Privacy Policy

1. Scope

Except as otherwise described below, this Policy applies to our personal information processing activities including, but not limited to: visitors of our website where this Policy is posted, including www.schweigerderm.com (the “Site”); individuals who sign up for, or create an account with us to access and use certain features of our services; individuals who participate in events, surveys, research, or promotions conducted by us; individuals who sign up to receive news, information, and marketing communications and other materials from us; visitors to our on-site locations or offices; current, former, and prospective business partners, and service providers; and individuals who communicate or otherwise interact or engage with us or the services available through our Site, or other services (collectively referred to as the “Services”).

Additional Notices. Depending on how you interact or engage with us, we may provide you with additional or supplemental privacy notices with additional details about our privacy practices. These additional notices will control to the extent there is a conflict with this Policy, with respect to your personal information that is subject to that additional notice. For example, this Policy does not apply to the personal information we collect and process about job applicants and candidates for employment with us, or to employees or contractors in the context of our working relationship with them.

In addition, any protected health information as defined by the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”) about you that we collect, receive, or otherwise maintain about you in our capacity as a covered entity or business associate to a covered entity will be covered under a separate privacy policy or our business associate agreement with the applicable covered entity.

2. Personal Information Collected

We collect personal information directly from you, from third-party sources, and automatically through your use of the Services. To the extent permitted by applicable law, we may combine the personal information we collect from publicly available or third-party sources. The personal information we may collect varies depending upon your use of our Services and our interactions with you.

Personal Information Collected Directly. We may collect the following personal information directly from you:

• Contact Details and Identifiers. We may collect certain contact details such as your name, email address, phone number, address, or other similar personal identifiers including age, date of birth and gender, as well as any other information you provide.
• Account and Profile Information. When you sign in or create an account in connection with our Services, we may collect your name, email address, username and password, as well as any other information used in connection with accessing your account or that you otherwise submit to us through your account.
• Financial Details. When you make a purchase or payment through our Services, we may collect information such as payment type, payment card details, billing information, purchasing information such as details of products purchased, and any other financial or commercial-related information necessary for facilitating our Services.
• Health and Medical Information. When you schedule an appointment, meet with our providers, or otherwise use our Services, we may collect certain health and medical-related information such as individual health conditions, treatments, diseases, or diagnosis, as well as any other health and wellness data. In some instances, such data will be subject to HIPAA, and not subject to this Policy.
• Communications and Interactions. When you email, call, or otherwise communicate or interact with us, including if you sign up for our mailing lists, complete forms on our Site, interact with our social media pages, post a product review or testimonial, submit content to the Services, or otherwise engage with us or our sponsored content, we may collect and maintain records of your contact details, communications and interactions, your posts or submissions, and our responses, if applicable. We may also collect any information you submit through our chat functions we make available through the Services, and we may also maintain communication records regarding information provided to us related to any customer support requests.
• Promotional Information. If you agree to receive marketing communications from us, we may collect your contact details, preferences, and if relevant, information about your account and profile, including the Services and features you use. If you participate in offers, programs or promotions we offer, we may also collect certain demographics details and any other information that may be required by applicable law.
• Responses and Feedback. If you participate in surveys, questionnaires, or research conducted by us, such as for market research, user satisfaction, or other similar purposes, we may collect your responses and feedback, and any other information you choose to provide.
• Events and Registration Details. We also may collect personal information related to your participation in our events, as well as other requests that you submit to us related to such events and our Services. For example, if you register for or attend an event that we host or sponsor, we may collect information related to your registration for and participation in such event.
• Preferences and Other Requests. We also may collect information about your preferences, including communications preferences, preferences related to your use of our Services, and any other preferences or requests you provide when interacting with us.
• Business Development Information. To assess and pursue potential business opportunities, we may collect and receive personal information about current, former, and prospective business partners, and vendors and service providers, including contact information and other similar identifiers, company and professional-related information, and communications records.

Personal Information Collected from Third Parties. We may also collect and receive certain personal information about you from third party sources, such as from business partners, data analytics and marketing providers, operating systems and social media platforms, publicly available sources, and service providers or other third parties who provide services or perform functions on our behalf. In addition, we may collect the following personal information from third-party sources:

• Social Media Information. While using our Services, you may choose to interact with or enable sharing information or content through various platforms or social networking websites. If you choose to share content or interact with our Services using your social media accounts, we may collect or receive personal information about you that you have provided to that platform and/or social networking website. For example, we may collect information related to your account and profile, public profile picture and postings, and other similar information available on your profile. You should check your privacy settings on each platform to better understand how your personal information may be used, disclosed, or otherwise processed by these platforms.
• Lead and Prospect Information. We may receive lead and prospect information from third parties about prospective customers that may be interested in our Services. We may also engage with third parties to enhance or update our customer information. For example, we may receive certain personal information about you from data analytics and marketing providers for marketing and advertising purposes, and for purposes of reaching new customers.

