Effective Date: June 8, 2023
This Privacy Statement Addendum for California Residents (the “California Privacy Addendum”) supplements the information contained in our Privacy Statement and describes IDEX Health & Science LLC collection and use of Personal Information (as defined below). This California Privacy Addendum applies solely to all visitors, users, and others who reside in the State of California (“Consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, the “CPRA”) and any terms defined in the CPRA have the same meaning when used in this notice.
This California Privacy Addendum applies to information that we collect on our Website that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your device (“ Personal Information”). However, publicly available information that we collect from government records and deidentified or aggregated information (when deidentified or aggregated as described in the CPRA) are not considered Personal Information and this California Privacy Addendum does not apply to such information.
This California Privacy Addendum does not apply to employment-related Personal Information collected from our California-based employees, job applicants, contractors, or similar individuals (“Personnel”). Please contact your local human resources department if you are part of our California Personnel and would like additional information about how we process your Personal Information.
1. Information We Collect About You and How We Collect It
IDEX Health & Science LLC collects, and over the prior twelve (12) months have collected, the following categories of Personal Information about Consumers:
|Category||Applicable Pieces of Personal Information Collected|
|A. Identifiers||A real name; alias; postal address; unique personal identifier; online identifier; Internet Protocol address; email address; and other similar identifiers.|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))||A name; address; and telephone number.|
Some Personal Information included in this category may overlap with other categories.
|D. Commercial information||Records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.|
|F. Internet or other similar network activity||Log information, device information, and information collected by cookies and other tracking technologies described in our Privacy Statement.|
|G. Geolocation data||IP-based physical location or movements that may only identify your location to a geographic region, such as a town, city, or state. This information may be used for network security purposes and cannot be used to locate your exact location.|
IDEX Health & Science LLC will not collect additional categories of Personal Information without providing you notice. As further described in To Whom Do We Sell or Share Your Personal Information, we do not “sell” any categories of Personal Information for monetary or other valuable consideration and we do not “share” any categories of Personal Information for cross-context behavioral advertising.
2. Sources of Personal Information
We collect Personal Information about you from the sources described in our Privacy Statement.
3. Purposes for Our Collection of Your Personal Information
We only use your Personal Information we collect, and over the prior twelve (12) months, have used the Personal Information we collected, for the purposes described in our Privacy Statement. IDEX Health & Science LLC will not use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
4. Third Parties to Whom Do We Disclose Your Personal Information for Business Purposes
IDEX Health & Science LLC may disclose your Personal Information to third parties for one or more business purposes. When we disclose Personal Information to non-affiliated third-parties for a business purpose, we enter a contract that describes the purpose, requires the recipient to both keep that Personal Information confidential and not use it for any purpose except for the specific business purposes for which the Personal Information was disclosed, and requires the recipient to otherwise comply with the requirements of the CPRA.
In the preceding twelve (12) months, IDEX Health & Science LLC has disclosed the following categories of Personal Information for one or more of the business purposes described below to the following categories of third parties:
|Personal Information Category||Categories of Non-Service Provider and Non-Contractor Third Party Recipients|
|A. Identifiers||Service Providers; affiliates, parents, and subsidiary organizations of IDEX; business partners; government entities (such as tax authorities); and other advisors (such as accounting and legal advisors).|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))||Service Providers; affiliates, parents, and subsidiary organizations of IDEX; business partners; government entities (such as tax authorities); and other advisors (such as accounting and legal advisors).|
|D. Commercial information||Service Providers; affiliates, parents, and subsidiary organizations of IDEX; business partners; government entities (such as tax authorities); and other advisors (such as accounting and legal advisors).|
|F. Internet or other similar network activity||Service Providers; affiliates, parents, and subsidiary organizations of IDEX; advertisers and advertising networks; social media companies; Internet cookie information recipients, such as analytics and behavioral advertising services; and government entities.|
|G. Geolocation data||Service Providers; affiliates, parents, and subsidiary organizations of IDEX; Internet cookie information recipients, such as analytics and behavioral advertising services; and government entities.|
We disclose your Personal Information to the categories of third parties listed above for the following business purposes:
In addition to the above, we may disclose any or all categories of Personal Information to any third-party (including government entities and/or law enforcement entities) as necessary to:
“Sale” of Your Personal Information for Monetary or Other Valuable Consideration
In the preceding twelve (12) months, IDEX Health & Science LLC has not “sold” Personal Information (including any Personal Information for minors under the age of 16) for either monetary or other valuable consideration.
