California Notice of Collection and U.S. States Privacy Notices

California and Other U.S. States Privacy Notices

For California residents, our personal information sharing practices are in accordance with federal law. California law places additional restrictions on sharing personal information about their residents, and our policies comply with these restrictions.

1. Direct Marketing Requests

California Civil Code Section 1798.83 permits you, if you are a California resident, to request certain information regarding disclosure of personal information (defined below in Section 5) to third parties for their direct marketing purposes. To make such a request, please send an e-mail to [email protected], or write us at COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014.

2. Do Not Track Settings

Cal. Bus. And Prof. Code Section 22575 also requires us to notify you how we deal with the “Do Not Track” settings in your browser. As of the effective date listed above, there is no commonly accepted response for Do Not Track signals initiated by browsers. Therefore, COSMOSS’ system does not respond to the Do Not Track settings. Do Not Track is a privacy preference you can set in your web browser to indicate that you do not want certain information about your web page visits tracked and collected across websites. For more details, including how to turn on Do Not Track, visit www.donottrack.us.

3. California Consumer Privacy Act/California Privacy Rights Act Supplemental Notice

This California Privacy Notice is intended to supplement our general privacy policy and notices available here.

To understand our privacy practices, you should refer to our other privacy notices and this supplemental California notice (“Notice”).

4. Applicability

The California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”) as updated recently by its Regulations, and this Notice apply to visitors, users, and others who are California residents (“consumers” or “you”).

This Notice applies to California residents’ personal information, as defined below, we collect to provide them with certain products and services (collectively, “Services”) or when residents use and access our website (the “Site”). The CCPA and CPRA do not apply to personal information for some of our Services that are excepted from the CCPA and CPRA, such as those subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or Gramm-Leach-Bliley (GLBA), to the extent applicable to our business operations. The requirements of CCPA and CPRA further do not apply to deidentified or aggregate consumer information.

In addition, updated CCPA/CPRA requirements went into effect on January 1, 2023, for applicable Services related to employee and business-to-business personal information. As a result, this Notice also applies to employees, applicants for employment, and independent contractors, who are California residents.

5. Personal Information

The CCPA and CPRA define “personal information” as information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a consumer or household. Under the CPRA, “personal information” further includes “Sensitive Personal Information” such as social security number, driver license number, state identification card, passport number, financial data, genetic data, biometric data, precise geolocation, and racial and ethnic origin, content of consumer communications (email, mail, or text), unless the business is the intended recipient, genetic data, and information collected concerning a consumer’s health, sex life, or sexual orientation.

Below are the categories of personal information that we may have collected or shared for a business purpose in the last twelve (12) months, as permitted by law and depending on the product you receive:

Category	Examples	Possibly collected or shared for a business purpose in the last 12 months
A. Identifiers	Real name, alias, postal address, email address.	Yes
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	Identifiers listed in the preceding category A and subsequent category I, and signature, social security number, telephone number, passport number, driver’s license or state identification card number, insurance policy number, bank account number, or any other financial information, medical information, health information.	Yes
C. Protected classification characteristics under California or federal law.	Age, marital status, medical condition, gender, veteran or military status.	Yes
D. Commercial Information	Products or services purchased, consumer history	Yes
E. Biometric information	N/A	No
F. Internet or other similar network activity.	Browsing and search history, usage of, and information regarding your use of our applications or website. This information may be used to create anonymous data to help us better understand customer preferences and needs.	Yes
G. Geolocation data.	City and state location of your device, which may include GPS-based, WiFi based, or cell-based location information. You can disable collection of location information by our app at any time in your mobile device settings.	No
H. Sensory data.	Audio recordings of calls when you call our customer service, and Internet and electronic network activity, as described above. You are notified at the beginning of a call whether the call is being recorded.	Yes
I. Professional or employment-related information.	Resume and employment application information.	Yes
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99)).	Where applicable, student information related to eligibility for benefits.	No
K. Inferences drawn from other personal information.	Inferences drawn from (1) the information we collect when you visit our website, use our app, or interact with our tools, widgets or plug-ins, (2) information we collect from reimbursement claims, and (3) information about user preferences and behavior that we collect on our website and mobile app to create a profile about a user reflecting the user’s preferences, characteristics, predispositions, behavior, and abilities.	Yes
L. Sensitive personal information.	Identifiers listed in the preceding category B and precise geolocation, racial and ethnic origin (when hired for a position), the contents of communications where COSMOSS is not an intended recipient.	No