Personal Information Collected Automatically. We and our third-party service providers may automatically collect or derive certain personal information about you related to your use of our Services, including through the use of cookies, pixel tags, and other similar technologies. The personal information automatically collected may include:

• Device and Browsing Information. When you use our Services, we may collect browser type, domain name, page views, access times, date/time stamps, operating system, language, device type, unique ID, Internet service provider, referring and exiting URLs, clickstream data, and other similar device and browsing information.
• Activities and Usage. We also may collect activity information related to your use of the Services, such as information about the links clicked, searches, features used, items viewed, time spent within the Services, your interactions with us within the Services, and other similar activity and usage information.
• Location Information. We also may collect or derive general location information about you, such as through your IP address.

For more information about our use of cookies and other similar technologies, please see the Cookies and Other Tracking Mechanisms section below.

Derived or Inferred Information: We may also derive information about you based upon the information we collect automatically and from other sources. For example, information about your interests or other demographic information.

3. Purposes for Collecting and Processing Personal Information

Generally, we may collect, use, disclose and otherwise process the personal information we collect for the following purposes:

• Services and Support. To provide and operate our Services, manage your account, process your transactions, communicate with you about your use of the Services, provide troubleshooting and technical support, and for other similar support purposes, and to otherwise run our day-to-day operations.
• Analytics and Improvement. To better understand how users access and use the Services, and for other research and analytical purposes, such as to evaluate and improve the Site, our Services, and business operations, including to develop our Services and their features, and for internal quality control and training purposes.
• Communication. To respond to your questions and inquiries, fulfill your requests, and send you requested materials and newsletters, as well as information and materials regarding our Services and our offerings. We may also use this information to send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies.
• Customization and Personalization. To tailor content we may send or display on the Services, including to offer location customization and to otherwise personalize your experiences and offerings.
• Marketing and Advertising. For marketing and advertising, and other promotional purposes. For example, to send you promotional information about our Services, including information about sales, discounts, and new offerings, as well any other information that you sign up to receive.
• Research and Surveys. To administer surveys and questionnaires, such as for market research or user satisfaction purposes.
• Insight Development and Data Enhancement. We may combine personal information collected through the Services with other information that we or third parties collect about you in other contexts for insight development and data enhancement purposes. In most cases, the information that we may combine with the personal information collected through the Services for market research, such as demographic information, does not directly identify consumers.
• Planning and Managing Events. For event planning and other management-related purposes, such as event registration and attendance, connecting you with other event attendees, and contacting you about relevant events, webinars, and presentations. We may also use personal information for purposes of facilitating special events, sweepstakes, contests, and promotions, which have their own specifical rules to participate.
• Security and Protection of Rights. To protect the Services and our business operations, our rights and those of our stakeholders and investors, to prevent and detect fraud, unauthorized activities and access, and other misuse of our Site and Services, including where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms and Conditions.
• Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, to respond to a subpoena, warrant, court order, or other legal process, or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.
• Auditing, Reporting, and Other Internal Operations. To conduct financial, tax and accounting audits, audits and assessments of our operations, including our privacy, security and financial controls, as well as for risk and compliance purposes. We may also use personal information to maintain appropriate business records and enforce our policies and procedures.
• General Business and Operational Support. To assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions.

4. Disclosures of Personal Information

We may disclose the personal information we collect for the purposes described above with the following recipients and in the following circumstances:

• Subsidiaries and Affiliates. We may disclose the personal information we collect to our subsidiaries and affiliated companies (i.e., our parent company and other companies under common ownership, control or management with us).
• Vendors and Services Providers. We may disclose the personal information we collect to vendors and service providers who perform functions on our behalf, such as IT and website hosting providers, payment processors, product shipment and order fulfillment facilitators, marketing and marketing research providers, customer support, data storage, data analytics providers, auditors, consultants, and legal counsel.
• Business Partners. In some circumstances, we may partner with other businesses to offer our Services, including to facilitate certain programs or special offerings, and we may disclose personal information to those business partners. We may also disclose certain personal information to retailers or manufacturers for warranty or recall purposes.
• Other Users. With other users of the Services in the context of specific features that are social in nature. For example, if you submit or make available information through our public-facing, interactive features, including when you post reviews or testimonials, certain personal information may be available to, and searchable by, other users of the Services.
• Third Party Marketing and Analytics Providers. We may also disclose certain personal information, such as device and browsing, and activities and usage information, and other similar information, to third party marketing and data analytics providers, and other companies who provide marketing, advertising, campaign management, or analytics services on our behalf.
• In Support of Business Transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer the personal information we have collected from you with or to the other company in accordance with applicable laws. We may also disclose certain personal information as necessary prior to the completion of such a transaction or other corporate transactions such as financing or restructuring, to lenders, auditors, and third-party advisors, including attorneys and consultants.
• Compliance and Legal Obligations. We may also disclose personal information to third parties to the extent required by applicable law and legal obligations. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators, government entities, and law enforcement, including responding to national security or law enforcement disclosure requirements, or as otherwise required by law or legal process.
• Security and Protection of Rights. Where we believe doing so is necessary to protect the Services, our rights and property, or the rights, property, and safety of others. For example, we may disclose personal information to (i) prevent, detect, investigate, and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the Services, (ii) situations involving potential threats to the health, safety, or legal rights of any person or third party, or (iii) enforce, detect, investigate, and take action in response to violations of our Terms of Use. We may also disclose personal information related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
• Other Disclosures. We may disclose personal information in other ways not described above that we notify you of or that we obtain your consent for, or that are otherwise authorized or required by law.

Notwithstanding anything else described in this Policy, we may use and disclose aggregate, deidentified, and other non-identifiable data related to our business and the Services with third parties for quality control, analytics, research, development, and other purposes. Where we use, disclose or process deidentified data, we will maintain and use the information in deidentified form and not attempt to reidentify the information, except in order to determine whether our deidentification processes are reasonable and adequate pursuant to applicable privacy laws.

5. Cookies and Other Tracking Mechanisms

We and our third-party service providers use cookies, pixels, local storage objects, log files, and other mechanisms to automatically collect browsing, activity, device, and similar information within our Services. We use this information to, for example, analyze and understand how users access, use, and interact with our Services, to identify and resolve bugs and errors in our Services, to assess secure, protect, optimize and improve the performance of our Services, as well as for marketing and analytics purposes, and to personalize content in our Services.

Cookies. Cookies are alphanumeric identifiers we transfer to your device’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within the Services.

Pixel Tags. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, and help us manage content and compile usage statistics. We may also use these in our emails to let us know when they have been opened or forwarded, so we can track response rates and gauge the effectiveness of our communications.

Local Storage Objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our websites. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Third-Party Analytics and Tools. We use third party tools, such as Google Analytics, which are operated by third party companies. These third-party analytics companies may use cookies, pixels, and other similar tools to collect usage data about our Services in order to provide us with reports and metrics that help us evaluate usage of our Services and improve performance and user experiences. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to prevent data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Cross-Device Tracking. We and our third-party providers may use the information we collect about you within our Services and on other third-party sites and services to help us and these third parties to identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.).

Third-Party Advertising. We work with third parties, such as ad networks, analytics, marketing partners, and others (“third-party ad companies”) to personalize content and display advertising within our Services, as well as to manage our advertising on third-party sites. We and these third-party ad companies may use cookies, pixels tags, and other tools to collect browsing and activity information within our Services (as well as on third-party sites and services), as well as IP address, unique ID, cookie and advertising IDs, and other online identifiers. We and these third-party ad companies may use this information to provide you with more relevant ads and content within our Services and on third-party sites, and to evaluate the success of such ads and content.

Custom Lists and Matching. We may share or make available certain customer list information (such as your name, email address and other contact details) with third parties so that we can better target ads and content to you across third party sites, platforms and services, and in some cases, these third parties may help us to enhance our customer lists with additional demographic or other information, so we can better target our advertising and marketing campaigns.

6. Your Privacy Choices

We make available several ways that you can manage your preferences and privacy choices related to your personal information. Some of these choices are browser and device specific, which means that you may need to set the preference for each browser and device you use to access our Services. In addition, if you delete or block cookies, you may need to reapply these preferences to each browser and/or device used to access our Services. The preferences and privacy choices we make available include:

• Account and Profile Information. You may access, update, and delete certain of your personal information by accessing and adjusting your account information or settings directly within our Services.
• Marketing Communications. We may send periodic promotional emails or other similar communications to you, in accordance with applicable law. You may opt-out of these communications by following the instructions provided to you in the communication. If you opt-out of receiving promotional content from us, we may still send you communications about your account or any services you have requested or received from us.
• Cookie Preferences and Settings. You can review or change your preferences for certain cookies on our Site, other than those that are necessary, by adjusting your cookie settings through our cookie preference center available here. To prevent cookies from tracking your activity on our Site or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set. You can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Site, but some features may not function.
• Browser Signals. Our Site currently does not respond to “Do Not Track” signals. However, our Site may respond to other opt-out preference signals as may be required by law.
• Industry Ad Choice Programs. You can also control how participating third-party ad companies use the information that they collect about your visits to our Site and those of third parties, in order to display more relevant targeted advertising to you. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). Opting out of participating third party ad networks does not opt you out of being served advertising. You may continue to receive generic or “contextual” ads on our Site. You may also continue to receive targeted ads on other websites, from companies that do not participate in the above programs.

