinic shares Personally Identifiable Information, if any; and the specific pieces of Personally Identifiable Information we have collected about you. Please note that the categories of Personally Identifiable Information and sources will not exceed what is contained in this Privacy Policy. Additionally, Pine Street Clinic is not required to retain any Personally Identifiable Information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. Pine Street Clinic is also not required to reidentify Personally Identifiable Information if it is not stored in that manner already.
3. Request to Delete. You may request that Pine Street Clinic deletes your Personally Identifiable Information. Subject to certain exceptions set out below we will, on receipt of a verifiable CT Consumer Request, delete your Personally Identifiable Information from our records and direct any service providers to do the same. Please note that we may not delete your Personally Identifiable Information if it is necessary to: (i) complete the transaction for which the Personally Identifiable Information was collected; (ii) provide a product or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; (iii) detect security incidents, protect against malicious, deceptive activity, and take all necessary and appropriate steps to mitigate current and future risk; (iv) debug and repair internal information technology as necessary; undertake internal research for technological development and demonstration; (v) exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; (vi) engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; (vii) enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; (viii) comply with an existing legal obligation; or (ix) otherwise use your Personally Identifiable Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
4. Request to Correct. You may request that Pine Street Clinic correct inaccuracies in your Personally Identifiable Information.Request to Opt-Out.You may request to opt-out of the processing of your Personally Identifiable Information for purposes of targeted advertising or the sale of Personally Identifiable Information.
5. Right to Data Portability. You have the right to obtain a copy of your Personally Identifiable Information, that you previously provided to Pine Street Clinic, in a format that: to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows you to transmit the data to another without impediment, where the processing is carried out by automated means. Pine Street Clinic may not, and will not, treat you differently because of your CT Consumer Request activity. As a result of your CT Consumer Request activity, we may not and will not deny products or services to you; charge different rates for goods or services; provide a different level quality of products or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information.

YOUR UTAH PRIVACY RIGHTS
In compliance with Utah law, we provide Utah residents residing in Utah with certain information upon request (“UT Consumer Request”). This Section of the Privacy Policy outlines how Utah residents can request information and what you can receive. If you would like to submit a UT Consumer Request, you can contact us at hello@PineStreetClinic.com. If you choose to submit a UT Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested data. Pine Street Clinic will only use the information it receives to respond to your request. Pine Street Clinic will not be able to disclose information if it cannot verify that the person making the UT Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. Pine Street Clinic does not sell, rent, or lease your Personally Identifiable Information to third parties.

1. Right to access.You have the right to confirm if we are processing your Personally Identifiable Information and to access your Personally Identifiable Information.
2. Right to delete.You have the right to delete the Personally Identifiable Information that you provided to Pine Street Clinic.Right to data portability. You have the right to obtain a copy of your Personally Identifiable Information, that you previously provided to Pine Street Clinic, in a format that: to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows you to transmit the data to another without impediment, where the processing is carried out by automated means.Right to opt out of certain processing.You have the right to opt out of the processing of your Personally Identifiable Information for the purposes of targeted advertising, or the sale of personal data.
3. Pine Street Clinic may not, and will not, treat you differently because of your UT Consumer Request activity. As a result of your UT Consumer Request activity, we may not and will not deny products or services to you; charge different rates for products or services; provide a different level quality of products or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information.

USAGE, PERFORMANCE, & MISCELLANEOUS
We may use third-party Service Providers to maintain and improve our Service. This may include (but is not limited to):

Invisible reCAPTCHA
We use an invisible captcha service named reCAPTCHA. reCAPTCHA is operated by Google.

The reCAPTCHA service may collect information from You and from Your Device for security purposes.

The information gathered by reCAPTCHA is held in accordance with the Privacy Policy of Google:
https://www.google.com/intl/en/policies/privacy/

 

GDPR PRIVACY
Lawful Basis
We only gather and process your personal information if we have a legal basis for the processing under applicable laws, for example:

• It is necessary to fulfil an agreement with you
• We have gathered your consent
• We legally are obliged to do so

Email Marketing
All Pine Street Clinic marketing emails include clear Opt Out instructions which are readily and clearly available, should a individual wish to stop receiving any Pine Street Clinic emails. Pine Street Clinic’s “Lawful Basis” falls under what is known as “Legitimate Interest” whereby, under Recital 47 of GDPR, the processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest.

In addition, Pine Street Clinic gains an additional Lawful Basis by receiving “Consent” through a user’s agreement to Pine Street Clinic’s Terms and Conditions when signing up to become a subscriber or by purchasing a product, by signing up for our mailing list, or seeking our services. Separate from the direct marketing activities, Pine Street Clinic must provide a legitimate interest for processing employee data. This processing also falls under “Legitimate Interest” whereby processing is necessary for operational, administrative, HR and recruitment purposes and to otherwise manage employment relationship and interaction between employees. 

Your Rights under the GDPR
You have the right under this Privacy Policy, and by law if You are within the EU, to:

• Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. This also enables You to receive a copy of the Personal Data We hold about You.
  
• Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
  
• Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.
  
• Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.
  
• Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.
  
• Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.
  

Click here to make a data request or Contact Us

UPDATES TO THIS PRIVACY NOTICE
This Privacy Policy may be revised from time to time as Pine Street Clinic add new features and services, as laws change, and as industry privacy and security best practices evolve. We display an effective date on the policy at the top of this Privacy Policy so that it will be easier for you to know when there has been a change.

HOW TO CONTACT US
If you have any questions or comments about this Privacy Policy, or if you would like us to update information we have about you or your preferences, please contact us:

Email us: hello@pinestreetclinic.com
Call Toll Free: (800) 456-9654
Call Local: (415) 485-0484
Online Contact Form: Click here
Mail: Pine Street Clinic, 124 Pine St, San Anselmo, CA, 94960