Privacy Policy
Last updated November 21, 2024
Introduction and Applicability
The Immune Co. d/b/a MoldCo, together with its affiliates (collectively, “MoldCo” or “we”) operates the website(s) located at moldco.com together with corresponding web and/or mobile applications (collectively, the “Platform”). This Privacy Policy explains how we collect your personal information, how we use, disclose, and protect personal information, and the choices you have concerning the use of your personal information, in connection with your access to and use of the Platform, including MoldCo-provided content as well as any products offered for sale by MoldCo through or in connection with the Platform (such content, offering of products, and use of the Platform collectively, the “Platform Services”).
Please read this Privacy Policy carefully. By accessing and/or using the Service, you acknowledge the applicability of the most recent version of this Privacy Policy. If you do not accept the terms of this Privacy Policy, then you should immediately discontinue use of the Platform Services.
When you set up an account on the Platform, you are creating a direct customer relationship with MoldCo that enables you to access and/or utilize various functions of the Platform. As part of that relationship, you may provide information to MoldCo, such as your name, email address, shipping address, phone number, and certain transactional information. That information is processed in accordance with this Privacy Policy. For clarity, however, we do not consider that information or any other information subject to this Privacy Policy to be “protected health information” under the Health Insurance Portability and Accountability Act including regulations promulgated pursuant thereto (“HIPAA”).
Processing of Personal Information That Is Not Subject to this Privacy Policy
The Platform Services include access to and the ability to purchase certain services and/or products provided by third-party healthcare practitioners, pharmacies, or laboratories via the Platform (“Healthcare Services” provided by “Third-Party Providers”). In particular, the Platform offers access to licensed Healthcare Services provided by Immune Co Medical Group PA ( “Medical Group”), which employs or contracts with physicians and other healthcare practitioners for such Services (the Medical Group and such physicians and other practitioners collectively, “Practitioners”). The Platform (or a Practitioner) may also provide access to prescription fulfillment services (“Pharmacies”) and heath care laboratories (“Labs”).
For information about our handling of your personal information by, for, or on behalf of a Third-Party Provider, please see the Third-Party Provider’s privacy policy or Notice of Privacy Practices (which may be provided via the Platform or will otherwise be made available). This Privacy Policy does not apply to such processing of personal information by us.
In many cases, the handling of your personal information, including any protected health information, by Third Party Providers in connection with the Healthcare Services will be governed by HIPAA and any comparable and applicable state laws. To the extent that MoldCo processes any HIPAA-protected health information in connection with the Healthcare Services, MoldCo does so for or on behalf of the applicable Third-Party Provider, and such processing is governed by HIPAA, any comparable and applicable state laws, the Third-Party’s Notice of Privacy Practices, and our business associate agreement with the Third-Party Provider.
PROCESSING OF PERSONAL INFORMATION THAT IS SUBJECT TO THIS PRIVACY POLICY
The personal information we collect depends on how you interact with us, the services you use, and the choices you make. We collect personal information about you from different sources and in various ways when you use the Platform, including information you provide directly, information collected automatically, information from third-party data sources, and data we infer or generate from other data. In some cases, if you choose not to provide personal information that is necessary, some features or functionality of the Platform may not be available to you.
Information you provide
When you complete the MoldCo Home & Health Questionnaire (“MoldCo Questionnaire”), order a product from us, request information from us, engage with our providers, or otherwise engage with the Platform (independent of your use of the Healthcare Services), you share certain personal information such as:
- Identifiers and contact information: We may collect your name and contact details such as email address, postal address, and phone number.
- Demographic data: This may include information about your gender, age, and other information about your environment.
- Social plug-ins data. If you connect the Platform with third-party social media networks (e.g., Facebook, X, Instagram), we may receive information you provide on that network and/or information generally available as per the privacy policy and practices of that network.
- Communications: If you send us email messages or communications (such as photographs, videos, documents, and other files), we may collect and retain those communications.
Sensitive Personal Information:
- Government ID: We may collect government-issued identifiers such as driver’s license, passport number, and social security numbers.
- Sensitive demographic data: We collect information about racial or ethnic origin.
- Account access information: If you create an account with us, we may maintain some or all of the credential information (but not biometric data) that allows access to your account.
- Contents of communications: We collect the contents of communications that you make via the Platform.
- Biometric information: We or our service providers may use biometric information to verify your identity prior to your use of MoldCo services.
- Payment information: If you make a purchase from our website, we process your credit card information and other payment details, as well as any associated shipping information.
In some states, we may be required to obtain your consent prior to using information that constitutes sensitive personal information. While we may collect information about your browsing activity on health-related webpages, we do not use PHI for advertising or marketing.
