Privacy Policy: RareLook™

Privacy Policy

Last updated: March 1, 2024

Welcome to our website and RareLook™ services located at http://www.raremd.com (“Service”). For purposes of this Privacy Policy (“Policy” or “Privacy Policy”), the terms “we,” “us,” “our” and “RareMD” refer to RareMD Inc., and “you” and “your” refers to you, as a user of the Service. Capitalized terms not defined herein are defined in our Terms of Service.

Overview

In order to use the Service you will need to register with us and provide us information about yourself. RareMD is committed to protecting the privacy of our users. We will use our best efforts to ensure that the information you submit to us is used only in accordance with the terms of this Privacy Policy. This Privacy Policy applies to information collected or submitted on the Service.

How we collect your personal information:

When you register for a RareMD account;
Information we receive from your use of the Service;
From the information you provide us when you communicate with us by telephone, email or via our website;
Through the use of “cookies”, tracking pixels, and similar. “Cookies” are small files that your Web browser places on your computer’s hard drive.

What personal information of yours we collect:

Biographical and contact information, such as your name, email address, and your specialty, position/title, institute/hospital, and other similar biographical information;
How you navigate through the Service.

How your personal information is used:

To activate an account on the Service;
To learn what content is popular, and to save your preferences;
To allow the Service to recognize you if you visit multiple pages in the Service during the same session, so that you don’t need to re-enter your information multiple times;
To respond to your requests, and contact you regarding your use of the Service or regarding Service changes, including to deal with any concerns, inquiries or feedback you may have;
In order to assist with investigations carried out by competent authorities;
Where it is necessary for the establishment, exercise or defense of legal claims (for example, to protect and defend our rights or property, and/or the rights or property of our other users, or of third parties);
we have your specific or, where necessary, explicit consent to do so.

With whom your personal information may be shared:

We may share your personal information:

In response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agency; to establish or exercise our legal rights; to defend against legal claims;
When we believe disclosure is appropriate in connection with efforts to investigate, prevent, report or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of our company, our users, our employees, or others; to comply with applicable law or cooperate with law enforcement; or to enforce the RareMD Service terms of use or other agreements or policies;
If RareMD (or substantially all of our assets) is acquired, your information would be transferred along with the other business assets as permitted by law. We may also disclose personal information about you to nonaffiliated third parties as permitted by law.

We may be required to share your personal information with our vendors and service providers who assist us to make the Services available to you.

Your choices regarding the collection, use and distribution of your information.

You may have the following rights in relation to our processing of your personal information. Please note that these rights are not absolute, and we may be entitled to refuse requests where exceptions apply.

To obtain access to, and copies of, the personal information that we hold about you;
To require us to correct the personal information we hold about you if it is incorrect;
To require us to erase your personal information in certain circumstances;
To require us to restrict our processing activities in certain circumstances;
To object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on you;
To receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you;
Where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.

If you do not agree with this Policy, please discontinue use of the Service. You also have the option of setting your browser to reject “cookies.” However, doing this will hinder performance and negatively impact your experience using the RareMD Service.

Children.

Children are not eligible to use the RareMD Service. We ask that minors (under the age of 18) do not submit any personal information to us or attempt to use the RareMD Service under any circumstance. We do not knowingly collect information from children under 18 years of age or have any reasonable grounds for believing that children under the age of 18 are accessing the RareMD Service or using our Services. If we learn that we have inadvertently collected Personal Information from a child under age 18, we will delete that information as quickly as possible. If you believe that we might have any information from a child under age 18, please contact us.

Visiting the RareMD Service from Outside the United States.

Our headquarters are located in the United States (“U.S.”). If you choose to use the RareMD Services or engage with our Services from the European Economic Area (“EEA”), the United Kingdom (“UK”), or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the U.S. for storage and processing. We may transfer your personal information from the EEA or the UK to the U.S. and other countries in accordance with applicable data protection laws. Also, we may transfer your personal information from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the RareMD Service. By providing any information, including personal information to us, you consent to such transfer, storage, and processing.

Data Security.

We are committed to protecting the data of the RareMD community. Even though we take reasonable precautions to protect your data, no security measures can be 100% secure, and we cannot guarantee the security of your data.

Contacting us about your privacy.

If, at any time, you have questions or concerns about our privacy commitment, please feel free to email us at [email protected] to contact one of our representatives.

EEA and UK Supplement.

If you are located in the EEA or the UK, then this Section applies in addition to the above. In case of conflict between this Section and the above Sections, this Section shall prevail.

