Privacy Policy of HealthNetworkCollective.com

Privacy Policy, GDPR, CCPA, New Zealand Privacy Act 2020

As the operators of the HealthNetworkCollective.com website, https://healthnetworkcollective.com, registered in New Zealand as an Incorporated Charitable Trust: 50195073 CC62354; with New Zealand Business Number (NZBN) 9429051803476 and having its registered oﬃce address at 41A Disraeli Street, Hawera, 4610, New Zealand (“Website”) (“We“, “Us“, “Health Network Collective”), is committed to protecting and respecting your privacy. This Privacy and Cookies Policy (“Policy“) relates to services provided through our websites and application (“Services”) and sets out the basis on which the Personal Data collected from you, or that you provide to Us will be processed by Us. “Personal Data” means any information that identiﬁes or relates to a particular individual and also includes information referred to as “personally identiﬁable information” or “personal information” under applicable data privacy laws, rules, or regulations (collectively the “Data Protection Laws”).

This Policy does not cover the practices of companies We don’t own or control or people We don’t manage. For clarity, this policy applies when HealthNetworkCollective.com acts as a “Controller” (as deﬁned in the General Data Protection Regulation (the “GDPR”) or “Business” as deﬁned under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CPRA”) all together (the “CCPA”), or as included under the New Zealand Privacy Act 2020 (“the 2020 Act) and the “adequacy decision” from the European Union in 2012 for this act in regard GDPR). Note that we may also process Personal Data of our customers’ job applicants in connection with our provision of services to customers, in which case we are the processor of Personal Data. If we are the processor or service provider for your Personal Data (i.e., not the controller or business), please contact the controller/business party in the ﬁrst instance to address your rights with respect to such data. Please read the following carefully to understand our views and practices regarding your Personal Data and how We will treat it.

If you have a disability, you may access this Privacy Policy in an alternative format by contacting unicorn@HealthNetworkCollective.com

For the purpose of the GDPR and the CCPA:

in respect of the Personal Data of visitors of the Website and users of the Services, business contacts and prospects of HealthNetworkCollective.com, the Data Controller or Business under the CCPA is HealthNetworkCollective.com.

Sources of Personal Data

We collect Personal Data about you from:

You:
- when you provide such information directly to us
- when you set up an Account with us to use the Services and
- when Personal Data about you is automatically collected in connection with your use of our Services.
Our subsidiaries and aﬃliates (together, “Aﬃliates”), when they provide us with Personal Data about you.
Third parties, when they provide us with Personal Data about you (“Third Parties”). Third Parties that share your Personal Data with us include:
- Service providers. For example, we may use analytics service providers to analyze how you interact and engage with the Services, or third parties may help us provide you with customer support.
- Social networks connected to the services. If you provide your social network account credentials to us or otherwise sign in to the Services through a

third-party site or service, you understand some content and/or information in those accounts may be transmitted into your Account with us.

Advertising partners. We receive information about you from some of our service providers who assist us with marketing or promotional services related to how you interact with our websites, applications, products, services, advertisements or communications.
- Other third parties, such as providers of business contact information, who provide us with publicly available information on You, such as mailing addresses, job titles, email addresses, phone numbers, Internet Protocol (IP) addresses, social media proﬁles, social media URLs and custom proﬁles for purposes of targeting advertising. We may combine this information with Personal Data provided by You, for targeting advertising purposes. This helps us analyze our records and identify new Customers.

Information we collect from you

We collect and process some or all of the following types of information from you:

Information that you provide by ﬁlling in forms on the Website. This includes information provided at the time of subscribing to our Services, or requesting further information or services. We may also ask you for information when you report a problem with the Website.
If you contact Us, We may keep a record of that correspondence.
We may also ask you to complete surveys that We use for research purposes, although you do not have to respond to them.
Details of all actions that you carry out through the Website and of the provision of services to you.
Details of your visits to the Website including, but not limited to, traﬃc data, location data, weblogs and other communication data, the site that referred you to our site and the resources that you access.

The provision of your full name and email address, your employer and/or your place of work and the URL of the business that you work for may be required from you when you register to use our Services. We will inform you at the point of collecting information from you, whether you are required to provide the information to Us.

