Examples of online tracking technologies include:

You or your authorized agent may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Some states provide residents with the right to opt out of the “selling” or “sharing” of their personal information, or of “targeted advertising” based on their personal information. To submit a request to opt out of the sale or sharing of your personal information or of targeted advertising, you may copy the information below and send a request to support@andrewhanoun.com with the title “Do Not Sell or Share My Personal Information.”

By submitting the form below via email, you will be exercising your Do Not Sell or Share My Personal Information right and/or your right to opt out of targeted advertising:

Contact Email

E-mail:

First Name

Last Name

Country

State

You do not have to provide personal information to enjoy most of the features of our online and mobile resources. Moreover, you can opt out of certain activities like newsletters and announcements. Residents of California and data subjects whose personal information was obtained while they were in the GDPR Jurisdictions have certain additional rights.

GDPR Jurisdictions means the countries composed of the European Economic Area (including Iceland, Lichtenstein, and Norway) and the following countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden.

Furthermore, Andorra, Argentina, Canada (only commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and Japan have received an “adequacy decision” from the European Commission, adheres to the material terms of the GDPR. Switzerland also has its own data protection via its Federal Act of Data Protection (“DPA”).

GDPR longer has jurisdiction over The United Kingdom. Since the United Kingdom (“UK”) has now formally left the European Union, it is no longer regulated domestically by the material terms of the GDPR. The United Kingdom General Data Protection Regulation (“UK-GDPR”) is the UK's data privacy law that governs the processing of personal data domestically.

If we are using personal information you provided to us in order to enable us to send you materials, such as newsletters or product alerts via text or email, and you decide you don’t want to receive such materials, you may opt out by following the opt-out instructions in the email or other communication (e.g., by responding to the text with “STOP”), or by contacting us using the contact information below. When we receive your request, we will take reasonable steps to remove your name from our distribution lists. You need to understand it may take a period to remove your name from our lists after your request and due to such latency, you may still receive materials for a period of time after you opt out. In addition to opting out, you have the ability to access, amend, and delete your personal information by contacting us using the contact information below.

Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not specifically respond to browser “do not track” signals.

CHILDREN’S PRIVACY 

Federal law imposes special restrictions and obligations on commercial website operators who direct their operations toward, and collect and use information from, children under the age of 13. We take those age-related requirements very seriously, and consistent with it do not intend for our online and mobile resources to be used by children under the age of 13 without first obtaining the verifiable consent of such child’s parent or legal guardian. Moreover, we do not knowingly collect personal information from minors under the age of 13, only a parent or legal guardian may provide such information after adhering to our verification process for submitting such information via the online and mobile resources. If we become aware that anyone under the age of 18 has submitted personal information to our online and mobile resources, we will delete that information and will not use it for any purpose whatsoever. If you believe that someone under the age of 18 has submitted personal information to our online and mobile resources, please contact us at support@andrewhanoun.com. We encourage parents and legal guardians to talk with their children about the potential risks of providing personal information over the Internet.

our online and mobile resources. We have adopted a security program that includes technical, organizational, administrative, and other security measures designed to protect, in a manner consistent with accepted industry standards and applicable law, against anticipated or actual threats to the security of personal information (the “Security Program”). We cannot, however, guarantee that your information, whether during transmission or while stored on our systems or otherwise in our care, will be free from unauthorized access or that loss, misuse, destruction, or alteration will not occur. Except for our duty to maintain the Security Program under applicable law, we disclaim any other liability for any such theft or loss of, unauthorized access or damage to, or interception of any data or communications including personal information. We have every reason to believe our Security Program is reasonable and appropriate for our business and the nature of foreseeable risks to the personal information we collect. We further periodically review and update our Security Program, including as required by applicable law.

Nonetheless, as part of our Security Program, we have specific incident response and management procedures that are activated whenever we become aware that your personal information was likely to have been compromised. We further require, as part of our vendor and business partner oversight procedures, that such parties notify us immediately if they have any reason to believe that an incident adversely affecting personal information, we provided to them has occurred. 

THE CALIFORNIA CONSUMER PRIVACY ACT

When we collect personal information from California residents, we become subject to, and those residents have rights under, the California Consumer Privacy Act or “CCPA”. This section of our statement is used to allow us to fulfill our CCPA obligations and explain your CCPA rights. For purposes of this section, the words “you” and “your” mean only such California residents.