Data Controller. RareMD Inc. is your data controller, as defined under the GDPR, for personal information processed in connection with your use of the RareMD Services. Please find the contact information in the below sub-section (e).
Consent. We process personal information based on your consent only if we have obtained your explicit and freely given consent for such processing.
Marketing. We process your personal information for marketing purposes only if we have a legal basis to do so, i.e., we contact you for marketing purposes only with your explicit and freely given consent if you are located in a country that requires opt-in for marketing e-mails and where no other legal basis exists.
We only process your personal information when we have a valid “legal basis,” including when:
1. Consent. You have consented to the use of your personal information, for example to use cookies.
2. Contractual necessity. We need your personal information to provide you with the RareMD Services, for example to respond to your inquiries.

Compliance with a legal obligation. We have a legal obligation to use your personal information, for example to comply with tax and accounting obligations.

Legitimate interests. We or a third party have a legitimate interest in using your personal information. In particular, we have a legitimate interest in using your personal information for product development and internal analytics purposes, and otherwise to improve the safety, security, and performance of the RareMD Services. We only rely on our or a third party’s legitimate interests to process your personal information when these interests are not overridden by your rights and interests.
Contact. If you have any questions or concerns regarding the processing of your personal information relating to the EEA or the UK, you may contact us by clicking the contact link or sending a letter to RareMD, 3220 Avenida La Cima, Carlsbad, CA 92009.
Obligation. You are not obliged to provide your personal information. However, if you do not provide your personal information, you will not have access the RareMD Services.
Data retention. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes or to contribute to the RareMD database on which our Services are based, in which case we may use this information indefinitely without further notice to you.

1. Overview

In order to use all functions of the Service you will need to provide us with information about yourself. RareMD is committed to protecting the privacy of our users. We will not retain or share any personal information of consumer users of our Service. We will use our best efforts to ensure that the information you submit to us is used only in accordance with the terms of this Privacy Policy. This Privacy Policy applies only to all information collected or submitted on the Service.

2. How we collect your nonpublic personal information:

Information we receive from your use of the Service;
From the information you provide us when you communicate with us by telephone, email or via our website;
Through the use of “cookies”, tracking pixels, and similar. “Cookies” are small files that your Web browser places on your computer’s hard drive.

3. What nonpublic personal information of yours we collect:

Biographical and contact information, such as your name, email address and other similar biographical information;
How you navigate through the Service;
Information concerning symptoms you enter.

4. How your nonpublic personal information is used:

To provide you the functions of the Service which you select to use;
To learn what content is popular, and to save your preferences;
To allow the Service to recognize you if you visit multiple pages in the Service during the same session, so that you don’t need to re-enter your information multiple times;
To respond to your requests, and contact you regarding your use of the Service or regarding Service changes, including to deal with any concerns, inquiries or feedback you may have;
To enhance the clinical features associated with rare diseases by compiling anonymized and aggregated information regarding symptoms and diagnosis and to improve the Service;
In order to assist with investigations carried out by competent authorities;
Where it is necessary for the establishment, exercise or defense of legal claims (for example, to protect and defend our rights or property, and/or the rights or property of our other users, or of third parties);
We have your specific or, where necessary, explicit consent to do so).

5. With whom your nonpublic personal information may be shared:

We do not store your nonpublic personal and only retain it while we are processing. While we are in possession of your personal information, we will not share it with any third party except:

In response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agency; to establish or exercise our legal rights; to defend against legal claims;
When we believe disclosure is appropriate in connection with efforts to investigate, prevent, report or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of our company, our users, our employees, or others; to comply with applicable law or cooperate with law enforcement; or to enforce the RareMD Service terms of use or other agreements or policies; and
If RareMD (or substantially all of our assets) is acquired, your information would be transferred along with the other business assets as permitted by law.

6. Your choices regarding the collection, use and distribution of your information.

You have the following rights in relation to our processing of your nonpublic personal information. Please note that these rights are not absolute, and we may be entitled to refuse requests where exceptions apply.

To obtain access to, and copies of, the nonpublic personal information that we hold about you;
To require us to correct the nonpublic personal information we hold about you if it is incorrect;
To require us to erase your nonpublic personal information in certain circumstances;
To require us to restrict our processing activities in certain circumstances;
To object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on you;
To receive from us the nonpublic personal information we hold about you which you have provided to us, in a reasonable format specified by you;
Where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.
If you do not agree with this Policy, please discontinue use of the Service. You also have the option of setting your browser to reject “cookies.” However, doing this will hinder performance and negatively impact your experience using the RareMD Service.

7. Children.

8. Visiting the RareMD Service from Outside the United States.

This Privacy Policy is intended to cover collection of information through the RareMD Service from resident citizens of the United States. RESIDENTS AND CITIZENS OF ANY COUNTRY OUTSIDE OF THE UNITED STATES ARE NOT ELIGIBLE TO USE THE SERVICE. By using the RareMD Service you understand that your information is stored and processed in the United States where our servers are located and our central database is operated and will be subject to the laws of the United States.

9. Data Security.

10. Contacting us about your privacy.