7. External Links and Features

Our Services may contain links to third-party websites or features or provide certain third-party connections or integrated services. Any access to and use of such linked websites, features, or third-party services is not governed by this Policy, but instead is governed by the privacy policies of those third parties. We are not responsible for the information practices of such third parties, including their collection, use, and disclosure of your personal information. You should review the privacy policies and terms for any third party before proceeding to those websites or using those third-party features or services.

8. Minors’ Privacy

Our Services are not designed for minors, and we do not knowingly collect personal information from children under the age of eighteen (18). If you are a parent or legal guardian and you believe we have collected your minor’s information in violation of applicable law, please contact us.

9. Security

We have implemented safeguards aimed to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our best efforts, no data security measures can guarantee security. There are also certain steps you can take to better protect against unauthorized access to your personal information. For example, when registering for an account, you should choose a strong password that is unique to the Services.

10. Changes to this Policy

This Policy is current as of the effective date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any updates to this Policy on this page. If we make material changes to how we collect, use, or disclose the personal information we have previously collected about you, we will endeavor to provide you with prior notice, such as by emailing you or posting prominent notice on our website or within the Services.

11. Contact Us

If you have any questions or concerns regarding this Policy or our privacy practices, you may contact us at legal@schweigerderm.com.

12. Additional Information for Residents of Certain Jurisdictions

Consumer Rights

Residents of certain U.S. states may have additional rights under applicable privacy laws, subject to certain limitations, which may include:

• Access. To confirm whether we are processing their personal information and to obtain a copy of their personal information in a portable and, to the extent technically feasible, readily usable format.
• Deletion. To delete their personal information provided to or obtained by us.
• Correction. To correct inaccuracies in their personal information.
• Opt Out. To opt out of certain types of processing, including:
  • to opt out of the “sale” of their personal information;
  • to opt out of targeted advertising by us; and
  • to opt out of any processing of personal information for purposes of making decisions that produce legal or similarly significant effects.
• Revoke Consent. If you have provided your consent in order for us to process your personal information, you may revoke such consent.

You may submit a request to exercise your privacy rights under U.S. state privacy laws through our webform here, emailing us at legal@schweigerderm.com, or calling us at (833) 352-9717 (English) or (800) 216-1288 (Spanish). To opt out of the use of your online browsing information for purposes of “sales” or targeted advertising by us, you can adjust your cookies settings here. See Section 5. Cookies and Other Tracking Mechanisms and Section 6. Your Privacy Choices for more information. In addition, our website responds to global privacy control—or “GPC”—signals, which means that if we detect that your browser is communicating a GPC signal, we will process that as a request to opt that particular browser and device out of “sale” and/or targeted advertising (i.e., via cookies and tracking tools) on our website.

We will respond to your request as required under applicable U.S. privacy law(s). When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.

To the extent required under applicable U.S. privacy laws, if we deny your request, you may appeal our decision in accordance with the instructions we provide in our response.

To the extent permitted under applicable U.S. privacy laws, you may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization, and we may also require the relevant consumer to directly verify the identity and authority of the authorized agent.

Sale of Personal Information

While we do not disclose personal information to third parties in exchange for monetary compensation, our use of third-party analytics and advertising cookies may be considered “selling” under applicable privacy laws. We may “sell” the following categories of personal information: identifiers; commercial information; location information; Internet and network activity information, and sensitive personal information (e.g., your Internet and network activity information when you visit some of our health-related pages, such as our product pages, on our Sites). We may disclose these categories to third-party advertising networks, social networks, and analytics providers for purposes of marketing and advertising, to improve and measure our ad campaigns, and to better understand user activity on our Sites. You may opt out of the sale of your personal information as further described above.

13. California Notice at Collection and Privacy Rights

This section of the Policy provides additional information for California residents and describes our information practices pursuant to applicable California privacy laws, including the California Consumer Privacy Act (the “CCPA”). This section applies to “personal information” as defined in the CCPA, whether collected online or offline. This section does not address or apply to our handling of personal information that is exempt under the CCPA, such as publicly available information or de-identified or aggregated information.