What did we collect from California Residents?

We collect the following categories of personal information: identifiers such as name, address, IP address, and other similar identifiers; personal information described in subdivision (e) of Section 1798.80 (California customer records statute) such as a name, address, telephone number, credit card number; commercial information such as products or services purchased; internet/electronic activity such as browsing history and search history; geolocation data including geographic coordinates/physical location; and audio, video, electronic or other similar information. We may disclose this information for one or more business purposes permitted by the CCPA. We do not sell, and within the last 12 months have not sold, personal information to third parties.

Rights of California Residents

You have the following rights under the CCPA, in summary disclosure, access and delete. More information can be found here. It’s important to us that you know that if you exercise these rights, we will not “discriminate” against you by treating you differently from other California residents who use our sites and mobile resources or purchase our services but did not exercise their rights.

You can exercise these rights up to two different times every 12 months. To do so, just contact us support@andrewhanoun.com or 872-259-5559. We may ask you to fill out a request form. The CCPA only allows us to act on your request if we can verify your identity or your authority to make the request so you will also need to follow our instructions for identity verification.

If you make a verifiable request per the above, we will confirm our receipt and respond in the time frames prescribed by the CCPA.

THE EU GENERAL DATA PROTECTION REGULATION

We do collect or otherwise obtain personal information from data subjects located in the GDPR Jurisdictions. We fulfill our GDPR obligations with respect to our workforce/job applicants, our customers (and their own end-clients), and our vendors and business partners through a series of separate notices, contracts or other terms provided to them at the time, and in the manner and form, GDPR and local law within each GDPR Jurisdiction requires.

We describe, in the immediately following section of this statement, how we comply with the GDPR for personal information collected from visitors to and users of our online and mobile resources while they were in a GDPR Jurisdiction. Thus, for purposes of that section, the words “you” and “your” mean only such GDPR Jurisdiction-based visitors and users.

What do we collect from you in the GDPR Jurisdictions and how do we use it?

We collect from you the categories of personal information already described. The lawful basis on which we rely for such collection, later use and disclosure, is what the GDPR refers to as legitimate interest. As stated elsewhere in this statement, we do not sell any of your personal information to third parties nor do we use it for automated decision making.

Cross-border Data Transfers and Third-Party Processors

If we transfer personal information from the GDPR Jurisdictions to a location that has not been deemed by the European Commission to have adequate privacy protections, we do so in the manner the GDPR permits.

Rights of Data Subjects in the GDPR Jurisdictions

While we attempt to allow all visitors and users of our online and mobile resources to exercise a degree of control over their personal information, under the GDPR we have a legal obligation to do so for you. More specifically, with respect to personal information collected from you while you were in a GDPR Jurisdiction, you have these rights: transparency, access, correction and deletion, portability, who, what, why and where, and restriction/objection (for more information click here).

If you would like to exercise any of these rights, please contact support@andrewhanoun.com. Your ability to exercise these rights is subject to certain conditions and exemptions that you can read about in Articles 12 through 23 of the GDPR. Among those conditions is our right to decline part or all of a request if we cannot satisfy our reasonable doubts and concerns about your identity in a manner that helps us minimize the risk that unauthorized persons might use a GDPR right to access your personal information. We will respond to all requests without undue delay, and in accordance with the time frames, if any, prescribed by the GDPR. If you are not satisfied with how we use your personal information or respond to your requests, you have the right to complain to your data protection regulator. Contact information for the EU data protection regulators can be found here.

In other jurisdictions, with similar data privacy regulations, we may collect from you the categories of personal information already described. We collect and manage (including disclose) such data in compliance with applicable local law(s). As noted, we do not sell any of your personal information to third parties nor do we use it for automated decision making.

CHANGES TO THIS PRIVACY STATEMENT

This privacy statement was drafted on September 5, 2024, and is effective as of this date. The English language version of this privacy statement is the controlling version regardless of any translation you may attempt.

We reserve the right to change or update this statement from time to time. Please check our online and mobile resources periodically for such changes since all information collected is subject to the statement in place at that time.

If you have questions about our privacy statement or privacy practices, please contact us at:

Hanoun Institute of Health

Attn: Legal and Compliance Department

1552 South Route 59 #1478

Naperville, IL 60564

United States