Privacy policy

Supplemental California Privacy policy

Last updated: July, 2026

This Supplemental California Privacy Policy (“Policy”) explains how Trimedx Holdings, LLC and its affiliates (“Trimedx,” “we,” “us,” or “our”) processes personal information (“Personal Information”) that we collect from and about California residents with whom we interact, whether online or offline, such as California residents who visit our websites or otherwise utilize our services (collectively, the “Services”), and California residents who work for vendors and third parties with which we interact (collectively, “consumers,” “you,” “your”). We have adopted this Policy to explain what Personal Information may be collected about you, how we use this information, and under what circumstances we may disclose this information, in accordance with the California Consumer Privacy Act (“CCPA”).

Please note that this Policy does not apply to information we collect about employees, job applicants, or independent contractors. If you are a job applicant or prospective job applicant (collectively, “Applicant”), you can find more details about how we process Applicant Personal Information by clicking here.

For purposes of this Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include de-identified or aggregate information, public information lawfully available from governmental records, or other information that falls outside of the scope of the CCPA.

Personal information we collect

We collect and have collected in the past 12 months the following categories of Personal Information about consumers:

1. Identifiers, such as name, alias, and contact information (e.g., address, phone number and email), online identifiers;

2. Contact and information, including phone number, address, and email address;

3. Characteristics of protected classifications under applicable state or federal law (e.g., age and gender);

4. Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;

5. Internet or other network information, such as browsing history, search history, online behavior, and interactions with our websites or advertisements;

6. Geolocation data, meaning data that tracks physical location or movement, such as device location and IP address;

7. Audio, electronic, visual, thermal, olfactory, and similar information, such as call and video recordings;

8. Professional or employment-related information, such as work history and prior employer;

9. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes; and

10. Sensitive Personal Information, including:

    a.  Personal Information that reveals a consumer's precise geolocation

Purposes for collecting, processing, & disclosing Personal Information

We collect, process, and disclose the categories of Personal Information listed in the “Personal Information We Collect” section, above, for the following purposes:

• To provide quality products, services, and functionalities to you;

• To respond to your requests for information or otherwise provide you with information about Trimedx and our Services;

• To improve upon Trimedx’s products, services, and functionalities;

• To administer and improve our Services and conduct Trimedx’s business operations;

• To ensure functionality of our Services, and to analyze and understand how individuals utilize and interact with our Services;

• To communicate with you through our outreach activities and initiatives, including via e-mail, phone, or other mediums in accordance with applicable law;

• To provide information and resources on our website, and to develop, test, and improve our Services;

• To verify your identity, such as to confirm that you are who you say you are;

• To improve customer service and provide technical or account support;

• For purposes specified at the time of collection;

• For any purpose with your express consent; or

• As otherwise required or permitted by law, such as to cooperate with government authorities, enforce Trimedx’s legal rights, or to meet its legal obligations and requirements. 

We may also deidentify any Personal Information we collect about you. When we do so, we take reasonable measures to ensure that the information cannot be associated with a consumer or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer Personal Information and is not subject to this Policy.

We may use artificial intelligence (“AI”) when carrying out some of the purposes described above. This may involve the use of your Personal Information from the sources described herein. All AI-driven processes are subject to human oversight, and we are committed to upholding fairness, transparency, and accountability in their use. If you have questions about how AI may be used in a decision about you, please contact us using the methods listed in the “Contact Us” section, below.

To the extent we collect Sensitive Personal Information about California consumers, we do not process it for purposes other than those permitted by the CCPA regulations.

Retention of Personal Information

We store the Personal Information we collect for as long as is necessary for the purpose(s) for which we collected it and in accordance with applicable law, our data retention policies, and our legitimate business interests.

When assessing the appropriate data retention period, we take into account the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the Personal Information, whether we can achieve those purposes through other means, and the applicable legal requirements.