6. Retention

We retain personal information about you necessary to fulfill the purpose for which that personal information was collected and in accordance with any contract you have entered into with us, consistent with applicable laws. We generally retain personal information regarding for example, an individual’s account with us for at least three years from the date of our last interaction/account closure/etc., in compliance with our obligations under applicable laws, or for longer if required to do so according to our legal obligations or where we believe necessary to establish, defend, or protect our legal rights or those of others.

When we destroy your personal information, we do so in a way that prevents that information from being restored or reconstructed.

7. Categories of Sources of Personal Information

Below are the sources from which we may receive your personal information:

(a.) directly from you when you inquire about our Services via our Site or by telephone

(b.) from you when you create an account with us

(c.) from you when you place an order with us

(d.) from your device when you access our Site and other online Services

(e.) from third parties that assist us in providing relevant Services

We may combine personal information that you provide us through our Site with other information we have received from you, whether online or offline, or from other sources such as from our service providers. For more information, please see the “Personal Information We Collect From You” section of our Privacy Policy. Our website uses cookies to improve functionality and performance. Please see the “Cookies” section of our Privacy Policy for more information.

8. How We Use and Share Personal Information For Business or Commercial Purposes

We may use or share the personal information listed above for the following business or commercial purposes:

(a.) Delivering relevant Services to you, or on behalf of another, including:

i. Verifying your identity in connection with the Services.

ii. Administering the Services subject to CCPA and CPRA at your direction;

iii. Communicating with you or others designated by you about your orders made on our Site, in connection to which we provide Services;

iv. Responding to inquiries about delivery of products and Services to you;

v. Helping to protect you and us from fraud or financial loss;

vi. Preparing account statements;

vii. Protecting your health, safety, or welfare;

viii. Delivering user surveys; and

ix. Delivering customized content and analytics on our Site or app.

(b.) Operating our Site in connection to covered Services;

(c.) Engaging third party service providers to assist us in administering and providing covered Services pursuant to a written agreement;

(d.) Performing analytics and improving our Services and Site;

(e.) Conducting internal research to develop and demonstrate technology;

(f.) Marketing our Services, only as permitted by law;

(g.) Keeping a record of our transactions and communications;

(h.) Conducting audits and reporting related to particular transactions and interactions, including online interactions, you may have with us or others on our behalf;

(i.) Detecting, analyzing, and preventing security incidents, and other fraudulent or illegal activity;

(j.) Identifying, debugging and repairing errors in our systems, websites, or app that impair existing functionality;

(k.) Protecting our rights, the rights of affiliates and related third parties, or taking appropriate legal action, such as to enforce our Terms of Use;

(l.) Complying with applicable laws, regulations, administrative or legal requests, subpoenas, or otherwise as required by law;

(m.) In connection with a merger, acquisition, or other sale or transfer of all or part of our assets or business;

(n.) In accordance with your consent or the direction of your authorized representative;

(o.) Short-term, transient use of personal information that is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction; and

(p.) As otherwise necessary or useful for us to lawfully conduct our business or provide covered Services.

Within the last 12 months, we have disclosed personal information identified in the “personal information” section, categories (A)-(L) above only (i) at your express request or at the direction of your authorized representative; (ii) as part of an exempt transaction; or (iii) to our service providers for the business purpose(s) described above. To learn more about the categories of third parties with whom we share such information, please see the “How We Use Your Personal Information” and “Sharing Your Personal Information” sections (Sections 7 and 11 respectively) of our Privacy Policy.