In order to request information from us, only your name and email address is required. Alternatively, you can click on links to email direct through your email. In order to complete surveys, only your email is required.

Categories of Personal Data We Collect

The following chart details the categories of Personal Data that we collect and have collected over the past twelve (12) months. Throughout this Privacy Policy, we will refer back to the categories of Personal Data listed in this chart (for example, “Category A. Personal identiﬁers”).

Personal Data Collected (including Categories)	Purposes of Use	What is the source of this Personal Data?	Categories of third parties to whom we disclose the information for business purposes
A. Personal identiﬁers Real name, postal address, unique personal identiﬁer, online identiﬁer, Internet Protocol address, email address, mobile number account name, social proﬁle URL	Provide the ServicesCreate your Account at the Job BoardCommunicate with You and provide customer servicePersonalize your experienceSend You job advertisements, newsletters, or other marketing communications Improve the ServicesOur Marketing and Third-Party Marketing and Advertising PurposesBug detection and error reportingAuditing Consumer InteractionsSecurity, Fraud and Legal Compliance	You Aﬃliates Third Parties	Service ProvidersOur AﬃliatesOther Individuals, Services, and Partners at Your RequestEntities for Legal PurposesEntities For Sales or Transfer of Business or AssetsEmployers (for Users of the HooperNewton.com Job Board)
B. Customer records identiﬁed by state law (including the California Customer Records statute (Cal. Civ. Code § 1798.80(e))) Name, signature, address, telephone number, employment.	Provide the ServicesCommunicate with You and provide customer servicePersonalize your experienceImprove the ServicesOur Marketing and Third-Party Marketing and Advertising PurposesBug detection and error reportingAuditing Consumer InteractionsSecurity, Fraud and Legal Compliance	You Aﬃliates Third Parties	Service ProvidersOur AﬃliatesOther Individuals, Services, and Partners at Your RequestEntities for Legal PurposesEntities For Sales or Transfer of Business or Assets
C. Commercial information History of services purchased through HealthNetworkCollective.com	Provide the ServicesInternal Accounting purposesProvide Customer servicePerformance of legal obligations	You Aﬃliates	Service ProvidersOur Aﬃliates
D. Internet or other similar network activity information Browsing history, search history, information interaction with the website or application.	Our Marketing and Third-Party Marketing and Advertising PurposesAuditing Consumer InteractionsCommunicate with You and provide customer serviceImprove the ServicesBug detection and error reportingSecurity, Fraud and Legal Compliance	You Aﬃliates Third Parties	Service ProvidersOur Aﬃliates
E. Geolocation data Physical location (calculated from IP address)	Provide the ServicesSecurity, Fraud and Legal Compliance	You Aﬃliates Third Parties	Service ProvidersOur Aﬃliates
F. Professional or employment-related information Current job title and employer, Resume	Provide the ServicesCommunicate with You and provide customer servicePersonalize your experienceImprove the ServicesOur Marketing and Third-Party Marketing and Advertising Purposes	You Aﬃliates Third Parties	Service ProvidersOur Aﬃliates
G. Payment information All information necessary to complete online payments, such as payment details, bank account information, billing information.	Provide the ServicesProcess your payments (for services only that require payment)We don’t store any credit card or bank account/PayPal number	You	Secure third-party payment service providers

The following section provides additional information about how we collect your Personal Data.

Lawful Basis for Processing

Under the GDPR and the New Zealand Privacy Act 2020, the lawful bases we rely on for processing of your personal data could be:

Legitimate Interest: We may process your personal data based on our legitimate interest, which includes without limitation our legitimate interest to provide and improve the Services, our legitimate interest to improve the Website, our legitimate interest in advertising our product and services, unless you have provided your prior consent as required.

Contract: We may process personal data, in order for us to provide the services and meet our contractual obligations towards you, when we have a contract with you.

Consent: On a few occasions, we may rely on your consent for the processing of your personal data. In any such case, we will indicate this and ask for your speciﬁc informed consent, e.g., when you sign up to receive marketing communications etc.

Legal Obligation: We may process your personal data to comply with a legal or regulatory obligation such as e.g., detecting, preventing or investigating crime or fraud including working with law enforcement agencies.