“Sharing” of Your Personal Information for Cross-Context Behavioral Advertising
In the preceding twelve (12) months, IDEX Health & Science LLC has not “shared” Personal Information (including any Personal Information for minors under the age of 16) for the purpose of cross-context behavioral advertising.
6. Consumer Data Requests
The CPRA provides Consumers with specific rights regarding their Personal Information. This section describes your CPRA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your CPRA Privacy Rights.
To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:
If you (or your Authorized Agent) submit a Consumer Request to delete your information online, we will use a two-step process in order to confirm that you want your Personal Information deleted. This process may include verifying your request through your email address on record, calling you on your phone number on record (which may include an automated dialer), sending you a text message and requesting that you text us a confirmation, sending you a confirmation through US mail. By making a Consumer Request, you consent to us contacting you in one or more of these ways.
If you fail to make your Consumer Request in accordance with the ways described above, we may either treat your request as if it had been submitted with our methods described above or provide you with information on how to submit the request or remedy any deficiencies with your request.
Only you, or your Authorized Agent that you authorize to act on your behalf, may make a Consumer Request related to your Personal Information. To designate an Authorized Agent, see Authorized Agents below.
All Consumer Requests must:
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm which Personal Information relates to you or the individual for whom you are making the request as their Authorized Agent.
Making a Consumer Request does not require you to create an account with us.
We will only use Personal Information provided in a Consumer Request to verify the requestor’s identity or authority to make the request.
You may authorize your agent to exercise your rights under the CPRA on your behalf by registering your agent with the California Secretary of State or by providing them with power of attorney to exercise your rights in accordance with applicable laws (an “Authorized Agent”). If you authorize an Agent, we may request that your Authorized Agent submit proof of identity and that they have been authorized exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.
Response Timing and Format
We will confirm our receipt of your Consumer Request within ten (10) business days of its receipt. We will generally process these requests within forty-five (45) calendar days of its receipt. If we require more time (up to an additional 45 calendar days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
In response to a Right to Know or Data Portability Consumer Request, we will provide you with all relevant information we have collected or maintained about you on or after January 1, 2022, unless an exception applies. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For Data Portability Consumer Request, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your Consumer Request unless it is excessive, repetitive, or manifestly unfounded. We reserve the right to consider more than two (2) total Right to Know or Data Portability Consumer Requests (or combination of the two) in a twelve (12) month period to be repetitive and/or excessive and require a fee. If we determine that your Consumer Request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
7. Your Choices Regarding our Use and Disclosure of Your Sensitive Personal Information
We do not collect any Sensitive Personal Information as defined under the CPRA.
8. Personal Information Retention Periods
We delete or anonymize your Personal Information when no longer required for purpose or purposes for which we collected it.
In general, we store your Personal Information for the duration of the usage or contractual relationship via the Website plus a period of [15 days] for security purposes
In the event you have given us your consent to process your Personal Information (e.g., for marketing purposes including associated profiling), we will store your Personal Information until you revoke your consent or the processing purpose does not apply anymore. Other California Privacy Rights
For the retention period of cookies and other tracking technology, please refer to the details in our IDEX Health & Science LLC Cookie Notice.
After the periods described above has expired, your Personal Information will be erased unless the Personal Data is required for a longer period of time, such as for legal retention periods, alternative purposes, or for criminal prosecution. Beyond these retention periods, we may also retain the Personal Data for the purposes of legal defense and law enforcement for as long as necessary for the preparation or execution of a possible legal dispute (usually up to four years, whereby the legal dispute itself may inhibit the course of this period). If Personal Data is stored for these reasons, it will be blocked for all other uses.
9. Changes to This CPRA Privacy Addendum
IDEX Health & Science LLC reserves the right to amend this California Privacy Addendum at our discretion and at any time. When we make changes to this California Privacy Addendum, we will post the updated addendum on the Website and update the addendum’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.
10. Contact Information
If you have any questions or comments about this California Privacy Addendum, the ways in which IDEX Health & Science LLC collects and uses your information described above and in the Privacy Statement, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
To Contact IDEX Health & Science LLC:
To Contact IDEX:
Postal Address: IDEX Corporation
Attn: Legal Department: Compliance/Privacy
3100 Sanders Road, Suite 301
Northbrook, IL 60062, USA