9. No Sale of Personal Information; Right to Opt-out of “Sale” or “Sharing"

We do not sell personal information within the meaning of the CCPA or CPRA, so we do not offer an opt out. If that changes, we will let you know in advance and provide you with information so that you may understand and exercise your right to opt-out of the future sale or disclosure of your personal information. We may, however, “share” personal information with third parties for personalized advertising purposes. You may indicate your choice to opt-out of the sharing of your personal information with third parties for personalized advertising on third party sites by requesting an “opt-out” to our privacy email contact at: [email protected], or by configuring your cookie settings on the Site as described in our Cookie Policy.

Even if you turn off “sharing,” you may still see personalized ads based on information other companies and ad networks have collected about you, if you have not opted out of sharing with them.

10. Consumer Rights

If you are a California resident, you may exercise certain privacy rights related to your personal information. You may exercise these rights free of charge except as otherwise permitted under applicable law. Please note, there may be situations where we cannot grant your request, for example, if you ask us to delete your personal information that is governed by a Federal privacy regulation that is exempted from CCPA/CPRA, or where COSMOSS is legally obligated to keep a record of our interactions with you to comply with law. We may also decline your request in order to maintain our legitimate use of data for anti-fraud and security purposes, such as when you request deletion of an account that is being investigated for security concerns. Other reasons your privacy request may be denied are if it jeopardizes the privacy of others, is frivolous, or would require disproportionate effort.

You may submit your request by sending us an email at: [email protected], or by sending us a written correspondence at COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014.

A. The Right to Know, Access, Rectify, and/or Delete Personal Information

Where the CCPA/CPRA applies to the Services we provide, you may have the right to know, access, correct, and/or delete personal information about you which we have collected.

The Right to Know/Access: You have the right to know the information contained in this Notice and our General Privacy Notice, and to request access to a copy of the personal information that COSMOSS has collected about you directly or indirectly, including personal information collected by a service provider or contractor on our behalf. You may access your account through the websites and mobile app and view your personal information.

The Right to Correct: You may access your account through the websites and mobile app and update your personal information. Users may make changes to some personal information through their online accounts. For personal information that cannot be changed via your account, you may contact us as set forth above to request the change or contact your employer if the change relates to covered Services. We will use commercially reasonable efforts to honor your requests within the limits defined by your employer program sponsor.

The Right to Delete: You have the right to request that COSMOSS delete your personal information, subject to certain limited exceptions. For example, we may retain an archived copy of your records consistent with applicable law, to continue to provide covered Services, or for other legitimate business purposes.

B. The Right to Opt-out of the Sale or Sharing of Personal Information or De-identified Personal Information

(a.) We do not sell your personal information for monetary or other valuable consideration.
(b.) We do not sell any de-identified personal information. We may de-identify your personal information for internal use only.
(c.) We do not share your personal information for the purposes of “cross-context behavioral advertising.” Cross-context behavioral advertising is “the targeting of advertising to a consumer based on the consumer’s personal information obtained from the consumer’s activity across businesses, distinctly-branded websites, applications, or services, other than the business, distinctly-branded website, application, or service with which the consumer intentionally interacts.”

C. The Right to Limit the Use of Sensitive Personal Information

We do not intentionally or knowingly collect Sensitive Personal Information. We do not ask for nor do we want to receive any health related information from our customers or Site visitors. To the extent a customer or Site visitor shares any information that could be interpreted as health data, we will immediately delete and securely dispose of that information and we will attempt to inform you of this action, and will restate that we do not wish to receive or collect health data from our customers or Site visitors.

D. The Right to Non-Discrimination

We will not discriminate or retaliate against you for exercising your consumer rights under the CCPA/CPRA, including by (a) denying you goods or services; (b) charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; or (c) providing you a different level or quality of goods or services (or suggesting that we will do so). We may, however, charge different prices or rates, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by your personal information. This section currently applies to consumers. In 2023, this section may also apply to employees, applicants for employment, and independent contractors.