Your Rights

Subject to local data protection laws and in particular under the General Data Protection Regulation (GDPR) and the New Zealand Privacy Act 2020, you have a number of important rights free of charge. In summary, those include rights to:

access to your Personal Data and to certain other supplementary information that this Policy is already designed to address
require Us to correct any mistakes in your information which We hold
require the erasure of Personal Data concerning you in certain situations
receive the Personal Data concerning you which you have provided to Us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
object at any time to processing of Personal Data concerning you for direct marketing
object to decisions being taken by automated means which produce legal eﬀects concerning you or similarly signiﬁcantly aﬀect you
object in certain other situations to our continued processing of your Personal Data
otherwise restrict our processing of your Personal Data in certain circumstances
claim compensation for damages caused by our breach of any data protection laws.

For further information on each of those rights, including the circumstances in which they apply, see the https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/ , and the New Zealand Privacy Act 2020

If you would like to exercise any of those rights, please:

contact us using our Contact details below
let Us have enough information to identify you,
let Us have proof of your identity and address. Where you are a user of our Services you should email us from the email address that you used with HealthNetworkCollective.com. Receipt of an email from this address will usually be suﬃcient to conﬁrm your identity. In all other cases we may request one or more identiﬁcation documents, such as a copy of your driving license or passport and a recent utility or credit card bill; and
let Us know the information to which your request relates

For clarity the above rights apply to EU, UK, Swiss and NZ data subjects, as required under applicable law, but also any user of the Website and the Services, regardless of location may exercise any of these rights.

Cookies Policy

What are cookies

A cookie is a small ﬁle of letters and numbers that we put on your computer if you select to agree at the banner that is displayed to you during the ﬁrst time you visit our website. You may accept or decline being tracked by indicating your preference for this banner. These cookies allow us to distinguish you from other users of the Website, which helps us to provide you with a good experience when you browse our Website and also allows us to improve the Website.

How do we use cookies?

Some of the common uses for our cookies are as follows:

to recognise and count the number of visitors and to see how visitors move around the site when they are using it. This helps us analyze the use of the Website and to improve the way our Website works, for example by ensuring that users are ﬁnding what they are looking for easily.
to identify and authenticate a user across diﬀerent pages of our Website, within our own Website, in a session or across diﬀerent sessions. This is so that you do not need to provide a password on every page you visit; and
to be able to retrieve a user’s previously stored data, for example, information that the user previously submitted to the Website, so as to facilitate reuse of this information by the user.
to personalize the website for you, including targeting advertisements which may be of particular interest to you.

Cookies in use

When you use and access the Service, we may place a number of cookie ﬁles in your web browser.

We use the following categories of cookies:

Strictly necessary Cookies: These cookies are necessary for the Website to function and are enabled by default at the time you access the Website. Those cookies enable us to oﬀer you the best possible experience while using our Website.

Functional/ Preference Cookies: These cookies are used in order for us to understand how you use the Services, and provide you with certain functionalities of the Services, e.g., remember your preference on the site such as language, region, username etc.

Analytical/ Performance: These cookies allow us to count visits and traﬃc sources, so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site.

Session cookies: Last only for the duration you browse the website and are deleted automatically once you quit your browser.

Persistent cookies: Are cookies saved on your computer and that are not deleted automatically when you quit your browser, unlike a session cookie, which is deleted when you quit your browser. Some cookies may store information for less than 24 hours and other may store information up to 24 months or more.

Third-party cookies

In addition to our own cookies, we may also use various third-parties’ cookies to report usage statistics of the Service, and so on.

We don’t control those third-party websites, but you can ﬁnd more information on how to opt from those on their privacy policies:

Third-party Analytics Providers	Privacy Policy Link
Google services: Google tag manager, Google Analytics etc.	https://policies.google.com/privacy
SiteOrigin	https://siteorigin.com/about/privacy-policy/
Akismet	https://akismet.com/privacy/
JetPack	https://jetpack.com/support/privacy/
WordPress	https://wordpress.org/about/privacy/
Really Simple SSL	https://really-simple-ssl.com/legal/privacy-statement/

What are your choices regarding cookies

Necessary cookies, which are required for the core functionality of the website, are enabled by default automatically when you access the Website.