Information collected automatically
When you use our website, certain Internet and electronic network activity information gets created and logged automatically. Here are some of the types of personal information we collect:
- Usage and log data: Our servers record information (“log data”) that your browser automatically sends whenever you visit a website, including your IP address, browser type and settings, the date and time you accessed our website, the URL of the website from which you came to our site, pages you viewed, how long you spent on a page, and other details about your use of and actions on our website.
- Cookie data: We use cookies, web beacons, mobile analytics and advertising device IDs, and similar technologies on our website to collect personal data (such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information). See the “Cookies and Similar Technologies” section below for additional details.
- Geolocation data. Depending on your device and web settings, we collect geolocation data when you use our online services.
Inferences we create or generate
We infer personal information from other data we collect, including using automated means to generate information about you. For example, we may infer a rough estimate of your likelihood of mold-related illness based on the information you provide in the MoldCo Questionnaire and we may infer your general geographic location (such as city, state, and country) based on your IP address.
Information collected from third-party services
We may also obtain the types of personal information described above from third parties. These third-party sources may include:
- Third-party partners: Third-party applications and services, including social networks you choose to interact with to connect to the Platform. What we have access to depends on the privacy policies or settings for those accounts.
- Information our advertisers share with us: We may get information about you and your activity from our advertising partners and other third parties we work with. For example, online advertisers or third parties share personal information with us to measure, report on, or improve the performance of ads for MoldCo.
- Co-branding/marketing partners: Partners with which we offer co-branded services or engage in joint marketing activities may provide information to us in connection with such services.
- Data licensors: Third parties that collect or provide data as part of their services.
- Publicly available sources. Public sources of information such as open government databases.
Deidentified and Aggregated Data
We may also create information that is de-identified and/or anonymized and aggregated from the personal information we collect, by removing data that makes the information personally identifiable to you. Such aggregated and anonymized information is not considered “personal information,” and we may use and share such information with third parties for any business or other purpose not prohibited by applicable law.
In cases where the purpose of sharing of data does not require an ability to identify individuals within the data, we may de-identify that data as a way of protecting privacy and security. Where the process is designed to permanently de-identify the data, we will maintain and use the data only in a de-identified form and will not to attempt to re-identify it.
HOW WE USE YOUR INFORMATION
We collect and use your personal information for the following purposes:
Purpose of Use
Types of Information
Communicating with you. Providing information about MoldCo and the Platform Services, as well as information about Third-Party Providers. This may include confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages, responses to your inquiries, sending notifications related to your account and purchases, providing customer service, and answering your questions. Additionally, to communicate with you by letter, email, telephone (including by text, subject to consent), or other forms of communication in connection with the Platform Services.
Providing and reviewing responses to the MoldCo Questionnaire and your MoldCo account. We use your information (including health-related information you provide in response to our questionnaire) to recommend services of potential information, and we use access, registration details, and other information to maintain and manage your account.
Fulfilling your orders. We use your information for processing your orders and shipping the products you order from us.
Business operations. We use your information for operating our business, such as for billing and accounting, improving our internal operations, securing our systems, detecting fraudulent or illegal activity, and meeting legal obligations.
Product improvement, development, and research. We use your information to develop, test, or improve the Platform Services and when evaluating content, features, and/or products or services offered via the Platform Services. We also may use your information to enhance, develop, or improve our products or services; and to analyze traffic and user behavior or activity to and through the Platform.
Analytics and personalization. We may analyze and use your personal information to understand how you interact with our content and communications, to conduct research and analytics (including to improve and/or attempt to optimize the Platform and marketing campaigns), to analyze and evaluate issues related to mold, and to personalize your experience when you use the Platform.
Marketing. We use your information to send marketing, advertising, and promotional communications by email, telephone (including by text, subject to consent), or postal mail.
COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies to analyze trends, administer our website, track users’ movements around the site, and gather demographic information about our user base as a whole. A cookie is a small piece of information that a website you visit transfers to your browser. We may receive reports based on the use of these technologies on an individual and aggregated basis.
We use cookies to personalize your experience on our website and remember your preferences, save you time by not having to re-enter your login information upon each visit to our website, help us understand how our website is used and how effective our marketing campaigns are, and conduct marketing activities, such as tailoring content and determining the popularity of our content.
We partner with third parties to manage our advertising on other sites. These third parties may use technologies such as cookies to gather information about your activities on this website and other sites to provide you with advertising based on your browsing activities and interests.
You can also prevent the use of cookies by modifying your Internet browser settings, typically under the section “Help,” “Internet Options,” or “Settings.” If you disable or delete certain cookies in your Internet browser settings, you may still access our website, but you might not be able to access or use important functions or features.