Categories of Personal Information Collected and Disclosed. The following table identifies the categories of personal information we may collect about you (and may have collected in the prior 12 months), as defined by the CCPA, as well as the categories of third parties to whom we may disclose this personal information for a business or commercial purpose:

Sources of Personal Information. We generally collect personal information from the following categories of sources:

• Directly or indirectly from you;
• Publicly available sources;
• Affiliates and subsidiaries;
• Business partners;
• Vendors and service providers, representatives, advisors, and agents;
• Internet service providers;
• Operating systems and platforms;
• Social networks; and
• Data analytics providers.

Purposes of Collection, Use, and Disclosure. As described in Section 3. Purposes for Collecting and Processing Personal Information above, in general, we collect and otherwise process personal information for the following business or commercial purposes, or as otherwise directed or consented to by you:

• Services and support;
• Analytics and improvement;
• Communication;
• Customization and personalization;
• Marketing and advertising;
• Research and surveys;
• Insight development and data enhancement;
• Planning and managing events;
• Security and protection of rights;
• Compliance and legal processes;
• Auditing, reporting, and other internal operations; and
• General business and operational support.

Sensitive Personal Information. Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by the CCPA. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you.

Retention of Personal Information. We retain your personal information for as long as needed or permitted, based on the reason we obtained it (consistent with applicable law). When deciding how long to keep your personal information, we consider whether we are subject to any legal obligations (e.g., any laws that require us to keep records for a certain period before we can delete them) or whether we have taken any legal positions (e.g., issued any legal holds or otherwise need to preserve the information). Rather than delete your data, we may also deidentify it by removing identifying details. Where we have committed to maintaining and using personal information in a deidentified form, we agree not to reidentify deidentified data except as permitted by applicable law.

Sales and Sharing of Personal Information. The CCPA defines “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third-party for purposes of cross-context behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we may “sell” or “share” the following categories of personal information: identifiers, commercial information, location information (i.e., your IP address), and Internet and network activity information. We may disclose these categories to third-party advertising networks, analytics providers, and social networks for purposes of marketing and advertising, to improve and measure our ad campaigns, and to better understand activity on our website. We do not sell or share sensitive personal information, nor do we sell or share personal information about individuals we know are under age sixteen (16).

California Privacy Rights. The CCPA provides California residents with specific rights regarding personal information. Subject to certain conditions and exceptions, California residents have the following rights with respect to their personal information:

1. Right to Know (Access & Portability). You have the right to request:
   1. the categories or personal information we collected about you;
   2. the categories of sources from which the personal information is collected;
   3. our business or commercial purposes for collecting, selling, or sharing personal information;
   4. the categories of third parties to whom we have disclosed personal information; and
   5. a copy of the specific pieces of personal information we have collected about you.
2. Right to Correct. You have the right to request that we correct inaccurate personal information.
3. Right to Delete. You have the right to request that we delete your personal information.
4. Right to Opt-Out of Sales and Sharing. You have the right to opt-out of “sales” and “sharing” of your personal information as those terms are defined under the CCPA.
5. Right to Limit Use and Disclosure. We only use “sensitive personal information” for the purposes permitted under the CCPA, thus this right is not available to California residents.
6. Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.

Exercising Your Privacy Rights. California residents may exercise their CCPA privacy rights as set forth below:

• Right to Know/Access, Delete, and Correct. California residents may submit CCPA requests to know/access, delete, and correct their personal information by using our webform, available at www.schweigerderm.com/privacy-web-form/, emailing us at legal@schweigerderm.com, or calling (833) 352-9717 (English) or (800) 216-1288 (Spanish).

  When you submit a request, we will take steps to verify your identity and request by matching the information provided by you with the information we have in our records. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.

  You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

• Right to Opt-Out of Sales and Sharing. To exercise your right to opt-out of the “sale” or “sharing” of your personal information, you may do so via our cookie preference manager. We will apply your opt out based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. You may also click the [“Do Not Sell or Share My Personal Information” / “Your Privacy Choices”] link at the bottom of our Site.

  In addition, if we detect that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control” or (“GPC”) signal, we will opt that browser or device out of cookies that result in a “sale” or “sharing” of your personal information. If you come to our Site or use our Services from a different device or from a different browser on the same device, you will need to opt-out, or use an opt-out preference signal, for that browser and/or device as well. More information about GPC is available at: https://globalprivacycontrol.org/.

California Shine the Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, email us at legal@schweigerderm.com, and include in your request a current California address and your attestation that you are a California resident.