For all other categories of cookies used, which are not necessary for the site to operate you can expressly consent on their use by clicking “accept” or “ignore” on the cookie banner which is set on the Website.

Additionally, you can also decide whether or not to accept cookies through your internet browser’s settings. Most browsers have an option for turning oﬀ the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new cookie in a variety of ways. You can also delete all cookies that are already on your computer. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some of the Services and functionalities may not work.

Where can you ﬁnd more information about cookies

To explore what cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To ﬁnd out more information about cookies, including

information about how to manage and delete cookies, please visit https://ico.org.uk/for-the-public/online/cookies/ or http://www.allaboutcookies.org/

If you have any questions or comments about our Cookies Policy please contact: unicorn@HealthNetworkCollective.com

Google API Services

HealthNetworkCollective.com use of information received from Google APIs will adhere to Google API Services User Data Policy including the Limited Use requirements.

Uses made of your information

Where you are using our Services on behalf of our Customer, we rely on legitimate interests in performing our contract with our Customer as the lawful basis on which We collect and use your Personal Data.

We use information held about you in the following ways:

To ensure that content from the Website is presented in the most eﬀective manner for you and for your computer.
To provide you with information, products or services that you request from us or which we feel may interest you or our Customer.
To carry out our obligations arising from any contracts entered into between our Customer (on whose behalf you are using the Services) and Us.
To notify you about changes to our Services and provide you with information that is relevant to your use of the Services.
Where you or your employer are a prospective Customer, to provide you with information about our Services for marketing purposes.

Aggregate Data

We may use anonymised and/or aggregate data collected through your use of the Services and the Website for statistical purposes, for improvement of the Services, to conduct research, or any other lawful purpose. Aggregate Data is not considered personal data.

Disclosure of your information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries. Where any such member of our group is outside the UK or the EU this transfer will be on the basis of a contract, as described below in accordance with the Data Protection Laws.

We may disclose your personal information to third parties:

in the event that we sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets;
if we or substantially all of our assets are acquired by a third party, in which case Personal Data held by us about our customers will be one of the transferred assets;
if we are under a duty to disclose or share your Personal Data in order to comply with any legal obligation or in order to enforce or apply our Website Terms and Conditions and other agreements, but we will endeavor to minimize such disclosure to only that reasonably necessary and, where possible, to provide you with notice of such disclosure; and/or
to protect the rights, property, or safety of HooperNewton.com, the Website, our users and any third party we interact with to provide the Website.

We disclose your Personal Data to service providers and other parties for the following business purposes:

Auditing related to a current interaction and concurrent transactions, including, but not limited to auditing compliance with this speciﬁcation and other standards.
- Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
- Debugging to identify and repair errors that impair existing intended functionality.
- Short-term, transient use of Personal Data that is not used by another party to build a consumer proﬁle or otherwise alter your consumer experience outside the current interaction.
- Performing services on our behalf, including software hosting and cloud computing, Customer Relationship Management, email sending, logging, storing Customer data, maintaining or servicing accounts, providing customer service, processing or fulﬁlling orders and transactions, verifying customer information, processing payments, providing ﬁnancing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.
- Undertaking internal research for technological development and demonstration.
- Undertaking activities to verify or maintain the quality or safety of a service or functionality that we provide, own, manufacture, or control.

We disclose your Personal Data to the following categories of service providers and other parties:

Service providers, including:
Payment processors.
Security and fraud prevention consultants.
Hosting and other technology and communications providers.
Analytics providers.
CRM software providers.
Logging service providers.
Customer Service software providers.
Our Aﬃliates.
Parties who acquire your Personal Data through an acquisition or other change of control.
Personal Data may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part).
Other parties at your direction.
Other users (where you post information publicly or as otherwise necessary to eﬀect a transaction initiated or authorized by you through the Services).
Social media services (if you intentionally interact with them through your use of the Services).
Third-party business partners who you access through the Services (e.g., partners accessed through the HealthNetworkCollective.com Marketplace). HealthNetworkCollective.com does not control the use of your data by those third parties and you are advised to check their Privacy Policy as applicable;
Other parties authorized by you.

