Privacy Policy

Last Updated: 09-12-2024

At NourishedRFI.org, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, share, and protect your information in compliance with the Federal Trade Commission (FTC) regulations, the European Union Medical Device Regulation (EUMDR), and other applicable state laws, including the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect personal information that you voluntarily provide to us when you subscribe to our newsletter or contact us through our website. This may include your name, email address, and any other information you choose to provide.

2. How We Use Your Information

The information you provide will only be used for the purposes you have indicated, such as sending you our weekly newsletters and email updates. We do not sell your information to any third-party vendors.

3. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files that are stored on your device when you visit our website. They help us understand how you use our site and improve its functionality. You can control the use of cookies through your browser settings.

4. Compliance with FTC Regulations

We comply with all applicable FTC regulations, including the FTC Health Breach Notification Rule, which requires us to notify individuals and the FTC in case of a data breach. We also adhere to the FTC’s guidelines for mobile health applications to ensure privacy and security compliance.

5. Data Breaches

In the event of a data breach, we will promptly notify affected individuals and the appropriate authorities as required by law. We take data breaches seriously and have measures in place to prevent and respond to such incidents.

6. EUMDR Compliance

For our users in the European Union, we comply with the European Union Medical Device Regulation (EUMDR) to ensure the privacy and security of your personal information. This includes implementing additional safeguards and transparency measures as required by the regulation.

7. Data Sharing

We do not sell your personal information to any third-party vendors. However, we may share your information with trusted third parties who assist us in operating our website, conducting our business, or providing services to you, as long as those parties agree to keep this information confidential. We may also share your information when required by law or to protect our rights, property, or safety.

8. User Consent

By providing your personal information to us, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. You have the right to withdraw your consent at any time. If you withdraw your consent, we will stop processing your personal information for the purposes you have previously agreed to. To withdraw your consent, please contact us at [email protected].

9. Your Rights

You have the following rights regarding your personal information:

• Right to Access: You can request access to the personal information we hold about you.
• Right to Rectification: You can request that we correct any inaccuracies in your personal information.
• Right to Erasure: You can request that we delete your personal information under certain circumstances.
• Right to Restrict Processing: You can request that we restrict the processing of your personal information.
• Right to Data Portability: You can request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your personal information for certain purposes.
• Right to Withdraw Consent: You can withdraw your consent to the processing of your personal information at any time.

To exercise any of these rights, please contact us at [email protected].

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your information is no longer needed, we will securely delete or anonymize it.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. We regularly review and update our security practices to ensure the ongoing protection of your data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new Privacy Policy on our website and updating the “Last Updated” date.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].