Sale & sharing of Personal Information

We sell and share network activity information, such as online browsing history and interactions with our websites or advertisements, and we have sold and shared this category of Personal Information in the past 12 months. We sell and share this category of Personal Information to marketing and analytics providers to analyze and better understand consumers’ needs, preferences, and interests, and to advertise and promote our products and services. You can opt out of the sale and sharing by clicking the “Your Privacy Choices” link in the footer of our websites and clicking “Decline All.”

We do not sell or share, and have not sold or shared in the past 12 months, the Personal Information we collect about consumers, as the terms “sell” and “share” are defined by the CCPA. A “sale” is the disclosure of Personal Information to a third party for monetary or other valuable consideration, and a “share” is the disclosure of Personal Information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

We also do not knowingly sell or share the Personal Information of consumers under the age of 16.

How we disclose Personal Information

We disclose and have disclosed in the past 12 months the categories of Personal Information listed in the “Personal Information We Collect” section, above, in the following contexts:

• To our Affiliates and Vendors. Trimedx discloses the Personal Information we collect to our affiliates and to our vendors who act on our behalf. For example, we use vendors to operate our Services; to conduct surveys; and to help us with our promotional efforts. These vendors may need Personal Information about you to perform their obligations. We contractually require our vendors to keep the Personal Information they process on our behalf confidential and to use it only to provide services on our behalf.

• To Third Parties for Marketing Purposes. We disclose Personal Information to third parties, including social media platforms and other advertisers, for marketing purposes. This includes disclosures of Personal Information via Cookies.

• As Described in a Privacy Notice or With Your Consent. We may disclose Personal Information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context.

• In Aggregate or De-Identified Form. We may aggregate or de-identify the Personal Information we collect, and we may disclose aggregated and/or de-identified information to our vendors, and to third parties for our business operational purposes and for any other purposes permitted by applicable law.

We may also disclose Personal Information in the following contexts:

• As Part of a Business Transfer. We may disclose Personal Information to a successor organization if, for example, we transfer the ownership or operation of all or a portion of our Services to another organization, we merge with or are acquired by another organization, or if we liquidate our assets. If such a transfer occurs, we will seek assurances that the successor organization will treat the Personal Information we disclose to it in accordance with this Policy.

• To Comply with Laws and Protect Our Rights and the Rights of Others. We may disclose Personal Information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose Personal Information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our Services; to enforce or apply our other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.

Sources of Personal Information

You may opt out from receiving promotional emails from us by clicking the "unsubscribe" link in the footer of any promotional email you receive from us. If at any time you wish to be removed from our physical and/or email mailing lists, you may also contact us using the contact information provided at the end of this Policy. Please provide your full name, company name (if any), postal address, and email address so that we can locate you on our mailing lists. We will honor your request within a reasonable period of time and, in any event, within the time limits set by applicable law.

How we protect your Personal Information

• Directly From You. Trimedx collects information you provide to us when you use our website or when you otherwise interact with us. Types of Personal Information we may collect directly from you include your name, username and password, postal address, email address, phone number, and business contact information. You can choose not to provide Personal Information to Trimedx; however, without certain information Trimedx may be unable to provide you with certain assistance, products, or services.

• From Other Sources. Trimedx also collects Personal Information from other sources, such as from our vendors and from third parties when they disclose Personal Information to us. We may also collect Personal Information about you in other contexts, such as from our customers’ or prospective customers’ websites or marketing materials, or via social media.

• Via Cookies & Other Tracking Technologies. Trimedx collects Personal Information passively via cookies and other tracking technologies (“Cookies”). This typically includes information about our website visitors, such as your IP address, the name of your operating system, the name and version of your browser, the date and time of your visit, and the pages you visit. The information we receive may depend on your browser or device settings. 

Your privacy rights

California consumers have the following rights regarding our collection and use of their Personal Information, subject to certain exceptions.

Rights that Require Verification. You may exercise the data subject rights below via our data subject rights webform, by calling 1-877-TRIMEDX, or by emailing us at privacy@trimedx.com. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or we may ask you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.

