Who we are

This Privacy Policy for Manuia Health (“we,” “us,” or “our“), describes how and why we might access, collect, store, use, and/or share (“process“) your personal information when you use our services (“Services“), including when you:

• Visit our website at manuiahealth.com, or any website of ours that links to this Privacy Policy;
• Engage with us in other related ways, including any sales, marketing, or events;

Reading this Privacy Policy will help you understand your privacy rights and choices. We’re committed to protecting your personal information and making responsible decisions about how it is used. If you do not agree with our policies and practices, please do not use our Services.

Summary

This summary highlights key points from our Privacy Policy. You can find more details on each topic by using the table of contents below.

What personal information do we process?
When you visit or use our Services, we may process personal information based on how you interact with us, the choices you make, and the features you use.

Do we process sensitive personal information?
Some personal information, like racial or ethnic origin, sexual orientation, or religious beliefs, may be considered sensitive in some places. We do not process sensitive personal information.

Do we collect information from third parties?
No, we do not collect information from third parties.

How do we process your information?
We use your information to provide, improve, and manage our Services, communicate with you, ensure security and prevent fraud, and comply with legal requirements. We only process your data when we have a valid legal reason.

When and with whom do we share personal information?
We may share your information in specific situations with certain third parties.

How do we keep your information safe?
We have security measures in place to protect your personal information, but no online system is completely secure. We cannot guarantee that unauthorized parties will never access or misuse your data.

What are your rights?
Depending on where you live, you may have certain rights regarding your personal information.

How can you exercise your rights?
The easiest way to exercise your rights is by submitting a data access request or contacting us directly. We will handle your request according to the relevant data protection laws.

Want to learn more?
Read the full Privacy Policy for more information.

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We gather personal information that you voluntarily provide when you sign up for our Services, show interest in our products or Services, participate in activities, or contact us directly.

Personal Information You Provide:
The type of information we collect depends on how you interact with us and the Services. It may include information such as:

• Your email address;
• Name, Surname;
• Date of Birth;
• Address

Sensitive Information:
We do not collect or process sensitive information.

All personal information that you provide to us must be true, complete, and accurate. Please ensure that the information you provide is up-to-date, and notify us of any changes.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
• Google API – Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

In Short: We process your information to provide and improve our services, communicate with you, ensure security and fraud prevention, and comply with legal requirements. We may also use your information for other purposes with your consent.

We handle your personal information for various reasons, depending on how you use our services. These include:

• To facilitate account creation and authentication and otherwise manage user accounts: We process your information to help you create and log in to your account and keep it running smoothly.
• To save or protect an individual’s vital interest: We may use your information when necessary to protect someone’s vital interests, like preventing harm.

3. What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when it’s necessary and when we have a valid legal reason to do so, such as your consent, legal obligations, providing services, or protecting your rights.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have permitted us (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
  

4. When do we share your personal information

In Short: We may share your information in specific situations outlined in this section and with the third parties listed here.

We may need to share your personal information in the following circumstances:

• Business Transfers: If there is a merger, sale of company assets, financing, or acquisition of all or part of our business, we may share or transfer your information during negotiations or in connection with these transactions.

5. Do we use cookies or other tracking technologies?

In Short: Yes, we may use cookies and other tracking technologies to collect and store information.

We use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. These technologies help us maintain security, prevent crashes, fix bugs, save your preferences, and assist with essential site functions.

We also allow third parties and service providers to use tracking technologies on our Services for purposes such as analytics and advertising. This includes managing and displaying ads, tailoring them to your interests, and sending reminders about abandoned shopping carts (based on your communication preferences). These third parties use their technology to show you ads for products and services tailored to your interests, which may appear either on our site or on other websites.

In some cases, these tracking technologies may be considered a “sale” or “sharing” under applicable U.S. state laws, including for targeted advertising purposes. You can opt out of these tracking technologies by submitting a request as described in the section “Do United States Residents Have Specific Privacy Rights?”

For more detailed information about how we use cookies and how you can opt out of certain ones, please review our Cookie Notice.

---

Google Analytics

We may share your data with Google Analytics to help us track and analyze the use of our Services. The Google Analytics features we may use include “Remarketing with Google Analytics.” To opt out of tracking by Google Analytics across our Services, you can visit Google Analytics Opt-Out.

You can also opt out of Google Analytics’ advertising features through the Ads Settings on your device, or by using other opt-out options like Network Advertising Opt-Out or Mobile Choice. For more information on Google’s privacy practices, please visit the Google Privacy & Terms page.

6. How long do we store your information?

In Short: We keep your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless otherwise required by law.

We retain your personal information for as long as it’s necessary to achieve the goals stated in this Privacy Policy unless a longer retention period is required or allowed by law (e.g., for tax, accounting, or other legal reasons). We won’t keep your information longer than the time you have an account with us.

When we no longer have a valid business reason to process your information, we will either delete it or anonymize it. If that isn’t possible (for example, if your information is stored in backups), we will securely store your data and isolate it from further use until deletion is possible.

7. How do we protect your information?

In Short: We aim to protect your information with a combination of organizational and technical security measures.

We have implemented appropriate security measures to protect the personal information we process. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute protection against hackers or cybercriminals. Although we do our best to safeguard your information, transmitting personal information to and from our Services is at your own risk. You should only use our Services in a secure environment.

8. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect personal information from children under 18, nor do we market to them. By using our Services, you confirm that you are at least 18 or are a parent/guardian giving consent for a minor to use the Services. If we learn we’ve collected personal data from someone under 18, we will deactivate the account and delete the data. If you become aware that we may have collected data from someone under 18, please contact us.

9. What are your privacy rights?

In Short: Depending on where you live, you may have specific rights regarding your personal information, such as access, control, and deletion.

Depending on your location (e.g., in the US, European Economic Area (EEA), UK, or Switzerland), you may have rights under data protection laws, such as the right to:

• Access and get a copy of your personal data.
• Request corrections or deletion of your personal information.
• Restrict the processing of your data.
• Request data portability.
• Opt out of automated decision-making.

You may also have the right to object to how we process your information. To make any such requests, please contact us using the details provided below.

We will review and act on any requests in line with applicable data protection laws. If you believe we are processing your data unlawfully, you may file a complaint with your local data protection authority, such as the Member State authority in the EEA or the UK data protection authority. For Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing Consent:
If you’ve given us consent to process your data, you can withdraw it at any time by contacting us or adjusting your preferences. Note that this won’t affect the legality of data processing before your withdrawal, nor will it impact any data processing done on other legal grounds.

Opting Out of Marketing:
You can opt out of receiving marketing emails by clicking the “unsubscribe” link in the emails we send or by contacting us. Even after opting out of marketing communications, we may still need to send you service-related messages about your account or for other non-marketing reasons.

Account Information:
To review or update your account information, or to delete your account, you can log in to your account settings or contact us. If you request account termination, we will deactivate or delete your account and data from our active databases, though we may retain some information for legal or security purposes.

Cookies and Similar Technologies:
Most web browsers accept cookies by default, but you can change your browser settings to remove or reject cookies if you prefer. Doing so may affect how our Services function.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile devices offer a “Do-Not-Track” (DNT) feature that you can activate to signal your preference for not being tracked online. However, there is no uniform standard for recognizing DNT signals, so we do not currently respond to them. If this changes, we will update this Privacy Policy accordingly.

In California, we are required to inform you about how we handle DNT signals. Since no standardized industry approach exists, we do not respond to DNT signals at this time.

11. Do United States residents have specific privacy rights?

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name	NO

B. Personal information as defined in the California Customer Records statute

Name, contact information, education, employment, employment history, and financial information

NO

C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	NO
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements	NO
G. Geolocation data	Device location	NO
H. Audio, electronic, sensory, or similar information	Images and audio, video or call recordings created in connection with our business activities	NO
I. Professional or employment-related information	Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	NO
L. Sensitive personal Information		NO

We may gather other personal information outside the main categories mentioned when you interact with us in various ways, such as:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Services and to respond to your inquiries.

We will use and retain this information as necessary to provide our Services for as long as you have an account with us.

Your Privacy Rights

Depending on where you live, you may have certain rights under US state privacy laws. These rights are not absolute, and in some cases, we may decline requests if permitted by law. Your rights include:

• The right to know if we are processing your personal data.
• The right to access your personal data.
• The right to correct any inaccuracies in your data.
• The right to request the deletion of your personal data.
• The right to receive a copy of the personal data you’ve provided.
• The right to non-discrimination when exercising your privacy rights.
• The right to opt out of data processing for targeted advertising, data sales, or profiling that could have legal or significant effects.

Depending on your state, you may also have the right to:

• Request a list of third parties to whom we’ve disclosed your personal information.
• Limit how your sensitive data is used or shared.
• Opt out of collecting sensitive data, such as through voice or facial recognition technology.

How to Exercise Your Rights

To exercise any of your rights, you can contact us by submitting a data request, emailing us at info@manuiahealth.com, or referring to the contact details provided below.

If you enable the Global Privacy Control (GPC) feature in your browser, we will honor your opt-out preferences.

In certain cases, US state laws allow you to appoint an authorized agent to submit a request on your behalf. However, we may ask for proof that the agent has the authority to act on your behalf, as required by law.

Request Verification

To process your request, we must verify your identity. We’ll only use the personal data provided in the request to confirm your identity or authority. If we cannot verify your identity with the data we already have, we may ask for additional information to ensure security and prevent fraud.

If you submit the request through an authorized agent, we may ask for extra documentation, including signed permission, before proceeding.

Appeals

If we deny your request, US state laws allow you to appeal. You can submit an appeal by emailing us at help@manuiahealth.com. We will provide a written response to your appeal with reasons for our decision. If your appeal is denied, you may contact your state’s attorney general to file a complaint.

California “Shine The Light” Law

Under California Civil Code Section 1798.83, residents of California can request information about how we share personal data with third parties for direct marketing purposes. You can request this once a year at no cost. To make such a request, please contact us using the information below.

12. Do we make updates to this Privacy Policy?

In Short: Yes, we will update this policy as needed to stay compliant with relevant laws.

We may update this Privacy Policy periodically. When we make updates, we will indicate the changes with an updated “Revised” date at the top of the notice. If significant changes are made, we may notify you either by posting a notice or by contacting you directly. We encourage you to check this Privacy Policy regularly to stay informed about how we protect your data.

13. How can you contact us?

If you have any questions or comments about this policy, please reach out to us by email at: help@manuiahealth.com