Over the past twelve months, we have disclosed the following categories of your Personal Data to service providers or other parties for the business purposes listed above:

A. Personal identiﬁers.
B. Customer records identiﬁed by state law.
C. Commercial information.
D. Internet or other similar network activity information.
E. Geolocation data.
F. Professional or employment-related information.

When we disclose personal information for a business purpose, as described above we enter into a contract with the service provider or other parties, that describes the purpose and requires the recipient to both keep that personal information conﬁdential and not use it for any purpose except performing the contract.

Sales of Personal Data

We haven’t sold your Personal Data over the last twelve months, and will not sell your data.

How we store your Personal Data

Security

We take appropriate measures to ensure that all Personal Data is kept secure including security measures to prevent Personal Data from being accidentally lost, or used or accessed in an unauthorized way, for the duration of your use of our Services. We limit access to your Personal Data to those who have a genuine business need to know it. Those processing your information will do so only in an authorized manner and are subject to a duty of conﬁdentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your data transmitted to the Website, therefore any transmission remains at your own risk. Once we have received your information, we will use strict procedures and security features in order to prevent unauthorized access.

Keeping your Personal Data up to date

If your personal details change you may update them by accessing the relevant page of the Website, or by contacting Us at unicorn@HealthNetworkCollective.com

We will endeavor to update your Personal Data within thirty (30) days of any new or updated Personal Data being provided to Us, in order to ensure that the Personal Data We hold about you is as accurate and up to date as possible.

Where we store your Personal Data

The data that We collect from you and process as a result of your use of the Services is transferred to, and stored at, a destination provided by Hostinger. By submitting your Personal Data, you agree to this transfer, storing or processing

If you would like further information, please contact Us or Hostinger as below. We will not otherwise transfer your Personal Data to any organisation (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries.

All personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). For any questions regarding this Policy or any requests regarding the processing of personal data, please contact gdpr@hostinger.com.

How long we keep your Personal Data

We will hold all the data for so long as we have an obligation to You to provide you with the Services, as long as we have an obligation to the Customer to provide the Services, or as long as necessary to fulﬁll the purpose for which was initially collected and thereafter until such time as we delete the Customer’s account in accordance with our Customer Terms and Conditions. We will retain and use your Personal Data to the extent necessary to comply with any legal/accounting/reporting obligation.

Your personal information will be deleted on one of the following occurrences:

deletion of your personal information by You (or by another person engaged by the Customer); or
receipt of a written request by You (or another person engaged by the Customer) to us.

Personal Data of Children

We do not knowingly collect or solicit Personal Data from children under 16; if you are a child under 16, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Data, please contact us at unicorn@HealthNetworkCollective.com

Your California Privacy Rights

If you are a California resident, you have the rights outlined in this section. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. If there are any conﬂicts between this section and any other provision of this Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conﬂict. If you have any questions about this section or whether any of the following applies to you, please contact us at unicorn@HealthNetworkCollective.com

Right of Access

You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. We will provide you with the following information:

The categories of Personal Data that we have collected about you.
The categories of sources from which that Personal Data was collected.
The business or commercial purpose for collecting your Personal Data.
The categories of third parties with whom we have shared your Personal Data.
The speciﬁc pieces of Personal Data that we have collected about you.

If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third-party recipient.

Right of Deletion

You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain

your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.

Right to Correct

You have a right to request correction of inaccurate personal information.

Right to Opt out of selling your personal Information

HooperNewton.com does not sell your personal information.

Right to Opt out of sharing your personal Information

Although HooperNewton.com does not sell your personal information, we may share in a few instances your personal information with third parties. “Sharing” under the CCPA, is broadly deﬁned to cover the disclosing personal information for purposes of cross-context behavioral advertising, as for example targeting advertising based on personal information obtained from a consumer’s activity across distinctly-branded websites or services.

You can request to opt out of sharing your personal information as deﬁned above by using our cookies preference banner.

Right to Limit the Use of Sensitive Personal Information

HooperNewton.com does not use or disclose Sensitive Personal Information for reasons other than permitted under the CCPA.

Nondiscrimination for Exercising Your CCPA Rights

We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you diﬀerent prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA.

Right to Opt-out of Automated Decision-Making Technology (Proﬁling)

HooperNewton.com does not engage in automated decision-making or proﬁling.