• Right to Know: You have the right to know the following details about our privacy practices at or before the point of collection. You may also request that we provide you with information about the following aspects of how we have handled your Personal Information specifically in the 12 months preceding your request:

  • The categories of Personal Information we have collected about you;

  • The categories of sources from which such Personal Information was collected;

  • The business or commercial purpose for collecting, selling or sharing Personal Information about you;

  • The categories of Personal Information about you that we disclosed and the categories of third parties to whom we disclosed such Personal Information;

  • The categories of Personal Information about you that we sold or shared, and the categories of third parties to whom we sold or shared such Personal Information;

  • The categories of Sensitive Personal Information we collect, the purposes for which it is collected or used, and whether that information is sold or shared; and

  • The length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period.

• Right to Delete: You may request that we delete any Personal Information about you we that we collected from you.

• Right to Correct: You may request that we correct any inaccurate Personal Information we maintain about you.

• Right to Access Specific Pieces of Personal Information: You may ask to obtain the specific pieces of Personal Information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another entity without hindrance. You may not exercise this right more than two times in a calendar year.

• Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you as a result of you exercising your data subject rights.

Rights that Do Not Require Verification.

• Right to Opt Out of Sale & Sharing: You have the right to opt out of sale and sharing of your Personal Information. To do so, you can click on the “Your Privacy Choices” link in the footer of our sites and click “Decline All.”

Opt-Out Preference Signals. We recognize opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by the CCPA, we treat such opt-out preference signals as a valid request to opt-out of sale and sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles.  Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our websites do not currently respond to the “Do Not Track” signal.

How we protect your Personal Information

Trimedx is committed to protecting the Personal Information we collect. Trimedx uses reasonable data collection, storage, processing practices, and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your Personal Information. Safeguards include physical, technical, and administrative procedures that are intended to limit access to Personal Information only to those who need that access to perform legitimate functions. Trimedx reviews its safeguards regularly to evaluate how they are working, and to determine if safeguards need to be added or changed.

However, even with all safeguards, transmission of information through the internet is not always secure, and sometimes safeguards can be defeated. While Trimedx seeks to protect your Personal Information, it cannot fully guarantee the security of the Services or any Personal Information you provide to us, and therefore all Personal Information you disclose to us will be at your own risk.

You are also responsible for protecting against unauthorized access to your account on our Services. Trimedx recommends that you use strong password security, by using a mix of letters, numbers and symbols, and a different password for your Trimedx account than you use for any other accounts that you may have. Keep your account information password confidential and do not share it with anyone. Trimedx is not responsible for any lost, stolen, or compromised passwords or for any access to your Trimedx account from unauthorized users where caused by you. If you think your account has been compromised, please contact us as soon as you can as described in the “Contact Us” section below.

Other disclosures

• Direct Marketing. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year. We do not disclose to third parties for their own marketing purposes the categories of Personal Information listed in California’s “Shine the Light” law, such as names, addresses, email addresses, and telephone numbers.

• Financial Incentives. We do not provide financial incentives to California consumers who allow us to collect, retain, sell, or share their Personal Information. We will describe such programs to you if and when we offer them to you.

• California Residents Under Age 18. Our Services are not intended for users under age 18. However, if you are a resident of California under the age of 18, you may ask us to remove content or data that you have posted to the Services by writing to privacy@trimedx.com. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.

Changes to this policy

This Policy is effective as of the last updated date stated at the top of this Policy. We may change this Policy from time-to-time. By interacting with us after we make any such changes to this Policy, you accept such changes. Please be aware that, to the extent permitted by applicable law, our use of the Personal Information we collect is governed by the Policy in effect at the time we collect the information. We encourage you to refer back to this Policy on a regular basis.

Contact us

If you have any questions regarding this Privacy Policy, please contact us via our Contact Us page or by emailing us at privacy@trimedx.com. If you are unable to review or access this notice due to a disability, you may contact us at privacy@trimedx.com to access this notice in an alternative format.