ChromaDex, Inc. and its affiliates, including ChromaDex Corporation and HealthSpan Research LLC
(“ChromaDex”, “we”, “us”, “our”) takes the protection of personal information very seriously. This
information on our websites
our blogs, and in the course of our business operations, including selling our products and providing
you with customer support.
Please read this Policy to learn what personal information we collect about you, why and how we collect and use that information, and with whom we might share it. This Policy also makes you aware of your rights under the California Consumer Privacy Act of 2018 (the “CCPA”). We adopt this Policy to comply with the CCPA. Any terms defined in the CCPA have the same meaning when used in this Policy.
It is essential that you read and understand this Policy. If you have questions or do not understand it fully, feel free to reach out to us.
This Policy addresses California residents whose personal information we process, such as visitors to our website(s), current and prospective users of our Applications and Services, and current and prospective business partners and their representatives (“consumers” or “you”).
This Policy tells you, among other things:
Within the scope of this Policy, we act as a “business” for the Personal Information we collect, or that others collect on our behalf. This means that we are responsible for determining how we collect, use, and share your personal information. It also means you can submit requests to us relating to your privacy rights.
The table below describes the categories of personal information we have collected about you in the
last twelve months, the methods we used in order to collect your Personal Information, the
categories of Personal Information we've disclosed to third parties for business purposes; and the
categories of third party recipients of that Personal Information.
We do not sell your personal information to third parties.
We don’t collect additional categories of personal information without informing you.
We may process personal information of children under the age of 16. However, we do not sell personal information of any individual. Correspondingly, we do not sell personal information of children under the age of 16.
|Category of Personal Information||When Do We Obtain It?||Business and Commercial Purposes for the Collected of this Information||Categories of Parties to Whom We Disclose this Category of Personal Information for a Business Purpose|
|Identifiers – such as a real name (first and last name), alias, postal address, email address, and for current and prospective customers who wish to create an account, account name, account password and/or other similar identifiers.||When you share it with us directly as a website visitor, a current or prospective customer or supplier, based on publicly available information, or when we receive your personal information from online marketplaces like Amazon||Marketing, selling, and delivering our products to you, enquiring about your level of satisfaction with our products and services, procuring products and services from you, as a fundamental aspect of a contractual relationship between us and/or responding to your requests and inquiries.||
We may disclose these Categories of Personal Information to third parties which are
reasonable and strictly necessary to fulfill the purposes for collecting your Personal
including but not limited to the following service providers:
|Special categories of personal information (listed in the California Customer Records statute) – such as your name, email address, physical address and telephone number.||Marketing, selling, and delivering our products to you and/or establishing your purchasing or consuming history, preferences or tendencies.|
|Commercial information – such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies||Establishing your purchasing or consuming history, preferences or tendencies.|
|Inferences drawn from other Personal Information – such as profiles reflecting a person's preferences, characteristics, predispositions, and behavior.|
In this section, we will describe your specific rights regarding your personal information and we
will explain how you can exercise those rights.
You have the right to request that we disclose certain information to you about our collection and
use of your personal information over the past twelve (12) months.
Once we receive your request and confirm it was you or your authorized agent who made the request, we will disclose to you:
You have the right to request that we delete any of your personal information that we collected from you and retained. Once we receive a request and verify your identity, we will delete (and insofar as is reasonably practicable, direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny a request to delete your personal information if we or our service providers need to retain the personal information to:
To exercise any of the rights described above (the right to know, data portability, the right to delete, and the right to opt-out (or opt-in)), please submit a request by either:
You may appoint an authorized agent to exercise your rights on your behalf. You should appoint such
agent via written permission or a power of attorney pursuant to Probate Code sections
4000 to 4465.
To verify that your authorized agent acts on your behalf, we will ask for this written permission from your agent or for the power of attorney. In case you provided your authorized agent with a written permission, we will require that you also verify your identity.
To evaluate your requests to know or delete, we need to be sure it was you who made the request.
We may decide to verify your identity by requesting certain information, including, without limitation, the following: your contact number, your mailing address, your email address, and the last communication you received from ChromaDex.
We will only use the personal information you provide us in a request to verify the requestor's identity or authority to make the request.
Please note that you may only make a consumer request to know or data portability twice within a 12-month period.
We will confirm receipt of your request in ten (10) days. Please allow us up to 30 days to reply to your request, starting from the day we received your request. If we need more time (up to 90 days in total), we will inform you of the reason and extension period in writing. We will only cover the twelve-month period preceding the moment we receive the request in any disclosures we provide you with. If we cannot satisfy a request, we will explain why in our response. We will not charge a fee for processing or responding to your requests, unless we determine that your request is excessive, repetitive, or manifestly unfounded. In those cases, we will tell you why we made that determination and provide you with a cost estimate before completing your request.
We will not discriminate against you for exercising any of your CCPA rights. This right means that, unless the CCPA allows it, we will not:
We are strongly committed to keeping your personal information safe. We have implemented and will maintain technical, administrative, and physical measures that are reasonably designed to help protect your Personal Information from unauthorized processing, such as unauthorized access, theft, disclosure, alteration, or destruction.
If you have any questions about this Policy or our processing of your Personal information, please call us at
+1-949-419-0288 or send us an email to firstname.lastname@example.org.
Our Data Protection Officer may be contacted as follows:
Please allow up to 30 days for us to reply.
If we make any material change to this Policy, we will post the revised statement to this web page.
We will also update the “Effective” date. By continuing to use our services after we post any of
these changes, you accept the modified Policy.
We will update this Policy at least once per year.