11. Verification

As required or permitted under applicable law, we may take steps to verify your request before providing personal information to you, deleting personal information, or otherwise processing your request. To verify your request, you must provide your name, employer (if any), product or service, email address, phone number, and state of residence. You may also be asked to verify your ability to control the email address or phone number you have provided to us. If we believe we need further information to verify your request as required by law, we may ask you to provide additional information to us. We will review each request carefully and respond accordingly within the timeframe established by the CCPA/CPRA.

12. Agent Authorization

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf. Your agent may contact us as set forth in this Notice. Even if you choose to use an agent, as permitted by law, we may require you to confirm you have authorized the agent to act on your behalf or require you to verify your own identity.

13. Notice of Financial Incentive

We do not offer financial incentives to consumers for providing personal information.

14. Selling or Sharing Personal Information of Residents Age 16 or Under

We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

15. Changes to Our Privacy Notice

We reserve the right to amend this Notice at our discretion and at any time. We will do so by updating this Notice. Amended terms take effect upon being incorporated into this Notice, and your continued use of the website or participation in your employer’s covered benefit program following the posting of any changes constitutes acceptance of any new terms. If the changes will materially affect the way we use your personal information in connection with covered Services that we have already collected, we will notify you by sending you a message in your online account.

16. Contact Information

If you have questions or comments about this Notice, our privacy policies, the ways in which we collect and use your personal information, your choices and rights regarding such use, please contact us at:

Email: [email protected]

Mail: COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014

Effective Date: Last updated November 13, 2023

U.S. State Privacy Laws

Vermont Privacy Notice

For Vermont residents, the information sharing practices described in our general privacy policy are in accordance with federal law. Vermont law places additional restrictions on sharing information about their residents, and our policies comply with such restrictions.

Nevada Privacy Notice

Nevada law requires that we also provide Nevada residents with the following contact information: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E Washington St., Suite 3900, Las Vegas, NV 89101; phone: 702.486.3132; e-mail: [email protected].

Contact Information

If you have any questions or comments about this information, please contact us at:

Email: [email protected]

Mail: COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014.

Additional information regarding Colorado residents’ privacy rights

Colorado law provides Colorado residents with rights to access, delete, and correct certain “Personal Data” we collect about them, as well as to restrict the use of that Personal Data for targeted advertising, restrict the “sale” of that Personal Data, and control our use of Personal Data considered sensitive. If you are a Colorado resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights. While Colorado residents have the right to opt out of automated profiling that would produce legal or other similarly significant effects, we do not use Personal Data to make automated decisions in any situation where you would have a legal right to opt out.

The Colorado Privacy Act defines “Personal Data” to mean “any information that is linked or reasonably linkable to an identified or identifiable individual.” When we use the term “personal information” in our Privacy Policy, it includes Personal Data covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights by contacting us at:

Email: [email protected]

Mail: COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014

For your security and to ensure unauthorized third parties do not access your personal information, we will require you to verify your identity before we can act on your request. If you are a current customer or still have access to your Cosmoss account, you will be required to authenticate through your Cosmoss account. If you do not have an account with us, you will be required to provide an email address and mobile phone number to start the verification process. You may also be required to provide a qualified government-issued photo identification. If you are asking for access on behalf of someone else, we will require verification of your identity, as well as proof of authorization by the individual whose personal information you wish to access.

To opt out of targeted advertising and the sale or sharing of Personal Data, or to set preferences regarding our use of sensitive Personal Data, please contact us at:

Email: [email protected]

Mail: COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014.

If we deny your request, you have the right to appeal our decision. You can request further review at [email protected].