Your browser or device may include “Do Not Track” functionality; please note that we do not respond to such signals. However, our website is designed to honor Global Privacy Control signals to opt you out of all non-essential and non-functional cookies. In addition, certain industry controls may be available to you to opt-out from or otherwise control targeted advertising. You can use the opt-out controls offered by the industry frameworks that our advertising or analytics partners may participate in. Here are the corresponding links for two such frameworks:
Like many websites, we use Google Analytics for various purposes. Opt-out functionality for Google Analytics can be found at https://tools.google.com/dlpage/gaoptout.
California Shine The Light
Under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which they have established a business relationship for personal, family, or household purposes may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. Please be aware that MoldCo does not disclose personal information to any third parties for their direct marketing purposes as defined by this law. California customers may request further information about our compliance with this law by emailing privacy@themoldco.com. Please note that businesses are required to respond to one request per California customer each year.
CHILDREN UNDER 18
The content on our website is not designed for or directed to children under the age of 18. We do not knowingly or intentionally collect personal information from any person under the age of 18.
SHARING WITH THIRD PARTIES
We share your personal information with the third parties with your consent or as we determine necessary to complete your transactions or provide the services you have requested or authorized. We may disclose the categories of personal information described above to the types of third parties described below, in connection with the provision of the Platform Services or as otherwise permitted or required by law.
Service Providers
We may employ independent contractors, vendors, and suppliers (collectively, “service providers”) to provide specific services and products related to our website, content, and offerings, such as payment processing, fraud screening, and IT hosting, development, and support. Access to personal information by these service providers is limited to the information reasonably necessary for them to perform their function for us. We require our service providers to protect the privacy of personal information consistent with this Privacy Policy, and we prohibit them from using or disclosing personal information for any purpose other than providing us with products or services for which they are contracted.
Third-Party Sellers
Through the Platform, you may be given the opportunity to purchase (or to obtain more information regarding) certain content, products, or services that are sold by or through a company other than MoldCo (collectively, “third-party sellers”). We will indicate when you are dealing with a third-party seller. Third-party sellers may ask you to submit personal information to purchase their products or services or to obtain additional information from them. You do not need to submit this information to third-party sellers or purchase any products or services from them to access or use the Platform Services.
Third-Party Partners
We may share your personal information with third parties that we have partnered with to jointly create or offer a product, service, or joint promotion, to facilitate mold-related services, or for academic or medical research, or you may direct that we provide your information to a third-party (“third-party partners”). If you decide to obtain such a product or service or participate in a joint promotion that is offered by us and these third-party partners, the information you provide may be disclosed to both Moldco and the partner. Our use of that information is governed by this Privacy Policy. The partner’s use of your personal information is governed by their own respective privacy policies, not this Privacy Policy. We may also share your information with these third-party partners in the event we suspect you are violating our Terms & Conditions or the law.
Financial services & payment processing
When you provide payment data, for example to make a purchase, we will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services. For more information about such disclosures, please see the “Transactions” section below.
Affiliates
We may permit our affiliates to access personal information to the extent such affiliates perform services for us or on our behalf in connection with the Platform Services.
The Labs, Pharmacies, Medical Groups, or their Providers
We facilitate information disclosure between you and the Medical Group, Pharmacies, Practitioners, and Labs, as applicable, to enable them to provide services to you via the Platform and to collect payment on their behalf. However, as set forth above, our processing of any information for such Third-Party Providers (other than for payment and operational purposes) is subject to their respective Notice of Privacy Practices or other privacy policy, not this Privacy Policy.
Analytics, Advertising, and Social Media Platforms and Networks
Our website has features such as cookies, pixels, and similar technologies that are used to track your activity on our website and other websites that you visit. Information gathered through these technologies is shared with third-party web analytics providers, advertising networks, and social media platforms. We share information, including sensitive personal information to the extent it is not Protected Information, with these third parties to understand how users interact with our website and provide you with advertisements that we or these third parties believe will be relevant.
Third party analytics and advertising companies also collect personal information through our website and apps, including identifiers and device information (such as cookie IDs, device IDs, and IP address), geolocation data, usage data, and inferences based on and associated with that data, as described in the “Cookies and Similar Technologies” section above. These third-party vendors may combine this data across multiple sites to improve analytics for their own purpose and others. For example, we use Google Analytics, Braze, and Meta on our website to help us understand how users interact with our website; you can learn how Google collects and uses information at www.google.com/policies/privacy/partners.
Please note that some of our services also include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal information to any of those third parties, or allow us to share personal information with them, that information is governed by their privacy statements.