Exercising Your Rights

To exercise the rights described above, you must send us a request that (1) provides suﬃcient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in suﬃcient detail to allow us to understand,

evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may submit a Valid Request using the following methods:

Call us at: +64 226442808
Emailing us at: unicorn@HealthNetworkCollective.com

Other State Law Privacy Rights

Other California Resident Rights

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at unicorn@HealthNetworkCollective.com

Your browser may oﬀer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across diﬀerent websites. Our Services do not support Do Not Track requests at this time. To ﬁnd out more about “Do Not Track,” you can visit www.allaboutdnt.com.

Nevada Resident Rights

If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at unicorn@HealthNetworkCollective.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Personal Data as sales are deﬁned in Nevada Revised Statutes Chapter 603A.

Transfers of Personal Data

The Services are hosted and operated in the United States (“U.S.”) through HealthNetworkCollective.com, and its service providers, and if you do not reside in the U.S., laws in the U.S. may diﬀer from the laws where you reside. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to HealthNetworkCollective.com, in the U.S. and will be hosted on U.S. servers, and you authorize HealthNetworkCollective.com to transfer, store and process your information to and in the U.S., and possibly other countries.

You hereby acknowledge and agree with the transfer of your data to the U.S.

For transfers of data outside the EEA, Switzerland and the UK to the US, We rely on the European Commission Standard Contractual Clauses (“EE SCCs”) and the UK DTIA as approved by the ICO (all together the “SCCs).

HealthNetworkCollective.com complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries, the UK and Switzerland that have been transferred to the United States pursuant to Privacy Shield.

HealthNetworkCollective.com has certiﬁed that it adheres to the Privacy Shield Principles with respect to such data. If there is any conﬂict between the policies in this privacy policy and data subject rights under the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certiﬁcation page, please visit https://www.privacyshield.gov/.

With respect to Personal Data that have been received or transferred pursuant to the Privacy Shield Frameworks, HealthNetworkCollective.com is subject to the regulatory and enforcement powers of the U.S. Federal Trade Commission. For clarity HealthNetworkCollective.com does not rely any more on Privacy Shield Framework as a data transfer mechanism outside the EEA, Switzerland and the UK.

Pursuant to the Privacy Shield Frameworks, EU, United Kingdom and Swiss individuals have the right to obtain our conﬁrmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to unicorn@HealthNetworkCollective.com If requested to remove data, we will respond within a reasonable timeframe.

We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to unicorn@HealthNetworkCollective.com

In certain situations, we may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the Privacy Shield Principles, HealthNetworkCollective.com commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. Please contact us at unicorn@HealthNetworkCollective.com with any questions, concerns or complaints relating to our Privacy Shield Certiﬁcation.

We are committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning data transferred from the EU and Switzerland and you may have the possibility to engage in binding arbitration through the Privacy Shield Panel.

Representatives

HealthNetworkCollective.com is based in New Zealand and has no representative in the EU, EEA or UK.

Third Party Websites

The Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and aﬃliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and terms of use and that we do not accept any responsibility or liability for these policies and terms of use. Please check these policies before you submit any Personal Data to these websites.

How to complain

We hope that We can resolve any query or concern you raise about our use of your information. The General Data Protection Regulation and the UK GDPR also give you right to lodge a complaint with a supervisory authority, in particular (under the GDPR) in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred.

The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/make-a-complaint/ or telephone: 0303 123 1113.

The supervisory authority in New Zealand is the Privacy Commissioner, which may be contacted at the Privacy Commissioner enquiries line on 0800 803 909 or online

Changes to our privacy policy

We reserve the right to modify this Privacy Policy at any time. Any changes we may make to our Policy in the future will be notiﬁed and made available to you using the Website. Your continued use of the Services and the Website shall be deemed your acceptance of the varied Privacy Policy.

Contact

If you have any questions about this Privacy Policy or want to report a potential data breach, please reach out to unicorn@HealthNetworkCollective.com

Please note that HealthNetworkCollective.com Data Protection Oﬃcer (DPO) responds to any requests submitted to unicorn@HealthNetworkCollective.com attention HealthNetworkCollective.com DPO.

Last updated 26th February 2024