Additional information regarding Connecticut residents’ privacy rights

Connecticut law provides Connecticut residents with rights to access, delete, and correct certain “Personal Data” we collect about them, as well as to restrict the use of that Personal Data for targeted advertising, restrict the “sale” of that Personal Data, and control our use of Personal Data considered sensitive. If you are a Connecticut resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights. While Connecticut residents have the right to opt out of automated profiling that would produce legal or other similarly significant effects, we do not use Personal Data to make automated decisions in any situation where you would have a legal right to opt out.

The Connecticut Data Privacy Act defines “Personal Data” to mean “any information that is linked or reasonably linkable to an identified or identifiable individual.” When we use the term “personal information” in our Privacy Policy, it includes Personal Data covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights contacting us at:

Email: [email protected]

Mail: COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014.

To opt out of targeted advertising and the sale or sharing of Personal Data, or to set preferences regarding our use of sensitive Personal Data, please contact us at:

Email: [email protected]

Mail: COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014.

If we deny your request, you have the right to appeal our decision. You can request further review at [email protected].

Additional information regarding Maine residents’ privacy rights

Maine’s Broadband Internet Access Service Customer Privacy Act generally prohibits providers of broadband Internet access service (“Providers”) from using, disclosing, selling or permitting access to “customer personal information” (“CPI”) without a customer’s express, affirmative consent, which may be revoked at any time.

However, no consent is required for the collection, retention, use, disclosure, or sale or access to customer personal information when such activities are required to:

(a.) Provide the service from which such information is derived or for the services necessary to the provision of such service;

(b.) Advertise or market the Provider's communications-related services to the customer;

(c.) Comply with a lawful court order;

(d.) Initiate, render, bill for and collect payment for broadband Internet access service;

(d.) Protect users of the provider's or other providers' services from fraudulent, abusive or unlawful use of or subscription to such services; or

(e.) Provide geolocation information concerning the customer:

(i.) For the purpose of responding to a customer's call for emergency services, to a public safety answering point; a provider of emergency medical or emergency dispatch services; a public safety, fire service or law enforcement official; or a hospital emergency or trauma care facility; or

(ii.) To a provider of information or database management services solely for the purpose of assisting in the delivery of emergency services in response to an emergency.

A Provider may not refuse to serve a customer who does not provide consent when required or charge a customer a penalty or offer a customer a discount based on the customer's decision to provide or not provide consent.

A Provider shall take reasonable measures to protect customer personal information from unauthorized use, disclosure or access, taking into account the nature and scope of the Provider's activities, the sensitivity of the data the provider collects, the size of the Provider, and the technical feasibility of the security measures.

In addition, a Provider may use, disclose, sell, or permit access to non-CPI, unless the customer opts out.

If you are a COSMOSS customer, you can manage your account information and review your privacy settings at [email protected]. To review the full privacy policy, visit our Privacy Policy. To learn more about our privacy commitments, including our commitment to protect your privacy when you use our Service, please visit Privacy Policy.

Additional information regarding Virginia residents’ privacy rights

Virginia law provides Virginia residents with rights to access, delete, and correct certain “Personal Data” we collect about them, as well as to restrict the use of that Personal Data for targeted advertising, restrict the “sale” of that Personal Data, and control our use of Personal Data considered sensitive. If you are a Virginia resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights.

The Virginia Consumer Data Protection Act defines “Personal Data” to mean “any information that is linked or reasonably linkable to an identified or identifiable natural person.” When we use the term “personal information” in our Privacy Policy, it includes Personal Data covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights by contacting us at:

Email: [email protected]

Mail: COSMOSS Privacy, 1887 Whitney Mesa Dr #7556, Henderson, NV 89014.

To opt out of targeted advertising and the sale or sharing of Personal Data, or to set preferences regarding our use of sensitive Personal Data, please contact us at [email protected]. If we deny your request, you have the right to appeal our decision. You can request further review by contacting us at [email protected].

California Notice of Collection and U.S. States Privacy Notices

California and Other U.S. States Privacy Notices

Sign up and step into COSMOSS

Select your region