Laws and Legal Rights
We may disclose personal information if we believe, in good faith, that we are required to do so to comply with the law, including a subpoena, a search warrant, a court or regulatory order, or other valid legal process. We may also disclose personal information in special circumstances when we have reason to believe that disclosing such information is necessary to identify, contact, or bring legal action against someone who may be violating our Terms & Conditions or the law, or where we believe disclosing such information is necessary to protect the safety or security of our users, the Platform, or the public.
Sale of Business; Bankruptcy Proceeding
We may disclose personal information with third parties in connection with a change to the control or financial status of MoldCo, including a corporate restructuring, sale, acquisition, financing, reorganization, bankruptcy, receivership, transfer, or assignment of assets or business merger or divestiture. Personal information and other information may be shared on a confidential basis in the diligence process with counterparties and others assisting with the transaction and transferred to a successor affiliate as part of that transaction. We will endeavor to ensure that your personal information is utilized in a manner consistent with this Privacy Policy by any successor organization.
LINKED WEBSITES
The Platform contains links to other websites not owned or operated by MoldCo. We are not responsible for the privacy practices of such websites. We encourage you to read the privacy policies or related statements of each such website.
INFORMATION SECURITY
We maintain reasonable technical and organizational measures to protect personal information we collect through the Service. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or utilize, or that are operated on our behalf. There is always some risk involved in transmitting information over the Internet. There is also some risk that others could find a way to thwart our security systems. As a result, while we strive to protect your information, we cannot completely ensure or warrant the security and privacy of any information you transmit to us.
INFORMATION RETENTION AND LOCATION
We keep your personal information only so long as we need it to provide Platform Services to you, fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Actual retention periods may vary based on your consent, the sensitivity of the data, the availability of automated controls, and our legal or contractual obligations.
The personal information we collect may be stored and processed in your country or region, or in any other country where we or our service providers process data. Currently, we primarily use data centers located in the United States.
YOUR RIGHTS AND CHOICES
You have rights and choices with respect to your personal information, and in some jurisdictions, these rights and choices may be enforceable under applicable law.
You may change your communication preferences, edit your profile information, “opt-out” of receiving email communications, and delete your MoldCo account by contacting us at privacy@moldco.com or by selecting the options within your MoldCo account.
To the extent that state general privacy laws apply to MoldCo’s processing of personal information, you may have (and we will honor) rights under such laws. To the extent we believe that any of those laws apply, we will update this Privacy Policy accordingly. However, we do not believe that MoldCo is currently subject to those laws.
Objection to processing
You can ask us to stop using your personal information for certain purposes, including using it to send you marketing communications, by contacting us at privacy@moldco.com. If you opt out of marketing messages from us, we may still send you updates about your account and purchases.
Research
If you would not like your information used in our studies, please contact us at privacy@moldco.com.
Transactions
In connection with any transaction that you conduct through the Service (e.g., the purchase or sale of any products or services on or through the Service), you may be asked to supply certain information relevant to the transaction, including, without limitation, your credit card number and expiration date, your billing address, your shipping address, your phone number, and/or your email address. By submitting such information, you grant MoldCo the right to provide such information to third parties (e.g., payment processing companies, buyers on the Service, sellers on the Service) for the purpose of facilitating the transaction.
All credit card, debit card, and other monetary transactions on or through the Service occur through an online payment processing application(s) accessible through the Service. This online payment processing application(s) is currently provided by MoldCo’s third-party online payment processing vendor, Stripe (“Stripe”) (collectively with other payment vendors, “Payment Vendors”). Additional information about Stripe, their respective privacy policies and information security measures is available on the Stripe website located at https://stripe.com/ or may be obtained by contacting Stripe directly.
JURISDICTIONAL ISSUES
The Service may only be used within certain states within the United States as described in our Terms and Conditions or elsewhere on the Platform. This Privacy Policy, and our collection, use, and disclosure of information about you, is governed by U.S. law.
CONTACT US
If you would have any questions or concerns, or if you have any complaints about how we process your personal information, please contact us at privacy@moldco.com or by regular mail at:
MoldCo
867 Boylston St
Suite 500 Mailbox #198
Boston, MA 02116
MODIFICATIONS
We will update this Privacy Policy when necessary to reflect changes in the Platform Services or how we collect, use, and share personal information, and as required by applicable law. If we make any changes to our Privacy Policy, we will post the revised Privacy Policy and update the “Last updated” date at the top of the Privacy Policy. Any updated Privacy Policy shall only apply to data that is collected after the date of such update. If we make material changes to this Privacy Policy, we will provide notice or obtain consent regarding such changes as may be required by law. We recommend that our you periodically review our Privacy Policy to ensure you are aware of any updates.