Privacy Policy

Effective Date: 2/20/2025

1. Introduction

careMESH Inc. ("we," "us," or "careMESH") is committed to protecting the privacy of your personal data. This Privacy Policy explains how we collect, use, and share your personal data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable data protection laws. This policy applies to information we collect through www.caremesh.com ("the Website"). 

2. Categories of Personal Data We Collect

We may collect the following categories of personal data: 

  • Identity Data: Your name and business information.

  • Contact Data: Email address, telephone number, postal address (state, city, street).

  • Technical Data: IP address, browser type and version, operating system, referring website, browsing activity on our Website (e.g., pages visited, links clicked), device information.

  • Marketing Data: Preferences for receiving marketing communications. 

  • Commercial Information: Your interest in services or content provided by us. 

  • Internet Activity: Browsing history, search history and interactions with our website

  • Geolocation Data: Location data

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and based on the following legal bases: 

  • Providing Services: To provide you with information about careMESH services and products, respond to your inquiries, and facilitate your access to careMESH resources and materials. 

  • Marketing: To send you marketing communications about our products and services if you have given your explicit consent.

  • Website Improvement: To analyze website usage, track the effectiveness of our advertising, and improve the functionality and user experience of our Website. 

  • Legal Compliance: To comply with applicable laws and regulations. 

4. Sharing Your Personal Data

We may share your personal data with the following categories of recipients: 

  • Service Providers: Third-party vendors who perform services on our behalf, such as operating this website, IT support, marketing services, and analytics providers. We have contracts in place with these providers to ensure they process your data in compliance with GDPR and CCPA. 

  • Legal Authorities: We may disclose your data to law enforcement or other government agencies if required by law or legal process. 

  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. 

We will not sell or share your personal data with third parties except as described in this Privacy Policy. 

5. International Data Transfers

If we transfer your personal data outside the USA or the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the regulatory authorities in those territories, to protect your data. 

6. Data Retention

We will retain your personal data only for as long as necessary for the purposes for which it was collected. We will determine the appropriate retention period based on factors such as legal obligations, the nature of the data, and the purposes of processing. Identity, Contact, Marketing and Commercial information will be retained until you withdraw your consent. Cookies may be retained on your devices for a period of up to two years.  

7. Your Rights

You have the following rights regarding your personal data: 

GDPR Rights:

  • Right to Access 

  • Right to Rectification 

  • Right to Erasure ("Right to be Forgotten") 

  • Right to Restriction of Processing 

  • Right to Data Portability 

  • Right to Object 

  • Right to Withdraw Consent 

CCPA/CPRA Rights:

  • Right to Know: You have the right to know what personal information we collect, the sources of the information, the purposes for collecting it, and the categories of third parties with whom we share it. 

  • Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions. 

  • Right to Correct: You have the right to request that we correct inaccurate personal information.

  • Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information. You may do this by sending an email to info@caremesh.com.

  • Right to Limit Use of Sensitive Personal Information:  You have the right to limit our use of your sensitive personal information to what is necessary to perform the services or provide the goods reasonably expected by an average consumer. Sensitive Personal Information includes Identity and Contact information described above. 

  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. 

To exercise these rights, please contact us at the contact information provided below. 

8. Data Security 

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, use, or disclosure. These measures include the use of encryption in transit and access controls to any data that we store.

9. Children's Privacy

Our Website is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal information, please contact us. 

10. Cookies

We use cookies on our Website. These cookies may be retained for a period of up to two years and include:

  • Strictly Necessary Cookies: These are required to enable core site functionality and to remember user preferences and choices, such as language preferences or customized settings.

  • Performance and Analytics: These cookies provide quantitative measures of website visitors. With the usage of these cookies we are able to count visits and traffic sources to improve the performance of our site.

  • Advertising: These cookies are used by advertising companies to serve ads that are relevant to your interests.

You may choose to turn off or on all but the Necessary Cookies by opening the Cookie Preferences banner on the Website.

11. Notice at Collection (California Residents)

At or before the point of collection, we will provide California residents with a clear and conspicuous notice informing them about the categories of personal information collected, the purposes for which it will be used, and whether the information will be sold or shared. This notice will be displayed on any forms used to collect personal information.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Effective Date." 

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us as follows: 

careMESH Inc. c/o Chief Compliance Officer 

12110 Sunset Hills Road, Suite 600 Reston, VA 20190 USA 

email: info@caremesh.com 

14. Data Protection Officer (DPO)

To contact our DPO, please email:

info@caremesh.com

15. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. 

California residents can also file complaints with the California Attorney General or the California Privacy Protection Agency.